$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft File: 84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft (raw, json) Hash identifier: m6/NPTOLPdGY96txP3dob1pOZHXYP9l62GQV0N/QqwA= Subject key identifier: 7F:58:04:55:14:1A:B6:03:EF:45:37:29:46:BE:BD:55:C5:98:FB:AC Authority key identifier: 84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1 Certificate issuer: /CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1 Certificate serial: 15BEC5BB5FE4E681D5F2A6F7E0587457C2EDC8BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft Manifest number: 05 Signing time: Tue 05 May 2026 07:37:37 +0000 Manifest this update: Tue 05 May 2026 07:32:37 +0000 Manifest next update: Wed 06 May 2026 10:02:37 +0000 Files and hashes: 1: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: WmY+n1lGNZlUUH5ZggQpvj8af92oWZ8YbeF8/QwNgtQ=) 2: 84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl (hash: r7ADEFzlh3mE2fe5rxijA9Nz75m4zE92WjsDgPPHUcg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:be:c5:bb:5f:e4:e6:81:d5:f2:a6:f7:e0:58:74:57:c2:ed:c8:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1 Validity Not Before: May 5 07:32:37 2026 GMT Not After : May 6 10:02:37 2026 GMT Subject: CN=7F580455141AB603EF45372946BEBD55C598FBAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:a2:cf:0e:f7:e7:57:f2:57:25:cd:a1:cd: 8d:1d:19:c0:cc:e5:c3:12:b6:0a:95:db:3e:22:6d: dc:30:e1:17:b4:e5:46:6a:da:4a:f2:6c:0f:26:ce: 2f:78:dc:70:f4:e9:00:59:90:fe:f6:b7:fd:07:1c: e6:50:b1:f6:1f:78:27:3e:9a:f8:33:7c:7f:15:7b: 1c:ef:d8:70:89:54:d2:a5:fc:df:fa:77:91:ff:bb: 97:61:42:66:f6:dd:23:bd:82:78:5c:82:30:ec:6a: f1:95:ac:36:53:88:8e:c7:5f:57:a5:ef:33:06:ae: b9:3e:66:ad:d4:e4:d1:5f:73:77:b1:66:c1:66:06: 25:e1:e0:f9:12:3e:e9:2f:4a:a7:c6:96:1e:25:d4: 29:91:0f:0d:f5:4b:00:2a:c9:2a:9b:79:b0:46:02: 2b:90:df:ad:ef:60:ac:06:10:89:9e:96:eb:ca:8c: 5e:44:23:9f:69:1a:91:44:f8:7c:92:71:7d:ce:2f: 33:52:89:15:df:c6:33:10:ca:21:ed:98:f3:d8:f4: 7a:d4:0d:4b:7b:a3:a4:f6:76:3b:92:b1:c3:58:a3: db:8e:13:6d:93:60:8c:a8:59:c0:94:61:76:79:1c: d8:03:97:29:5f:86:c3:c8:ff:8a:22:91:16:d3:3f: 5d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:58:04:55:14:1A:B6:03:EF:45:37:29:46:BE:BD:55:C5:98:FB:AC X509v3 Authority Key Identifier: keyid:84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:cd:48:60:2e:58:3f:a5:fb:79:6c:a8:e0:4a:d4:e1:a7:04: bb:44:88:68:0f:d5:50:d6:95:a5:1a:4b:96:d4:9e:14:98:85: 5e:2d:7a:f7:db:71:8e:29:25:3e:e9:d7:62:06:5a:c7:b5:fa: fc:1b:66:51:b1:bb:dc:b9:59:62:fa:46:6b:89:b0:a5:68:e9: 7b:0b:e6:6b:e6:36:90:3f:7f:26:f7:a0:c4:aa:36:0e:57:44: 66:0c:18:6b:48:f7:41:6e:d4:69:43:81:6a:5f:bd:7a:4a:12: 20:ba:3a:32:e4:4f:75:4d:97:8a:ec:ef:75:c9:1d:0a:87:d3: 32:11:91:28:40:d9:4b:81:7d:af:44:20:0f:8a:2f:73:f4:e2: fe:97:60:44:b0:50:06:48:d2:fa:ca:45:76:0e:90:12:ee:a5: 69:e5:89:6e:8d:fa:68:17:df:7a:ec:82:d6:28:bd:64:28:75: 50:52:b0:dc:6d:46:50:c7:10:fd:78:44:89:07:6d:36:f9:3e: da:47:3a:3d:f5:61:92:61:79:58:5d:44:7a:93:7a:9e:cb:55: 04:b2:e7:97:da:44:64:79:85:73:00:ed:91:ea:89:5d:e9:7d: 0e:ca:18:2e:88:bd:fe:a0:4c:06:28:36:89:6e:9f:ac:da:de: 56:5a:d7:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFb7Fu1/k5oHV8qb34Fh0V8LtyL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRFRTY0REE1MTA4MkIzMDk0OEQxMkY2RTE0QjhFQkNG MUQ2NThEMTAeFw0yNjA1MDUwNzMyMzdaFw0yNjA1MDYxMDAyMzdaMDMxMTAvBgNV BAMTKDdGNTgwNDU1MTQxQUI2MDNFRjQ1MzcyOTQ2QkVCRDU1QzU5OEZCQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSMaLPDvfnV/JXJc2hzY0dGcDM 5cMStgqV2z4ibdww4Re05UZq2krybA8mzi943HD06QBZkP72t/0HHOZQsfYfeCc+ mvgzfH8Vexzv2HCJVNKl/N/6d5H/u5dhQmb23SO9gnhcgjDsavGVrDZTiI7HX1el 7zMGrrk+Zq3U5NFfc3exZsFmBiXh4PkSPukvSqfGlh4l1CmRDw31SwAqySqbebBG AiuQ363vYKwGEImeluvKjF5EI59pGpFE+HyScX3OLzNSiRXfxjMQyiHtmPPY9HrU DUt7o6T2djuSscNYo9uOE22TYIyoWcCUYXZ5HNgDlylfhsPI/4oikRbTP13HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf1gEVRQatgPvRTcpRr69VcWY+6wwHwYDVR0j BBgwFoAUhO5k2lEIKzCUjRL24UuOvPHWWNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ3ZjllZjQtZjk5Zi00NGZmLWI5NjgtNzBkNDUyNGQ3MjA3LzAvODRFRTY0REE1 MTA4MkIzMDk0OEQxMkY2RTE0QjhFQkNGMUQ2NThEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NEVFNjREQTUxMDgyQjMwOTQ4RDEyRjZFMTRCOEVCQ0YxRDY1 OEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ3ZjllZjQtZjk5Zi00NGZmLWI5 NjgtNzBkNDUyNGQ3MjA3LzAvODRFRTY0REE1MTA4MkIzMDk0OEQxMkY2RTE0QjhF QkNGMUQ2NThEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnNSGAuWD+l+3lsqOBK1OGnBLtEiGgP1VDW laUaS5bUnhSYhV4tevfbcY4pJT7p12IGWse1+vwbZlGxu9y5WWL6RmuJsKVo6XsL 5mvmNpA/fyb3oMSqNg5XRGYMGGtI90Fu1GlDgWpfvXpKEiC6OjLkT3VNl4rs73XJ HQqH0zIRkShA2UuBfa9EIA+KL3P04v6XYESwUAZI0vrKRXYOkBLupWnliW6N+mgX 33rsgtYovWQodVBSsNxtRlDHEP14RIkHbTb5PtpHOj31YZJheVhdRHqTep7LVQSy 55faRGR5hXMA7ZHqiV3pfQ7KGC6Ivf6gTAYoNolun6za3lZa1yQ= -----END CERTIFICATE-----Generated at Tue May 5 17:59:09 2026 by rpki-client