$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft File: 6410D3838A65954BC1C301FEAAE74108F878E75C.mft (raw, json) Hash identifier: OyBv0/jmD7d41h3THXOUPMwnUGsSqmApbMccjpBHDVY= Subject key identifier: 59:19:7E:5E:EC:B9:A3:70:9B:A5:6A:A5:3B:FB:A2:87:0A:B4:C8:35 Authority key identifier: 64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C Certificate issuer: /CN=6410D3838A65954BC1C301FEAAE74108F878E75C Certificate serial: 4017DBE409361734035CCFFF8371B8E51BD290D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft Manifest number: 08 Signing time: Thu 07 May 2026 16:49:35 +0000 Manifest this update: Thu 07 May 2026 16:44:35 +0000 Manifest next update: Fri 08 May 2026 19:57:35 +0000 Files and hashes: 1: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: siHi0awnODreiEbnqAhI8AHZuo2WqS1sqObBYj0LJNQ=) 2: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: GG33a17yz2RDoEPEoFrvhC4iEpkv62/10YGoTExBJ3g=) 3: 6410D3838A65954BC1C301FEAAE74108F878E75C.crl (hash: SimTJKAW91y9S9GnAOTVPx7JUGfMVr0D1gszx29jAcQ=) 4: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: uWmFLlX2vKr3w52aVaDh5ySgp7qWBvDwzZ9R+thGqi8=) 5: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: 4rIiP2ikG4W+wTINg+vbNqBPRf5CVJMTpgaAB7yIpvA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 19:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:17:db:e4:09:36:17:34:03:5c:cf:ff:83:71:b8:e5:1b:d2:90:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6410D3838A65954BC1C301FEAAE74108F878E75C Validity Not Before: May 7 16:44:35 2026 GMT Not After : May 8 19:57:35 2026 GMT Subject: CN=59197E5EECB9A3709BA56AA53BFBA2870AB4C835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:2e:5d:03:bc:be:8d:45:ee:6d:17:ff:e2: 0d:75:35:d9:8d:c3:8f:5e:36:a0:1e:8f:d0:03:bf: 85:4e:8e:bc:72:73:be:e6:72:4f:1f:85:0d:14:d1: aa:fa:cb:44:22:50:95:9e:7d:84:85:10:4a:84:eb: 4b:9f:e5:d4:a2:8e:0d:b0:01:09:45:00:1d:88:7b: e5:dc:14:36:93:93:97:c1:c2:d3:43:a0:7a:8f:07: 54:f7:21:a4:e2:5c:27:63:fd:4c:37:1e:24:5a:e4: e8:95:8e:34:75:ec:7f:8f:cb:88:0e:31:d2:98:dd: a8:b7:70:ca:d1:0b:e3:13:ef:82:2f:05:8b:86:44: 4a:d1:f6:9c:ca:7e:2f:d8:bc:9c:02:b5:aa:43:93: 70:aa:fa:69:80:fb:60:be:b0:bb:a1:16:2a:5d:9d: be:3e:9f:cd:f6:5b:03:36:a4:01:28:6c:a6:2c:df: f0:d0:e4:32:6a:93:eb:89:e0:8f:59:31:4b:d7:ab: c4:26:84:b1:75:12:66:83:2a:31:36:2f:8c:a0:bf: 70:ee:76:22:28:de:1c:05:a8:af:f2:f4:78:d1:bf: c8:0f:21:b1:c2:de:bb:4a:1c:ae:17:d9:43:60:52: e7:28:9e:a1:dd:a3:3a:45:b8:c8:0d:2f:a0:5e:01: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:19:7E:5E:EC:B9:A3:70:9B:A5:6A:A5:3B:FB:A2:87:0A:B4:C8:35 X509v3 Authority Key Identifier: keyid:64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:24:d7:56:7d:c6:1d:78:1a:2a:bf:0e:1a:20:4e:3c:0d:eb: 39:aa:76:ac:4c:24:1a:85:5c:c1:37:9b:e8:39:82:97:27:82: 99:05:ca:96:c6:57:f5:ed:9c:04:55:50:92:e4:d0:a6:a0:4f: fd:81:c5:d4:08:06:44:09:1a:70:fd:fa:4c:10:67:d1:d4:db: 89:ec:2a:00:3c:c8:04:8f:61:3c:f2:6f:03:29:2b:e6:2c:c0: d8:ff:42:05:c3:b7:a8:0b:fe:35:37:78:e6:51:75:52:f8:0b: 2a:57:4a:9e:98:e9:93:2c:3a:eb:30:ff:e6:b2:7c:83:ae:7b: e4:76:34:50:65:4b:f7:59:19:88:e8:0b:a7:8e:78:9e:a3:b4: 14:de:c4:2d:26:97:c6:a5:01:65:a2:62:68:6a:30:21:3f:92: d7:47:07:86:30:62:9f:ca:b9:72:26:23:3d:39:c0:0a:d3:3d: 04:70:30:2c:68:05:c2:23:4e:49:2a:0f:65:5e:da:f4:b0:d0: f7:84:9e:39:c6:df:56:7b:a2:8f:2d:3e:e0:70:14:50:ed:97: 9d:58:9e:1e:43:fa:5d:67:8d:90:da:c8:0f:68:fb:3e:47:3f: a3:49:72:60:e4:1c:1a:3d:dd:a4:5e:7d:33:ef:6a:1e:8a:7e: e3:41:96:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBfb5Ak2FzQDXM//g3G45RvSkNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhG ODc4RTc1QzAeFw0yNjA1MDcxNjQ0MzVaFw0yNjA1MDgxOTU3MzVaMDMxMTAvBgNV BAMTKDU5MTk3RTVFRUNCOUEzNzA5QkE1NkFBNTNCRkJBMjg3MEFCNEM4MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jC5dA7y+jUXubRf/4g11NdmN w49eNqAej9ADv4VOjrxyc77mck8fhQ0U0ar6y0QiUJWefYSFEEqE60uf5dSijg2w AQlFAB2Ie+XcFDaTk5fBwtNDoHqPB1T3IaTiXCdj/Uw3HiRa5OiVjjR17H+Py4gO MdKY3ai3cMrRC+MT74IvBYuGRErR9pzKfi/YvJwCtapDk3Cq+mmA+2C+sLuhFipd nb4+n832WwM2pAEobKYs3/DQ5DJqk+uJ4I9ZMUvXq8QmhLF1EmaDKjE2L4ygv3Du diIo3hwFqK/y9HjRv8gPIbHC3rtKHK4X2UNgUuconqHdozpFuMgNL6BeAQzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWRl+Xuy5o3CbpWqlO/uihwq0yDUwHwYDVR0j BBgwFoAUZBDTg4pllUvBwwH+qudBCPh451wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVkOTU1YzgtZTZkMy00OWMyLWFiZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4 QTY1OTU0QkMxQzMwMUZFQUFFNzQxMDhGODc4RTc1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDEwRDM4MzhBNjU5NTRCQzFDMzAxRkVBQUU3NDEwOEY4NzhF NzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvNjQxMEQzODM4QTY1OTU0QkMxQzMwMUZFQUFFNzQx MDhGODc4RTc1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsk11Z9xh14Giq/DhogTjwN6zmqdqxMJBqF XME3m+g5gpcngpkFypbGV/XtnARVUJLk0KagT/2BxdQIBkQJGnD9+kwQZ9HU24ns KgA8yASPYTzybwMpK+YswNj/QgXDt6gL/jU3eOZRdVL4CypXSp6Y6ZMsOusw/+ay fIOue+R2NFBlS/dZGYjoC6eOeJ6jtBTexC0ml8alAWWiYmhqMCE/ktdHB4YwYp/K uXImIz05wArTPQRwMCxoBcIjTkkqD2Ve2vSw0PeEnjnG31Z7oo8tPuBwFFDtl51Y nh5D+l1njZDayA9o+z5HP6NJcmDkHBo93aRefTPvah6KfuNBlko= -----END CERTIFICATE-----Generated at Fri May 8 07:24:07 2026 by rpki-client