$ rpki-client -vvf rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft File: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft (raw, json) Hash identifier: IdGX8STK1Ovyt3OZ2IvJmUU+x2QxE23iDm5zg05nsSA= Subject key identifier: DE:B7:FC:F0:47:9D:E9:9A:00:CA:A1:75:B4:1F:B3:E4:C4:4D:07:6A Authority key identifier: D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 Certificate issuer: /CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Certificate serial: 78E2F336F4A4EFCA01D584BDB9EF7ACEBC1585FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft Manifest number: 10 Signing time: Wed 13 May 2026 16:37:32 +0000 Manifest this update: Wed 13 May 2026 16:32:32 +0000 Manifest next update: Thu 14 May 2026 19:02:32 +0000 Files and hashes: 1: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: KRDZJxi0FxgUIEi2fP8SirXZmXhHmW7JJ3jDoLiPW4M=) 2: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl (hash: R33Lm7I/euJlLolM117bFOp9OVfLBOEraTVa7a7XRcQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e2:f3:36:f4:a4:ef:ca:01:d5:84:bd:b9:ef:7a:ce:bc:15:85:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Validity Not Before: May 13 16:32:32 2026 GMT Not After : May 14 19:02:32 2026 GMT Subject: CN=DEB7FCF0479DE99A00CAA175B41FB3E4C44D076A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:50:cf:a0:41:c4:c9:2c:d9:3e:2f:a0:48: ad:89:4c:66:62:f9:9c:67:80:96:57:1e:27:59:1e: 04:bd:1c:cc:d8:bc:80:eb:83:46:4a:f6:ac:31:77: 3b:0b:2d:37:fe:6e:80:3a:4c:5d:d4:55:a0:91:64: d8:b3:b8:de:0c:11:93:a6:a9:8e:2c:19:bd:ed:a1: aa:ed:90:6b:67:a7:c9:dd:9d:dd:25:8b:78:7c:6f: 9f:cb:f9:63:ff:a4:12:e8:b2:fe:1a:50:0a:03:3a: e4:d5:5a:d7:8f:c1:be:b6:85:39:cc:b3:fc:4b:86: 1e:e2:ee:55:d2:eb:24:b3:9c:d3:dc:fa:94:69:b5: cc:ae:18:c4:bd:3f:e1:2a:bc:a8:4d:84:82:cf:60: a2:f9:0d:e8:bb:6f:9a:99:60:6b:4f:98:c0:c7:5d: f2:1d:81:d8:0e:1f:f4:a6:68:0a:33:f7:b9:96:e9: 88:01:a5:b5:72:ae:a6:0b:e4:6a:8e:11:a0:31:36: 5e:0c:b2:f2:60:a4:c4:f1:a6:a7:43:52:e4:0b:02: 60:1a:26:7c:5a:98:3e:16:63:df:05:f3:63:43:5b: 66:c1:c7:97:9a:ed:37:10:e2:55:f6:ca:54:05:4f: c1:74:50:c8:22:1f:7a:d1:86:26:d0:4d:dc:46:ab: 31:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B7:FC:F0:47:9D:E9:9A:00:CA:A1:75:B4:1F:B3:E4:C4:4D:07:6A X509v3 Authority Key Identifier: keyid:D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a2:d4:cc:15:5d:98:3d:cb:a6:59:02:0e:86:d7:80:6e:1a: cd:91:30:e3:dc:d3:c4:e9:42:6e:28:ac:22:d5:15:b8:a1:17: d6:27:6e:29:35:54:0d:02:da:8c:78:11:86:8d:b1:46:4b:af: 66:44:7c:40:25:17:4b:7d:d1:9c:74:66:6d:c6:f0:07:01:e9: f4:2a:f1:3c:77:b8:37:fd:3e:0a:12:bf:aa:da:16:4b:a5:a2: c3:a0:8e:31:07:85:07:d4:e0:9f:87:fb:b5:65:43:eb:00:56: db:94:21:ce:2a:ff:5b:2d:81:05:88:c4:93:eb:18:82:f6:a4: 99:5a:05:49:b0:5c:d2:75:12:25:35:af:ea:21:02:50:50:f7: 44:d9:62:2a:46:04:56:79:32:8c:fc:5e:55:86:82:56:31:87: 9e:1f:b2:e7:98:60:f2:97:9c:e1:81:b5:1a:4f:88:4e:58:12: 1a:dd:54:8c:43:da:da:83:c9:77:87:60:b5:a6:82:2a:5e:78: 41:6e:06:ca:58:4d:e3:a4:03:77:9e:c0:de:01:bf:a4:34:55: 9b:83:80:8d:09:72:67:50:11:32:23:3e:bf:96:08:62:a6:3b: ad:6a:bc:2b:5e:3f:b7:a4:a8:16:67:5c:ae:f9:77:62:94:71: e5:19:c5:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeOLzNvSk78oB1YS9ue96zrwVhf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VFNDcx MzVDMEYwNjAeFw0yNjA1MTMxNjMyMzJaFw0yNjA1MTQxOTAyMzJaMDMxMTAvBgNV BAMTKERFQjdGQ0YwNDc5REU5OUEwMENBQTE3NUI0MUZCM0U0QzQ0RDA3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJFDPoEHEySzZPi+gSK2JTGZi +ZxngJZXHidZHgS9HMzYvIDrg0ZK9qwxdzsLLTf+boA6TF3UVaCRZNizuN4MEZOm qY4sGb3toartkGtnp8ndnd0li3h8b5/L+WP/pBLosv4aUAoDOuTVWtePwb62hTnM s/xLhh7i7lXS6ySznNPc+pRptcyuGMS9P+EqvKhNhILPYKL5Dei7b5qZYGtPmMDH XfIdgdgOH/SmaAoz97mW6YgBpbVyrqYL5GqOEaAxNl4MsvJgpMTxpqdDUuQLAmAa JnxamD4WY98F82NDW2bBx5ea7TcQ4lX2ylQFT8F0UMgiH3rRhibQTdxGqzH/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3rf88Eed6ZoAyqF1tB+z5MRNB2owHwYDVR0j BBgwFoAU0fm+5s8JAL5hDS2srfPuRxNcDwYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzkwMDIwOGItMzJhYy00YTI2LTlkOTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZD RjA5MDBCRTYxMEQyREFDQURGM0VFNDcxMzVDMEYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMUY5QkVFNkNGMDkwMEJFNjEwRDJEQUNBREYzRUU0NzEzNUMw RjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvRDFGOUJFRTZDRjA5MDBCRTYxMEQyREFDQURGM0VF NDcxMzVDMEYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyi1MwVXZg9y6ZZAg6G14BuGs2RMOPc08Tp Qm4orCLVFbihF9Ynbik1VA0C2ox4EYaNsUZLr2ZEfEAlF0t90Zx0Zm3G8AcB6fQq 8Tx3uDf9PgoSv6raFkulosOgjjEHhQfU4J+H+7VlQ+sAVtuUIc4q/1stgQWIxJPr GIL2pJlaBUmwXNJ1EiU1r+ohAlBQ90TZYipGBFZ5Moz8XlWGglYxh54fsueYYPKX nOGBtRpPiE5YEhrdVIxD2tqDyXeHYLWmgipeeEFuBspYTeOkA3eewN4Bv6Q0VZuD gI0JcmdQETIjPr+WCGKmO61qvCteP7ekqBZnXK75d2KUceUZxYg= -----END CERTIFICATE-----Generated at Thu May 14 02:49:23 2026 by rpki-client