$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft File: D713503939D2573A44FA29703CDDCC704F03A75E.mft (raw, json) Hash identifier: /udTyXyogj+GYu4ZCAGdmlUUSgogc6uebHZHEp+/R8s= Subject key identifier: D8:14:82:1E:96:44:E7:43:B6:84:99:F3:B2:96:7A:A9:D6:B9:23:AA Authority key identifier: D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E Certificate issuer: /CN=D713503939D2573A44FA29703CDDCC704F03A75E Certificate serial: 333EF2E1C05E6AC9ABAAF44B77EF7CE4F47931AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft Manifest number: 05 Signing time: Tue 05 May 2026 07:37:40 +0000 Manifest this update: Tue 05 May 2026 07:32:40 +0000 Manifest next update: Wed 06 May 2026 10:58:40 +0000 Files and hashes: 1: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: GTWGWiGFFFL7qU1osUGFkofRdRSFUHbSkHuzGVb3rSI=) 2: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: cciT2cLODhuCXSq6f7ZeF3BxK19X9kDtH1Tm4E9hM34=) 3: D713503939D2573A44FA29703CDDCC704F03A75E.crl (hash: iN9SlyYhJ9YEw9RSHGgFUgOxQd3Ev0efPgizD5zee2Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:3e:f2:e1:c0:5e:6a:c9:ab:aa:f4:4b:77:ef:7c:e4:f4:79:31:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D713503939D2573A44FA29703CDDCC704F03A75E Validity Not Before: May 5 07:32:40 2026 GMT Not After : May 6 10:58:40 2026 GMT Subject: CN=D814821E9644E743B68499F3B2967AA9D6B923AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ec:81:d5:63:3c:12:e6:ce:f0:0a:59:4c:44: 07:dd:a3:b4:9d:68:ad:03:f2:c0:31:30:2d:03:39: 39:b9:e8:9c:a7:9c:31:95:bf:7b:9e:74:4e:1d:56: 2e:27:64:0e:7c:c6:30:99:e5:00:79:10:9d:69:d8: 25:f1:95:8e:d7:69:23:52:eb:0c:c0:a6:e6:87:80: 63:09:7e:39:67:c7:6d:48:cd:cf:58:4d:58:06:8e: c6:6f:3f:44:9c:8d:e6:4f:79:4b:ea:66:58:7f:28: fa:da:65:f2:8f:79:3f:e0:22:8f:7c:fc:3e:5c:74: f8:ef:d0:37:a1:99:8c:c7:3c:6a:f3:a4:16:47:71: 00:d5:a1:26:df:31:18:41:18:60:c2:10:b8:4c:11: c7:60:81:3a:a7:ed:26:b8:a8:11:9e:d4:a9:51:fc: ce:c4:52:43:91:3e:a2:06:09:98:8f:d4:8c:2d:e4: c2:15:87:99:11:23:8a:d1:b9:b7:91:4b:76:f5:62: 08:70:57:aa:eb:16:14:32:90:1c:30:74:7d:13:f8: 9a:a9:ed:18:6a:45:e4:6d:63:9a:5c:28:ad:5f:ad: 9d:13:3e:44:52:06:59:8f:df:76:8a:b6:12:e8:12: 45:ea:2f:64:fa:61:83:be:1a:f3:56:2b:91:57:19: 7b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:14:82:1E:96:44:E7:43:B6:84:99:F3:B2:96:7A:A9:D6:B9:23:AA X509v3 Authority Key Identifier: keyid:D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:82:ee:ce:70:b8:63:44:be:c2:c0:d9:40:29:8e:0b:46:d6: 34:25:f3:00:f3:b5:4a:eb:da:16:f4:ea:51:39:bc:73:d3:06: 06:6f:1f:d7:62:36:3f:83:e0:66:29:19:aa:e8:75:be:0f:ed: 88:33:73:34:b8:67:26:ad:29:b4:22:ca:6b:f8:02:9b:dd:3b: 45:a0:ff:48:fe:4c:26:32:95:32:7e:60:87:8d:85:5d:7f:10: bd:b6:46:5f:9c:c9:34:6a:81:34:a7:b8:6b:2a:bb:6d:52:ea: 90:b0:3d:9c:e3:0d:f4:49:58:56:14:60:94:5c:60:dd:9e:66: 7e:b2:7f:04:15:50:ea:4a:69:f4:16:c9:d8:14:b5:58:6d:a3: c5:62:94:05:fb:86:a3:e6:d7:d9:e2:35:2d:83:54:7b:74:ee: a3:de:10:6c:4a:d0:a6:51:f8:3d:2f:64:60:85:94:1b:f3:a5: c6:79:ce:c9:cb:13:54:94:2e:19:07:98:a5:57:e5:2e:07:9a: a8:3f:b9:5b:6e:db:12:ac:81:dc:c4:f0:10:4a:b0:63:ed:4e: 3d:1a:67:ca:bf:75:10:93:e5:d4:cc:f2:46:01:82:47:ba:77: 73:c6:5c:13:f9:32:80:9b:bd:ab:46:af:c2:74:d9:fd:e2:8a: 48:a2:ec:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMz7y4cBeasmrqvRLd+985PR5Ma4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NERENDNzA0 RjAzQTc1RTAeFw0yNjA1MDUwNzMyNDBaFw0yNjA1MDYxMDU4NDBaMDMxMTAvBgNV BAMTKEQ4MTQ4MjFFOTY0NEU3NDNCNjg0OTlGM0IyOTY3QUE5RDZCOTIzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7IHVYzwS5s7wCllMRAfdo7Sd aK0D8sAxMC0DOTm56JynnDGVv3uedE4dVi4nZA58xjCZ5QB5EJ1p2CXxlY7XaSNS 6wzApuaHgGMJfjlnx21Izc9YTVgGjsZvP0ScjeZPeUvqZlh/KPraZfKPeT/gIo98 /D5cdPjv0DehmYzHPGrzpBZHcQDVoSbfMRhBGGDCELhMEcdggTqn7Sa4qBGe1KlR /M7EUkORPqIGCZiP1Iwt5MIVh5kRI4rRubeRS3b1YghwV6rrFhQykBwwdH0T+Jqp 7RhqReRtY5pcKK1frZ0TPkRSBlmP33aKthLoEkXqL2T6YYO+GvNWK5FXGXvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2BSCHpZE50O2hJnzspZ6qda5I6owHwYDVR0j BBgwFoAU1xNQOTnSVzpE+ilwPN3McE8Dp14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I5MDU3NjYtNDQwZS00YmNiLWFlNzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkz OUQyNTczQTQ0RkEyOTcwM0NERENDNzA0RjAzQTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEzNTAzOTM5RDI1NzNBNDRGQTI5NzAzQ0REQ0M3MDRGMDNB NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NEREND NzA0RjAzQTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCC7s5wuGNEvsLA2UApjgtG1jQl8wDztUrr 2hb06lE5vHPTBgZvH9diNj+D4GYpGarodb4P7YgzczS4ZyatKbQiymv4ApvdO0Wg /0j+TCYylTJ+YIeNhV1/EL22Rl+cyTRqgTSnuGsqu21S6pCwPZzjDfRJWFYUYJRc YN2eZn6yfwQVUOpKafQWydgUtVhto8VilAX7hqPm19niNS2DVHt07qPeEGxK0KZR +D0vZGCFlBvzpcZ5zsnLE1SULhkHmKVX5S4Hmqg/uVtu2xKsgdzE8BBKsGPtTj0a Z8q/dRCT5dTM8kYBgke6d3PGXBP5MoCbvatGr8J02f3iikii7Fk= -----END CERTIFICATE-----Generated at Tue May 5 11:14:16 2026 by rpki-client