$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft File: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft (raw, json) Hash identifier: CFsfLNY+mBlvMDc/d2IsYD/hNF/Qc6zjt9T1KFTZnqw= Subject key identifier: FD:43:96:A2:00:85:51:67:C4:5A:02:D6:3D:44:59:D8:19:A5:86:DF Authority key identifier: 1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 Certificate issuer: /CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Certificate serial: 7E3AB46A0C4C265725EBF531BEE5096B4AAF538E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft Manifest number: 14 Signing time: Sat 16 May 2026 15:49:23 +0000 Manifest this update: Sat 16 May 2026 15:44:23 +0000 Manifest next update: Sun 17 May 2026 16:51:23 +0000 Files and hashes: 1: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl (hash: G4MFcE9pLImkyuIGAINYAtpca6gbaCOMzQW22XYj554=) 2: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: YqAlX6I3eetKbPgn7q5+SNbPjP9RfqZzOtFwmWR8tB8=) 3: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: qUv8iwGfDUNsSHoYpr8OtHbSrHxY05J4t5ZSAS55J1w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3a:b4:6a:0c:4c:26:57:25:eb:f5:31:be:e5:09:6b:4a:af:53:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Validity Not Before: May 16 15:44:23 2026 GMT Not After : May 17 16:51:23 2026 GMT Subject: CN=FD4396A200855167C45A02D63D4459D819A586DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f8:bb:15:bc:6e:c5:3c:9b:a6:4d:be:e1:23: a4:b2:df:97:ef:95:f5:35:a2:d4:08:6d:11:3d:40: d6:72:b1:ad:c3:4c:06:c8:0b:27:57:f6:6c:de:35: 5a:f9:d3:84:47:f9:3a:ea:fa:32:4a:bf:b8:b3:59: 82:1f:cb:37:eb:e3:cc:1b:41:ec:e4:4d:d4:84:12: a2:61:c0:3c:19:5b:28:e5:1b:08:0e:27:65:0d:cf: 09:4a:9e:9b:9e:46:aa:4d:ef:a3:42:92:1c:3a:da: fe:6b:4f:c6:ee:6e:d2:db:71:76:69:a2:19:af:86: 56:63:74:6e:2b:b9:28:c8:e9:c9:52:86:63:e5:91: 22:08:29:1f:e4:85:fd:7e:08:07:f8:b3:9a:59:4f: ff:34:ce:45:f2:dd:47:3a:7a:c0:f9:27:3c:1f:62: f8:67:83:bc:3a:fa:e8:22:af:b6:67:05:06:70:1b: ed:a8:67:57:c6:fd:89:ea:ce:a9:27:a7:ae:ee:b6: 6f:6d:83:d0:aa:e6:a1:c4:da:4f:0d:74:cf:fd:a2: 59:e6:f9:c1:2a:50:03:03:d2:fb:0f:25:9f:65:bb: bd:29:60:8b:0e:e1:84:39:5e:ae:5c:4f:b7:85:9d: 28:d0:e1:3e:74:e8:7b:1f:17:0b:0d:39:76:84:21: 28:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:43:96:A2:00:85:51:67:C4:5A:02:D6:3D:44:59:D8:19:A5:86:DF X509v3 Authority Key Identifier: keyid:1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9f:2e:fa:a0:85:b6:fd:43:59:28:19:a1:12:cd:6a:bd:42: cf:e3:ef:ca:e3:8b:a6:cc:0d:14:0e:07:e2:0b:6f:f8:3f:38: 52:0f:82:08:ac:25:7a:08:e0:78:35:7f:54:0d:ad:3a:42:36: 47:8d:13:36:a1:c1:66:7e:63:66:54:30:04:bd:aa:4c:02:67: 29:ce:fd:f4:7a:f3:04:0b:c3:15:b4:48:b3:e8:2f:38:8c:f7: 19:18:92:98:e0:9f:d2:ed:87:1e:e8:f3:b8:6c:02:1c:09:19: 00:00:b1:72:30:39:bc:8d:29:d3:c7:f6:9c:16:37:d4:f3:74: 9e:ff:21:24:1c:94:1b:7d:a0:79:e3:70:95:44:1d:69:db:86: 31:60:3b:25:9e:8d:41:b5:11:33:ae:5a:aa:0c:77:d9:29:35: 4e:9a:94:ab:f9:56:db:c4:9c:e1:3e:eb:33:bd:90:b6:f5:36: 49:0d:61:ed:b0:6d:d0:40:0f:94:11:9f:80:39:a5:b0:75:dd: 7f:af:b1:1b:a0:9e:0b:7f:34:fd:3c:9f:31:02:52:57:bb:d4: eb:68:6c:57:d8:03:e1:7b:32:84:c4:28:3b:62:1e:d6:44:f3: 5f:46:b0:4e:80:a9:02:dc:d8:73:ea:60:ed:9d:84:47:00:c1: 12:a8:e8:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfjq0agxMJlcl6/UxvuUJa0qvU44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU0MDRBRjZDRkYwODVFMjBCRUU0QzdCRTJBNUYyQkYy ODBGM0JBODAeFw0yNjA1MTYxNTQ0MjNaFw0yNjA1MTcxNjUxMjNaMDMxMTAvBgNV BAMTKEZENDM5NkEyMDA4NTUxNjdDNDVBMDJENjNENDQ1OUQ4MTlBNTg2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+LsVvG7FPJumTb7hI6Sy35fv lfU1otQIbRE9QNZysa3DTAbICydX9mzeNVr504RH+Trq+jJKv7izWYIfyzfr48wb QezkTdSEEqJhwDwZWyjlGwgOJ2UNzwlKnpueRqpN76NCkhw62v5rT8bubtLbcXZp ohmvhlZjdG4ruSjI6clShmPlkSIIKR/khf1+CAf4s5pZT/80zkXy3Uc6esD5Jzwf Yvhng7w6+ugir7ZnBQZwG+2oZ1fG/Ynqzqknp67utm9tg9Cq5qHE2k8NdM/9olnm +cEqUAMD0vsPJZ9lu70pYIsO4YQ5Xq5cT7eFnSjQ4T506HsfFwsNOXaEISjVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/UOWogCFUWfEWgLWPURZ2Bmlht8wHwYDVR0j BBgwFoAUHkBK9s/wheIL7kx74qXyvygPO6gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwMDIyOGYtNmUyNS00Yzk2LTljZTUtMmQ1MDIyOWExZDE4LzAvMUU0MDRBRjZD RkYwODVFMjBCRUU0QzdCRTJBNUYyQkYyODBGM0JBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTQwNEFGNkNGRjA4NUUyMEJFRTRDN0JFMkE1RjJCRjI4MEYz QkE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvMUU0MDRBRjZDRkYwODVFMjBCRUU0QzdCRTJBNUYy QkYyODBGM0JBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2fLvqghbb9Q1koGaESzWq9Qs/j78rji6bM DRQOB+ILb/g/OFIPggisJXoI4Hg1f1QNrTpCNkeNEzahwWZ+Y2ZUMAS9qkwCZynO /fR68wQLwxW0SLPoLziM9xkYkpjgn9Lthx7o87hsAhwJGQAAsXIwObyNKdPH9pwW N9TzdJ7/ISQclBt9oHnjcJVEHWnbhjFgOyWejUG1ETOuWqoMd9kpNU6alKv5VtvE nOE+6zO9kLb1NkkNYe2wbdBAD5QRn4A5pbB13X+vsRugngt/NP08nzECUle71Oto bFfYA+F7MoTEKDtiHtZE819GsE6AqQLc2HPqYO2dhEcAwRKo6OM= -----END CERTIFICATE-----Generated at Sat May 16 20:31:21 2026 by rpki-client