$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft File: 548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft (raw, json) Hash identifier: 3YGme96teOX71oOtDDE05za873FkJwSxx1Be2N09cXk= Subject key identifier: A6:D6:E7:F9:3C:AB:C2:ED:36:D1:D2:74:51:EF:8C:20:12:9D:95:F9 Authority key identifier: 54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E Certificate issuer: /CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E Certificate serial: 6BB2278BD3A50482698B7B24DE5CF31DF014DA3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:58:20 +0000 Manifest this update: Tue 12 May 2026 23:53:20 +0000 Manifest next update: Thu 14 May 2026 00:40:20 +0000 Files and hashes: 1: 34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa (hash: z7b5wYvP0ol8wMsB+eUBC4JsGZJCfnyyWM+aWZV2US0=) 2: 34352e3132332e3134302e302f32332d3233203d3e20313532303439.roa (hash: tNx5eutje4LD11CaRHcsx/WHY/Yrs8sJ8oFq8sH2t08=) 3: 548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl (hash: 26HkwKSatcVhQ2z7E0UppWl5mG6ptIBJseTJSEXjh10=) 4: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (hash: WXJAvvrLyVsCEeqVhO/3ROtMMzsfMOa0TSLjg89eRJQ=) 5: 34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa (hash: 5uDrM08RtxFQGhpofHGoopc2eLc8d9vvsd0mx/K+JjM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b2:27:8b:d3:a5:04:82:69:8b:7b:24:de:5c:f3:1d:f0:14:da:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E Validity Not Before: May 12 23:53:20 2026 GMT Not After : May 14 00:40:20 2026 GMT Subject: CN=A6D6E7F93CABC2ED36D1D27451EF8C20129D95F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:82:53:32:cc:f7:a9:08:df:ec:62:89:5f: 2d:de:c6:4e:ce:c2:86:7c:e2:50:4e:f2:21:51:b6: d1:ad:7f:47:84:62:fd:19:13:cc:34:d3:e3:c0:a1: 39:73:38:42:3d:0a:a9:96:a1:80:0b:82:ac:b8:01: 03:b2:4d:a7:53:37:56:d8:1b:bb:f1:d7:5d:88:ed: c2:a9:5b:59:3e:a7:69:c9:20:a6:94:ed:b7:89:e4: aa:9e:95:30:7a:35:de:dd:3a:1e:7a:ab:6d:b3:17: 6f:83:79:53:12:6f:08:5e:d3:01:cd:4b:35:c5:69: ea:c1:fd:1d:34:c5:9e:57:12:9b:21:d6:d3:d3:4a: 6a:85:ba:dd:8a:bb:b5:8c:fc:1b:a0:12:0c:52:52: a1:4d:2b:4c:75:ba:5a:da:ea:ae:bd:35:25:e6:5f: ef:37:68:b6:97:19:51:27:c5:f5:6d:b0:9e:3b:f1: 3d:f4:3b:c3:80:eb:8a:9d:30:12:14:43:d3:fd:49: 94:a0:9f:47:27:ea:d2:43:f8:73:99:d9:fd:0c:b6: b2:e5:d1:66:0b:aa:2c:d0:44:e9:c7:e2:73:7e:ad: 50:e9:fa:03:e2:74:e5:cc:13:ad:5d:f9:fb:a9:ed: cf:18:a8:a1:dc:6b:70:5b:0d:07:6c:9a:73:b8:e1: e5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D6:E7:F9:3C:AB:C2:ED:36:D1:D2:74:51:EF:8C:20:12:9D:95:F9 X509v3 Authority Key Identifier: keyid:54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f9:a9:fa:fd:cc:01:4e:91:ed:7c:9f:38:fa:2d:4b:fe:e1: 63:76:84:b3:84:ef:4d:e1:86:d2:6a:df:e6:97:14:8d:bb:27: 38:c9:8b:2c:50:31:df:3b:d6:09:cf:a7:fd:b6:58:41:9c:77: 6c:6b:9d:42:be:53:8d:d5:e0:92:22:90:7e:e6:a7:b5:c8:08: d0:f7:a5:27:5c:70:57:a3:20:81:3f:d2:ce:55:64:79:b8:e7: fd:8a:e8:0d:3e:0f:28:a1:31:fb:df:7e:b0:81:9f:1b:f2:74: 65:3b:0d:82:54:51:e9:08:d8:27:6f:5f:26:fa:1e:32:2b:04: f5:13:49:32:d4:bc:fb:0d:5d:32:2c:a5:25:1f:db:03:9b:3c: 4e:89:4a:1c:b9:3c:1f:e7:79:b7:b1:cc:59:dc:f0:6f:66:4e: 09:4b:2d:6c:4d:6a:ac:db:7c:74:ef:8a:7d:20:89:8c:f0:99: 20:fe:f6:78:90:47:78:d9:66:29:8f:e4:7b:70:51:1b:24:14: 98:ee:fc:1f:d0:6a:66:a7:bf:f7:f2:5c:53:5d:25:a3:02:e1: a8:26:3b:ae:0c:e7:13:3e:3f:2b:d0:57:f5:98:1d:7c:bc:75: ee:bc:a8:cd:f4:cb:7c:59:00:a2:43:14:00:13:0e:c4:a5:7b: 57:cd:01:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7Ini9OlBIJpi3sk3lzzHfAU2j8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ4RDFCNkI2QkE5QTE2NUU3N0FERUVGRTI4NDI0ODcw NDJDMzI1RTAeFw0yNjA1MTIyMzUzMjBaFw0yNjA1MTQwMDQwMjBaMDMxMTAvBgNV BAMTKEE2RDZFN0Y5M0NBQkMyRUQzNkQxRDI3NDUxRUY4QzIwMTI5RDk1RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QoJTMsz3qQjf7GKJXy3exk7O woZ84lBO8iFRttGtf0eEYv0ZE8w00+PAoTlzOEI9CqmWoYALgqy4AQOyTadTN1bY G7vx112I7cKpW1k+p2nJIKaU7beJ5KqelTB6Nd7dOh56q22zF2+DeVMSbwhe0wHN SzXFaerB/R00xZ5XEpsh1tPTSmqFut2Ku7WM/BugEgxSUqFNK0x1ulra6q69NSXm X+83aLaXGVEnxfVtsJ478T30O8OA64qdMBIUQ9P9SZSgn0cn6tJD+HOZ2f0MtrLl 0WYLqizQROnH4nN+rVDp+gPidOXME61d+fup7c8YqKHca3BbDQdsmnO44eUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUptbn+Tyrwu020dJ0Ue+MIBKdlfkwHwYDVR0j BBgwFoAUVI0ba2upoWXnet7v4oQkhwQsMl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3YTdkOTgtMjMzOC00ZDc3LTk2NjItZjMzZWE2OGM4NmYyLzAvNTQ4RDFCNkI2 QkE5QTE2NUU3N0FERUVGRTI4NDI0ODcwNDJDMzI1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDhEMUI2QjZCQTlBMTY1RTc3QURFRUZFMjg0MjQ4NzA0MkMz MjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvNTQ4RDFCNkI2QkE5QTE2NUU3N0FERUVGRTI4NDI0 ODcwNDJDMzI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIX5qfr9zAFOke18nzj6LUv+4WN2hLOE703h htJq3+aXFI27JzjJiyxQMd871gnPp/22WEGcd2xrnUK+U43V4JIikH7mp7XICND3 pSdccFejIIE/0s5VZHm45/2K6A0+DyihMfvffrCBnxvydGU7DYJUUekI2CdvXyb6 HjIrBPUTSTLUvPsNXTIspSUf2wObPE6JShy5PB/nebexzFnc8G9mTglLLWxNaqzb fHTvin0giYzwmSD+9niQR3jZZimP5HtwURskFJju/B/Qamanv/fyXFNdJaMC4agm O64M5xM+PyvQV/WYHXy8de68qM30y3xZAKJDFAATDsSle1fNAUo= -----END CERTIFICATE-----Generated at Wed May 13 04:51:57 2026 by rpki-client