$ rpki-client -vvf rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft File: D341D8EA81805778BAF0FC25804627AB205A595B.mft (raw, json) Hash identifier: se0pSiLYRe7LsE5EYrFuRyUqQGtq9RRR1qNbJXNwXQQ= Subject key identifier: B4:55:EC:0C:4B:2D:06:90:25:8B:3D:60:78:AC:7F:C6:DF:1C:16:B0 Authority key identifier: D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B Certificate issuer: /CN=D341D8EA81805778BAF0FC25804627AB205A595B Certificate serial: 68CE846AFE8D8DEA1A4AF752C38B27EBEE606192 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft Manifest number: 05 Signing time: Tue 05 May 2026 06:55:31 +0000 Manifest this update: Tue 05 May 2026 06:50:31 +0000 Manifest next update: Wed 06 May 2026 07:58:31 +0000 Files and hashes: 1: D341D8EA81805778BAF0FC25804627AB205A595B.crl (hash: J6co2bKkzPutbBUF5Z4HxYPXtdmIip7SvGPAUJlPz1g=) 2: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: xc3Q1ltrywVJe3y21qqPN5TWdfqkKkKR0OL3qOrG5oc=) 3: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 9bLzC5cJz/hB1T6TsZaVOeXIoTd9norVTABcvOz2X24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 07:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ce:84:6a:fe:8d:8d:ea:1a:4a:f7:52:c3:8b:27:eb:ee:60:61:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D341D8EA81805778BAF0FC25804627AB205A595B Validity Not Before: May 5 06:50:31 2026 GMT Not After : May 6 07:58:31 2026 GMT Subject: CN=B455EC0C4B2D0690258B3D6078AC7FC6DF1C16B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e6:20:5e:7c:e6:c3:be:00:4c:f5:97:70:e5: 8c:f0:f8:42:12:91:32:95:7e:68:38:0b:49:fe:22: 12:89:18:7b:e9:41:f4:7b:a9:4a:ea:9c:9b:96:8b: 59:e5:ab:0c:44:30:0c:93:0a:7d:4b:94:8d:a5:63: 95:9e:1d:d8:ce:da:e7:09:8f:04:ec:2a:cf:5b:a9: c9:c8:95:be:24:e4:38:e6:08:d1:a3:7d:0c:07:f8: c0:31:d1:3f:3b:74:dd:0f:87:aa:21:13:61:43:cb: cb:05:0b:0c:f7:ec:84:d6:e7:3a:51:e6:27:f9:d8: f2:fc:9b:2c:6e:c7:74:97:d4:89:91:84:ed:a2:f1: e6:9c:90:60:73:c2:cb:0a:7c:c6:56:c6:b6:db:15: e8:86:75:ac:9c:c1:17:58:9e:a7:8f:f9:bb:fb:ce: fb:99:60:da:af:30:e1:07:d2:f7:c6:66:48:68:00: e4:62:16:70:fe:f0:93:6e:06:10:c5:d0:75:0a:18: 81:7a:a8:d6:9c:a7:6d:dc:4b:28:ab:4b:a6:08:ff: f5:9a:ee:90:ca:73:ec:e0:d2:f9:d0:c6:8d:be:be: 06:6a:90:52:ca:42:c8:69:33:1a:d4:0f:b5:24:7c: c1:4a:72:9d:fc:42:18:d9:d3:c5:39:61:d3:a5:ac: 61:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:55:EC:0C:4B:2D:06:90:25:8B:3D:60:78:AC:7F:C6:DF:1C:16:B0 X509v3 Authority Key Identifier: keyid:D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:de:ab:bd:1b:75:7a:51:7c:1f:b4:a9:28:0f:91:ce:93:f9: 08:79:42:0f:d5:f3:51:3f:a2:5b:83:bf:bc:c4:61:0a:07:f1: 40:22:77:39:79:bb:0e:cb:21:60:ca:43:f8:3a:bc:48:da:35: a4:ba:46:af:9e:d8:ad:df:4f:14:57:be:b9:2d:ea:ab:cb:ec: c9:e9:75:63:15:3a:77:81:63:6a:2a:b8:df:90:5d:2a:34:65: d9:3d:33:65:8c:d4:5c:34:a8:c6:70:bf:cf:f8:f2:21:5f:72: 54:97:89:33:76:12:61:96:5d:38:79:f4:5f:8c:47:46:57:50: b2:fb:74:bc:5c:62:4c:d4:60:7c:ad:33:2a:bb:c9:86:b4:4b: c8:24:7b:48:ad:7d:64:4a:12:20:e6:91:2e:89:a2:ce:db:eb: 25:46:1e:95:23:c1:34:fd:a6:0b:a6:75:cf:e6:23:8e:46:b9: 12:c8:0f:93:c6:bb:41:91:47:17:81:a3:45:66:e0:9f:e2:ce: 6c:aa:60:fd:0b:5b:71:5a:77:38:12:7e:be:ca:09:3c:cb:47: 9c:e6:d5:17:f0:5e:f6:ef:d3:24:da:98:de:5a:c2:66:bb:a2: 77:f5:cc:24:d3:9a:59:bb:b4:44:0d:12:af:bb:fc:ee:34:a2: e6:58:79:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaM6Eav6NjeoaSvdSw4sn6+5gYZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIy MDVBNTk1QjAeFw0yNjA1MDUwNjUwMzFaFw0yNjA1MDYwNzU4MzFaMDMxMTAvBgNV BAMTKEI0NTVFQzBDNEIyRDA2OTAyNThCM0Q2MDc4QUM3RkM2REYxQzE2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD65iBefObDvgBM9Zdw5Yzw+EIS kTKVfmg4C0n+IhKJGHvpQfR7qUrqnJuWi1nlqwxEMAyTCn1LlI2lY5WeHdjO2ucJ jwTsKs9bqcnIlb4k5DjmCNGjfQwH+MAx0T87dN0Ph6ohE2FDy8sFCwz37ITW5zpR 5if52PL8myxux3SX1ImRhO2i8eackGBzwssKfMZWxrbbFeiGdaycwRdYnqeP+bv7 zvuZYNqvMOEH0vfGZkhoAORiFnD+8JNuBhDF0HUKGIF6qNacp23cSyirS6YI//Wa 7pDKc+zg0vnQxo2+vgZqkFLKQshpMxrUD7UkfMFKcp38QhjZ08U5YdOlrGHnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtFXsDEstBpAliz1geKx/xt8cFrAwHwYDVR0j BBgwFoAU00HY6oGAV3i68PwlgEYnqyBaWVswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDlhOWU4MzUtZjNhMS00YzM2LWI0N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4 MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIyMDVBNTk1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzQxRDhFQTgxODA1Nzc4QkFGMEZDMjU4MDQ2MjdBQjIwNUE1 OTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3 QUIyMDVBNTk1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHeq70bdXpRfB+0qSgPkc6T+Qh5Qg/V81E/ oluDv7zEYQoH8UAidzl5uw7LIWDKQ/g6vEjaNaS6Rq+e2K3fTxRXvrkt6qvL7Mnp dWMVOneBY2oquN+QXSo0Zdk9M2WM1Fw0qMZwv8/48iFfclSXiTN2EmGWXTh59F+M R0ZXULL7dLxcYkzUYHytMyq7yYa0S8gke0itfWRKEiDmkS6Jos7b6yVGHpUjwTT9 pgumdc/mI45GuRLID5PGu0GRRxeBo0Vm4J/izmyqYP0LW3FadzgSfr7KCTzLR5zm 1RfwXvbv0yTamN5awma7onf1zCTTmlm7tEQNEq+7/O40ouZYeYo= -----END CERTIFICATE-----Generated at Tue May 5 14:20:15 2026 by rpki-client