$ rpki-client -vvf rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft File: A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft (raw, json) Hash identifier: JBUUTYx7iPYqzYW392IKDrcCuPQNm5YaBvxzs7sr3RY= Subject key identifier: 0C:B3:9B:AA:C2:1D:60:41:C1:BD:0E:50:A7:57:8D:90:2C:E4:2C:32 Authority key identifier: A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47 Certificate issuer: /CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47 Certificate serial: 03BE0DD2232520F87C0C3E5449604CBB0C212AF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:09:44 +0000 Manifest this update: Tue 12 May 2026 15:04:44 +0000 Manifest next update: Wed 13 May 2026 17:02:44 +0000 Files and hashes: 1: A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl (hash: CvsfjJKL2VFKcyvsk2L58jYSQOYXB9asaOyA43d6fys=) 2: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: gHOFFAMzJX67LZAd50wxnRJO1gH2l+8DoQ6h8IDez6o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:be:0d:d2:23:25:20:f8:7c:0c:3e:54:49:60:4c:bb:0c:21:2a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47 Validity Not Before: May 12 15:04:44 2026 GMT Not After : May 13 17:02:44 2026 GMT Subject: CN=0CB39BAAC21D6041C1BD0E50A7578D902CE42C32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9b:62:1e:8a:60:28:c2:3f:7f:4d:a9:78:b1: a7:50:96:63:1a:d4:c9:e6:49:c2:79:c7:da:e7:72: d8:5b:6b:83:e7:ee:76:e0:67:ac:8c:24:c2:67:d3: 1e:36:b7:73:31:ff:41:88:84:7e:99:b3:c2:0b:64: 54:63:4d:35:cc:cf:c4:a6:60:39:04:98:e0:9d:6c: f2:f3:b5:9f:ce:80:3b:77:78:20:b9:3d:7f:c8:8c: b5:55:ed:30:e7:50:67:59:32:8d:6d:c4:bc:ab:e5: 97:83:30:cd:41:d1:d1:2a:85:79:d3:4d:e9:00:03: 5c:6f:cf:97:25:1d:45:0c:ad:84:4c:12:34:da:8f: bf:e7:f4:63:9f:08:19:fe:95:b4:d3:a1:26:df:8e: d9:41:0a:d6:1d:37:e8:51:8a:16:51:96:75:88:eb: dd:52:a7:a4:a9:b7:cb:ba:a9:53:5a:78:8a:02:3f: e7:91:fa:c1:c5:18:6d:78:5f:c3:58:66:ea:12:a0: 1b:2d:99:6a:92:29:6e:cf:3c:ef:46:e8:c0:4e:17: 15:50:03:01:29:9b:7f:b4:fe:8e:1f:1b:9e:ee:b4: 81:19:4c:7e:49:df:e1:4a:37:43:fe:6c:5f:ee:29: 20:42:61:ca:61:7b:9b:a2:a9:5f:43:2c:2c:7f:03: a8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B3:9B:AA:C2:1D:60:41:C1:BD:0E:50:A7:57:8D:90:2C:E4:2C:32 X509v3 Authority Key Identifier: keyid:A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0f:71:7b:7b:ae:36:18:cb:77:51:f7:15:5e:e7:94:9b:5c: fd:4c:4b:5e:01:7e:d9:25:5c:8b:52:b4:5e:6a:76:ff:35:68: 7d:9c:f0:4b:9e:45:58:9a:b1:03:29:2b:39:03:cd:1a:77:1e: fe:61:27:6a:c4:74:1a:7a:14:b1:04:e7:b5:19:03:5f:34:df: 64:ee:e7:57:c1:61:02:35:eb:d7:44:0f:28:6f:8f:63:56:a7: 27:73:4b:12:a7:0c:fe:7a:7d:07:82:39:61:7f:c3:c4:83:31: 3d:16:74:99:bd:b5:61:c9:97:e1:87:73:0c:94:85:e4:32:ef: 83:8a:d8:15:26:eb:1e:8b:d1:50:d4:08:d8:e6:95:7c:14:fb: d3:c6:6f:3b:73:b7:6d:ec:2f:31:e5:04:5d:34:e1:aa:59:29: 2e:9e:9f:aa:88:33:b2:f6:36:5e:da:c0:df:c1:4e:0c:a6:4e: 92:1d:c9:72:b6:a5:28:be:10:96:bc:e9:b8:f4:6a:63:49:72: bb:13:5e:05:d6:cd:53:6a:27:ac:30:3b:be:9b:c3:41:a2:f3: 07:b0:f0:ed:91:c8:c0:7e:77:4e:1a:55:55:8e:1f:0e:01:c6: 1e:30:e7:44:fb:e6:c8:60:48:c3:25:02:59:00:b0:11:39:ae: d4:cb:6f:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA74N0iMlIPh8DD5USWBMuwwhKvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5 MjhDNUM0NzAeFw0yNjA1MTIxNTA0NDRaFw0yNjA1MTMxNzAyNDRaMDMxMTAvBgNV BAMTKDBDQjM5QkFBQzIxRDYwNDFDMUJEMEU1MEE3NTc4RDkwMkNFNDJDMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCem2IeimAowj9/Tal4sadQlmMa 1MnmScJ5x9rncthba4Pn7nbgZ6yMJMJn0x42t3Mx/0GIhH6Zs8ILZFRjTTXMz8Sm YDkEmOCdbPLztZ/OgDt3eCC5PX/IjLVV7TDnUGdZMo1txLyr5ZeDMM1B0dEqhXnT TekAA1xvz5clHUUMrYRMEjTaj7/n9GOfCBn+lbTToSbfjtlBCtYdN+hRihZRlnWI 691Sp6Spt8u6qVNaeIoCP+eR+sHFGG14X8NYZuoSoBstmWqSKW7PPO9G6MBOFxVQ AwEpm3+0/o4fG57utIEZTH5J3+FKN0P+bF/uKSBCYcphe5uiqV9DLCx/A6hpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDLObqsIdYEHBvQ5Qp1eNkCzkLDIwHwYDVR0j BBgwFoAUpxxvOeu/zA3xDE1tu3JV5pKMXEcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA0ZTk3ZDMtNzFjMy00ZDBhLThiMDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlF QkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5MjhDNUM0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzFDNkYzOUVCQkZDQzBERjEwQzRENkRCQjcyNTVFNjkyOEM1 QzQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi MDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1 RTY5MjhDNUM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4PcXt7rjYYy3dR9xVe55SbXP1MS14Bftkl XItStF5qdv81aH2c8EueRViasQMpKzkDzRp3Hv5hJ2rEdBp6FLEE57UZA18032Tu 51fBYQI169dEDyhvj2NWpydzSxKnDP56fQeCOWF/w8SDMT0WdJm9tWHJl+GHcwyU heQy74OK2BUm6x6L0VDUCNjmlXwU+9PGbztzt23sLzHlBF004apZKS6en6qIM7L2 Nl7awN/BTgymTpIdyXK2pSi+EJa86bj0amNJcrsTXgXWzVNqJ6wwO76bw0Gi8wew 8O2RyMB+d04aVVWOHw4Bxh4w50T75shgSMMlAlkAsBE5rtTLb14= -----END CERTIFICATE-----Generated at Tue May 12 22:47:10 2026 by rpki-client