$ rpki-client -vvf rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft File: 657097DED993749F454B2CB2980019AC9335E3AD.mft (raw, json) Hash identifier: 3oWVoxTaVxMe+gAFLkuJN69hb7EorFhVS7RifECWzJg= Subject key identifier: 7E:20:37:7E:44:F6:6E:C2:EE:EB:5E:CE:3C:5B:38:B4:65:2A:2D:5C Authority key identifier: 65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD Certificate issuer: /CN=657097DED993749F454B2CB2980019AC9335E3AD Certificate serial: 40C217A6A8A84B5A96E24869A2398250A75B8272 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:37:34 +0000 Manifest this update: Tue 12 May 2026 06:32:34 +0000 Manifest next update: Wed 13 May 2026 08:55:34 +0000 Files and hashes: 1: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: QHrcU8/Y1C7fxNPrmLufpFIhIro1O+9k0qozDOyT2no=) 2: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: hHvYrx/Q2c2wL+t/Mvndx8RZ1B96+Yi4bVgwQw+Eax8=) 3: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: 0jC3KwRI9r1ivA5GrXfbobGO1Ve7iEJj8iR97yMbeBk=) 4: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: OIuTP91/14M0E047uX/8jj8cJw1PhQi/jIKe8uO7ED8=) 5: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: je0fW/T+7CeDw/BD58L4wbwCS+OqE/uQcMZPbWUcwBw=) 6: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: eJ1BYbsJGJ2bGSK9jVV+Gd+vXCEbHNqHyQWyZRyuJo0=) 7: 657097DED993749F454B2CB2980019AC9335E3AD.crl (hash: /vCtJhUWzPZsVXFwF33DjzEqxWtXdStsWbll1j5mr6Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c2:17:a6:a8:a8:4b:5a:96:e2:48:69:a2:39:82:50:a7:5b:82:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657097DED993749F454B2CB2980019AC9335E3AD Validity Not Before: May 12 06:32:34 2026 GMT Not After : May 13 08:55:34 2026 GMT Subject: CN=7E20377E44F66EC2EEEB5ECE3C5B38B4652A2D5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d9:6f:98:f0:93:3b:aa:b4:49:48:be:05:35: 93:93:78:47:a4:01:94:64:ff:15:28:f4:ad:70:40: cd:a3:89:68:fb:fd:1a:5b:08:46:9a:62:7a:d8:0d: 7a:20:7a:02:58:3e:3a:45:7c:b7:40:00:da:8c:39: f1:75:93:30:ad:79:4f:0e:34:71:ff:6a:27:d6:ad: 4e:af:7c:95:34:69:de:8f:fc:75:b5:59:1f:36:86: c4:76:85:04:ff:16:8c:23:ce:e6:d2:13:a8:a3:db: ce:de:54:cf:68:25:9c:36:22:6b:40:46:f8:8c:54: 21:85:45:f9:98:91:2d:52:02:4c:de:f7:fc:f6:8a: 58:cc:24:9e:e6:85:05:4b:3a:05:ef:01:a1:46:a3: 17:62:b4:dc:78:89:57:76:1e:3e:29:d7:a7:89:f0: 46:69:8f:cf:09:be:62:99:8f:50:63:54:0f:31:91: e8:96:9b:6b:88:b6:b9:5e:a3:cb:12:2a:e1:bb:86: ba:fb:ec:5d:bb:0b:ae:7b:47:25:92:f4:a5:a2:f5: 7a:06:79:ec:99:23:9c:f6:a4:51:cf:72:17:20:e1: a5:ce:0b:01:10:bf:01:79:f5:86:ad:5c:20:1d:75: ce:e1:7b:43:14:f5:9a:54:61:8b:7d:67:53:d6:76: 63:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:20:37:7E:44:F6:6E:C2:EE:EB:5E:CE:3C:5B:38:B4:65:2A:2D:5C X509v3 Authority Key Identifier: keyid:65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b6:0d:4d:65:4a:9e:ea:23:54:cb:ed:20:5b:37:19:ed:f1: c1:f0:72:06:be:17:c0:51:90:74:1e:68:0c:94:8c:58:68:1a: f2:85:b9:f5:ce:98:37:20:ff:f7:64:91:ab:13:4c:00:da:d3: b3:5a:d2:eb:3e:45:24:ba:da:d7:02:92:b3:24:a2:53:10:4d: 9e:41:66:a4:ba:8c:92:64:27:98:8b:5c:b0:86:5b:99:8e:11: 3e:a6:07:12:7e:4e:f3:d6:48:64:1e:51:90:a9:9c:cf:fe:ff: 46:08:8e:f3:cf:e5:d1:27:7a:e9:51:90:6a:29:91:a8:ee:75: 77:d6:b5:c9:2f:05:c9:92:7c:5d:62:40:29:ea:12:f0:96:c3: 3d:3c:e4:0e:7a:c4:1d:98:b5:67:d1:46:3e:f1:6a:48:b5:7d: db:ef:1f:42:9d:d2:8a:b1:58:f4:fe:51:30:c5:fd:47:c7:aa: f3:e6:64:45:b2:5d:07:5a:35:11:e0:16:ad:45:b9:86:f5:5f: f2:ea:5c:e7:51:87:88:3e:1d:9b:06:ea:7c:84:dc:7b:aa:cd: d7:f2:ae:79:f2:02:8a:71:04:02:c9:05:20:fb:4f:14:47:df: fb:9f:80:a7:c9:f7:2d:00:34:d4:0a:1d:98:fd:f9:07:79:8a: f5:3e:8f:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQMIXpqioS1qW4khpojmCUKdbgnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3MDk3REVEOTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5QUM5 MzM1RTNBRDAeFw0yNjA1MTIwNjMyMzRaFw0yNjA1MTMwODU1MzRaMDMxMTAvBgNV BAMTKDdFMjAzNzdFNDRGNjZFQzJFRUVCNUVDRTNDNUIzOEI0NjUyQTJENUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT2W+Y8JM7qrRJSL4FNZOTeEek AZRk/xUo9K1wQM2jiWj7/RpbCEaaYnrYDXogegJYPjpFfLdAANqMOfF1kzCteU8O NHH/aifWrU6vfJU0ad6P/HW1WR82hsR2hQT/FowjzubSE6ij287eVM9oJZw2ImtA RviMVCGFRfmYkS1SAkze9/z2iljMJJ7mhQVLOgXvAaFGoxditNx4iVd2Hj4p16eJ 8EZpj88JvmKZj1BjVA8xkeiWm2uItrleo8sSKuG7hrr77F27C657RyWS9KWi9XoG eeyZI5z2pFHPchcg4aXOCwEQvwF59YatXCAddc7he0MU9ZpUYYt9Z1PWdmP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfiA3fkT2bsLu617OPFs4tGUqLVwwHwYDVR0j BBgwFoAUZXCX3tmTdJ9FSyyymAAZrJM1460wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRkZThmYjgtM2E3Ny00ODdlLTlkZmMtZjQ3OWQ2YjMzODA5LzAvNjU3MDk3REVE OTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5QUM5MzM1RTNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NTcwOTdERUQ5OTM3NDlGNDU0QjJDQjI5ODAwMTlBQzkzMzVF M0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk ZmMtZjQ3OWQ2YjMzODA5LzAvNjU3MDk3REVEOTkzNzQ5RjQ1NEIyQ0IyOTgwMDE5 QUM5MzM1RTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKW2DU1lSp7qI1TL7SBbNxnt8cHwcga+F8BR kHQeaAyUjFhoGvKFufXOmDcg//dkkasTTADa07Na0us+RSS62tcCkrMkolMQTZ5B ZqS6jJJkJ5iLXLCGW5mOET6mBxJ+TvPWSGQeUZCpnM/+/0YIjvPP5dEneulRkGop kajudXfWtckvBcmSfF1iQCnqEvCWwz085A56xB2YtWfRRj7xaki1fdvvH0Kd0oqx WPT+UTDF/UfHqvPmZEWyXQdaNRHgFq1FuYb1X/LqXOdRh4g+HZsG6nyE3Huqzdfy rnnyAopxBALJBSD7TxRH3/ufgKfJ9y0ANNQKHZj9+Qd5ivU+j2w= -----END CERTIFICATE-----Generated at Wed May 13 02:59:27 2026 by rpki-client