$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft File: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft (raw, json) Hash identifier: vP0axMPV8+MrMGRlmHtA2IluIhQ5GiqBLljQFniD3Lk= Subject key identifier: CC:58:7A:8B:B1:DE:B8:21:51:54:68:98:92:D5:09:AB:31:99:19:80 Authority key identifier: D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C Certificate issuer: /CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C Certificate serial: 2DE9617132AB50CE303E0172B31DCBFA3B19949D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:13:18 +0000 Manifest this update: Tue 12 May 2026 13:08:18 +0000 Manifest next update: Wed 13 May 2026 13:47:18 +0000 Files and hashes: 1: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl (hash: XcfkLUY1XC0WGt77lrvScnwYlxuwJsaLbYlnKQvAg/Q=) 2: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: qJeB9IbjX5ag+QxaHUzr5lUIsrKHS9OTMwiaemsfQJ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e9:61:71:32:ab:50:ce:30:3e:01:72:b3:1d:cb:fa:3b:19:94:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C Validity Not Before: May 12 13:08:18 2026 GMT Not After : May 13 13:47:18 2026 GMT Subject: CN=CC587A8BB1DEB8215154689892D509AB31991980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9b:22:67:f8:1d:1e:cf:8a:63:55:3d:29:02: 2b:c6:49:5a:43:14:bd:af:a0:0b:73:e4:6b:8c:29: d6:7e:30:54:c1:c5:64:b6:d0:bb:2b:cf:2d:15:a8: fc:6b:9a:55:05:be:4d:ff:2e:9d:80:0f:0b:b0:91: cf:f5:34:65:be:2d:cb:06:3f:f1:7f:36:77:87:ae: e7:33:55:4e:3b:bb:d3:be:e1:33:9f:f2:b8:b3:93: 21:5f:e5:a2:a0:40:a0:22:30:9a:e4:ce:fe:a0:73: f8:c5:a1:c5:b6:88:11:02:79:82:57:85:b1:91:d6: f5:4b:a3:26:f2:67:86:97:7d:53:e7:dc:af:3e:20: 4a:17:4d:74:9e:7a:79:5b:d6:7f:89:dd:1f:fc:1c: 1a:8b:7f:04:3f:2c:24:d6:5b:ef:b6:be:77:a8:9f: 48:73:17:9b:e6:ee:66:c2:30:87:52:77:a8:f3:26: 36:fd:68:db:76:0b:1e:a3:31:d0:ec:ee:e3:6e:66: 50:17:22:67:32:3d:77:a4:81:3b:1e:da:d4:05:eb: fe:d8:24:a2:56:53:85:e4:f5:f0:c5:b1:1d:c7:9c: e1:1b:68:3f:b3:c9:f1:0e:33:e9:d3:12:83:26:ea: 90:be:f4:f4:e9:27:0d:10:4c:c7:a0:20:00:2d:40: d8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:58:7A:8B:B1:DE:B8:21:51:54:68:98:92:D5:09:AB:31:99:19:80 X509v3 Authority Key Identifier: keyid:D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ae:84:37:87:74:34:6a:07:88:9d:59:cd:aa:37:b7:91:65: 7b:4f:dd:48:b1:74:9d:84:bf:3c:c8:75:72:39:b7:80:b8:5e: 2c:76:64:b3:14:c7:ee:22:b2:7e:9d:e0:d0:1c:11:42:01:03: 0b:56:99:6f:c2:2f:0f:f0:57:ca:42:bc:5e:0e:e2:32:62:11: e2:41:f2:48:dc:86:82:b7:0b:16:e7:6e:f9:6a:01:e3:f4:59: d0:94:cd:6f:55:6a:5a:cd:23:24:a0:e2:fd:40:e5:a4:d6:5f: b4:77:fa:8e:b1:97:bf:45:5f:89:9b:87:eb:82:51:69:ec:53: ce:43:db:30:fe:8f:8a:3d:4d:e5:6e:c7:96:ba:fd:48:1f:48: 96:45:03:da:06:36:8c:6c:00:9c:e3:6b:fe:1f:1c:50:5c:2f: 84:63:65:bc:e6:c8:0d:98:a6:cc:c4:3c:70:13:4e:62:72:7f: d2:35:5f:42:66:d8:77:8a:59:fe:fb:ca:40:b1:64:10:a3:b4: ce:8c:8a:48:fb:64:98:a0:3e:29:e9:87:b7:e2:cb:d5:4d:76: 81:1d:b1:68:6f:01:8f:4a:a6:3a:8d:fd:38:95:15:a1:66:76: cc:b8:92:b1:c8:cf:9e:de:68:82:18:e0:dd:dc:19:08:3f:e3: bc:6e:b8:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULelhcTKrUM4wPgFysx3L+jsZlJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0ODRDQzczNDBGRDM4RkQxNTJCOTUxQTgxMkE3QkIw RDJEQzc0QzAeFw0yNjA1MTIxMzA4MThaFw0yNjA1MTMxMzQ3MThaMDMxMTAvBgNV BAMTKENDNTg3QThCQjFERUI4MjE1MTU0Njg5ODkyRDUwOUFCMzE5OTE5ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHmyJn+B0ez4pjVT0pAivGSVpD FL2voAtz5GuMKdZ+MFTBxWS20Lsrzy0VqPxrmlUFvk3/Lp2ADwuwkc/1NGW+LcsG P/F/NneHruczVU47u9O+4TOf8rizkyFf5aKgQKAiMJrkzv6gc/jFocW2iBECeYJX hbGR1vVLoybyZ4aXfVPn3K8+IEoXTXSeenlb1n+J3R/8HBqLfwQ/LCTWW++2vneo n0hzF5vm7mbCMIdSd6jzJjb9aNt2Cx6jMdDs7uNuZlAXImcyPXekgTse2tQF6/7Y JKJWU4Xk9fDFsR3HnOEbaD+zyfEOM+nTEoMm6pC+9PTpJw0QTMegIAAtQNjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzFh6i7HeuCFRVGiYktUJqzGZGYAwHwYDVR0j BBgwFoAU1UhMxzQP04/RUrlRqBKnuw0tx0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJlM2U5ODEtYmYzOS00MmUwLWEyZjYtY2Y4N2M3NTdmODI3LzAvRDU0ODRDQzcz NDBGRDM4RkQxNTJCOTUxQTgxMkE3QkIwRDJEQzc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTQ4NENDNzM0MEZEMzhGRDE1MkI5NTFBODEyQTdCQjBEMkRD NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJlM2U5ODEtYmYzOS00MmUwLWEy ZjYtY2Y4N2M3NTdmODI3LzAvRDU0ODRDQzczNDBGRDM4RkQxNTJCOTUxQTgxMkE3 QkIwRDJEQzc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuuhDeHdDRqB4idWc2qN7eRZXtP3UixdJ2E vzzIdXI5t4C4Xix2ZLMUx+4isn6d4NAcEUIBAwtWmW/CLw/wV8pCvF4O4jJiEeJB 8kjchoK3CxbnbvlqAeP0WdCUzW9ValrNIySg4v1A5aTWX7R3+o6xl79FX4mbh+uC UWnsU85D2zD+j4o9TeVux5a6/UgfSJZFA9oGNoxsAJzja/4fHFBcL4RjZbzmyA2Y pszEPHATTmJyf9I1X0Jm2HeKWf77ykCxZBCjtM6Mikj7ZJigPinph7fiy9VNdoEd sWhvAY9KpjqN/TiVFaFmdsy4krHIz57eaIIY4N3cGQg/47xuuHA= -----END CERTIFICATE-----Generated at Tue May 12 23:06:50 2026 by rpki-client