$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft File: A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft (raw, json) Hash identifier: 4c77Ms2gb+VLwdcMptK1VkxyKZHfXJzi4XReULQ4rFE= Subject key identifier: AE:82:C2:1C:5D:A8:0C:DE:F5:D6:A2:EF:EF:47:64:06:08:C6:6A:67 Authority key identifier: A5:1F:08:82:DC:1B:DA:E2:BF:6D:C9:1D:3E:C6:EB:23:E5:69:AF:D6 Certificate issuer: /CN=A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6 Certificate serial: 0F4B136208B3C6A25ED7F83DA5EACAFA73E45468 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:38:02 +0000 Manifest this update: Tue 12 May 2026 03:33:02 +0000 Manifest next update: Wed 13 May 2026 05:18:02 +0000 Files and hashes: 1: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: Mtfzs1yZWVTcj+jwor1tUEKlyotPWoajpPtYoZFvsps=) 2: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: eVEWrgAX4ZnGtqRKMu7y1kldAhV5Bn5D8vbPp3E9838=) 3: A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl (hash: 6zsdr5J172Gkczlw3JdNiLEyk/OO5nV8ptTzLg5qA/s=) 4: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: bcrYp2H/z0S0hWGYzTC5YNTUZlTQYIqRD2WSLvGlQYs=) 5: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: dyba1Oz6Wp8hX68WIp/FlT5kkFNyYyRCOC354wRZyeE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:4b:13:62:08:b3:c6:a2:5e:d7:f8:3d:a5:ea:ca:fa:73:e4:54:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6 Validity Not Before: May 12 03:33:02 2026 GMT Not After : May 13 05:18:02 2026 GMT Subject: CN=AE82C21C5DA80CDEF5D6A2EFEF47640608C66A67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:da:68:f9:fd:a7:9f:39:f3:26:ef:d8:d9:a8: 6f:bd:e8:95:68:a8:1c:34:d1:31:8c:6c:59:7f:e7: 18:03:f1:56:20:cc:14:8c:d3:db:90:6e:d9:ed:eb: ea:66:42:5f:0d:ce:53:19:cc:61:53:32:0e:0f:ff: 65:1d:1c:c8:62:60:58:64:a1:59:93:82:9b:7b:59: 00:1c:52:4e:a3:b1:94:32:71:0c:ba:81:68:df:d0: 2f:33:27:06:20:0c:06:d2:b6:3a:84:3d:c0:28:5a: 26:e5:3d:b5:a6:d0:28:54:f2:03:f7:b4:64:8a:80: a8:10:48:14:da:37:06:ab:64:06:66:f1:45:f8:f5: 73:e7:cf:fc:23:9e:5c:fd:13:a3:98:39:ef:00:b6: 1b:36:75:c8:d5:f4:b9:39:c4:98:e5:80:44:18:a8: 4f:02:12:e4:da:8c:40:ee:60:e1:74:01:06:40:4d: 1f:bb:58:88:e4:5c:21:43:c8:aa:3e:6a:1b:6f:35: 97:57:eb:32:d8:5d:28:44:52:ae:76:72:5b:ec:ba: d7:98:48:0b:e6:13:3b:cf:9a:8c:ec:de:e4:c5:73: 53:3c:28:fd:5b:03:a8:f5:d8:6f:43:56:60:e9:c2: 83:50:30:21:dd:08:7b:49:30:e9:31:cf:58:ed:c7: 50:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:82:C2:1C:5D:A8:0C:DE:F5:D6:A2:EF:EF:47:64:06:08:C6:6A:67 X509v3 Authority Key Identifier: keyid:A5:1F:08:82:DC:1B:DA:E2:BF:6D:C9:1D:3E:C6:EB:23:E5:69:AF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A51F0882DC1BDAE2BF6DC91D3EC6EB23E569AFD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:05:14:95:b3:c4:09:3b:da:41:93:3d:66:eb:2c:c3:67:50: 44:af:d5:d8:0d:42:7f:03:ac:93:3a:4a:7c:13:8c:aa:10:ad: fe:e7:8e:3a:e1:b0:ef:d3:99:b7:9a:8b:a2:cc:d9:d8:46:e7: 33:60:38:1a:62:de:fd:71:42:00:b1:db:2f:e8:97:6b:9e:c1: e6:70:ad:a4:4f:6b:a7:e5:4a:9d:93:30:52:7a:33:84:7d:35: 8d:b9:e5:e5:5a:43:7b:d2:af:d5:19:5b:fa:b1:97:a8:d8:60: 24:a0:08:99:c8:8e:bc:b3:08:f8:3a:fa:5a:1f:0c:12:9d:d0: ca:49:3a:9e:58:dc:06:ff:ed:74:45:17:41:a8:f9:98:fd:54: 33:e9:a3:d6:49:4a:a9:82:da:e3:b4:bd:25:39:c3:96:29:21: 32:f7:b2:20:91:9f:91:a3:78:ee:c0:f0:97:ea:6a:e9:e7:74: 0a:a9:39:a4:d1:b4:5b:2c:db:fd:3e:71:49:3a:f4:a1:e1:2e: c1:47:66:be:02:f0:45:18:fb:65:31:05:e2:06:c1:93:b3:59: 50:0e:27:a4:12:dc:30:80:f6:38:df:5a:af:4e:c7:fb:00:39: 03:d3:6b:09:f1:f4:9b:c6:63:37:6a:e4:51:fa:05:59:fe:a7: 2b:23:95:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD0sTYgizxqJe1/g9perK+nPkVGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRjA4ODJEQzFCREFFMkJGNkRDOTFEM0VDNkVCMjNF NTY5QUZENjAeFw0yNjA1MTIwMzMzMDJaFw0yNjA1MTMwNTE4MDJaMDMxMTAvBgNV BAMTKEFFODJDMjFDNURBODBDREVGNUQ2QTJFRkVGNDc2NDA2MDhDNjZBNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2mj5/aefOfMm79jZqG+96JVo qBw00TGMbFl/5xgD8VYgzBSM09uQbtnt6+pmQl8NzlMZzGFTMg4P/2UdHMhiYFhk oVmTgpt7WQAcUk6jsZQycQy6gWjf0C8zJwYgDAbStjqEPcAoWiblPbWm0ChU8gP3 tGSKgKgQSBTaNwarZAZm8UX49XPnz/wjnlz9E6OYOe8Aths2dcjV9Lk5xJjlgEQY qE8CEuTajEDuYOF0AQZATR+7WIjkXCFDyKo+ahtvNZdX6zLYXShEUq52clvsuteY SAvmEzvPmozs3uTFc1M8KP1bA6j12G9DVmDpwoNQMCHdCHtJMOkxz1jtx1BDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUroLCHF2oDN711qLv70dkBgjGamcwHwYDVR0j BBgwFoAUpR8Igtwb2uK/bckdPsbrI+Vpr9YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjljZTBjOTQtMGQ2Yy00NWIzLWFhYzYtMzRkMGNlOWIxZjA4LzAvQTUxRjA4ODJE QzFCREFFMkJGNkRDOTFEM0VDNkVCMjNFNTY5QUZENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTFGMDg4MkRDMUJEQUUyQkY2REM5MUQzRUM2RUIyM0U1NjlB RkQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUxRjA4ODJEQzFCREFFMkJGNkRDOTFEM0VDNkVC MjNFNTY5QUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsFFJWzxAk72kGTPWbrLMNnUESv1dgNQn8D rJM6SnwTjKoQrf7njjrhsO/Tmbeai6LM2dhG5zNgOBpi3v1xQgCx2y/ol2ueweZw raRPa6flSp2TMFJ6M4R9NY255eVaQ3vSr9UZW/qxl6jYYCSgCJnIjryzCPg6+lof DBKd0MpJOp5Y3Ab/7XRFF0Go+Zj9VDPpo9ZJSqmC2uO0vSU5w5YpITL3siCRn5Gj eO7A8JfqaunndAqpOaTRtFss2/0+cUk69KHhLsFHZr4C8EUY+2UxBeIGwZOzWVAO J6QS3DCA9jjfWq9Ox/sAOQPTawnx9JvGYzdq5FH6BVn+pysjlTU= -----END CERTIFICATE-----Generated at Tue May 12 23:20:53 2026 by rpki-client