$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft File: 12099D13750CE0704F5D87C255E4B056E703B28D.mft (raw, json) Hash identifier: FhbS7JUOT31xTR1F1HdS9LvLvnpvdHSbx3Bx3tqwF9Y= Subject key identifier: 42:C2:1C:0C:08:F1:C5:F1:1F:4C:80:5E:2F:5F:7C:7C:1B:54:16:84 Authority key identifier: 12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D Certificate issuer: /CN=12099D13750CE0704F5D87C255E4B056E703B28D Certificate serial: 32368AB7DF450E845DECCE603FCC78BAFB47252F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:04:48 +0000 Manifest this update: Tue 12 May 2026 18:59:48 +0000 Manifest next update: Wed 13 May 2026 20:55:48 +0000 Files and hashes: 1: 12099D13750CE0704F5D87C255E4B056E703B28D.crl (hash: tIjTWffm3ty0HRTKtcuj0iaAUkp9bzn7v3Q/IbrTHX4=) 2: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (hash: guj2wYIy2OeBYkQ4ioJGOVZvTeDH758uPYwCniNJbeE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:36:8a:b7:df:45:0e:84:5d:ec:ce:60:3f:cc:78:ba:fb:47:25:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12099D13750CE0704F5D87C255E4B056E703B28D Validity Not Before: May 12 18:59:48 2026 GMT Not After : May 13 20:55:48 2026 GMT Subject: CN=42C21C0C08F1C5F11F4C805E2F5F7C7C1B541684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:62:37:f6:11:53:fb:0f:9f:36:c9:ae:60: 0a:f9:bf:cb:55:08:56:62:a5:ed:2a:9e:25:b7:7b: 1a:98:ea:6b:51:92:d6:2f:4f:b3:98:90:40:07:1d: 77:56:08:fa:0a:12:c0:b6:17:23:14:61:50:e7:15: da:68:a8:d8:2f:db:4b:e6:e5:66:f7:65:33:dd:dd: c6:78:83:f8:a6:62:e6:0c:10:0e:09:33:f0:de:04: 90:41:42:de:db:42:a3:0c:48:4c:e6:3f:20:95:c5: a8:a2:59:00:f5:3e:89:06:5a:14:e8:2c:2f:21:82: 07:13:b2:12:02:6e:88:99:55:ab:77:31:96:c3:05: 54:4e:11:90:90:84:0a:09:23:30:5b:d8:56:0a:06: ee:7c:59:de:36:d9:8d:b4:c4:7f:e6:46:4f:56:37: a2:10:ea:09:2f:2a:97:a6:22:68:ba:a6:e2:63:56: 1d:b2:dd:59:4e:dc:dd:d4:ce:73:9b:4a:24:de:36: 8c:b7:dc:23:09:30:dd:1d:5c:6b:e7:80:26:9c:58: 11:88:41:ea:71:32:92:4a:63:06:6f:49:e4:66:63: fb:89:6f:b2:d8:49:b9:8a:72:ee:d8:45:85:74:f3: e1:04:45:37:65:e3:de:f5:10:ef:84:04:17:7a:55: 17:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C2:1C:0C:08:F1:C5:F1:1F:4C:80:5E:2F:5F:7C:7C:1B:54:16:84 X509v3 Authority Key Identifier: keyid:12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c3:52:eb:1f:4a:98:c7:8f:69:0e:e7:ec:61:b5:25:d7:d7: 90:80:e9:e5:72:81:7c:c0:e5:3e:8a:a0:b1:bc:7e:9f:92:68: 64:c4:82:c8:ec:8b:1d:10:23:90:73:59:91:15:c2:4e:52:df: 4a:ae:e8:99:0e:2d:da:2b:c6:e0:15:be:e0:9b:c1:7a:0d:05: 35:02:a8:b5:d0:65:20:2f:28:f5:0c:99:8d:42:ca:f2:9d:0c: 15:3c:8c:b5:1c:72:24:25:eb:46:02:14:c0:f9:06:e3:d5:1f: 1b:a6:02:b5:4b:4e:a5:36:c1:00:f8:ff:74:e7:f8:99:c6:3d: f2:d7:5b:d7:79:9f:ec:01:a0:97:13:85:b8:a8:38:7b:38:42: a9:2d:61:41:65:0b:52:32:b5:f1:b9:02:27:cb:c3:1a:2e:f1: cc:d9:06:e6:19:6f:b3:24:9a:42:4a:65:43:d8:8b:b1:b8:5f: 4d:78:06:db:f0:dc:5f:ec:bf:e2:ee:ea:33:fc:5d:54:d6:13: f6:b6:6a:db:ed:86:d3:fc:b2:10:a1:7a:87:35:90:94:6f:d4: 88:fc:3b:38:a0:27:8c:72:3d:4e:83:1c:73:f6:53:92:a2:7f: 50:d9:4f:5c:c3:8d:63:51:00:17:61:ad:3f:70:f3:d1:a7:b8: 93:83:7c:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjaKt99FDoRd7M5gP8x4uvtHJS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIwOTlEMTM3NTBDRTA3MDRGNUQ4N0MyNTVFNEIwNTZF NzAzQjI4RDAeFw0yNjA1MTIxODU5NDhaFw0yNjA1MTMyMDU1NDhaMDMxMTAvBgNV BAMTKDQyQzIxQzBDMDhGMUM1RjExRjRDODA1RTJGNUY3QzdDMUI1NDE2ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnTmI39hFT+w+fNsmuYAr5v8tV CFZipe0qniW3exqY6mtRktYvT7OYkEAHHXdWCPoKEsC2FyMUYVDnFdpoqNgv20vm 5Wb3ZTPd3cZ4g/imYuYMEA4JM/DeBJBBQt7bQqMMSEzmPyCVxaiiWQD1PokGWhTo LC8hggcTshICboiZVat3MZbDBVROEZCQhAoJIzBb2FYKBu58Wd422Y20xH/mRk9W N6IQ6gkvKpemImi6puJjVh2y3VlO3N3UznObSiTeNoy33CMJMN0dXGvngCacWBGI QepxMpJKYwZvSeRmY/uJb7LYSbmKcu7YRYV08+EERTdl4971EO+EBBd6VRd5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQsIcDAjxxfEfTIBeL198fBtUFoQwHwYDVR0j BBgwFoAUEgmdE3UM4HBPXYfCVeSwVucDso0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdlZjI4YWYtYTlhZS00YzMzLThjOTgtNTEyMDlmYjIzZGJhLzAvMTIwOTlEMTM3 NTBDRTA3MDRGNUQ4N0MyNTVFNEIwNTZFNzAzQjI4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjA5OUQxMzc1MENFMDcwNEY1RDg3QzI1NUU0QjA1NkU3MDNC MjhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdlZjI4YWYtYTlhZS00YzMzLThj OTgtNTEyMDlmYjIzZGJhLzAvMTIwOTlEMTM3NTBDRTA3MDRGNUQ4N0MyNTVFNEIw NTZFNzAzQjI4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzDUusfSpjHj2kO5+xhtSXX15CA6eVygXzA 5T6KoLG8fp+SaGTEgsjsix0QI5BzWZEVwk5S30qu6JkOLdorxuAVvuCbwXoNBTUC qLXQZSAvKPUMmY1CyvKdDBU8jLUcciQl60YCFMD5BuPVHxumArVLTqU2wQD4/3Tn +JnGPfLXW9d5n+wBoJcThbioOHs4QqktYUFlC1IytfG5AifLwxou8czZBuYZb7Mk mkJKZUPYi7G4X014Btvw3F/sv+Lu6jP8XVTWE/a2atvthtP8shCheoc1kJRv1Ij8 OzigJ4xyPU6DHHP2U5Kif1DZT1zDjWNRABdhrT9w89GnuJODfDo= -----END CERTIFICATE-----Generated at Wed May 13 02:50:49 2026 by rpki-client