$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft File: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft (raw, json) Hash identifier: Z/HmdxISN0hBXF8rcgoNig49wHaqbwZOclmSSHbXG/g= Subject key identifier: 57:76:75:85:2C:55:A8:00:F5:6A:B3:A2:2A:A2:FE:2A:0B:C2:1F:82 Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Certificate serial: 072A3222902FFE7B1D1B035AB10A897CD538E371 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:59:23 +0000 Manifest this update: Tue 12 May 2026 07:54:23 +0000 Manifest next update: Wed 13 May 2026 10:11:23 +0000 Files and hashes: 1: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl (hash: Z5KJVYpMPefeTdEV5zOopLE7xHQwelwmWqdD4jipXVE=) 2: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: hKC4O+Dbys8awahI6Y0F2x8aosLXlC3tFEHhosWplhc=) 3: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: g/M/W8nBgP5S2ayXN1SiAqh0ligQCCsMJq/IueYk4OY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:2a:32:22:90:2f:fe:7b:1d:1b:03:5a:b1:0a:89:7c:d5:38:e3:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Validity Not Before: May 12 07:54:23 2026 GMT Not After : May 13 10:11:23 2026 GMT Subject: CN=577675852C55A800F56AB3A22AA2FE2A0BC21F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:eb:73:d2:17:d6:be:5c:f4:cc:35:3e:9f:19: 30:75:a1:f0:f6:d1:08:a9:47:2f:fa:fc:37:64:4b: 51:6d:ba:ca:91:60:68:77:0f:49:e0:23:ba:e5:e4: bb:d6:9a:f0:9a:22:bc:91:d7:42:77:af:04:ff:d2: da:7d:cb:97:9d:6d:b3:f8:e1:67:61:aa:86:58:d9: 42:7b:ff:02:cf:a2:30:bb:b4:92:4b:6e:12:fd:7e: 82:de:c1:4d:3f:89:2f:61:8c:a6:53:b8:f9:0b:16: cf:b3:f8:33:e9:1b:8f:1f:f6:67:fb:ee:3c:d7:02: db:a0:8b:94:97:d0:52:eb:aa:44:ee:95:5e:af:d6: 4b:8d:2e:33:86:d1:58:4e:4c:89:61:45:70:70:52: c5:25:a8:ee:68:0d:31:d7:b7:30:85:53:15:5a:8d: 49:75:46:d5:79:fe:4f:5d:89:56:8a:09:c2:be:17: 01:b5:26:b4:72:fb:82:8b:7a:12:e9:66:df:39:4c: 78:a0:df:22:ea:11:c1:74:e4:be:c9:23:98:53:6f: 69:48:0c:00:94:2b:c4:31:9b:ec:43:41:ca:bb:8f: a8:f0:ec:f5:1d:9e:b3:6a:3c:02:f4:c7:ee:8f:64: 32:1d:15:c4:6f:d5:6c:f1:cf:23:1b:72:f6:3c:27: 5e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:76:75:85:2C:55:A8:00:F5:6A:B3:A2:2A:A2:FE:2A:0B:C2:1F:82 X509v3 Authority Key Identifier: keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:5f:bf:6e:66:e5:9c:bf:ea:85:8d:82:f6:c6:dd:c1:05:c6: 9b:59:e5:02:2a:65:4f:f6:f6:a2:59:b3:0e:e7:d8:75:93:27: 08:c1:00:fb:6c:23:71:65:67:55:a8:cc:cf:44:2b:cb:e6:ae: e4:c1:43:e8:f1:5a:ec:0b:44:a9:d7:8f:ef:e2:da:5c:24:d5: 97:62:80:2c:fa:ca:c8:4b:fb:f2:96:52:11:44:19:b0:98:94: b3:9d:cc:12:c6:6b:35:c6:01:64:f3:c6:9f:31:c7:0c:ae:24: e8:85:25:db:3e:cc:47:c2:b5:fe:c7:de:b0:b5:03:0e:bf:aa: 75:8f:1b:48:bf:1e:80:fd:89:2c:3d:e1:f5:e4:86:41:d3:e4: 3b:e5:68:ea:c9:5a:e4:9e:13:1c:21:4e:dd:db:55:05:fd:44: 27:36:60:23:76:c1:29:88:75:53:f8:2a:33:1b:10:89:f9:14: 3d:a1:88:4c:e2:6b:15:9f:87:ed:6c:cf:a4:01:aa:5c:a3:91: 75:f8:0a:3e:c5:c7:aa:d2:4e:7c:0b:f4:2e:ec:b3:46:e2:a1: c4:6a:d6:f9:ae:13:0d:04:4b:45:69:88:9b:02:fb:a6:96:f5: 65:25:bd:b9:fd:21:75:6c:07:4e:ea:bf:87:ca:3e:37:53:a2: 9d:5d:98:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUByoyIpAv/nsdGwNasQqJfNU443EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZD OUJEOENCRjAeFw0yNjA1MTIwNzU0MjNaFw0yNjA1MTMxMDExMjNaMDMxMTAvBgNV BAMTKDU3NzY3NTg1MkM1NUE4MDBGNTZBQjNBMjJBQTJGRTJBMEJDMjFGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN63PSF9a+XPTMNT6fGTB1ofD2 0QipRy/6/DdkS1FtusqRYGh3D0ngI7rl5LvWmvCaIryR10J3rwT/0tp9y5edbbP4 4WdhqoZY2UJ7/wLPojC7tJJLbhL9foLewU0/iS9hjKZTuPkLFs+z+DPpG48f9mf7 7jzXAtugi5SX0FLrqkTulV6v1kuNLjOG0VhOTIlhRXBwUsUlqO5oDTHXtzCFUxVa jUl1RtV5/k9diVaKCcK+FwG1JrRy+4KLehLpZt85THig3yLqEcF05L7JI5hTb2lI DACUK8Qxm+xDQcq7j6jw7PUdnrNqPAL0x+6PZDIdFcRv1WzxzyMbcvY8J15FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV3Z1hSxVqAD1arOiKqL+KgvCH4IwHwYDVR0j BBgwFoAU1g+9KxtRUcP0BzSuSpUnf8m9jL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVmNWVmMTgtNmZmYS00ZDY5LThjMGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIx QjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZDOUJEOENCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjBGQkQyQjFCNTE1MUMzRjQwNzM0QUU0QTk1Mjc3RkM5QkQ4 Q0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3 N0ZDOUJEOENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBfv25m5Zy/6oWNgvbG3cEFxptZ5QIqZU/2 9qJZsw7n2HWTJwjBAPtsI3FlZ1WozM9EK8vmruTBQ+jxWuwLRKnXj+/i2lwk1Zdi gCz6yshL+/KWUhFEGbCYlLOdzBLGazXGAWTzxp8xxwyuJOiFJds+zEfCtf7H3rC1 Aw6/qnWPG0i/HoD9iSw94fXkhkHT5DvlaOrJWuSeExwhTt3bVQX9RCc2YCN2wSmI dVP4KjMbEIn5FD2hiEziaxWfh+1sz6QBqlyjkXX4Cj7Fx6rSTnwL9C7ss0biocRq 1vmuEw0ES0VpiJsC+6aW9WUlvbn9IXVsB07qv4fKPjdTop1dmNw= -----END CERTIFICATE-----Generated at Tue May 12 22:19:31 2026 by rpki-client