$ rpki-client -vvf rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft File: C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft (raw, json) Hash identifier: TYniI3RBVkinCK4TXyzWQ6WY0CbFnRdDV5k+M6s9XJ0= Subject key identifier: C5:1D:55:AF:F9:F1:EA:AF:DD:24:25:48:3F:84:FF:4E:18:0C:9B:C1 Authority key identifier: C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B Certificate issuer: /CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B Certificate serial: 34ADDC68AA9456A94323843AA72D6EB2BBD18BCE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft Manifest number: 08 Signing time: Thu 07 May 2026 18:06:53 +0000 Manifest this update: Thu 07 May 2026 18:01:53 +0000 Manifest next update: Fri 08 May 2026 18:43:53 +0000 Files and hashes: 1: C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl (hash: rZvIYedMp4ThDCcrORKRzlmDgi6uZveRZmK7o0CXhYs=) 2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: /TEOvHICrNlzqHKdTSQimWH4eZASaMfqjyKyEfSs2B4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 18:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ad:dc:68:aa:94:56:a9:43:23:84:3a:a7:2d:6e:b2:bb:d1:8b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B Validity Not Before: May 7 18:01:53 2026 GMT Not After : May 8 18:43:53 2026 GMT Subject: CN=C51D55AFF9F1EAAFDD2425483F84FF4E180C9BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:83:ce:75:9c:55:dc:2d:7c:54:86:16:4e:91: 5a:e4:34:ab:6d:7f:a9:d5:21:a7:01:0d:9e:37:1f: 1a:11:7d:1c:20:26:94:f2:bf:51:a5:48:ca:d5:c0: 85:e2:2f:4f:b6:71:7d:54:4a:37:96:b1:0b:ed:6a: a5:5e:4c:d2:37:ea:f6:bf:9e:f5:9a:c2:0f:f7:f9: 0c:bb:4a:72:2d:c6:8e:d3:e5:61:e3:14:67:4c:41: 6c:2e:85:6c:e1:8b:e9:69:16:5a:34:60:54:ae:d1: d3:e6:19:6a:20:36:a3:df:59:73:eb:99:a6:58:46: 51:57:37:2b:b2:92:8e:a8:5e:08:0d:99:f1:d5:44: 8b:d1:28:f3:31:eb:9f:22:d0:df:80:7b:33:13:0c: 1c:78:ee:0a:ef:1b:d3:a6:45:97:70:5a:14:d3:71: 14:b7:93:78:71:48:40:c1:1c:a0:d8:0d:30:99:f6: 07:39:7d:ed:09:f7:5d:4d:23:a4:ad:3e:50:a7:cc: d3:5e:c0:ec:af:b8:75:d5:4b:78:ff:83:69:74:c3: 98:ad:89:f5:26:fb:29:0c:6a:79:dd:61:91:c0:31: f5:a7:13:d5:df:6e:d9:60:c6:b3:df:19:81:81:59: a7:81:13:38:bf:45:38:89:c1:cf:ee:6c:11:c8:51: e8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1D:55:AF:F9:F1:EA:AF:DD:24:25:48:3F:84:FF:4E:18:0C:9B:C1 X509v3 Authority Key Identifier: keyid:C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7b:b5:d1:d8:b7:5b:a1:b4:35:c9:f0:4e:66:fe:2b:d6:69: 25:a6:cc:1d:48:7a:04:3f:de:11:ed:a0:82:ea:02:01:22:79: 4e:a0:7c:eb:58:0f:0d:b6:bd:a3:cc:43:9f:99:74:f4:ca:1b: a7:a8:e0:15:09:23:79:7f:48:1c:cc:fd:c9:ac:3a:74:93:dd: b4:f9:df:9b:d6:80:3d:65:d5:8a:d6:34:da:9f:1a:78:a2:0e: 26:45:34:44:0f:bf:35:14:9a:b1:b0:c9:21:c5:ee:10:76:12: 99:18:36:e1:36:27:0f:ae:81:5f:20:83:0c:2f:3b:8f:85:6f: 7b:f8:ad:eb:51:a1:07:e2:71:30:cb:9f:d3:b1:31:a0:aa:f8: e4:c9:fa:c7:50:8f:64:56:98:de:ea:ed:34:33:e0:7d:68:c2: 94:2b:67:79:e2:5c:cd:96:c3:52:7a:36:42:7b:4f:d6:ac:71: 0a:01:76:c5:18:95:43:1b:4d:c0:1b:e1:c3:80:b6:08:29:48: a3:f3:9d:f6:09:e6:c5:9c:b0:3a:99:c5:32:cb:0f:1e:0b:d0: e8:64:f9:c3:22:83:8a:83:37:de:5f:a9:03:44:f7:bf:ec:7b: a9:0b:5d:16:1c:26:fe:41:c0:70:07:14:1e:f9:59:e0:e9:eb: bc:e8:d4:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNK3caKqUVqlDI4Q6py1usrvRi84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NUVGODZDM0VFRDM2NDZCMjZEREE3MTc5NTJDREJD MUFGOTM4QjAeFw0yNjA1MDcxODAxNTNaFw0yNjA1MDgxODQzNTNaMDMxMTAvBgNV BAMTKEM1MUQ1NUFGRjlGMUVBQUZERDI0MjU0ODNGODRGRjRFMTgwQzlCQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXg851nFXcLXxUhhZOkVrkNKtt f6nVIacBDZ43HxoRfRwgJpTyv1GlSMrVwIXiL0+2cX1USjeWsQvtaqVeTNI36va/ nvWawg/3+Qy7SnItxo7T5WHjFGdMQWwuhWzhi+lpFlo0YFSu0dPmGWogNqPfWXPr maZYRlFXNyuyko6oXggNmfHVRIvRKPMx658i0N+AezMTDBx47grvG9OmRZdwWhTT cRS3k3hxSEDBHKDYDTCZ9gc5fe0J911NI6StPlCnzNNewOyvuHXVS3j/g2l0w5it ifUm+ykManndYZHAMfWnE9XfbtlgxrPfGYGBWaeBEzi/RTiJwc/ubBHIUegXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxR1Vr/nx6q/dJCVIP4T/ThgMm8EwHwYDVR0j BBgwFoAUxoXvhsPu02RrJt2nF5Us28Gvk4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3ZTViMGUtNTk2NC00NjNmLTgwNDEtMzM3ZjgwNTU2NDNjLzAvQzY4NUVGODZD M0VFRDM2NDZCMjZEREE3MTc5NTJDREJDMUFGOTM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg1RUY4NkMzRUVEMzY0NkIyNkREQTcxNzk1MkNEQkMxQUY5 MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvQzY4NUVGODZDM0VFRDM2NDZCMjZEREE3MTc5NTJD REJDMUFGOTM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH97tdHYt1uhtDXJ8E5m/ivWaSWmzB1IegQ/ 3hHtoILqAgEieU6gfOtYDw22vaPMQ5+ZdPTKG6eo4BUJI3l/SBzM/cmsOnST3bT5 35vWgD1l1YrWNNqfGniiDiZFNEQPvzUUmrGwySHF7hB2EpkYNuE2Jw+ugV8ggwwv O4+Fb3v4retRoQficTDLn9OxMaCq+OTJ+sdQj2RWmN7q7TQz4H1owpQrZ3niXM2W w1J6NkJ7T9ascQoBdsUYlUMbTcAb4cOAtggpSKPznfYJ5sWcsDqZxTLLDx4L0Ohk +cMig4qDN95fqQNE97/se6kLXRYcJv5BwHAHFB75WeDp67zo1KA= -----END CERTIFICATE-----Generated at Fri May 8 07:34:32 2026 by rpki-client