$ rpki-client -vvf rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft File: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft (raw, json) Hash identifier: CvqZ7IJ9sDxhqIvShSrhjqZBqc1FT82tZTIQx5frF2A= Subject key identifier: 7E:40:D1:0D:FE:A9:1A:4B:C3:EF:BD:64:E8:CA:82:BF:48:93:4C:AD Authority key identifier: DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D Certificate issuer: /CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Certificate serial: 07CD6DF6D8A7F3ECF7F46DF137270EBEF10F2426 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft Manifest number: 13 Signing time: Sat 16 May 2026 05:21:54 +0000 Manifest this update: Sat 16 May 2026 05:16:54 +0000 Manifest next update: Sun 17 May 2026 05:53:54 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: d1/YZ4nLn+eOZOqPz/6uDnp+bGReiCL4D5xWg3VSU5w=) 2: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: WjZRwtvJki8cX6/hev6SY7XFmEOdsbw7GQ4iNASnaI0=) 3: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: TTk5uxdYgabM/1XXzBbZ8h3cHs3Ef7zAmOsq9InOKKA=) 4: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: TkbyXPHwp6Kb69rQYjb4QN3MOoOzWNnMDZFwGXZxRRA=) 5: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl (hash: qFFir7Sz0jbQiOyYWYjwWl+/rbLuOWBMLQ45X8wi4mk=) 6: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: 97HN/1c+8Hrc2pb/g0tPOiNTWcjkEdKOrzmx5piyFis=) 7: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: E89xRti4PVG0HV9DRFC+eJJ1GWYmvwIqGtNqlTsJLNs=) 8: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: fD3NLzLgoJ82TLwu7Dwyse03F0V8LT4TWwHSpMtUfEc=) 9: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: pUwBvJ0FIKqMG3YypxwtIACCh9fdPkCe3slROTdlAFQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 05:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:cd:6d:f6:d8:a7:f3:ec:f7:f4:6d:f1:37:27:0e:be:f1:0f:24:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Validity Not Before: May 16 05:16:54 2026 GMT Not After : May 17 05:53:54 2026 GMT Subject: CN=7E40D10DFEA91A4BC3EFBD64E8CA82BF48934CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:93:ef:7e:49:01:ab:cc:84:87:08:94:cb: b3:8e:d4:c2:80:8b:e2:ff:02:84:21:64:6b:e7:71: 3b:ec:47:b0:4d:83:a6:c8:8d:b9:5a:a0:9d:15:e2: a7:61:83:75:ce:6a:29:1d:76:41:4e:09:84:27:2c: 0b:51:50:74:70:cc:ff:5a:61:c0:76:7f:33:9b:16: 82:4b:40:6d:95:6a:d7:2f:e8:f3:a5:9d:c5:b3:91: dc:c3:7a:b9:1a:8d:24:d0:41:f7:2c:2a:f6:7f:be: 10:77:2a:13:d9:a1:73:2e:1c:e7:8c:50:1d:c5:cf: 40:b9:24:5f:75:88:17:c0:1d:f9:d2:e2:0f:37:5f: 59:77:da:ac:1e:c3:28:b0:1f:93:68:c3:cc:1b:66: a7:db:f8:39:ce:c9:f5:a6:23:1e:82:b2:45:5b:6d: 2d:f5:ae:be:7f:09:87:12:a9:70:11:41:1a:d8:a7: 12:a4:7a:37:b3:aa:7a:8c:9c:d7:ec:35:dc:5c:3d: 75:15:1b:2e:8e:6a:fb:e1:a2:99:6d:5d:35:0d:49: 82:bf:e8:1b:7f:8b:89:21:6e:f3:fc:98:bf:28:4b: 63:a3:65:b9:71:e6:7a:97:86:a6:64:16:8f:63:60: 31:e9:ed:36:2f:5b:65:07:1d:89:fd:5a:51:8c:3c: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:40:D1:0D:FE:A9:1A:4B:C3:EF:BD:64:E8:CA:82:BF:48:93:4C:AD X509v3 Authority Key Identifier: keyid:DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1b:6d:66:9f:5b:12:06:59:13:a4:15:4c:cd:2b:61:81:fd: 19:06:9d:9f:0b:ce:04:ca:b6:cb:1c:55:aa:c8:c8:3f:65:d9: 91:d4:76:99:a7:45:83:a0:dd:01:1b:28:d1:3c:56:99:d6:79: 86:d9:22:e1:4f:6d:10:82:ef:66:b2:fa:47:b5:32:44:34:84: 5d:58:bd:62:a3:6d:d5:a6:b7:a4:23:b0:91:63:72:39:b0:03: 20:9f:11:22:f3:65:f3:97:50:e8:f2:1f:68:c9:98:8e:71:3d: ff:25:ae:e1:a7:89:fa:4a:5f:6a:72:07:c3:d7:1c:42:eb:36: 24:5a:19:00:5c:db:5a:51:58:de:4d:42:23:05:fe:af:2e:be: 69:38:3b:f2:b8:95:95:df:98:9b:58:eb:31:7f:c4:e6:5c:86: ad:c4:c5:ca:89:5d:e0:c9:cb:74:fa:4f:c8:a8:d8:f6:cd:f7: 97:4e:a9:2d:75:1d:20:de:f2:d1:87:55:d9:d5:3f:46:c2:43: 04:7e:15:f4:23:7e:db:63:ee:a5:2d:c0:4e:1c:9a:8c:07:69: 59:ad:79:6d:8d:52:91:c0:2b:f7:d6:85:46:60:cf:9a:d3:40: dd:64:02:94:61:a4:ab:91:df:e3:50:cf:7a:2f:e7:35:dc:a2: ac:45:02:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB81t9tin8+z39G3xNycOvvEPJCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNGNEM1 MUM1QTc0RDAeFw0yNjA1MTYwNTE2NTRaFw0yNjA1MTcwNTUzNTRaMDMxMTAvBgNV BAMTKDdFNDBEMTBERkVBOTFBNEJDM0VGQkQ2NEU4Q0E4MkJGNDg5MzRDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvLpPvfkkBq8yEhwiUy7OO1MKA i+L/AoQhZGvncTvsR7BNg6bIjblaoJ0V4qdhg3XOaikddkFOCYQnLAtRUHRwzP9a YcB2fzObFoJLQG2Vatcv6POlncWzkdzDerkajSTQQfcsKvZ/vhB3KhPZoXMuHOeM UB3Fz0C5JF91iBfAHfnS4g83X1l32qwewyiwH5Now8wbZqfb+DnOyfWmIx6CskVb bS31rr5/CYcSqXARQRrYpxKkejezqnqMnNfsNdxcPXUVGy6OavvhopltXTUNSYK/ 6Bt/i4khbvP8mL8oS2OjZblx5nqXhqZkFo9jYDHp7TYvW2UHHYn9WlGMPGNpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfkDRDf6pGkvD771k6MqCv0iTTK0wHwYDVR0j BBgwFoAU32qYfi+b8QS5k4kR6Pg/TFHFp00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBjMmExM2ItMWY0MC00YzAzLWJjMzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0Uy RjlCRjEwNEI5OTM4OTExRThGODNGNEM1MUM1QTc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjZBOTg3RTJGOUJGMTA0Qjk5Mzg5MTFFOEY4M0Y0QzUxQzVB NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNG NEM1MUM1QTc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEbbWafWxIGWROkFUzNK2GB/RkGnZ8LzgTK tsscVarIyD9l2ZHUdpmnRYOg3QEbKNE8VpnWeYbZIuFPbRCC72ay+ke1MkQ0hF1Y vWKjbdWmt6QjsJFjcjmwAyCfESLzZfOXUOjyH2jJmI5xPf8lruGnifpKX2pyB8PX HELrNiRaGQBc21pRWN5NQiMF/q8uvmk4O/K4lZXfmJtY6zF/xOZchq3ExcqJXeDJ y3T6T8io2PbN95dOqS11HSDe8tGHVdnVP0bCQwR+FfQjfttj7qUtwE4cmowHaVmt eW2NUpHAK/fWhUZgz5rTQN1kApRhpKuR3+NQz3ov5zXcoqxFAio= -----END CERTIFICATE-----Generated at Sat May 16 10:45:19 2026 by rpki-client