$ rpki-client -vvf rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft File: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft (raw, json) Hash identifier: 3O43rEge9mWvmOxgyomB2owa8CkKnqW5B2LZyq+rzao= Subject key identifier: D6:36:83:68:63:0B:0C:B8:B6:4D:B6:D7:D7:DB:C5:90:41:A9:13:C2 Authority key identifier: B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E Certificate issuer: /CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Certificate serial: 2C7B86B4AB9D1343B822A7FBD810CEDA006EEC7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft Manifest number: 05 Signing time: Tue 05 May 2026 05:07:27 +0000 Manifest this update: Tue 05 May 2026 05:02:27 +0000 Manifest next update: Wed 06 May 2026 07:33:27 +0000 Files and hashes: 1: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: GMFkIV2sJittLK9WJRbpUUZTvqKbZ67tY6581Ugt0f0=) 2: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: dKZb6aaVbPeaaWDRCiGgkOh/h5qEP/6edHL6dbBuTxw=) 3: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl (hash: XhuVY5pmQNxwT+bB7avnxNyHnrd1s73S1SQGvTv87W8=) 4: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: q3EmEpNbHapfK5Arcd9ZblsuZXEZdJPpzKqJnzLo0DY=) 5: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: dOi5t8zi5JAQodBD98mcsNs1h4au7JIDI+EvfriW4vk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 07:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:7b:86:b4:ab:9d:13:43:b8:22:a7:fb:d8:10:ce:da:00:6e:ec:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Validity Not Before: May 5 05:02:27 2026 GMT Not After : May 6 07:33:27 2026 GMT Subject: CN=D6368368630B0CB8B64DB6D7D7DBC59041A913C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ce:72:81:65:28:d4:e6:ec:d8:eb:12:8c:95: 16:f2:32:08:64:e6:40:23:b5:b8:13:6a:09:59:b2: 9e:18:70:b6:11:c6:84:20:7f:98:26:44:b9:b3:25: 05:5e:93:87:fd:14:68:4f:26:37:c0:00:42:9f:d6: db:0e:88:96:55:c9:8d:c9:01:4f:da:18:74:68:56: 4c:f2:12:12:55:02:9c:6f:b4:0f:f0:bd:ea:ec:76: 7e:3e:d4:63:aa:7d:e6:37:59:11:5d:28:92:2c:57: 31:c2:f0:52:08:85:2f:6d:fd:d5:76:15:ea:3e:20: 71:4f:ba:af:3f:48:53:2d:db:3b:9f:03:5f:a1:31: a7:8f:ce:47:30:58:d7:8c:dc:e7:21:10:09:c8:8b: 89:7b:0f:12:b5:bd:1e:d6:0d:ad:6f:7e:56:e3:52: 90:dd:08:99:71:f2:16:35:b6:72:ca:b8:5a:96:62: b7:55:b8:94:75:31:8f:f0:55:eb:97:29:11:1a:7b: 51:19:72:02:99:1a:6b:82:9d:b7:79:c3:5e:dc:dc: 8a:21:be:3f:99:ee:15:24:1f:58:b5:aa:b8:31:ce: 60:c8:f0:04:5c:a4:05:23:aa:f3:ae:b2:71:a9:51: 1d:0f:cb:35:96:17:16:f9:8e:b3:c5:ad:f2:fd:39: ee:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:36:83:68:63:0B:0C:B8:B6:4D:B6:D7:D7:DB:C5:90:41:A9:13:C2 X509v3 Authority Key Identifier: keyid:B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:01:ed:93:15:99:e1:34:77:b9:26:37:3f:4c:5c:36:73:93: 8a:c8:e1:97:11:e4:38:d7:4e:c3:a8:a2:f9:26:85:74:bb:46: 3d:78:38:bd:63:8a:52:34:96:1d:d8:5c:3e:52:72:90:10:12: ad:38:20:fa:82:62:12:ee:cd:9f:95:e1:7a:5d:28:0f:b2:8c: 13:59:b8:eb:9c:9f:59:fa:d0:a1:5e:63:83:9f:5a:c9:41:29: 37:72:bd:3b:b1:a0:ab:67:c4:eb:db:44:b2:d2:e9:66:ea:e5: bb:20:34:47:ea:82:3c:07:50:3b:99:f4:ee:96:99:5f:df:7c: 64:31:f7:71:eb:a3:c5:71:22:3b:3b:85:fb:47:4d:cb:77:92: 98:76:51:08:8a:72:db:f5:6e:07:b0:9a:e4:f3:a0:57:68:1c: 8a:85:a5:08:59:05:3f:ed:d5:c8:a5:9f:1a:e4:b0:6e:89:fa: 36:3d:1a:39:c5:28:10:9b:7c:19:af:10:4f:69:bb:70:cd:2c: d2:90:a8:d3:2f:c6:00:27:1e:96:28:c3:43:16:c5:a5:2e:96: 83:dc:99:32:f9:d4:85:a5:7f:ee:d1:c7:1b:89:7f:38:63:c4: 27:7e:5d:18:24:2b:65:e9:03:12:40:ef:fd:a4:63:07:02:25: 4c:a0:08:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHuGtKudE0O4Iqf72BDO2gBu7HowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBB QzFGQkY2RTAeFw0yNjA1MDUwNTAyMjdaFw0yNjA1MDYwNzMzMjdaMDMxMTAvBgNV BAMTKEQ2MzY4MzY4NjMwQjBDQjhCNjREQjZEN0Q3REJDNTkwNDFBOTEzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTznKBZSjU5uzY6xKMlRbyMghk 5kAjtbgTaglZsp4YcLYRxoQgf5gmRLmzJQVek4f9FGhPJjfAAEKf1tsOiJZVyY3J AU/aGHRoVkzyEhJVApxvtA/wversdn4+1GOqfeY3WRFdKJIsVzHC8FIIhS9t/dV2 Feo+IHFPuq8/SFMt2zufA1+hMaePzkcwWNeM3OchEAnIi4l7DxK1vR7WDa1vflbj UpDdCJlx8hY1tnLKuFqWYrdVuJR1MY/wVeuXKREae1EZcgKZGmuCnbd5w17c3Ioh vj+Z7hUkH1i1qrgxzmDI8ARcpAUjqvOusnGpUR0PyzWWFxb5jrPFrfL9Oe5fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1jaDaGMLDLi2TbbX19vFkEGpE8IwHwYDVR0j BBgwFoAUsWjPo3n06s0V2w73bOvFgKwfv24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTIxMjdmZWItOTYxNS00YzU4LWEzYmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3 OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBBQzFGQkY2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTY4Q0ZBMzc5RjRFQUNEMTVEQjBFRjc2Q0VCQzU4MEFDMUZC RjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1 ODBBQzFGQkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYB7ZMVmeE0d7kmNz9MXDZzk4rI4ZcR5DjX TsOoovkmhXS7Rj14OL1jilI0lh3YXD5ScpAQEq04IPqCYhLuzZ+V4XpdKA+yjBNZ uOucn1n60KFeY4OfWslBKTdyvTuxoKtnxOvbRLLS6Wbq5bsgNEfqgjwHUDuZ9O6W mV/ffGQx93Hro8VxIjs7hftHTct3kph2UQiKctv1bgewmuTzoFdoHIqFpQhZBT/t 1cilnxrksG6J+jY9GjnFKBCbfBmvEE9pu3DNLNKQqNMvxgAnHpYow0MWxaUuloPc mTL51IWlf+7RxxuJfzhjxCd+XRgkK2XpAxJA7/2kYwcCJUygCF4= -----END CERTIFICATE-----Generated at Tue May 5 17:51:36 2026 by rpki-client