$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft File: 84122DA5B146979D5AAE13129EB677B96C49C7F6.mft (raw, json) Hash identifier: X7uof61jZjHYzojoAS4in3KPJHsQ4DFdI4yHc4a2WTg= Subject key identifier: B2:F7:CC:B9:EC:B5:3D:05:82:67:D0:9F:B6:06:A5:22:32:FD:2A:BC Authority key identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6 Certificate issuer: /CN=84122DA5B146979D5AAE13129EB677B96C49C7F6 Certificate serial: 72452D4D94053C2C311D2503ACC91E292D19C4B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft Manifest number: 05 Signing time: Tue 05 May 2026 08:24:45 +0000 Manifest this update: Tue 05 May 2026 08:19:45 +0000 Manifest next update: Wed 06 May 2026 11:11:45 +0000 Files and hashes: 1: 84122DA5B146979D5AAE13129EB677B96C49C7F6.crl (hash: qu1qAAMU3qaeHvfXwbk1ul5N5DrR9rVE5+UCXWEO7Ao=) 2: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: LXKwnzjsakvh6k668BXuaYJ1O5iQ9reQNkhpZI7YDu8=) 3: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 2a7WLuRJ0dxekwgo8okkZl2guEN5PE3JgGMBxaSTXY4=) 4: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: u+tKwHgjMKGgdgEnZPp2mwsftX+fJPIHxzdML3oWuA4=) 5: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: fHid8e/HPZhTBqkYcMs+Y715ZVlDl6RBBe2DwEnsBPc=) 6: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: jhYHGOtLAWmv9OcO3/5rDKvnFPZl5OTObgAsQoi8r50=) 7: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: LWJq/XJLjGCHAx0PdP5FSd33v0EqmvbG5/RZUAKgCgs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 11:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:45:2d:4d:94:05:3c:2c:31:1d:25:03:ac:c9:1e:29:2d:19:c4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84122DA5B146979D5AAE13129EB677B96C49C7F6 Validity Not Before: May 5 08:19:45 2026 GMT Not After : May 6 11:11:45 2026 GMT Subject: CN=B2F7CCB9ECB53D058267D09FB606A52232FD2ABC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:65:fb:f7:14:67:0a:03:6c:4b:5a:b7:6f:f8: f6:8b:e1:11:2e:62:b8:bd:b3:ea:6c:d6:d1:80:41: 54:fc:38:42:f2:83:87:6a:f5:78:99:7f:36:13:f1: aa:99:23:1b:d0:53:dc:fc:64:0a:39:9f:13:08:f5: 3e:b3:57:4b:ec:86:38:a9:13:1e:b0:bf:04:27:61: 02:b6:54:b1:b8:97:c4:2f:bd:10:f6:75:3a:f3:a5: c2:5b:0b:58:a6:72:74:70:24:d8:77:91:9d:b6:f7: a2:ad:1c:18:39:3b:85:0b:d4:92:0a:d2:e7:08:72: 4c:f4:70:e3:33:d3:21:34:8c:3a:cb:3d:b2:2e:a2: db:fe:f1:d5:e1:9f:70:e9:25:98:39:5b:68:bd:d0: 18:7a:f9:04:4d:1f:17:61:bc:da:e8:6c:d1:68:f0: 7e:8e:50:9c:f0:ba:36:95:38:a0:10:ff:a1:29:b9: 48:74:81:5d:4f:e8:39:4b:de:2f:a7:ab:5a:ff:6f: 76:e5:04:e5:33:9d:d9:6b:94:d0:87:09:07:11:0a: d5:46:8d:48:2c:74:f2:df:83:e0:71:7c:08:29:b8: 54:bf:8e:f5:1b:4b:d6:e5:b2:53:12:a6:8d:2b:c8: cf:ad:bf:db:21:bd:dd:5a:8b:a9:11:62:43:ff:2c: fe:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F7:CC:B9:EC:B5:3D:05:82:67:D0:9F:B6:06:A5:22:32:FD:2A:BC X509v3 Authority Key Identifier: keyid:84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a4:aa:c1:b2:9e:f3:0c:a6:66:eb:b1:83:b8:b0:0a:60:fa: 9c:f7:50:6c:e4:28:3d:8a:b6:e5:00:e0:e8:f9:a0:e3:4c:98: 6a:1f:01:d3:83:15:49:38:fd:9b:da:98:e6:ee:d5:72:4a:07: db:87:5b:20:7e:1f:b8:98:77:93:46:8c:e7:a9:ee:69:eb:d1: b0:af:77:c1:2b:d2:bd:8d:5d:9a:ff:0e:ce:df:76:9b:49:85: b0:73:2f:19:1c:8c:d1:08:bb:a6:58:07:6b:2c:11:4b:36:61: 70:c1:b9:96:93:41:9c:ab:2d:70:3b:a4:b7:62:1a:b5:58:3b: f7:4e:47:b3:bc:a6:49:6b:18:02:78:ee:5b:a4:94:c3:d4:e3: 8d:f0:ae:4b:57:3b:cc:3c:f1:23:99:e3:03:07:46:bd:63:f4: 23:a9:63:16:b7:2a:98:27:53:65:f0:3a:92:30:9e:f1:c2:62: 76:57:9c:8c:ef:29:18:15:4c:f8:74:3a:97:82:42:65:5b:0e: fa:69:37:fd:12:f9:99:df:3d:88:ee:ab:5a:7d:1d:b0:c0:ed: 56:4b:e2:27:ce:19:d7:5f:55:6e:8f:aa:55:84:e4:77:c9:a8: 38:f9:91:03:92:a0:85:16:3f:80:6d:18:7c:c1:04:08:e8:5e: 8f:59:59:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUckUtTZQFPCwxHSUDrMkeKS0ZxLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2 QzQ5QzdGNjAeFw0yNjA1MDUwODE5NDVaFw0yNjA1MDYxMTExNDVaMDMxMTAvBgNV BAMTKEIyRjdDQ0I5RUNCNTNEMDU4MjY3RDA5RkI2MDZBNTIyMzJGRDJBQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjZfv3FGcKA2xLWrdv+PaL4REu Yri9s+ps1tGAQVT8OELyg4dq9XiZfzYT8aqZIxvQU9z8ZAo5nxMI9T6zV0vshjip Ex6wvwQnYQK2VLG4l8QvvRD2dTrzpcJbC1imcnRwJNh3kZ2296KtHBg5O4UL1JIK 0ucIckz0cOMz0yE0jDrLPbIuotv+8dXhn3DpJZg5W2i90Bh6+QRNHxdhvNrobNFo 8H6OUJzwujaVOKAQ/6EpuUh0gV1P6DlL3i+nq1r/b3blBOUzndlrlNCHCQcRCtVG jUgsdPLfg+BxfAgpuFS/jvUbS9blslMSpo0ryM+tv9shvd1ai6kRYkP/LP5jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsvfMuey1PQWCZ9CftgalIjL9KrwwHwYDVR0j BBgwFoAUhBItpbFGl51arhMSnrZ3uWxJx/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWY4NmIxMmUtZTU3NC00MjZiLWFhNmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVC MTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2QzQ5QzdGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDEyMkRBNUIxNDY5NzlENUFBRTEzMTI5RUI2NzdCOTZDNDlD N0Y2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3 Qjk2QzQ5QzdGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADukqsGynvMMpmbrsYO4sApg+pz3UGzkKD2K tuUA4Oj5oONMmGofAdODFUk4/ZvamObu1XJKB9uHWyB+H7iYd5NGjOep7mnr0bCv d8Er0r2NXZr/Ds7fdptJhbBzLxkcjNEIu6ZYB2ssEUs2YXDBuZaTQZyrLXA7pLdi GrVYO/dOR7O8pklrGAJ47luklMPU443wrktXO8w88SOZ4wMHRr1j9COpYxa3Kpgn U2XwOpIwnvHCYnZXnIzvKRgVTPh0OpeCQmVbDvppN/0S+ZnfPYjuq1p9HbDA7VZL 4ifOGddfVW6PqlWE5HfJqDj5kQOSoIUWP4BtGHzBBAjoXo9ZWS8= -----END CERTIFICATE-----Generated at Tue May 5 17:58:24 2026 by rpki-client