$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft File: 221D17C6CE30682D7329C49D1F803292269A742A.mft (raw, json) Hash identifier: JneXd3Md37OlkSnQ6APbMTERCAgy11w2I0lhJfTFQVU= Subject key identifier: 9D:F9:69:C9:88:86:A4:57:A0:20:EA:90:48:6B:DB:13:97:E3:1C:82 Authority key identifier: 22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A Certificate issuer: /CN=221D17C6CE30682D7329C49D1F803292269A742A Certificate serial: 2FE9AF9A3897B161F0C47765A379A028AB4625D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:39:21 +0000 Manifest this update: Wed 13 May 2026 00:34:21 +0000 Manifest next update: Thu 14 May 2026 01:25:21 +0000 Files and hashes: 1: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: Lt2+hrkcbaTE1hrTjRZ7aEwzbnRpAkFNEq82KpPU4LQ=) 2: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: uCL8hU03zGsiNeckLg3taG50LeWxCsa9pcNoxXuQ5KM=) 3: 221D17C6CE30682D7329C49D1F803292269A742A.crl (hash: 6mofUBWQQs+Ij6ktC7P+zLLgFOLnScVvl2tvv0uor8c=) 4: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: BTev4pTjb1pwUkqwaS552QJVxBH0Gw6mSTMUfpMFiQ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e9:af:9a:38:97:b1:61:f0:c4:77:65:a3:79:a0:28:ab:46:25:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221D17C6CE30682D7329C49D1F803292269A742A Validity Not Before: May 13 00:34:21 2026 GMT Not After : May 14 01:25:21 2026 GMT Subject: CN=9DF969C98886A457A020EA90486BDB1397E31C82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d0:83:af:03:22:9a:a8:38:fb:1b:74:53:8d: 39:c1:41:09:f7:40:ec:29:5e:56:27:91:21:0b:62: 5f:3b:28:2c:e8:06:2d:41:af:ba:13:9c:49:b7:24: eb:86:55:bc:bf:93:3f:9a:f6:bc:74:48:b3:e7:ba: d3:29:86:2a:9d:89:b4:97:c4:a5:a1:d0:c9:23:bc: 1a:01:78:96:af:c2:5b:c8:de:c1:85:af:08:a2:fa: 61:96:ca:c0:73:8c:84:ac:8f:d3:e4:c0:a6:a5:16: c4:51:8f:e0:66:e1:a0:f8:29:a3:16:13:76:e7:eb: 6e:b9:69:9e:4a:a4:0f:60:85:3c:d2:b7:3b:14:89: 3d:a1:38:40:f1:05:63:a2:2e:6f:2b:be:7d:e3:91: f7:a3:ce:8b:f7:a8:bd:b2:2e:a0:fc:69:ec:3d:1e: 6d:c1:5c:1c:a2:59:93:6c:64:f2:ef:5b:85:ff:ee: 53:38:b9:07:e3:da:fc:88:51:db:4c:60:41:3f:09: 72:25:01:a5:53:e0:1b:54:3c:79:45:10:fb:52:b8: 29:d9:f1:02:df:be:8e:02:7c:02:3c:23:ec:00:6c: 0f:38:33:5e:a7:69:9e:e6:7a:ff:7b:e0:5e:4e:57: e8:c1:a6:62:e9:7e:d3:6c:82:9e:29:a5:c8:f6:9a: 71:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F9:69:C9:88:86:A4:57:A0:20:EA:90:48:6B:DB:13:97:E3:1C:82 X509v3 Authority Key Identifier: keyid:22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c0:83:80:e6:7d:95:24:02:45:15:53:1a:3a:1e:cd:1c:4e: 28:56:dd:41:bc:7a:61:4c:b1:6b:0d:85:5e:a2:b2:4b:42:1c: 29:1d:3a:5b:b1:ee:ff:bb:0c:76:5f:ad:14:e8:fc:3b:3c:2d: d7:5c:3e:80:a1:54:50:24:75:44:f8:2b:1d:58:12:22:d3:91: 81:05:b6:1d:b7:49:94:0c:94:7d:92:22:f5:87:4c:1b:e4:f9: a0:e3:7c:66:29:81:5e:d6:ee:6e:9c:ad:52:74:50:da:54:5c: a2:8e:e8:78:30:d1:7d:ff:a1:15:e3:06:c3:39:1f:da:08:ef: bd:45:aa:43:4e:27:16:c8:d4:d9:41:58:7c:c0:cd:d7:1d:e8: 92:91:eb:52:b4:c9:7e:ff:ca:35:60:88:b1:75:27:9a:15:b1: 68:e6:ed:47:2a:41:6f:49:7b:51:d5:d3:8c:17:ca:75:a7:74: e1:cc:d4:f4:79:d1:6b:17:26:92:87:4d:24:1d:ce:c4:e0:ae: 9a:7e:e7:6a:f2:04:6f:67:cb:a8:8a:13:37:51:88:74:49:8b: 31:70:1b:61:2b:e9:92:c1:0b:e2:c3:f8:63:8c:de:1f:57:d2: 07:fd:42:a6:6f:e5:05:c8:4b:3b:ef:4f:d2:22:5c:1e:c1:70: 6d:6a:5e:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+mvmjiXsWHwxHdlo3mgKKtGJdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxRDE3QzZDRTMwNjgyRDczMjlDNDlEMUY4MDMyOTIy NjlBNzQyQTAeFw0yNjA1MTMwMDM0MjFaFw0yNjA1MTQwMTI1MjFaMDMxMTAvBgNV BAMTKDlERjk2OUM5ODg4NkE0NTdBMDIwRUE5MDQ4NkJEQjEzOTdFMzFDODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd0IOvAyKaqDj7G3RTjTnBQQn3 QOwpXlYnkSELYl87KCzoBi1Br7oTnEm3JOuGVby/kz+a9rx0SLPnutMphiqdibSX xKWh0MkjvBoBeJavwlvI3sGFrwii+mGWysBzjISsj9PkwKalFsRRj+Bm4aD4KaMW E3bn6265aZ5KpA9ghTzStzsUiT2hOEDxBWOiLm8rvn3jkfejzov3qL2yLqD8aew9 Hm3BXByiWZNsZPLvW4X/7lM4uQfj2vyIUdtMYEE/CXIlAaVT4BtUPHlFEPtSuCnZ 8QLfvo4CfAI8I+wAbA84M16naZ7mev974F5OV+jBpmLpftNsgp4ppcj2mnFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnflpyYiGpFegIOqQSGvbE5fjHIIwHwYDVR0j BBgwFoAUIh0Xxs4waC1zKcSdH4AykiaadCowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJlMDQwMzgtYTFiNi00MzJjLTg1NGItY2M2ZThjZjMyZTA2LzAvMjIxRDE3QzZD RTMwNjgyRDczMjlDNDlEMUY4MDMyOTIyNjlBNzQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjFEMTdDNkNFMzA2ODJENzMyOUM0OUQxRjgwMzI5MjI2OUE3 NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvMjIxRDE3QzZDRTMwNjgyRDczMjlDNDlEMUY4MDMy OTIyNjlBNzQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLAg4DmfZUkAkUVUxo6Hs0cTihW3UG8emFM sWsNhV6isktCHCkdOlux7v+7DHZfrRTo/Ds8LddcPoChVFAkdUT4Kx1YEiLTkYEF th23SZQMlH2SIvWHTBvk+aDjfGYpgV7W7m6crVJ0UNpUXKKO6Hgw0X3/oRXjBsM5 H9oI771FqkNOJxbI1NlBWHzAzdcd6JKR61K0yX7/yjVgiLF1J5oVsWjm7UcqQW9J e1HV04wXynWndOHM1PR50WsXJpKHTSQdzsTgrpp+52ryBG9ny6iKEzdRiHRJizFw G2Er6ZLBC+LD+GOM3h9X0gf9QqZv5QXISzvvT9IiXB7BcG1qXu4= -----END CERTIFICATE-----Generated at Wed May 13 06:01:03 2026 by rpki-client