$ rpki-client -vvf rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft File: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft (raw, json) Hash identifier: YQSy/DHLukji6zoZB0EXdd+7EIyyik3TosMkm9E1rUI= Subject key identifier: 95:36:36:8D:C4:C4:84:57:D9:DD:9A:14:85:CA:64:34:69:CE:E4:17 Authority key identifier: D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25 Certificate issuer: /CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625 Certificate serial: 7D1CA5F42635C796E136C6EC1FC87B6DD3275AC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:32:35 +0000 Manifest this update: Tue 12 May 2026 20:27:35 +0000 Manifest next update: Wed 13 May 2026 22:11:35 +0000 Files and hashes: 1: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (hash: 4KthRL11gBmJfq1X/84ocL39dco9wY9VllXbFEY9aPQ=) 2: 3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (hash: 6zRlVB+7VhU+EM3gEBCiqmflsWcB74DY3jlrVLYDaZ8=) 3: 3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (hash: VU4Fqm4q9lM1qlbwtCDfQfln3xy8Zkz6BXFC8JhBhSw=) 4: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl (hash: 0eclNRJbdkxiyD6yuGpa++2USVbkDWkwtZz0q7b0+Y4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1c:a5:f4:26:35:c7:96:e1:36:c6:ec:1f:c8:7b:6d:d3:27:5a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625 Validity Not Before: May 12 20:27:35 2026 GMT Not After : May 13 22:11:35 2026 GMT Subject: CN=9536368DC4C48457D9DD9A1485CA643469CEE417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:06:ae:e2:e0:0d:29:1d:fa:be:f9:81:1a: 5a:9a:61:db:7e:5f:c6:fe:c5:3e:b4:b6:f3:16:2b: e9:95:1d:8c:0b:c6:93:b2:07:43:4c:d5:42:cb:9e: d1:cd:bc:40:66:9a:4e:76:0b:62:28:34:a5:36:ba: bf:e0:2a:51:80:af:39:34:83:88:c3:27:8c:6b:42: 5d:ba:73:1a:0c:ba:db:d1:2f:05:09:f6:4f:1a:f6: ae:8f:ed:c3:c9:26:65:72:08:04:f8:5e:fb:4a:33: 41:b7:ea:cd:5a:97:9b:d6:0f:c8:a5:aa:8d:00:3a: df:28:fb:af:b8:90:9c:b6:20:a8:a3:01:c4:1c:b5: 22:7c:79:21:94:dd:5b:54:b4:9d:bd:0d:a4:94:dc: 9a:2a:8b:9f:2c:ce:69:ce:37:bd:77:67:a0:72:2a: 1e:d5:e0:45:48:31:80:b5:77:2b:83:25:da:0e:ed: af:b5:47:4b:4d:2e:be:8d:fe:a1:1b:80:37:d4:d3: 00:57:e8:6d:fd:c2:83:21:af:3e:de:50:67:7d:fa: 7f:3d:9b:86:24:4d:d1:d4:ea:50:fa:6f:d5:60:7a: 39:bd:d4:67:bf:13:ac:03:d2:3d:a4:90:72:0e:da: 77:13:06:92:c7:0a:1a:fa:8e:1d:ca:ac:c7:8c:1f: df:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:36:36:8D:C4:C4:84:57:D9:DD:9A:14:85:CA:64:34:69:CE:E4:17 X509v3 Authority Key Identifier: keyid:D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:29:4a:05:5b:80:70:d0:33:1b:f2:a5:da:a3:a8:d0:b3:55: 09:54:19:ed:b6:0f:d7:c7:6a:2e:dc:a0:4d:b2:73:0f:63:c5: 62:a1:6c:7a:18:6e:28:4f:87:42:01:90:78:2d:19:8d:b6:84: 29:08:c1:10:67:30:b5:4d:70:0d:0a:ef:0c:58:57:b1:9f:57: 7b:d0:c5:f9:3f:44:cb:54:ea:06:18:12:7b:3c:54:0e:f2:57: 52:0c:ff:92:b1:69:78:b0:94:c2:08:f5:9d:be:93:86:e8:b8: e5:5c:26:b9:5d:b4:d6:13:b0:f0:c9:0f:12:a9:da:b6:43:2e: 08:6f:a1:08:3c:cf:6e:75:71:e8:92:b8:f8:6e:84:26:b9:2a: 54:36:86:80:cd:11:7e:8e:f9:73:17:55:55:2b:79:a3:08:16: bb:27:ca:43:d4:4a:5e:16:ff:55:7d:ed:dd:ce:cd:b9:52:2c: ea:24:83:bc:29:a0:3e:23:68:21:44:e4:4a:fa:1c:b4:0b:5e: ed:fb:0b:4b:3f:dc:dd:07:09:aa:99:2e:9d:c5:c7:0c:76:07: 38:1c:83:83:4c:67:65:55:31:80:5c:02:15:94:b0:61:39:dc: 1a:03:36:de:ef:06:7e:5a:fc:0a:75:e8:f2:96:8b:7e:0f:cb: a0:da:af:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRyl9CY1x5bhNsbsH8h7bdMnWsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGMEM4RDE1MEZFQUVCM0IyNjJBRTI2MEVFRDZFRkE0 NkM0QzYyNTAeFw0yNjA1MTIyMDI3MzVaFw0yNjA1MTMyMjExMzVaMDMxMTAvBgNV BAMTKDk1MzYzNjhEQzRDNDg0NTdEOUREOUExNDg1Q0E2NDM0NjlDRUU0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjAau4uANKR36vvmBGlqaYdt+ X8b+xT60tvMWK+mVHYwLxpOyB0NM1ULLntHNvEBmmk52C2IoNKU2ur/gKlGArzk0 g4jDJ4xrQl26cxoMutvRLwUJ9k8a9q6P7cPJJmVyCAT4XvtKM0G36s1al5vWD8il qo0AOt8o+6+4kJy2IKijAcQctSJ8eSGU3VtUtJ29DaSU3Joqi58szmnON713Z6By Kh7V4EVIMYC1dyuDJdoO7a+1R0tNLr6N/qEbgDfU0wBX6G39woMhrz7eUGd9+n89 m4YkTdHU6lD6b9Vgejm91Ge/E6wD0j2kkHIO2ncTBpLHChr6jh3KrMeMH9/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlTY2jcTEhFfZ3ZoUhcpkNGnO5BcwHwYDVR0j BBgwFoAU0PDI0VD+rrOyYq4mDu1u+kbExiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjUxZDZjOWMtZWFkNy00NWZlLWExOWEtNDIyMzVmYzUzNzgwLzAvRDBGMEM4RDE1 MEZFQUVCM0IyNjJBRTI2MEVFRDZFRkE0NkM0QzYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEYwQzhEMTUwRkVBRUIzQjI2MkFFMjYwRUVENkVGQTQ2QzRD NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjUxZDZjOWMtZWFkNy00NWZlLWEx OWEtNDIyMzVmYzUzNzgwLzAvRDBGMEM4RDE1MEZFQUVCM0IyNjJBRTI2MEVFRDZF RkE0NkM0QzYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgpSgVbgHDQMxvypdqjqNCzVQlUGe22D9fH ai7coE2ycw9jxWKhbHoYbihPh0IBkHgtGY22hCkIwRBnMLVNcA0K7wxYV7GfV3vQ xfk/RMtU6gYYEns8VA7yV1IM/5KxaXiwlMII9Z2+k4bouOVcJrldtNYTsPDJDxKp 2rZDLghvoQg8z251ceiSuPhuhCa5KlQ2hoDNEX6O+XMXVVUreaMIFrsnykPUSl4W /1V97d3OzblSLOokg7wpoD4jaCFE5Er6HLQLXu37C0s/3N0HCaqZLp3Fxwx2Bzgc g4NMZ2VVMYBcAhWUsGE53BoDNt7vBn5a/Ap16PKWi34Py6Dar0Q= -----END CERTIFICATE-----Generated at Wed May 13 04:16:42 2026 by rpki-client