$ rpki-client -vvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft File: CD846D565A6E2859697B59C438907050C12DE37D.mft (raw, json) Hash identifier: eSWNS+LRYyNOt47ue1A/rYXSWVlOCLQg0XUbDDzRsvQ= Subject key identifier: 02:44:A6:85:EF:90:F9:FB:52:D8:CD:D1:A5:3D:3A:6A:E4:72:19:29 Authority key identifier: CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D Certificate issuer: /CN=CD846D565A6E2859697B59C438907050C12DE37D Certificate serial: 728A2DA5D4EB9E0C7A0D334BD1B00680AA70F67C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft Manifest number: 05 Signing time: Tue 05 May 2026 08:56:30 +0000 Manifest this update: Tue 05 May 2026 08:51:30 +0000 Manifest next update: Wed 06 May 2026 09:07:30 +0000 Files and hashes: 1: CD846D565A6E2859697B59C438907050C12DE37D.crl (hash: jsOSFr4ECKCQnqz5sMydQFI82MS8g8FA/GhdWDVDlzQ=) 2: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (hash: tagwsSVL2euywnNYgfGcSI37agKbNG24pIwjEJuU+FQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.crl rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:8a:2d:a5:d4:eb:9e:0c:7a:0d:33:4b:d1:b0:06:80:aa:70:f6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD846D565A6E2859697B59C438907050C12DE37D Validity Not Before: May 5 08:51:30 2026 GMT Not After : May 6 09:07:30 2026 GMT Subject: CN=0244A685EF90F9FB52D8CDD1A53D3A6AE4721929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c5:30:f5:49:e4:cd:05:01:19:f0:15:27:84: 45:13:ae:c4:d6:8b:b1:5a:78:1a:46:9d:ce:7f:5f: a1:cd:29:40:95:cc:26:cc:56:df:92:a2:b6:f0:f2: a5:1a:48:f4:79:c7:31:6c:c4:05:f4:c1:eb:f3:b9: 41:45:50:d6:da:4b:4e:c0:36:95:19:69:97:bc:85: 36:44:9e:58:f4:63:7d:1e:db:6c:16:6f:ab:b1:7a: 2e:18:34:ed:7d:76:31:3b:05:93:9c:b6:65:7f:8c: 93:a4:7d:67:79:53:12:89:ae:c7:05:a9:96:9c:d9: ad:24:66:c7:f8:91:67:48:7e:30:41:0c:6a:4e:fd: d2:ce:86:79:6c:43:d5:b1:43:a7:3f:1d:a0:4c:af: 81:7d:50:1b:fe:84:0d:8c:c2:10:ac:72:ee:da:73: 9b:76:f8:4a:8a:40:24:8d:fd:27:08:9f:2b:81:a8: e5:5e:a9:c5:98:f5:69:f0:8b:c5:c4:27:21:00:db: 83:c8:2a:a0:f6:3c:97:da:c8:e7:ba:4e:bb:6e:0b: 59:0d:a9:3d:33:97:ba:0a:a7:64:a7:fb:bc:0f:45: ad:99:1a:e7:b2:12:6a:79:ca:fd:30:c6:88:12:22: a5:88:fb:fe:bb:8e:18:e6:d7:6b:4a:86:26:1a:a6: f1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:44:A6:85:EF:90:F9:FB:52:D8:CD:D1:A5:3D:3A:6A:E4:72:19:29 X509v3 Authority Key Identifier: keyid:CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:6d:18:af:b1:a2:2d:75:3c:1f:6a:dd:80:fb:2f:39:8f:55: 9c:42:4a:c7:0a:c9:79:d2:8a:21:87:2b:bf:a4:19:24:87:72: f7:ec:f4:f2:fa:af:68:58:f7:2a:0d:b3:48:1b:14:41:76:69: 77:7b:5c:c1:6b:15:2f:d7:c3:ad:ff:32:ad:c8:50:b4:08:17: 23:85:5c:55:a7:6b:2b:41:5a:1c:a7:78:3a:8e:65:3f:ad:9b: 7b:a8:0f:95:9a:8f:2f:e3:76:b7:74:05:b7:14:d7:a5:7f:b1: 8e:26:11:0c:4a:26:55:0b:21:e1:a7:68:9d:3a:fe:91:c1:59: a2:ef:f9:b8:19:b4:a9:1d:d4:10:d4:86:08:5d:87:d8:1b:3e: 52:61:dd:dc:37:ff:bc:bf:c7:ce:a8:c4:8a:51:13:dd:0a:96: a8:57:ce:04:d4:29:0b:20:0a:8f:da:16:9c:53:43:df:c4:80: 75:f7:a8:c0:98:04:bf:24:3a:3c:48:05:ea:f5:9c:ff:a1:56: 54:88:97:8f:34:55:02:8c:35:d3:e8:c8:15:8c:20:ea:ae:5e: 02:98:45:2d:e8:ad:64:e3:bd:c4:96:3b:11:d7:90:3a:6d:0d: cb:3e:3e:a5:70:0d:0c:3e:cd:e0:7e:51:65:ee:ce:b2:a8:c5: 34:fb:33:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcootpdTrngx6DTNL0bAGgKpw9nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDZENTY1QTZFMjg1OTY5N0I1OUM0Mzg5MDcwNTBD MTJERTM3RDAeFw0yNjA1MDUwODUxMzBaFw0yNjA1MDYwOTA3MzBaMDMxMTAvBgNV BAMTKDAyNDRBNjg1RUY5MEY5RkI1MkQ4Q0REMUE1M0QzQTZBRTQ3MjE5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCexTD1SeTNBQEZ8BUnhEUTrsTW i7FaeBpGnc5/X6HNKUCVzCbMVt+Sorbw8qUaSPR5xzFsxAX0wevzuUFFUNbaS07A NpUZaZe8hTZEnlj0Y30e22wWb6uxei4YNO19djE7BZOctmV/jJOkfWd5UxKJrscF qZac2a0kZsf4kWdIfjBBDGpO/dLOhnlsQ9WxQ6c/HaBMr4F9UBv+hA2MwhCscu7a c5t2+EqKQCSN/ScInyuBqOVeqcWY9Wnwi8XEJyEA24PIKqD2PJfayOe6TrtuC1kN qT0zl7oKp2Sn+7wPRa2ZGueyEmp5yv0wxogSIqWI+/67jhjm12tKhiYapvHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAkSmhe+Q+ftS2M3RpT06auRyGSkwHwYDVR0j BBgwFoAUzYRtVlpuKFlpe1nEOJBwUMEt430wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODkxZDNjMzAtOTVkYy00YjcyLWFlMWItYWQxZTk4YjBlMTc5LzEvQ0Q4NDZENTY1 QTZFMjg1OTY5N0I1OUM0Mzg5MDcwNTBDMTJERTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9DRDg0NkQ1NjVBNkUyODU5Njk3QjU5QzQzODkwNzA1MEMxMkRF MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzEvQ0Q4NDZENTY1QTZFMjg1OTY5N0I1OUM0Mzg5MDcw NTBDMTJERTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANdtGK+xoi11PB9q3YD7LzmPVZxCSscKyXnS iiGHK7+kGSSHcvfs9PL6r2hY9yoNs0gbFEF2aXd7XMFrFS/Xw63/Mq3IULQIFyOF XFWnaytBWhyneDqOZT+tm3uoD5Wajy/jdrd0BbcU16V/sY4mEQxKJlULIeGnaJ06 /pHBWaLv+bgZtKkd1BDUhghdh9gbPlJh3dw3/7y/x86oxIpRE90KlqhXzgTUKQsg Co/aFpxTQ9/EgHX3qMCYBL8kOjxIBer1nP+hVlSIl480VQKMNdPoyBWMIOquXgKY RS3orWTjvcSWOxHXkDptDcs+PqVwDQw+zeB+UWXuzrKoxTT7M9A= -----END CERTIFICATE-----Generated at Tue May 5 15:38:53 2026 by rpki-client