$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft File: 1F3B2D12BD297463BA7717F257A40F73DE290B89.mft (raw, json) Hash identifier: goYQxlMRckJlCvGE8e5d/hVWnqk/imLUKnU8Ns7myro= Subject key identifier: 40:E7:61:83:40:6C:76:B1:5B:D1:9E:14:7E:DA:A8:8C:9C:6C:D2:11 Authority key identifier: 1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89 Certificate issuer: /CN=1F3B2D12BD297463BA7717F257A40F73DE290B89 Certificate serial: 01BB185959EC8C3002DE78475130170D2EF4095E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft Manifest number: 14 Signing time: Sat 16 May 2026 11:07:21 +0000 Manifest this update: Sat 16 May 2026 11:02:21 +0000 Manifest next update: Sun 17 May 2026 12:14:21 +0000 Files and hashes: 1: 1F3B2D12BD297463BA7717F257A40F73DE290B89.crl (hash: RFnKrJkF2a9ynlFq/nYRdAbTNvRjnJ4Qb81UFZkY+RE=) 2: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: VTF9DKsDDs5XXBhLFlLnAOGE0dR7pXYnN3FimbyGZt4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:bb:18:59:59:ec:8c:30:02:de:78:47:51:30:17:0d:2e:f4:09:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F3B2D12BD297463BA7717F257A40F73DE290B89 Validity Not Before: May 16 11:02:21 2026 GMT Not After : May 17 12:14:21 2026 GMT Subject: CN=40E76183406C76B15BD19E147EDAA88C9C6CD211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:84:f2:3e:c6:cc:b8:17:38:92:32:9c:4a:8d: 96:4e:d0:4f:a8:71:9a:69:33:24:bc:1e:2f:c8:62: ab:f5:56:dd:5a:63:01:b9:58:ac:67:ff:db:df:2c: 04:82:ed:8c:45:84:74:e3:13:cf:3d:b3:00:97:ff: 93:a1:60:5d:0d:39:06:2a:c0:31:5a:2d:7e:c9:26: 04:a5:ae:d1:35:c6:c1:ad:e4:26:9d:f2:bf:45:66: 2a:4d:0c:17:9a:7b:92:7c:07:81:0a:95:a6:be:ff: 1e:6f:cf:f8:15:3b:a0:78:d5:0b:90:b1:b8:48:0c: 54:f9:5b:eb:51:8c:bd:6a:6c:c0:43:35:b0:72:dd: 06:4f:57:9c:97:ec:25:11:71:04:57:5c:b1:2d:4a: 64:dc:38:71:85:2c:52:91:a4:a3:a0:c7:4f:18:60: f5:3c:b7:ea:19:6b:4e:a5:75:62:6a:47:aa:7b:4e: 9f:b4:be:77:b1:89:8b:a1:98:83:c6:c4:c9:3d:5c: e1:38:5d:5a:d9:23:44:e5:b4:78:9a:b2:c4:8e:44: 81:40:ac:f1:c5:6d:91:a8:7b:c5:32:4e:29:f1:22: 08:43:69:fd:3f:c4:73:d4:2e:11:2e:46:da:4f:c4: a5:70:6d:a1:24:81:5f:3e:26:15:9f:89:4b:ce:d5: f6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E7:61:83:40:6C:76:B1:5B:D1:9E:14:7E:DA:A8:8C:9C:6C:D2:11 X509v3 Authority Key Identifier: keyid:1F:3B:2D:12:BD:29:74:63:BA:77:17:F2:57:A4:0F:73:DE:29:0B:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F3B2D12BD297463BA7717F257A40F73DE290B89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/1F3B2D12BD297463BA7717F257A40F73DE290B89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:be:05:15:51:d0:10:37:fe:ad:4d:8b:fc:21:6b:c5:bc:1b: 18:d6:61:2b:cf:95:49:39:49:bb:0e:db:78:08:25:df:71:e2: 07:46:81:da:f9:3f:6b:59:94:ae:eb:47:32:a2:70:73:b3:30: 62:90:33:13:5a:89:97:2d:03:d5:41:7b:62:68:64:f8:b1:83: d6:85:7a:2c:93:dd:8b:b1:80:90:ef:aa:49:ea:86:64:c6:73: 56:f1:de:74:5e:2b:14:95:75:72:26:f0:4c:f6:2d:0d:d3:50: b5:c5:56:77:01:82:d5:0c:b6:36:10:44:cb:b3:55:5e:95:02: 4d:8d:2c:9b:32:8e:c8:f9:e3:47:e7:0a:6a:24:bd:f8:71:b7: 39:d5:70:97:9f:18:9b:b7:a8:d0:c8:99:59:5e:30:75:5e:55: e0:ae:f8:28:09:1e:23:01:9d:08:39:82:b5:bb:a5:d5:2f:ee: 05:cb:72:8e:c0:51:09:6f:5e:7f:a2:8d:ad:a8:99:3f:1a:cd: b0:c0:46:a4:a1:de:f1:ae:53:c6:9d:ac:43:34:cf:b9:0c:fa: ed:76:6d:8c:82:da:04:8a:ab:14:83:84:35:03:c6:4d:49:be: ac:e3:82:b7:fd:c4:ef:57:6e:bd:2c:de:cf:34:d6:10:49:a8: 63:f5:88:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAbsYWVnsjDAC3nhHUTAXDS70CV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYzQjJEMTJCRDI5NzQ2M0JBNzcxN0YyNTdBNDBGNzNE RTI5MEI4OTAeFw0yNjA1MTYxMTAyMjFaFw0yNjA1MTcxMjE0MjFaMDMxMTAvBgNV BAMTKDQwRTc2MTgzNDA2Qzc2QjE1QkQxOUUxNDdFREFBODhDOUM2Q0QyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhPI+xsy4FziSMpxKjZZO0E+o cZppMyS8Hi/IYqv1Vt1aYwG5WKxn/9vfLASC7YxFhHTjE889swCX/5OhYF0NOQYq wDFaLX7JJgSlrtE1xsGt5Cad8r9FZipNDBeae5J8B4EKlaa+/x5vz/gVO6B41QuQ sbhIDFT5W+tRjL1qbMBDNbBy3QZPV5yX7CURcQRXXLEtSmTcOHGFLFKRpKOgx08Y YPU8t+oZa06ldWJqR6p7Tp+0vnexiYuhmIPGxMk9XOE4XVrZI0TltHiassSORIFA rPHFbZGoe8UyTinxIghDaf0/xHPULhEuRtpPxKVwbaEkgV8+JhWfiUvO1fZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQOdhg0BsdrFb0Z4UftqojJxs0hEwHwYDVR0j BBgwFoAUHzstEr0pdGO6dxfyV6QPc94pC4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUyY2FjY2YtMzI3ZS00MmJkLTliMzEtMGE4NzNkMmU2NjkyLzAvMUYzQjJEMTJC RDI5NzQ2M0JBNzcxN0YyNTdBNDBGNzNERTI5MEI4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRjNCMkQxMkJEMjk3NDYzQkE3NzE3RjI1N0E0MEY3M0RFMjkw Qjg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvMUYzQjJEMTJCRDI5NzQ2M0JBNzcxN0YyNTdBNDBG NzNERTI5MEI4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOy+BRVR0BA3/q1Ni/wha8W8GxjWYSvPlUk5 SbsO23gIJd9x4gdGgdr5P2tZlK7rRzKicHOzMGKQMxNaiZctA9VBe2JoZPixg9aF eiyT3YuxgJDvqknqhmTGc1bx3nReKxSVdXIm8Ez2LQ3TULXFVncBgtUMtjYQRMuz VV6VAk2NLJsyjsj540fnCmokvfhxtznVcJefGJu3qNDImVleMHVeVeCu+CgJHiMB nQg5grW7pdUv7gXLco7AUQlvXn+ija2omT8azbDARqSh3vGuU8adrEM0z7kM+u12 bYyC2gSKqxSDhDUDxk1Jvqzjgrf9xO9Xbr0s3s801hBJqGP1iPk= -----END CERTIFICATE-----Generated at Sat May 16 16:40:35 2026 by rpki-client