$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft File: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft (raw, json) Hash identifier: U5h5vbav6wEbIyA9Pz2NSIetZ4prxzitxGASljN+7EY= Subject key identifier: B4:49:CE:33:9C:C0:F5:0A:85:C3:6A:1D:EF:5A:9D:A0:05:31:54:6D Authority key identifier: D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 Certificate issuer: /CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Certificate serial: 73C9E9E1C4D867705E491B49DEC4964005604BC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft Manifest number: 11 Signing time: Thu 14 May 2026 02:18:43 +0000 Manifest this update: Thu 14 May 2026 02:13:43 +0000 Manifest next update: Fri 15 May 2026 04:37:43 +0000 Files and hashes: 1: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl (hash: giYNU8aHRz1bO/SngZ02sJonQz67bNm61gBCORjSTI8=) 2: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: W9kmi6fSD3hfpz6c4ipA4kZ2ayaTmTarwmo8qVkL32c=) 3: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: APyKoi1ZG2HKYN+LmPQKEKUBYkJq8d16Zc9c2T01Unc=) 4: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: pd6OjyzAAcK8uT6naV7NfTNnsjqGHMwbU9/DgsoTtzo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 03:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c9:e9:e1:c4:d8:67:70:5e:49:1b:49:de:c4:96:40:05:60:4b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Validity Not Before: May 14 02:13:43 2026 GMT Not After : May 15 04:37:43 2026 GMT Subject: CN=B449CE339CC0F50A85C36A1DEF5A9DA00531546D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c6:96:cc:66:5c:bb:d9:d0:2b:79:9c:be:68: fa:5d:cf:22:03:bf:c9:ff:c5:06:3e:34:79:fe:24: 9a:52:be:fc:9d:70:97:1c:0f:86:4c:fa:24:dc:f8: 6a:79:fd:64:1f:0c:05:79:a8:34:07:c4:e5:e0:85: be:29:43:de:15:5d:34:ae:46:43:86:0d:e5:35:c3: 24:79:10:99:5d:33:87:c3:97:4e:45:36:c1:dc:50: 59:c1:85:8c:3c:7d:a7:23:93:7c:92:42:a8:1b:2c: 56:6e:86:a5:43:31:b6:6c:4f:1b:5d:88:e6:a9:1e: a7:3d:3f:6d:4d:26:d9:77:6f:92:d4:ab:67:eb:72: 1f:7a:a8:b8:e0:a9:57:cc:d5:ec:ff:02:65:82:d4: 45:27:f8:74:53:d1:75:e0:6d:a4:10:3a:32:ad:fe: 5f:2d:d7:89:54:2e:88:32:46:e3:b1:5d:53:cd:9a: 41:bd:76:c8:eb:b1:d7:f4:12:a9:29:41:4c:95:09: d3:89:eb:e4:d7:3c:6e:2c:d5:c6:6a:d1:7f:be:72: a9:ec:42:41:bb:6a:ac:de:85:53:07:50:ae:1e:9d: a7:98:53:e1:a9:dc:ef:f5:fd:85:a3:e7:04:b0:3f: b3:ca:d0:98:ac:14:3b:af:77:ba:e5:ef:ab:f3:7c: 99:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:49:CE:33:9C:C0:F5:0A:85:C3:6A:1D:EF:5A:9D:A0:05:31:54:6D X509v3 Authority Key Identifier: keyid:D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:64:25:4d:8d:a7:23:65:02:39:ec:11:d5:1a:1e:86:96:13: b7:f2:4a:fc:4b:02:c3:7c:f4:56:2b:6c:3d:a2:56:90:eb:96: 98:5d:42:38:f1:32:16:03:bd:2d:4d:ba:a9:77:c5:a4:24:a7: 0f:7d:8e:1d:74:f6:78:56:7c:49:cf:86:22:79:0b:75:1a:58: f9:64:b3:94:c5:8c:2c:69:2c:04:fd:11:72:1b:fb:86:e0:fb: b1:50:b1:9d:c6:2b:b3:0e:43:e4:76:30:92:db:8d:a1:6b:81: 2a:2f:40:13:1d:ac:01:50:8c:9b:7e:77:bc:95:bf:86:f7:5b: 75:3a:76:da:b7:18:0d:7f:27:ec:00:d7:0f:8e:c3:98:05:c2: 8f:12:dd:29:d4:0e:a6:96:1f:f6:4d:f2:e7:dc:81:a5:a4:b6: 6d:b1:dc:fc:09:f4:26:59:bc:bc:1e:5d:7c:02:3a:f2:45:2c: 37:8a:f6:ef:ee:90:44:6b:23:7b:7e:f6:7f:20:2d:4b:f0:aa: 13:7d:0b:42:28:e2:0c:66:0d:6d:a0:c6:56:df:3d:e7:b5:bb: 1a:4d:eb:e3:65:ca:fd:99:d8:e0:09:a7:fb:9e:ca:3e:8d:01: 26:8f:96:f2:19:49:57:1d:97:28:72:e6:27:94:79:75:a7:9e: 9e:4e:6a:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8np4cTYZ3BeSRtJ3sSWQAVgS8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgw RDMyQzBDMzAeFw0yNjA1MTQwMjEzNDNaFw0yNjA1MTUwNDM3NDNaMDMxMTAvBgNV BAMTKEI0NDlDRTMzOUNDMEY1MEE4NUMzNkExREVGNUE5REEwMDUzMTU0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxxpbMZly72dAreZy+aPpdzyID v8n/xQY+NHn+JJpSvvydcJccD4ZM+iTc+Gp5/WQfDAV5qDQHxOXghb4pQ94VXTSu RkOGDeU1wyR5EJldM4fDl05FNsHcUFnBhYw8facjk3ySQqgbLFZuhqVDMbZsTxtd iOapHqc9P21NJtl3b5LUq2frch96qLjgqVfM1ez/AmWC1EUn+HRT0XXgbaQQOjKt /l8t14lULogyRuOxXVPNmkG9dsjrsdf0EqkpQUyVCdOJ6+TXPG4s1cZq0X++cqns QkG7aqzehVMHUK4enaeYU+Gp3O/1/YWj5wSwP7PK0JisFDuvd7rl76vzfJk3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtEnOM5zA9QqFw2od71qdoAUxVG0wHwYDVR0j BBgwFoAU0M/Kah/SNDgDP4F+/TsqGA0ywMMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE0YTIxYjktZjkxMi00MWYzLWI2MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkEx RkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgwRDMyQzBDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMENGQ0E2QTFGRDIzNDM4MDMzRjgxN0VGRDNCMkExODBEMzJD MEMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJB MTgwRDMyQzBDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5kJU2NpyNlAjnsEdUaHoaWE7fySvxLAsN8 9FYrbD2iVpDrlphdQjjxMhYDvS1Nuql3xaQkpw99jh109nhWfEnPhiJ5C3UaWPlk s5TFjCxpLAT9EXIb+4bg+7FQsZ3GK7MOQ+R2MJLbjaFrgSovQBMdrAFQjJt+d7yV v4b3W3U6dtq3GA1/J+wA1w+Ow5gFwo8S3SnUDqaWH/ZN8ufcgaWktm2x3PwJ9CZZ vLweXXwCOvJFLDeK9u/ukERrI3t+9n8gLUvwqhN9C0Io4gxmDW2gxlbfPee1uxpN 6+Nlyv2Z2OAJp/ueyj6NASaPlvIZSVcdlyhy5ieUeXWnnp5Oavs= -----END CERTIFICATE-----Generated at Thu May 14 09:09:57 2026 by rpki-client