$ rpki-client -vvf rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft File: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft (raw, json) Hash identifier: FZU/mY+LjzpZjrdUYbuNQDJPlEsKB7bc/GCE0JkCfPE= Subject key identifier: 48:FF:04:15:4A:06:79:0E:D9:82:85:FE:EB:2D:C5:DA:6F:FC:F6:07 Authority key identifier: 13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42 Certificate issuer: /CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342 Certificate serial: 0B88ED353FDAD823A83FD9B5101C8534C41D4F82 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft Manifest number: 05 Signing time: Tue 05 May 2026 11:58:16 +0000 Manifest this update: Tue 05 May 2026 11:53:16 +0000 Manifest next update: Wed 06 May 2026 15:33:16 +0000 Files and hashes: 1: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl (hash: iIuyjivyVtH0jntRWYn5Fsjz/2SvqzDBSr4+f9WLDNs=) 2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: uVPktCZC8+f+6UT6i6M1uIRYRGCJQ3maVFAM7Hkvn3s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:88:ed:35:3f:da:d8:23:a8:3f:d9:b5:10:1c:85:34:c4:1d:4f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342 Validity Not Before: May 5 11:53:16 2026 GMT Not After : May 6 15:33:16 2026 GMT Subject: CN=48FF04154A06790ED98285FEEB2DC5DA6FFCF607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3c:97:64:70:2e:00:46:53:76:5e:b0:09:ae: 1d:02:5f:82:d3:c2:b3:df:78:c1:bd:98:ad:9d:60: 85:33:de:89:f8:53:9f:ab:9b:94:c2:c7:ac:bb:d4: dc:a6:e2:69:a5:a2:da:61:9b:6d:38:fa:8c:5f:ab: 84:6a:fc:8e:1a:d0:2f:d5:b7:dc:38:09:39:b9:73: 36:7e:24:8c:bf:22:64:7a:b3:3f:a8:1b:e0:48:54: 6b:8f:05:bc:30:cf:fa:d7:66:9c:b0:7e:d4:ae:3f: 3d:db:87:9d:7c:57:d7:74:bb:e8:3d:ce:b9:c2:83: 27:d3:4b:a1:3f:0d:f1:91:5a:7f:c0:be:3c:d2:67: 4f:47:2e:8b:3d:ff:0a:82:31:64:69:6e:d8:15:57: c0:e0:b0:96:b2:00:8a:ea:1d:8a:a7:e5:56:5b:76: ce:be:99:f4:8e:bd:2e:5e:ee:54:0d:22:2c:7d:e2: 24:95:b5:80:b9:e2:d1:8c:91:52:5e:85:39:7e:7b: 11:2f:3d:cd:c7:b2:77:b4:3e:e2:f9:4c:ad:95:65: ea:16:08:aa:5a:9a:ff:60:4a:3c:a2:f3:02:89:7a: c5:28:59:3a:22:ad:7b:5c:a2:4a:7a:d2:de:c0:d8: a9:a3:67:cc:dd:5e:f4:f3:10:14:15:6c:7d:5f:2e: c3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FF:04:15:4A:06:79:0E:D9:82:85:FE:EB:2D:C5:DA:6F:FC:F6:07 X509v3 Authority Key Identifier: keyid:13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c6:4a:49:fd:e7:be:ca:1d:c3:1d:51:b3:ef:b5:1a:00:b5: f6:42:e2:17:a4:09:03:16:9f:2c:2d:4e:31:f6:c2:c7:f0:34: 58:16:1a:5e:fc:6a:e6:43:2f:93:2b:77:73:c2:54:ff:e6:15: dd:a9:36:0d:93:22:78:f6:d8:ed:ec:a6:b9:a7:b5:74:b2:c1: d3:37:a4:d6:1f:74:63:b6:84:ee:ef:f3:10:e7:70:24:99:d8: 81:1c:2d:72:c0:a8:b8:ea:d4:58:fd:f8:02:46:9a:dd:a9:cb: 35:79:6f:b5:a3:b3:83:5e:9e:48:1e:74:27:2a:18:25:47:5c: c4:03:ba:b1:0c:74:ec:e6:e4:be:c6:e2:b1:6b:85:20:7f:a6: a2:c4:c9:80:74:ed:bc:fb:bb:6c:44:40:d4:2c:55:3f:93:27: ff:b3:7c:c4:77:3e:57:26:2f:9f:6f:04:ee:39:31:15:c6:e4: a1:b7:15:db:dd:d1:8c:00:36:56:d0:96:27:d7:16:4b:39:e9: b8:46:f9:8c:8a:0d:40:f6:37:05:63:2f:74:5f:75:78:b8:e7: 30:60:2d:9b:d4:44:01:47:d7:82:53:0a:4b:54:39:51:a0:58: fa:8c:05:9e:80:82:99:ac:99:4f:c5:6f:4c:a7:ea:eb:35:ea: a7:67:da:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4jtNT/a2COoP9m1EByFNMQdT4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0NEI4MUI5NzBEM0Y5MENBMDlBODFGMkVBNzk2QjlE RDA5RDM0MjAeFw0yNjA1MDUxMTUzMTZaFw0yNjA1MDYxNTMzMTZaMDMxMTAvBgNV BAMTKDQ4RkYwNDE1NEEwNjc5MEVEOTgyODVGRUVCMkRDNURBNkZGQ0Y2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvPJdkcC4ARlN2XrAJrh0CX4LT wrPfeMG9mK2dYIUz3on4U5+rm5TCx6y71Nym4mmlotphm204+oxfq4Rq/I4a0C/V t9w4CTm5czZ+JIy/ImR6sz+oG+BIVGuPBbwwz/rXZpywftSuPz3bh518V9d0u+g9 zrnCgyfTS6E/DfGRWn/AvjzSZ09HLos9/wqCMWRpbtgVV8DgsJayAIrqHYqn5VZb ds6+mfSOvS5e7lQNIix94iSVtYC54tGMkVJehTl+exEvPc3Hsne0PuL5TK2VZeoW CKpamv9gSjyi8wKJesUoWToirXtcokp60t7A2KmjZ8zdXvTzEBQVbH1fLsMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSP8EFUoGeQ7ZgoX+6y3F2m/89gcwHwYDVR0j BBgwFoAUE0S4G5cNP5DKCagfLqeWud0J00IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJhZWM3YzYtMmI4My00Y2YwLThjZDktNTM0Y2U3N2ZmNGIwLzAvMTM0NEI4MUI5 NzBEM0Y5MENBMDlBODFGMkVBNzk2QjlERDA5RDM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzQ0QjgxQjk3MEQzRjkwQ0EwOUE4MUYyRUE3OTZCOUREMDlE MzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMTM0NEI4MUI5NzBEM0Y5MENBMDlBODFGMkVBNzk2 QjlERDA5RDM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILGSkn9577KHcMdUbPvtRoAtfZC4hekCQMW nywtTjH2wsfwNFgWGl78auZDL5Mrd3PCVP/mFd2pNg2TInj22O3sprmntXSywdM3 pNYfdGO2hO7v8xDncCSZ2IEcLXLAqLjq1Fj9+AJGmt2pyzV5b7Wjs4NenkgedCcq GCVHXMQDurEMdOzm5L7G4rFrhSB/pqLEyYB07bz7u2xEQNQsVT+TJ/+zfMR3Plcm L59vBO45MRXG5KG3Fdvd0YwANlbQlifXFks56bhG+YyKDUD2NwVjL3RfdXi45zBg LZvURAFH14JTCktUOVGgWPqMBZ6AgpmsmU/Fb0yn6us16qdn2ow= -----END CERTIFICATE-----Generated at Tue May 5 17:52:26 2026 by rpki-client