$ rpki-client -vvf rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft File: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft (raw, json) Hash identifier: c7ltxEd5rSdAPBv0EWvEaXPLogPwz9L+ergBj6BXHq4= Subject key identifier: E5:CF:4C:42:54:8E:61:90:B7:B5:24:C9:08:17:E6:83:56:3A:0B:CE Authority key identifier: D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD Certificate issuer: /CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Certificate serial: 13E9CCE01459756F37DC364366A66F1B5DBC5E2F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft Manifest number: 04 Signing time: Mon 04 May 2026 16:04:53 +0000 Manifest this update: Mon 04 May 2026 15:59:53 +0000 Manifest next update: Tue 05 May 2026 18:26:53 +0000 Files and hashes: 1: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: zZwF560CCW8FIsmpm9G6YMYG8iguu4mvO1b/REjgURE=) 2: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl (hash: PUmiliTZF7d/fA9zd7hpMtlPAUAY8E4u1VPfIH51Wfw=) 3: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: tvgNMRKF9YhTkUojezBviQo+Tr5X2S/8TAOF/Ehj41w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 18:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e9:cc:e0:14:59:75:6f:37:dc:36:43:66:a6:6f:1b:5d:bc:5e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Validity Not Before: May 4 15:59:53 2026 GMT Not After : May 5 18:26:53 2026 GMT Subject: CN=E5CF4C42548E6190B7B524C90817E683563A0BCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ef:b4:35:d2:7b:01:2e:59:46:d4:90:0f:b1: d5:44:b2:16:9a:f4:d8:12:a5:d8:ab:dd:18:76:13: 02:e0:f3:3b:fb:47:ae:49:59:79:f9:24:72:66:b4: 43:e4:91:26:fc:0a:a0:df:a9:31:9a:83:bd:da:da: c5:c3:5c:23:a4:99:a4:1d:38:70:3a:3a:17:ef:bb: 38:2e:04:26:c0:33:21:b1:7b:72:ab:46:4e:55:49: ef:77:32:fc:30:72:25:0b:00:c8:03:0e:61:9d:3c: 32:27:0a:67:8a:28:4f:25:9c:8a:50:16:22:3e:b2: b5:88:f0:d9:7f:38:81:43:2c:8a:62:dc:c3:b2:49: 6c:a2:09:35:a5:13:23:31:88:e2:56:d6:4c:0d:dc: a2:66:c5:31:47:64:8c:d0:ee:c9:15:f7:27:65:e2: 37:f6:f1:1f:d2:45:24:1c:12:d6:c3:b8:c4:72:76: 99:7e:cd:2c:2d:bd:ad:d0:5c:59:d0:5f:e1:1d:d7: 7d:5d:30:17:83:fd:fd:1a:61:4a:88:c5:08:10:d8: 27:69:4c:06:56:fd:8a:39:1b:14:f8:43:2b:c6:fb: 74:87:53:0c:7e:26:86:b9:05:b8:b9:41:16:8c:e8: 33:a7:61:d0:16:52:5b:66:c1:43:ea:08:26:d4:bc: 86:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CF:4C:42:54:8E:61:90:B7:B5:24:C9:08:17:E6:83:56:3A:0B:CE X509v3 Authority Key Identifier: keyid:D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:12:24:55:fa:ae:f5:6b:f0:9b:89:f9:57:ee:a5:8c:41:b6: 1d:eb:09:86:7e:d5:2f:b2:9d:b5:ee:3e:7a:62:2b:85:fd:04: 00:7d:ca:60:61:89:2f:7b:c7:c5:b1:10:d6:f7:e2:bd:72:d1: b8:79:bb:a1:86:a6:6d:a5:24:aa:b4:0e:80:c8:e6:52:c0:14: 9e:b4:9a:7d:2d:1f:b3:4b:c5:43:88:9c:a0:95:c9:0b:3a:a3: a5:ab:f9:e3:c7:6a:7e:54:ca:98:ef:b3:1a:ab:83:d0:c9:44: 55:ea:e4:a7:44:16:f2:fe:25:3e:be:0d:20:f1:8e:d1:02:98: 30:32:7f:60:85:39:91:62:52:93:51:e6:2d:dc:64:e2:97:9f: 7a:05:6f:02:be:5a:89:34:16:5e:7e:3a:23:27:35:5e:61:1d: fd:47:91:31:32:92:f7:cc:68:34:0d:26:e1:cd:75:2f:a4:80: 06:17:4c:31:cf:f9:59:f2:71:4f:b4:3a:c2:03:92:cd:fb:59: 7e:78:28:c4:33:84:25:4f:40:21:eb:33:76:b8:ec:57:7f:77: 0a:fd:19:9e:85:9c:ca:92:31:48:7a:94:ec:c5:bb:23:77:b4: 66:4b:fa:61:9c:0e:ef:6e:28:41:e3:1d:14:30:50:2a:54:6d: 98:e0:9b:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+nM4BRZdW833DZDZqZvG128Xi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJF ODM1RURERDAeFw0yNjA1MDQxNTU5NTNaFw0yNjA1MDUxODI2NTNaMDMxMTAvBgNV BAMTKEU1Q0Y0QzQyNTQ4RTYxOTBCN0I1MjRDOTA4MTdFNjgzNTYzQTBCQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp77Q10nsBLllG1JAPsdVEshaa 9NgSpdir3Rh2EwLg8zv7R65JWXn5JHJmtEPkkSb8CqDfqTGag73a2sXDXCOkmaQd OHA6OhfvuzguBCbAMyGxe3KrRk5VSe93MvwwciULAMgDDmGdPDInCmeKKE8lnIpQ FiI+srWI8Nl/OIFDLIpi3MOySWyiCTWlEyMxiOJW1kwN3KJmxTFHZIzQ7skV9ydl 4jf28R/SRSQcEtbDuMRydpl+zSwtva3QXFnQX+Ed131dMBeD/f0aYUqIxQgQ2Cdp TAZW/Yo5GxT4QyvG+3SHUwx+Joa5Bbi5QRaM6DOnYdAWUltmwUPqCCbUvIblAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5c9MQlSOYZC3tSTJCBfmg1Y6C84wHwYDVR0j BBgwFoAU10zXuH10TS0wHD9pd0qZ++g17d0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZTEyNmYtODE5Mi00ZDI4LWIyNWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3 RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJFODM1RURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzRDRDdCODdENzQ0RDJEMzAxQzNGNjk3NzRBOTlGQkU4MzVF RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5 RkJFODM1RURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMSJFX6rvVr8JuJ+VfupYxBth3rCYZ+1S+y nbXuPnpiK4X9BAB9ymBhiS97x8WxENb34r1y0bh5u6GGpm2lJKq0DoDI5lLAFJ60 mn0tH7NLxUOInKCVyQs6o6Wr+ePHan5Uypjvsxqrg9DJRFXq5KdEFvL+JT6+DSDx jtECmDAyf2CFOZFiUpNR5i3cZOKXn3oFbwK+Wok0Fl5+OiMnNV5hHf1HkTEykvfM aDQNJuHNdS+kgAYXTDHP+VnycU+0OsIDks37WX54KMQzhCVPQCHrM3a47Fd/dwr9 GZ6FnMqSMUh6lOzFuyN3tGZL+mGcDu9uKEHjHRQwUCpUbZjgm8w= -----END CERTIFICATE-----Generated at Tue May 5 11:14:06 2026 by rpki-client