$ rpki-client -vvf rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft File: A100A99332CE78931B9E02D4EFEE6712B81443A5.mft (raw, json) Hash identifier: B2Io4k5LbNv49zriJEZ9lEJLyRxtMb9MCsB7KjzS6o4= Subject key identifier: 08:5F:79:70:5C:62:9B:E6:0A:5B:8D:FE:FE:C5:57:5B:AF:54:9E:70 Authority key identifier: A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 Certificate issuer: /CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Certificate serial: 61903CEE61807AF889CE427900AC4446453229AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft Manifest number: 25 Signing time: Fri 29 May 2026 12:09:49 +0000 Manifest this update: Fri 29 May 2026 12:04:49 +0000 Manifest next update: Sat 30 May 2026 15:51:49 +0000 Files and hashes: 1: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: DTmwpednkI6HsiidwVpKHLiGYfMBV1fbHQp1IFSmAn0=) 2: 3130332e32362e3139312e302f32342d3234203d3e20313530323639.roa (hash: ZcmU1/1tmDS14EVy1azjLSMcCXj3VjCECbts/S2roW8=) 3: A100A99332CE78931B9E02D4EFEE6712B81443A5.crl (hash: V0OgOwN+L1kI2+oi5jMg1STKdEWxJ/29NrntdtPfDg0=) 4: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: heQq7HcquDyrw94B2s2im1ZCA88nQvwu0Cy2cBDthxc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 03:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:90:3c:ee:61:80:7a:f8:89:ce:42:79:00:ac:44:46:45:32:29:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A100A99332CE78931B9E02D4EFEE6712B81443A5 Validity Not Before: May 29 12:04:49 2026 GMT Not After : May 30 15:51:49 2026 GMT Subject: CN=085F79705C629BE60A5B8DFEFEC5575BAF549E70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:0a:4b:b9:8d:31:b0:b1:9a:bb:bd:fb:54: a1:92:41:be:6a:d8:2d:3b:c2:0e:78:85:74:71:b3: da:84:8f:55:03:66:8b:35:48:39:fe:4c:8b:4f:82: 23:aa:7d:f9:4c:0e:ee:a9:cb:1f:8d:3d:c6:b5:90: 74:ed:5b:e5:6f:6b:7e:7a:a2:6c:eb:d7:f9:5c:65: 8e:2a:31:ff:53:92:d3:e0:e9:67:21:57:10:d4:a2: aa:84:69:f9:c9:3e:23:44:34:25:b8:43:53:46:6a: 3e:8e:5d:68:47:7b:89:88:a9:13:99:46:8f:5d:8a: 26:a9:fd:42:09:8b:cf:20:16:68:16:74:62:77:c9: d4:69:ef:1f:28:a6:90:a1:01:e5:a0:1d:d3:71:60: af:43:53:33:f9:96:c3:81:3a:dc:13:46:fa:fa:cd: 0a:82:45:6c:f4:d4:6e:5f:a6:9c:80:b7:5b:32:1d: b8:46:c5:2e:5e:5e:6a:1d:bd:5d:cf:f9:a7:d2:39: 5f:c0:b7:e9:4f:4b:2c:f5:fc:1d:3d:24:dc:10:44: b7:8e:99:90:9f:23:48:64:65:7d:ee:75:38:f5:6a: 30:2c:94:8f:ec:cf:49:5e:34:50:f1:d8:6c:64:0f: aa:3b:63:fc:b0:88:2d:46:a2:72:ad:c3:f5:44:99: 38:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5F:79:70:5C:62:9B:E6:0A:5B:8D:FE:FE:C5:57:5B:AF:54:9E:70 X509v3 Authority Key Identifier: keyid:A1:00:A9:93:32:CE:78:93:1B:9E:02:D4:EF:EE:67:12:B8:14:43:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A100A99332CE78931B9E02D4EFEE6712B81443A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/A100A99332CE78931B9E02D4EFEE6712B81443A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:cf:bf:79:88:35:40:51:14:28:db:85:7a:d5:6f:ac:41:db: 78:cd:8e:e9:0f:8f:89:2a:f6:21:13:15:ab:dd:32:78:94:1c: 69:0d:cc:ec:4f:cd:53:b3:26:62:53:a1:2f:c4:b4:70:e3:bd: 36:ac:a5:af:c4:e1:be:a8:0f:d0:b2:86:4d:ad:bd:80:4e:88: 26:4c:34:5a:f2:43:f4:5f:40:64:3d:85:2e:94:ab:53:43:44: 60:36:5e:1e:19:39:9e:86:36:39:b9:ec:18:fe:73:1a:69:ed: e9:dc:88:5a:bc:37:c5:82:1a:e2:7f:1a:99:24:4b:0f:9e:54: 2b:c6:7e:d1:5b:44:82:8f:27:14:51:a7:cc:01:da:2a:2a:ad: 37:2b:3b:53:98:da:4f:57:98:15:27:c9:a7:99:fc:79:b6:75: 6a:df:81:a2:cb:31:f1:7a:9c:dc:8f:49:70:6d:0b:48:2f:00: 59:ec:1e:7f:7b:a1:c6:96:21:46:8e:a0:a6:5f:d9:5b:d1:89: 30:54:ac:6c:d1:07:40:a5:60:4c:2b:40:00:27:86:d9:1e:3c: 0b:81:b3:a9:87:ee:17:23:ab:34:5f:8a:87:c9:4c:a0:51:cc: e0:a4:3d:fa:f7:4e:b0:a2:73:0e:59:b1:46:0a:7a:07:69:82: 2e:1a:ab:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYZA87mGAeviJzkJ5AKxERkUyKaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJC ODE0NDNBNTAeFw0yNjA1MjkxMjA0NDlaFw0yNjA1MzAxNTUxNDlaMDMxMTAvBgNV BAMTKDA4NUY3OTcwNUM2MjlCRTYwQTVCOERGRUZFQzU1NzVCQUY1NDlFNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KQpLuY0xsLGau737VKGSQb5q 2C07wg54hXRxs9qEj1UDZos1SDn+TItPgiOqfflMDu6pyx+NPca1kHTtW+Vva356 omzr1/lcZY4qMf9TktPg6WchVxDUoqqEafnJPiNENCW4Q1NGaj6OXWhHe4mIqROZ Ro9diiap/UIJi88gFmgWdGJ3ydRp7x8oppChAeWgHdNxYK9DUzP5lsOBOtwTRvr6 zQqCRWz01G5fppyAt1syHbhGxS5eXmodvV3P+afSOV/At+lPSyz1/B09JNwQRLeO mZCfI0hkZX3udTj1ajAslI/sz0leNFDx2GxkD6o7Y/ywiC1GonKtw/VEmTgBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCF95cFxim+YKW43+/sVXW69UnnAwHwYDVR0j BBgwFoAUoQCpkzLOeJMbngLU7+5nErgUQ6UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjY5MjZjODItYzhlNS00Zjk3LTg5OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMz MkNFNzg5MzFCOUUwMkQ0RUZFRTY3MTJCODE0NDNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTAwQTk5MzMyQ0U3ODkzMUI5RTAyRDRFRkVFNjcxMkI4MTQ0 M0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvQTEwMEE5OTMzMkNFNzg5MzFCOUUwMkQ0RUZFRTY3 MTJCODE0NDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLPv3mINUBRFCjbhXrVb6xB23jNjukPj4kq 9iETFavdMniUHGkNzOxPzVOzJmJToS/EtHDjvTaspa/E4b6oD9Cyhk2tvYBOiCZM NFryQ/RfQGQ9hS6Uq1NDRGA2Xh4ZOZ6GNjm57Bj+cxpp7enciFq8N8WCGuJ/Gpkk Sw+eVCvGftFbRIKPJxRRp8wB2ioqrTcrO1OY2k9XmBUnyaeZ/Hm2dWrfgaLLMfF6 nNyPSXBtC0gvAFnsHn97ocaWIUaOoKZf2VvRiTBUrGzRB0ClYEwrQAAnhtkePAuB s6mH7hcjqzRfiofJTKBRzOCkPfr3TrCicw5ZsUYKegdpgi4aq4s= -----END CERTIFICATE-----Generated at Fri May 29 17:04:34 2026 by rpki-client