$ rpki-client -vvf rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft File: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft (raw, json) Hash identifier: U35vKGcszDfan46v91Ds5rhh2VQSJisy/4tO52lTaxk= Subject key identifier: DD:66:81:D1:9A:FA:0E:6E:BE:8A:11:95:93:49:2D:B0:F0:E2:1F:F0 Authority key identifier: 25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED Certificate issuer: /CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Certificate serial: 29EE405CD0199C8B0748128227B952DF0A54DD87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft Manifest number: 13 Signing time: Fri 15 May 2026 21:37:46 +0000 Manifest this update: Fri 15 May 2026 21:32:46 +0000 Manifest next update: Sat 16 May 2026 22:14:46 +0000 Files and hashes: 1: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: seLt9J4Omc3hnlGUE3OGC5XsPU9/YgeAHtEiSSm80kY=) 2: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl (hash: IQHCND9WYeV/40KCu0WPBpbb2nIbPt9jbgcZl5Fh5xQ=) 3: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: cfTJoIKD7v5E50NDw9RdyVoXvRV8kIdsxzrTBtYWbZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 22:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ee:40:5c:d0:19:9c:8b:07:48:12:82:27:b9:52:df:0a:54:dd:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Validity Not Before: May 15 21:32:46 2026 GMT Not After : May 16 22:14:46 2026 GMT Subject: CN=DD6681D19AFA0E6EBE8A119593492DB0F0E21FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e1:49:02:ac:a7:0b:78:d6:fd:69:a0:d2:d6: a4:92:93:d5:3e:8f:72:18:95:89:3c:75:bb:97:b1: 24:ea:94:34:8d:0c:9f:64:67:8c:75:4f:f4:47:ab: 73:ee:09:06:dd:40:b5:03:5d:a7:c4:c5:b1:85:ca: 33:d1:3e:24:e5:ff:3b:72:d6:1e:f1:70:82:8c:93: b2:dd:a6:45:8f:85:00:b3:86:b9:71:0e:7e:95:ad: 4d:ce:5c:41:1d:68:b4:55:7f:97:be:c7:13:0f:49: fd:18:90:8b:06:a8:8b:f0:39:7f:12:59:b1:81:c8: 5e:c3:fa:96:2a:7d:67:39:5d:98:c6:a6:ae:67:de: c1:42:28:20:42:b3:50:03:f7:42:38:88:c5:19:87: 66:a9:2c:da:90:46:fc:aa:f1:45:cb:b0:16:b9:9a: 4f:cc:83:98:1e:1c:f3:a9:35:8a:c5:4c:34:59:8f: e3:f3:75:da:24:ac:f3:c8:22:bb:f0:c1:56:5b:f5: 09:92:c1:41:ce:00:6e:7b:76:55:60:f6:d6:cf:4a: 95:1b:ab:01:da:db:c0:62:26:c6:d5:86:41:76:d5: e7:3a:d4:b7:8f:87:35:d7:24:3d:a7:a1:06:bf:42: 22:68:ae:a6:47:95:c0:af:3c:ae:f5:7c:03:f3:cd: a9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:66:81:D1:9A:FA:0E:6E:BE:8A:11:95:93:49:2D:B0:F0:E2:1F:F0 X509v3 Authority Key Identifier: keyid:25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7d:c3:e5:c0:bb:2b:ae:94:44:3f:a9:f0:41:65:27:31:10: af:62:07:b0:00:3a:91:dd:3e:78:22:16:7a:74:aa:70:3f:f9: 1e:71:7a:77:90:43:35:e2:f2:43:45:86:ca:7a:a0:eb:ff:8c: fe:9e:0d:ac:ec:f0:55:cf:b5:18:9a:39:c1:36:2b:21:c7:77: 2b:22:c4:ab:7e:3e:ea:07:a1:36:1f:52:c9:c0:5b:e4:25:0a: 55:33:d4:be:94:6b:73:39:13:07:a0:1e:05:ff:47:6b:6c:82: 9d:e6:df:99:19:9b:04:cd:e5:b4:56:0c:a5:07:a1:08:50:16: 45:bd:99:52:4f:58:64:c8:59:7f:73:4a:e6:59:fd:d2:da:80: 72:fa:28:03:40:2e:48:e5:66:cc:6f:78:84:21:f6:9b:86:c7: ff:37:94:57:7c:cd:32:72:48:ab:74:18:9a:75:13:5c:e8:83: 5b:7f:68:d1:77:6c:42:54:a2:c9:24:77:77:8f:b3:6c:a6:c2: 44:c1:7e:d7:db:ca:5c:36:64:b2:f2:23:97:7a:de:a1:f6:8c: 80:0a:d6:70:b4:f3:6c:17:49:6e:e4:c1:d8:cb:10:da:08:f6: 1c:f0:61:fc:cf:d9:53:bc:e3:80:1c:dc:7d:57:b6:b4:63:ea: 12:1c:3f:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKe5AXNAZnIsHSBKCJ7lS3wpU3YcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBD NDQ5NDZFRDAeFw0yNjA1MTUyMTMyNDZaFw0yNjA1MTYyMjE0NDZaMDMxMTAvBgNV BAMTKERENjY4MUQxOUFGQTBFNkVCRThBMTE5NTkzNDkyREIwRjBFMjFGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4UkCrKcLeNb9aaDS1qSSk9U+ j3IYlYk8dbuXsSTqlDSNDJ9kZ4x1T/RHq3PuCQbdQLUDXafExbGFyjPRPiTl/zty 1h7xcIKMk7LdpkWPhQCzhrlxDn6VrU3OXEEdaLRVf5e+xxMPSf0YkIsGqIvwOX8S WbGByF7D+pYqfWc5XZjGpq5n3sFCKCBCs1AD90I4iMUZh2apLNqQRvyq8UXLsBa5 mk/Mg5geHPOpNYrFTDRZj+PzddokrPPIIrvwwVZb9QmSwUHOAG57dlVg9tbPSpUb qwHa28BiJsbVhkF21ec61LePhzXXJD2noQa/QiJorqZHlcCvPK71fAPzzan7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3WaB0Zr6Dm6+ihGVk0ktsPDiH/AwHwYDVR0j BBgwFoAUJW4DvC8dpPkDHnHGgU0BkMRJRu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZmZGMyYjctZjMwNS00ZTA3LWFhYzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMy RjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBDNDQ5NDZFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTZFMDNCQzJGMURBNEY5MDMxRTcxQzY4MTREMDE5MEM0NDk0 NkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAx OTBDNDQ5NDZFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFp9w+XAuyuulEQ/qfBBZScxEK9iB7AAOpHd PngiFnp0qnA/+R5xeneQQzXi8kNFhsp6oOv/jP6eDazs8FXPtRiaOcE2KyHHdysi xKt+PuoHoTYfUsnAW+QlClUz1L6Ua3M5EwegHgX/R2tsgp3m35kZmwTN5bRWDKUH oQhQFkW9mVJPWGTIWX9zSuZZ/dLagHL6KANALkjlZsxveIQh9puGx/83lFd8zTJy SKt0GJp1E1zog1t/aNF3bEJUoskkd3ePs2ymwkTBftfbylw2ZLLyI5d63qH2jIAK 1nC082wXSW7kwdjLENoI9hzwYfzP2VO844Ac3H1XtrRj6hIcPxs= -----END CERTIFICATE-----Generated at Sat May 16 15:35:11 2026 by rpki-client