$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft File: B9281144646657214FE1ADE5A3228E100E340E53.mft (raw, json) Hash identifier: 6vkf5k0JEs7JiQT0RbV/NSBsWiTLcUsN1hpulA6aNNM= Subject key identifier: C0:F5:AE:25:FC:DA:6F:AB:EC:44:B9:46:15:61:0F:30:F4:54:33:55 Authority key identifier: B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 Certificate issuer: /CN=B9281144646657214FE1ADE5A3228E100E340E53 Certificate serial: 4D4D2B0167124D6F6EE438BCA1E619C0D02B183A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft Manifest number: 05 Signing time: Tue 05 May 2026 05:43:18 +0000 Manifest this update: Tue 05 May 2026 05:38:18 +0000 Manifest next update: Wed 06 May 2026 06:38:18 +0000 Files and hashes: 1: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: Ve4ocQOUOq8AQ9gpm5lYh6lO9aEe09tZrNXe/azearo=) 2: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: GkX4NBYIJf8jri1lDVBbCRWCXCtYyohsWxcf1tLEKh4=) 3: B9281144646657214FE1ADE5A3228E100E340E53.crl (hash: eU4GgmVcSf4kHdXJegJHKfGvNHAhdZOqUP3W8yh1Yok=) 4: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: Tgez0mY6SPOTnuCIKB3HlrvFNAAadTv4QI32lWtN/DI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 06:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:4d:2b:01:67:12:4d:6f:6e:e4:38:bc:a1:e6:19:c0:d0:2b:18:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9281144646657214FE1ADE5A3228E100E340E53 Validity Not Before: May 5 05:38:18 2026 GMT Not After : May 6 06:38:18 2026 GMT Subject: CN=C0F5AE25FCDA6FABEC44B94615610F30F4543355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:39:b7:14:c4:93:6d:7a:37:b1:0b:5c:47:07: 79:3a:57:77:25:67:16:89:92:c8:fc:70:cc:92:4a: 76:b0:3b:00:48:f3:e8:3e:06:69:1b:91:97:ed:b1: 6b:53:03:84:24:3b:fa:f4:f2:6a:51:65:44:7e:cb: e5:9f:2c:46:9b:16:6d:ab:ce:b2:6b:82:85:6d:e5: b6:3e:fd:6f:e5:40:bb:04:69:82:fa:5c:96:03:2a: 4f:69:3c:4a:1f:79:c9:65:ea:e7:f7:96:c3:be:3f: ea:41:88:e4:6d:ab:1f:28:56:aa:15:fc:f0:db:a1: c5:b0:32:b3:64:e2:77:94:f9:18:0a:6b:63:1f:1c: d4:8e:f5:99:f0:bf:07:de:7e:84:0c:b9:a8:7f:48: 74:ae:63:f1:6a:ac:52:b2:5f:50:b1:a4:da:59:55: 5e:f8:69:28:0a:51:5f:58:e2:e7:fd:60:80:f5:e1: 99:e1:6a:4f:a8:b9:5b:cb:ae:82:01:55:b8:35:ab: 11:4c:bd:d9:ab:5d:d9:7f:d2:76:7c:17:be:fe:94: d2:bb:f7:81:fd:13:7e:fd:bc:09:35:9a:c7:ec:db: fc:41:28:72:42:94:a2:15:ea:40:a9:44:20:92:cb: 19:02:79:4a:33:00:ba:96:13:df:1c:50:85:d3:c3: e7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F5:AE:25:FC:DA:6F:AB:EC:44:B9:46:15:61:0F:30:F4:54:33:55 X509v3 Authority Key Identifier: keyid:B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f3:9c:35:e8:75:d7:97:27:f6:8f:ac:d9:2d:59:da:24:6e: 99:7b:43:64:76:30:98:2b:ba:0f:10:fb:1f:4b:c8:67:87:18: e9:e9:15:c9:e8:05:1a:b8:81:b0:36:9a:57:bf:9f:a5:cc:ab: 55:a5:5f:a3:cc:11:9f:92:dc:ad:94:1d:67:9f:5a:98:c2:46: cc:3b:e6:fd:f6:8c:14:7b:11:3a:a4:90:05:fc:47:43:3c:f4: 94:16:f3:9f:1c:37:83:f4:92:22:94:41:58:6b:b6:bc:44:ac: 83:9b:f1:07:56:a6:89:c0:3c:05:bb:da:e3:64:38:e0:88:ad: 6d:b5:22:d0:cb:95:8f:58:84:05:d7:8c:20:9c:9b:04:cb:4c: 95:94:f6:a0:b6:65:c0:77:4f:d2:ff:03:b4:b8:7e:0f:92:09: 4f:dd:ec:42:d7:b9:4a:99:7a:71:fe:d0:1f:60:fe:ab:b2:67: 06:f9:da:e7:ee:b1:43:4f:df:e0:61:02:3c:0e:d4:e7:83:4b: 21:16:6e:d5:8c:2f:9e:dd:2b:77:58:6c:61:1d:ec:3d:4a:24: a8:5d:d3:23:5c:6c:c6:c4:b5:bd:99:43:f4:c0:db:e8:45:f7: 60:dd:10:d4:f9:76:1f:e3:84:1a:8d:34:e1:d4:8c:20:bf:b2: 85:f4:c1:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTU0rAWcSTW9u5Di8oeYZwNArGDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAw RTM0MEU1MzAeFw0yNjA1MDUwNTM4MThaFw0yNjA1MDYwNjM4MThaMDMxMTAvBgNV BAMTKEMwRjVBRTI1RkNEQTZGQUJFQzQ0Qjk0NjE1NjEwRjMwRjQ1NDMzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSObcUxJNtejexC1xHB3k6V3cl ZxaJksj8cMySSnawOwBI8+g+BmkbkZftsWtTA4QkO/r08mpRZUR+y+WfLEabFm2r zrJrgoVt5bY+/W/lQLsEaYL6XJYDKk9pPEofecll6uf3lsO+P+pBiORtqx8oVqoV /PDbocWwMrNk4neU+RgKa2MfHNSO9ZnwvwfefoQMuah/SHSuY/FqrFKyX1CxpNpZ VV74aSgKUV9Y4uf9YID14Znhak+ouVvLroIBVbg1qxFMvdmrXdl/0nZ8F77+lNK7 94H9E379vAk1msfs2/xBKHJClKIV6kCpRCCSyxkCeUozALqWE98cUIXTw+cbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwPWuJfzab6vsRLlGFWEPMPRUM1UwHwYDVR0j BBgwFoAUuSgRRGRmVyFP4a3loyKOEA40DlMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E4YTlhODEtMGE1Mi00YTUwLWI3ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2 NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAwRTM0MEU1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTI4MTE0NDY0NjY1NzIxNEZFMUFERTVBMzIyOEUxMDBFMzQw RTUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhF MTAwRTM0MEU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDznDXoddeXJ/aPrNktWdokbpl7Q2R2MJgr ug8Q+x9LyGeHGOnpFcnoBRq4gbA2mle/n6XMq1WlX6PMEZ+S3K2UHWefWpjCRsw7 5v32jBR7ETqkkAX8R0M89JQW858cN4P0kiKUQVhrtrxErIOb8QdWponAPAW72uNk OOCIrW21ItDLlY9YhAXXjCCcmwTLTJWU9qC2ZcB3T9L/A7S4fg+SCU/d7ELXuUqZ enH+0B9g/quyZwb52ufusUNP3+BhAjwO1OeDSyEWbtWML57dK3dYbGEd7D1KJKhd 0yNcbMbEtb2ZQ/TA2+hF92DdENT5dh/jhBqNNOHUjCC/soX0wVc= -----END CERTIFICATE-----Generated at Tue May 5 14:06:59 2026 by rpki-client