$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft File: A65A7370A28DA71B1C11B89E09D51753C498246D.mft (raw, json) Hash identifier: rFX0Bv75atabtSmt5cweLFHKfAsLc2SCmIHdqulW3Qw= Subject key identifier: 93:C3:93:DC:46:9E:51:A4:37:8F:75:DB:34:C0:4D:26:D9:93:56:4C Authority key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D Certificate issuer: /CN=A65A7370A28DA71B1C11B89E09D51753C498246D Certificate serial: 2008E995B40260B16E286523055F3A57E389193D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft Manifest number: 05 Signing time: Tue 05 May 2026 09:12:10 +0000 Manifest this update: Tue 05 May 2026 09:07:10 +0000 Manifest next update: Wed 06 May 2026 09:40:10 +0000 Files and hashes: 1: 3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa (hash: yLjPOFhKt4noRbzRL2MIGaluRq2L7M9f6uyh5pKU9Ec=) 2: A65A7370A28DA71B1C11B89E09D51753C498246D.crl (hash: PWfpWGLpFiR5kaOzLIzVJMgnsf8wsjCYjFA35trqRjk=) 3: 3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa (hash: kTQiZ7hK+M7BbCy/GwseyxlIaws4BXvafRAJzzRJxhc=) 4: 3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa (hash: Ho6tdl1he9FR1/62MiqnACr306KYnR/YSxoabj/m7M4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:08:e9:95:b4:02:60:b1:6e:28:65:23:05:5f:3a:57:e3:89:19:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65A7370A28DA71B1C11B89E09D51753C498246D Validity Not Before: May 5 09:07:10 2026 GMT Not After : May 6 09:40:10 2026 GMT Subject: CN=93C393DC469E51A4378F75DB34C04D26D993564C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8f:4b:2d:4d:f2:f9:e1:04:0c:10:5d:97:f8: ad:65:12:88:55:eb:e3:8d:fe:f8:90:88:0c:23:83: 4b:6a:a2:97:46:85:22:a8:ec:a1:41:52:77:82:21: 14:44:07:d2:8a:df:bd:e5:ef:5f:d1:50:ef:3b:f7: 08:a9:85:30:87:01:0d:98:e2:d3:9c:37:e4:f3:86: 94:8b:2c:3b:99:e0:fd:ae:f5:ae:d9:0b:20:b0:74: dc:38:60:25:0e:cb:dd:64:31:19:3a:02:22:f4:e1: fc:d4:01:d7:ea:81:c1:91:7b:2b:3b:d6:9e:45:b9: 27:e5:ef:03:91:d8:d8:55:81:10:96:26:34:2a:99: 2c:e2:30:cc:de:71:b5:b0:7b:b5:b0:a5:6d:dd:22: 30:04:66:99:47:4e:b3:6b:65:d9:5e:5d:2d:4d:24: f7:d3:9e:e2:86:82:4e:9b:bb:bf:82:70:bf:90:65: 4e:40:bd:98:65:92:73:2c:34:7f:fc:d7:7e:4a:b2: 37:fd:2a:07:a8:48:91:87:7f:dc:5d:51:01:e0:ba: 0f:c2:ad:0e:08:d5:14:fe:ca:84:6a:f1:ca:79:53: 09:ef:58:c3:16:f7:88:1d:bc:e4:bd:f0:ee:75:64: 4d:7f:bb:12:d0:11:77:60:7c:ca:19:b1:ed:a8:7e: 61:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C3:93:DC:46:9E:51:A4:37:8F:75:DB:34:C0:4D:26:D9:93:56:4C X509v3 Authority Key Identifier: keyid:A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:27:de:4d:ae:be:ae:b4:bd:dd:21:18:fc:36:c2:ea:41:d3: fe:32:e8:bf:74:57:17:fb:8a:2f:04:aa:ce:60:63:dc:cf:44: 2b:40:3e:b9:f9:d7:da:21:d3:ba:bf:eb:d8:d4:1a:99:04:1e: 8b:a9:fc:2c:4e:96:a4:f5:37:ec:10:90:4b:9c:be:8e:d0:54: eb:bc:32:60:d4:3b:2b:07:ed:81:d4:59:57:1f:30:6b:8b:8a: 77:b6:61:74:6a:21:47:60:fb:9b:87:07:c2:ab:0e:c2:e0:af: f0:04:4c:1b:a5:d6:46:9a:68:8d:7c:f0:09:84:71:5a:23:57: f6:c5:35:ce:9e:7f:34:7a:72:c7:90:52:95:90:96:7c:0b:da: e5:21:c2:87:99:8e:cf:d9:1e:ee:0a:6e:8d:0c:d0:90:d7:ec: ce:93:3e:8d:8e:a5:a3:24:a3:40:65:ef:e7:5f:af:67:81:e1: ca:82:99:26:54:66:c6:b5:9c:35:24:4e:78:12:03:7a:5a:ff: fb:3b:d4:37:49:9b:c2:22:44:80:20:4d:15:77:e9:3a:4b:74: ec:09:a2:2a:cf:38:0c:a9:9c:c7:5b:5b:bf:c8:13:5d:49:5c: b6:dd:18:4d:22:81:64:8a:3f:db:b8:a5:04:a0:dc:ad:7d:5a: 93:0f:56:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIAjplbQCYLFuKGUjBV86V+OJGT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3NTND NDk4MjQ2RDAeFw0yNjA1MDUwOTA3MTBaFw0yNjA1MDYwOTQwMTBaMDMxMTAvBgNV BAMTKDkzQzM5M0RDNDY5RTUxQTQzNzhGNzVEQjM0QzA0RDI2RDk5MzU2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMj0stTfL54QQMEF2X+K1lEohV 6+ON/viQiAwjg0tqopdGhSKo7KFBUneCIRREB9KK373l71/RUO879wiphTCHAQ2Y 4tOcN+TzhpSLLDuZ4P2u9a7ZCyCwdNw4YCUOy91kMRk6AiL04fzUAdfqgcGReys7 1p5FuSfl7wOR2NhVgRCWJjQqmSziMMzecbWwe7WwpW3dIjAEZplHTrNrZdleXS1N JPfTnuKGgk6bu7+CcL+QZU5AvZhlknMsNH/8135Ksjf9KgeoSJGHf9xdUQHgug/C rQ4I1RT+yoRq8cp5UwnvWMMW94gdvOS98O51ZE1/uxLQEXdgfMoZse2ofmHtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk8OT3EaeUaQ3j3XbNMBNJtmTVkwwHwYDVR0j BBgwFoAUplpzcKKNpxscEbieCdUXU8SYJG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBB MjhEQTcxQjFDMTFCODlFMDlENTE3NTNDNDk4MjQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9BNjVBNzM3MEEyOERBNzFCMUMxMUI4OUUwOUQ1MTc1M0M0OTgy NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3 NTNDNDk4MjQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgn3k2uvq60vd0hGPw2wupB0/4y6L90Vxf7 ii8Eqs5gY9zPRCtAPrn519oh07q/69jUGpkEHoup/CxOlqT1N+wQkEucvo7QVOu8 MmDUOysH7YHUWVcfMGuLine2YXRqIUdg+5uHB8KrDsLgr/AETBul1kaaaI188AmE cVojV/bFNc6efzR6cseQUpWQlnwL2uUhwoeZjs/ZHu4Kbo0M0JDX7M6TPo2OpaMk o0Bl7+dfr2eB4cqCmSZUZsa1nDUkTngSA3pa//s71DdJm8IiRIAgTRV36TpLdOwJ oirPOAypnMdbW7/IE11JXLbdGE0igWSKP9u4pQSg3K19WpMPVo8= -----END CERTIFICATE-----Generated at Tue May 5 15:38:47 2026 by rpki-client