$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft File: D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft (raw, json) Hash identifier: 64gwdYlpF3aPGDvnJzVMGdes/eBUgl/eRBXRNGNZVCs= Subject key identifier: 70:68:77:DC:1E:21:98:27:45:FA:D8:EB:D0:57:16:36:0F:4E:64:44 Authority key identifier: D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB Certificate issuer: /CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Certificate serial: 4305BF372926EE46D7A010B3DB3802AA6808BC3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft Manifest number: 13 Signing time: Sat 16 May 2026 03:50:45 +0000 Manifest this update: Sat 16 May 2026 03:45:45 +0000 Manifest next update: Sun 17 May 2026 07:16:45 +0000 Files and hashes: 1: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: /Ank/NdhTyFolT1yr2gOxvp0mx0tj8KaBVOQP4gcAxk=) 2: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: byftjSeCvMFNmeFpkuYeG9YZa2VCV2p6nFeWhRr4XHM=) 3: D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl (hash: cwDb87+CD8IaaWKzhXGT6SaNmDJMHB9QvwTRBV9y0dE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 07:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:05:bf:37:29:26:ee:46:d7:a0:10:b3:db:38:02:aa:68:08:bc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Validity Not Before: May 16 03:45:45 2026 GMT Not After : May 17 07:16:45 2026 GMT Subject: CN=706877DC1E21982745FAD8EBD05716360F4E6444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:af:0b:3e:39:80:27:f1:02:ab:be:c2:9c:26: 3b:96:51:df:11:2c:cd:9e:71:8b:a3:44:bb:75:b5: dd:81:75:6f:3d:0b:50:f7:aa:91:72:88:ed:93:ab: 85:59:f7:1e:fa:5f:17:c1:89:5b:1d:e2:4e:79:c8: 4d:cb:1b:63:7c:26:35:c7:70:26:cb:00:b2:74:f8: ee:31:d4:a9:e6:00:3d:ec:be:90:c6:04:1f:01:3d: 40:c5:ed:a0:c5:d2:20:c6:27:11:68:d5:12:14:5d: e6:c2:ab:5c:00:35:3a:26:8d:93:6b:1a:74:80:07: 98:96:55:9b:49:6c:b5:cc:40:e3:07:3d:d8:6e:35: 18:25:5e:c4:1f:28:ff:40:62:6a:9d:5a:ac:20:e7: b8:a5:40:79:6f:92:fa:16:ab:30:ba:e3:ad:9d:cb: c9:ad:7c:09:af:12:8d:bb:ba:a7:75:b9:89:75:77: 12:fa:9d:a6:c3:0d:65:5c:7e:f5:8f:33:f9:55:3b: 53:4e:5e:a9:de:37:fe:29:65:b7:9d:2f:30:95:38: 9a:55:2e:22:e2:f0:a3:51:a6:ea:18:e3:70:d8:c3: ed:41:fd:d7:c6:0d:ea:84:e7:83:39:14:f9:a9:83: 92:cc:c8:e9:1b:72:ce:fa:57:0a:c5:e4:27:c9:01: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:68:77:DC:1E:21:98:27:45:FA:D8:EB:D0:57:16:36:0F:4E:64:44 X509v3 Authority Key Identifier: keyid:D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5e:96:f7:94:f6:21:77:5a:25:6b:d5:a6:52:8c:d2:25:12: a5:dc:d1:7a:ae:d1:91:28:08:1b:72:7b:2a:43:0a:39:e6:91: eb:37:d3:04:71:46:48:c1:d0:1d:d7:29:b8:25:bb:85:dd:f5: e0:87:78:b1:d5:f7:42:9f:25:4c:16:34:e0:e2:99:4e:01:58: 42:b7:55:ef:6a:1e:ce:63:0c:2b:73:17:8c:8e:91:37:4a:eb: 73:6e:da:2b:48:10:a8:e7:a4:67:e3:d8:4b:d2:83:7a:89:ec: f8:ea:3b:57:8b:0a:94:e2:ec:9d:58:b6:6b:17:8d:76:48:03: d2:74:4e:54:28:cd:15:c6:8c:ad:58:a7:f9:51:d2:f7:d4:68: 6c:73:84:2d:a1:23:a6:e0:d3:d3:ea:d8:21:c1:f9:75:05:5a: 17:66:fa:d2:18:f9:e8:ba:58:8b:f8:61:15:ee:e8:56:76:3b: 0b:0d:36:17:da:3f:a9:c8:01:e8:b4:74:7f:75:e1:22:3e:89: 23:fb:2b:ea:df:cc:19:4e:99:93:b7:72:71:20:fe:a9:52:4f: eb:04:fc:23:bb:77:49:59:d4:c8:1b:2d:39:c8:6f:92:17:d1: 55:a8:64:21:39:50:d5:95:e7:80:20:5a:25:c5:34:3f:f4:d5: d1:a3:e4:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQwW/Nykm7kbXoBCz2zgCqmgIvD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFFRkIy MzE4NEZFQjAeFw0yNjA1MTYwMzQ1NDVaFw0yNjA1MTcwNzE2NDVaMDMxMTAvBgNV BAMTKDcwNjg3N0RDMUUyMTk4Mjc0NUZBRDhFQkQwNTcxNjM2MEY0RTY0NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQrws+OYAn8QKrvsKcJjuWUd8R LM2ecYujRLt1td2BdW89C1D3qpFyiO2Tq4VZ9x76XxfBiVsd4k55yE3LG2N8JjXH cCbLALJ0+O4x1KnmAD3svpDGBB8BPUDF7aDF0iDGJxFo1RIUXebCq1wANTomjZNr GnSAB5iWVZtJbLXMQOMHPdhuNRglXsQfKP9AYmqdWqwg57ilQHlvkvoWqzC6462d y8mtfAmvEo27uqd1uYl1dxL6nabDDWVcfvWPM/lVO1NOXqneN/4pZbedLzCVOJpV LiLi8KNRpuoY43DYw+1B/dfGDeqE54M5FPmpg5LMyOkbcs76VwrF5CfJATuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcGh33B4hmCdF+tjr0FcWNg9OZEQwHwYDVR0j BBgwFoAU036esvmOKc3xOGUzJmau+yMYT+swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlNWZmODEtYjA4Mi00MzM0LWFkMjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJG OThFMjlDREYxMzg2NTMzMjY2NkFFRkIyMzE4NEZFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMzdFOUVCMkY5OEUyOUNERjEzODY1MzMyNjY2QUVGQjIzMTg0 RkVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFF RkIyMzE4NEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9elveU9iF3WiVr1aZSjNIlEqXc0Xqu0ZEo CBtyeypDCjnmkes30wRxRkjB0B3XKbglu4Xd9eCHeLHV90KfJUwWNODimU4BWEK3 Ve9qHs5jDCtzF4yOkTdK63Nu2itIEKjnpGfj2EvSg3qJ7PjqO1eLCpTi7J1YtmsX jXZIA9J0TlQozRXGjK1Yp/lR0vfUaGxzhC2hI6bg09Pq2CHB+XUFWhdm+tIY+ei6 WIv4YRXu6FZ2OwsNNhfaP6nIAei0dH914SI+iSP7K+rfzBlOmZO3cnEg/qlST+sE /CO7d0lZ1MgbLTnIb5IX0VWoZCE5UNWV54AgWiXFND/01dGj5Bo= -----END CERTIFICATE-----Generated at Sat May 16 15:35:11 2026 by rpki-client