$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft File: 84D8D73F40AAC54FA5471C49D1B0B26082108594.mft (raw, json) Hash identifier: n6FVl//KTo/klII6njgvC9Y3DjkRW6c+et+9Rb6mB0M= Subject key identifier: 23:10:45:18:6E:D5:B4:1A:14:6C:89:94:7B:A7:2A:B0:10:5F:9F:F1 Authority key identifier: 84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94 Certificate issuer: /CN=84D8D73F40AAC54FA5471C49D1B0B26082108594 Certificate serial: 07BD999DFF7CB0BD26FF0AE038B28B07F2549E5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft Manifest number: 12 Signing time: Fri 15 May 2026 01:21:53 +0000 Manifest this update: Fri 15 May 2026 01:16:53 +0000 Manifest next update: Sat 16 May 2026 03:21:53 +0000 Files and hashes: 1: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: ZTH11IqUBjUloy94Wjo3h3nzkEwNWGDprNQQAIlXj6U=) 2: 84D8D73F40AAC54FA5471C49D1B0B26082108594.crl (hash: 3+0JhWRH6B2dmfOTvZZSM3WBfY3L5donQa4EWOdu22I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.crl rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 20:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:bd:99:9d:ff:7c:b0:bd:26:ff:0a:e0:38:b2:8b:07:f2:54:9e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D8D73F40AAC54FA5471C49D1B0B26082108594 Validity Not Before: May 15 01:16:53 2026 GMT Not After : May 16 03:21:53 2026 GMT Subject: CN=231045186ED5B41A146C89947BA72AB0105F9FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:c9:1b:51:d4:5f:76:6a:cc:5d:de:2f:86: 36:8a:1a:93:39:dc:a7:4b:f8:e5:68:ed:b6:3f:3f: 64:29:9c:de:ac:74:2c:3d:57:33:9d:54:6a:8a:61: cc:ed:9e:32:8a:b7:77:98:6c:4f:37:5d:b2:d6:0e: ab:61:45:27:4f:79:a7:3b:f5:a8:c0:b0:5c:38:ec: 6b:71:a8:f4:55:ec:73:f3:72:40:30:8a:a9:3d:16: 57:89:ab:ee:c4:74:43:cf:5e:60:5f:92:df:a1:8b: e4:5a:3c:6f:a3:fc:ae:40:1c:37:1c:9c:52:60:2e: 46:46:74:aa:56:23:2a:f0:4f:a1:32:0f:e3:e3:a5: d2:71:9e:d9:27:5d:20:51:0d:a4:36:92:08:31:73: af:72:88:ee:88:d9:80:fd:2a:ee:3a:59:14:e8:47: 49:cd:e4:56:a1:64:a3:a3:34:2e:16:72:74:e7:47: 59:f3:07:fd:fd:46:52:4e:e3:7c:cd:49:84:bc:c9: 3d:71:0a:2c:e7:0a:fb:86:0c:83:3f:a6:47:4c:26: c3:28:6c:91:7d:c5:f0:cd:1d:94:43:9d:92:4a:e4: 26:9b:20:af:d3:d5:bf:0a:fd:de:a1:50:75:81:e1: e7:2d:b6:74:93:2a:4f:e1:b7:e4:b0:6b:7c:96:08: 2f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:10:45:18:6E:D5:B4:1A:14:6C:89:94:7B:A7:2A:B0:10:5F:9F:F1 X509v3 Authority Key Identifier: keyid:84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:72:7c:ae:a1:b2:7a:0f:fc:e9:08:7b:8e:bb:86:2a:cc:d8: 92:3d:9d:35:16:bf:c9:ff:65:91:89:30:04:fb:2c:c0:07:15: 2c:ed:fb:12:fc:a0:96:42:af:88:fc:a2:8b:04:5a:1f:bc:7e: 29:3e:77:41:28:af:22:a3:6b:92:f9:32:26:08:75:31:69:ae: fd:e8:27:8e:81:a7:6f:52:dd:87:87:91:47:40:83:ab:dc:3f: 37:77:22:8f:71:66:7e:6a:16:a6:c0:8e:fa:43:c8:bd:d0:5d: f4:60:64:03:98:8a:b2:8a:8d:d2:19:14:e9:51:67:50:9e:c9: 6b:d8:81:94:48:bd:50:b2:5d:d7:dc:20:83:09:02:10:5f:8d: a0:6d:de:61:a7:dd:25:78:0d:47:6c:70:2f:39:91:b2:ff:af: 90:8b:56:70:4e:46:03:56:ce:f3:05:5c:3b:f9:54:76:8d:e7: bd:f8:0a:43:74:af:e1:a7:df:be:d3:cf:5e:b9:af:f2:24:10: 56:55:db:dd:47:44:ef:82:da:b5:b3:04:2c:c2:34:43:a3:58: 86:ab:cb:8b:94:b5:a7:a6:9f:4c:3c:e0:ac:58:9c:e7:1e:2e: 0c:66:b2:b6:9f:d7:f2:c0:8d:b9:8a:ec:11:b4:c1:66:df:5d: 12:94:b7:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB72Znf98sL0m/wrgOLKLB/JUnl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODREOEQ3M0Y0MEFBQzU0RkE1NDcxQzQ5RDFCMEIyNjA4 MjEwODU5NDAeFw0yNjA1MTUwMTE2NTNaFw0yNjA1MTYwMzIxNTNaMDMxMTAvBgNV BAMTKDIzMTA0NTE4NkVENUI0MUExNDZDODk5NDdCQTcyQUIwMTA1RjlGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXckbUdRfdmrMXd4vhjaKGpM5 3KdL+OVo7bY/P2QpnN6sdCw9VzOdVGqKYcztnjKKt3eYbE83XbLWDqthRSdPeac7 9ajAsFw47GtxqPRV7HPzckAwiqk9FleJq+7EdEPPXmBfkt+hi+RaPG+j/K5AHDcc nFJgLkZGdKpWIyrwT6EyD+PjpdJxntknXSBRDaQ2kggxc69yiO6I2YD9Ku46WRTo R0nN5FahZKOjNC4WcnTnR1nzB/39RlJO43zNSYS8yT1xCiznCvuGDIM/pkdMJsMo bJF9xfDNHZRDnZJK5CabIK/T1b8K/d6hUHWB4ecttnSTKk/ht+Swa3yWCC9dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIxBFGG7VtBoUbImUe6cqsBBfn/EwHwYDVR0j BBgwFoAUhNjXP0CqxU+lRxxJ0bCyYIIQhZQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWM4MDQ2N2MtYWViMi00MDk1LThmNTQtODViOTA5MGQzOTA4LzAvODREOEQ3M0Y0 MEFBQzU0RkE1NDcxQzQ5RDFCMEIyNjA4MjEwODU5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NEQ4RDczRjQwQUFDNTRGQTU0NzFDNDlEMUIwQjI2MDgyMTA4 NTk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvODREOEQ3M0Y0MEFBQzU0RkE1NDcxQzQ5RDFCMEIy NjA4MjEwODU5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlyfK6hsnoP/OkIe467hirM2JI9nTUWv8n/ ZZGJMAT7LMAHFSzt+xL8oJZCr4j8oosEWh+8fik+d0EoryKja5L5MiYIdTFprv3o J46Bp29S3YeHkUdAg6vcPzd3Io9xZn5qFqbAjvpDyL3QXfRgZAOYirKKjdIZFOlR Z1CeyWvYgZRIvVCyXdfcIIMJAhBfjaBt3mGn3SV4DUdscC85kbL/r5CLVnBORgNW zvMFXDv5VHaN5734CkN0r+Gn377Tz165r/IkEFZV291HRO+C2rWzBCzCNEOjWIar y4uUtaemn0w84KxYnOceLgxmsraf1/LAjbmK7BG0wWbfXRKUt2c= -----END CERTIFICATE-----Generated at Fri May 15 05:35:56 2026 by rpki-client