$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft File: D931809BED9AF438E358376B71B803D5CE61B2F5.mft (raw, json) Hash identifier: ITIrH4egRg0oxOABU20q/V1+wxmMKzUdmqs/j+jHnSE= Subject key identifier: DD:0A:81:6D:18:AC:18:3B:5F:46:92:99:1B:68:5E:12:7E:8B:5E:01 Authority key identifier: D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5 Certificate issuer: /CN=D931809BED9AF438E358376B71B803D5CE61B2F5 Certificate serial: 1C0D0A3009BFB5773F9BE3535A35AF8B935FCA4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:13:26 +0000 Manifest this update: Tue 12 May 2026 07:08:26 +0000 Manifest next update: Wed 13 May 2026 09:15:26 +0000 Files and hashes: 1: D931809BED9AF438E358376B71B803D5CE61B2F5.crl (hash: sswiAZSR0dovmqX+SbvtKAl2DUd9Q7YbDdvChbZwNkw=) 2: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: RKwP+mZy2zIyOi9W+fTg2udU4bmegNaF/ZtZIeSMp7c=) 3: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: JqEBH5YvRn5xbIFqmvyQg68HK5OM9z3ELY7zjQkgJLI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0d:0a:30:09:bf:b5:77:3f:9b:e3:53:5a:35:af:8b:93:5f:ca:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D931809BED9AF438E358376B71B803D5CE61B2F5 Validity Not Before: May 12 07:08:26 2026 GMT Not After : May 13 09:15:26 2026 GMT Subject: CN=DD0A816D18AC183B5F4692991B685E127E8B5E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a4:4e:3a:93:39:78:69:61:07:b8:1c:ac:b9: cd:b8:ac:5f:0f:38:72:34:fb:1b:9c:d5:83:f4:70: 47:6e:b2:91:49:49:6a:5a:af:f8:7d:90:b8:28:35: 72:f0:21:a8:e8:15:84:3d:d9:ae:17:0b:3b:f8:44: a5:c0:5c:f2:ba:79:2e:51:ed:e0:c5:03:cf:3c:87: f8:4f:3f:05:2a:77:06:73:90:e7:a9:2f:7b:20:d3: 65:73:94:b4:63:79:f1:c6:be:b9:85:fd:76:dc:0f: 51:99:94:a1:be:b8:76:f7:85:15:8e:44:3c:d3:07: 41:1a:e2:91:f5:5c:ee:a6:dc:93:54:02:52:83:0a: b2:f2:7b:fc:62:f3:09:00:5f:74:10:d6:43:9e:21: fa:c8:fd:49:4f:2e:ac:b1:0f:77:6d:94:34:ad:0d: cd:b2:8a:f3:d2:81:d8:78:b2:db:97:9b:59:9a:68: 7e:18:fc:15:26:f4:1a:9e:b1:98:79:0d:ae:4b:52: 9d:19:6c:9a:d7:29:96:50:6a:51:f4:56:99:ec:9b: 83:4f:d4:a4:59:54:87:46:cb:74:fa:6c:0b:96:53: 33:38:fe:31:4d:bc:35:bf:55:a7:46:2c:0f:1e:1b: 48:54:2c:60:45:6c:42:02:a5:a7:31:75:d1:ad:c8: b0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0A:81:6D:18:AC:18:3B:5F:46:92:99:1B:68:5E:12:7E:8B:5E:01 X509v3 Authority Key Identifier: keyid:D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c7:20:42:5a:d1:b4:36:ff:48:f6:8d:4c:79:bc:4c:34:85: b8:1c:87:0a:8a:e2:24:39:ee:68:b4:bd:e8:2f:4a:88:d8:dc: ad:f1:be:b3:99:4d:0b:73:a0:cb:ad:ab:f4:37:12:a5:b3:92: 59:e8:91:23:29:a0:ae:69:17:35:87:67:b2:03:59:7d:8a:86: c2:7a:2a:fd:2d:3a:2a:c1:30:f3:d3:05:bb:ac:04:03:44:fb: 84:50:37:09:37:5e:b7:af:c2:2f:36:20:43:ac:e5:0c:2c:a3: d4:63:b5:d1:b8:8c:8a:9e:66:88:8f:3c:0a:cf:8b:d6:e0:16: 6d:d4:4b:ef:82:92:d8:33:05:af:1a:43:88:8d:d3:69:f6:5b: da:af:3f:75:ba:c1:d1:91:6d:2c:17:ae:f2:1c:73:33:dd:40: 10:e0:5d:25:fa:06:ba:80:d5:9e:b5:7e:fa:2c:ae:00:91:72: e6:dd:57:c7:05:f0:03:22:b1:b3:d2:ba:e1:7c:6e:de:c5:d7: 59:2c:72:7e:d7:d4:8b:db:72:d1:57:0d:15:5a:17:20:e5:1e: d8:1c:71:86:00:26:76:99:f3:5e:52:a2:0f:04:63:cd:f9:e6: c6:e1:91:7f:fd:02:c0:6c:f8:da:3e:fb:2e:d5:64:21:5d:57: 77:6e:81:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHA0KMAm/tXc/m+NTWjWvi5Nfyk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkzMTgwOUJFRDlBRjQzOEUzNTgzNzZCNzFCODAzRDVD RTYxQjJGNTAeFw0yNjA1MTIwNzA4MjZaFw0yNjA1MTMwOTE1MjZaMDMxMTAvBgNV BAMTKEREMEE4MTZEMThBQzE4M0I1RjQ2OTI5OTFCNjg1RTEyN0U4QjVFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3pE46kzl4aWEHuBysuc24rF8P OHI0+xuc1YP0cEduspFJSWpar/h9kLgoNXLwIajoFYQ92a4XCzv4RKXAXPK6eS5R 7eDFA888h/hPPwUqdwZzkOepL3sg02VzlLRjefHGvrmF/XbcD1GZlKG+uHb3hRWO RDzTB0Ea4pH1XO6m3JNUAlKDCrLye/xi8wkAX3QQ1kOeIfrI/UlPLqyxD3dtlDSt Dc2yivPSgdh4stuXm1maaH4Y/BUm9BqesZh5Da5LUp0ZbJrXKZZQalH0Vpnsm4NP 1KRZVIdGy3T6bAuWUzM4/jFNvDW/VadGLA8eG0hULGBFbEICpacxddGtyLBjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3QqBbRisGDtfRpKZG2heEn6LXgEwHwYDVR0j BBgwFoAU2TGAm+2a9DjjWDdrcbgD1c5hsvUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBlMTFmZmMtZTc1YS00YmY0LTg0NDgtYzY4ZTIwMzM1ZWU4LzAvRDkzMTgwOUJF RDlBRjQzOEUzNTgzNzZCNzFCODAzRDVDRTYxQjJGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOTMxODA5QkVEOUFGNDM4RTM1ODM3NkI3MUI4MDNENUNFNjFC MkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvRDkzMTgwOUJFRDlBRjQzOEUzNTgzNzZCNzFCODAz RDVDRTYxQjJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrHIEJa0bQ2/0j2jUx5vEw0hbgchwqK4iQ5 7mi0vegvSojY3K3xvrOZTQtzoMutq/Q3EqWzklnokSMpoK5pFzWHZ7IDWX2KhsJ6 Kv0tOirBMPPTBbusBANE+4RQNwk3Xrevwi82IEOs5Qwso9RjtdG4jIqeZoiPPArP i9bgFm3US++CktgzBa8aQ4iN02n2W9qvP3W6wdGRbSwXrvIcczPdQBDgXSX6BrqA 1Z61fvosrgCRcubdV8cF8AMisbPSuuF8bt7F11kscn7X1IvbctFXDRVaFyDlHtgc cYYAJnaZ815Sog8EY8355sbhkX/9AsBs+No++y7VZCFdV3dugek= -----END CERTIFICATE-----Generated at Wed May 13 01:38:15 2026 by rpki-client