$ rpki-client -vvf rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.mft File: C1A495959252724BB02157535868476E3695F743.mft (raw, json) Hash identifier: Ay+w9PaOw+eYVGtG1tXiIjkqdqrJ3OUDWB0v0S1ioJg= Subject key identifier: A3:7E:BD:9F:90:55:08:28:65:6E:39:76:82:B2:F9:6A:A2:14:3C:F2 Authority key identifier: C1:A4:95:95:92:52:72:4B:B0:21:57:53:58:68:47:6E:36:95:F7:43 Certificate issuer: /CN=C1A495959252724BB02157535868476E3695F743 Certificate serial: 207F6AD2A8155AF7ADDAF1F72BBA8E0B3926415E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A495959252724BB02157535868476E3695F743.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:44:19 +0000 Manifest this update: Tue 12 May 2026 18:39:19 +0000 Manifest next update: Wed 13 May 2026 21:41:19 +0000 Files and hashes: 1: C1A495959252724BB02157535868476E3695F743.crl (hash: /Z1tbwTa3tVqaJLykKUlT2zoxCqHDkWlKsxEWgZESEU=) 2: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: 3gMFcIdzZIFz/pQC+A0nSpKVaEMc4MfPXuLkcguXqvc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.crl rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A495959252724BB02157535868476E3695F743.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:7f:6a:d2:a8:15:5a:f7:ad:da:f1:f7:2b:ba:8e:0b:39:26:41:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1A495959252724BB02157535868476E3695F743 Validity Not Before: May 12 18:39:19 2026 GMT Not After : May 13 21:41:19 2026 GMT Subject: CN=A37EBD9F90550828656E397682B2F96AA2143CF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a3:f9:79:6d:39:8c:cb:0a:bd:b0:11:ec:47: d2:62:04:a1:d0:69:07:a4:92:7b:ba:bb:8e:61:36: 3b:38:87:13:75:2d:32:55:7b:60:90:b8:1d:3e:dc: 1a:ee:fd:ef:f3:8d:30:a8:db:2f:25:a1:88:bd:36: 40:dc:3d:c0:87:ba:8f:79:8e:a3:33:05:92:5a:1a: 90:9a:51:44:2d:a0:d9:f4:af:c7:a0:16:ed:7c:7f: 1b:03:7a:bf:e2:3e:bd:50:d1:f7:09:46:d9:0e:7f: c2:b0:01:0b:40:64:c8:e3:0e:50:8c:c0:55:09:4a: 29:ed:6a:27:d9:d9:ce:cb:88:75:79:d2:ab:e6:e9: c6:d1:e9:60:62:c1:70:34:03:d3:86:8d:8a:b3:9b: f8:08:39:a7:89:38:77:a1:86:48:45:01:2b:09:a6: 67:8a:c7:5e:bc:34:2e:47:22:a8:78:0f:0d:86:1d: e1:18:b6:56:2f:bd:c5:44:d3:72:01:90:f6:0d:13: 2c:25:61:88:e3:fd:53:93:2a:b9:c5:5e:fe:df:f5: b2:5d:b9:a1:4a:5b:95:61:2d:71:15:32:c4:ad:8b: b9:c4:0b:a9:59:50:6d:7d:a8:a4:28:c8:b6:12:04: cd:95:3b:a4:6e:84:3a:0d:c5:0a:7d:fe:26:12:ae: c8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7E:BD:9F:90:55:08:28:65:6E:39:76:82:B2:F9:6A:A2:14:3C:F2 X509v3 Authority Key Identifier: keyid:C1:A4:95:95:92:52:72:4B:B0:21:57:53:58:68:47:6E:36:95:F7:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1A495959252724BB02157535868476E3695F743.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:17:7f:6d:3e:2e:54:56:eb:3f:66:e8:a8:1d:41:4e:d4:6f: bf:f6:8c:44:7a:4a:24:e4:e3:62:ed:62:f0:95:54:6d:25:45: 40:55:7e:69:a5:1c:24:96:86:dc:3b:31:1a:b7:37:f5:20:75: 39:88:fb:eb:b3:bb:f3:7b:9b:45:0d:dc:83:ce:f0:53:01:4f: bd:73:77:3e:1e:17:9d:fc:24:fb:a8:7b:3d:fe:e5:64:1b:53: 84:1f:bb:bf:30:e4:8d:b7:85:b3:7d:3b:08:a0:82:d3:82:ff: 84:a1:95:d1:48:6a:42:31:43:7a:7a:99:01:75:03:f7:c9:3d: b9:f8:e3:3c:de:66:1e:4a:61:76:c6:00:2e:3c:9e:4f:eb:af: f5:e9:08:93:e5:ea:9b:48:a8:fe:16:c8:37:cf:19:df:6e:bd: 1b:53:09:6d:95:5c:76:d4:cd:e0:53:61:11:98:f5:f0:15:4e: 49:71:5b:4a:f8:18:30:46:4b:6a:2b:19:cf:3a:8c:e2:58:94: 8b:cd:70:c1:c6:e6:d5:60:0c:7b:bd:6b:c8:57:cc:5a:dc:19: 1a:69:d9:49:b9:b7:33:eb:c2:07:2c:ab:81:53:33:ea:3e:98: 8b:a0:f2:b9:95:77:2e:36:26:56:da:db:f1:e2:fc:07:ca:63: 8c:98:70:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIH9q0qgVWvet2vH3K7qOCzkmQV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFBNDk1OTU5MjUyNzI0QkIwMjE1NzUzNTg2ODQ3NkUz Njk1Rjc0MzAeFw0yNjA1MTIxODM5MTlaFw0yNjA1MTMyMTQxMTlaMDMxMTAvBgNV BAMTKEEzN0VCRDlGOTA1NTA4Mjg2NTZFMzk3NjgyQjJGOTZBQTIxNDNDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmo/l5bTmMywq9sBHsR9JiBKHQ aQekknu6u45hNjs4hxN1LTJVe2CQuB0+3Bru/e/zjTCo2y8loYi9NkDcPcCHuo95 jqMzBZJaGpCaUUQtoNn0r8egFu18fxsDer/iPr1Q0fcJRtkOf8KwAQtAZMjjDlCM wFUJSintaifZ2c7LiHV50qvm6cbR6WBiwXA0A9OGjYqzm/gIOaeJOHehhkhFASsJ pmeKx168NC5HIqh4Dw2GHeEYtlYvvcVE03IBkPYNEywlYYjj/VOTKrnFXv7f9bJd uaFKW5VhLXEVMsSti7nEC6lZUG19qKQoyLYSBM2VO6RuhDoNxQp9/iYSrsg5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo369n5BVCChlbjl2grL5aqIUPPIwHwYDVR0j BBgwFoAUwaSVlZJSckuwIVdTWGhHbjaV90MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjU0ZGRjNjUtNjFjMS00OWUxLWE4OTUtM2MwM2Y1ODdhMjdiLzAvQzFBNDk1OTU5 MjUyNzI0QkIwMjE1NzUzNTg2ODQ3NkUzNjk1Rjc0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUE0OTU5NTkyNTI3MjRCQjAyMTU3NTM1ODY4NDc2RTM2OTVG NzQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvQzFBNDk1OTU5MjUyNzI0QkIwMjE1NzUzNTg2ODQ3 NkUzNjk1Rjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4Xf20+LlRW6z9m6KgdQU7Ub7/2jER6SiTk 42LtYvCVVG0lRUBVfmmlHCSWhtw7MRq3N/UgdTmI++uzu/N7m0UN3IPO8FMBT71z dz4eF538JPuoez3+5WQbU4Qfu78w5I23hbN9OwiggtOC/4ShldFIakIxQ3p6mQF1 A/fJPbn44zzeZh5KYXbGAC48nk/rr/XpCJPl6ptIqP4WyDfPGd9uvRtTCW2VXHbU zeBTYRGY9fAVTklxW0r4GDBGS2orGc86jOJYlIvNcMHG5tVgDHu9a8hXzFrcGRpp 2Um5tzPrwgcsq4FTM+o+mIug8rmVdy42Jlba2/Hi/AfKY4yYcOA= -----END CERTIFICATE-----Generated at Wed May 13 14:47:35 2026 by rpki-client