$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft File: 01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft (raw, json) Hash identifier: ZiOKP71UdotdptlDQzh3dUsmiB1kp5bjXHUXaLY4940= Subject key identifier: 05:64:D9:A3:0F:C5:8F:4A:CD:77:21:54:28:BA:3F:C1:49:8C:E8:1F Authority key identifier: 01:F3:24:EF:5A:8F:6A:CC:92:17:4D:6A:EE:D1:12:9E:16:23:A6:16 Certificate issuer: /CN=01F324EF5A8F6ACC92174D6AEED1129E1623A616 Certificate serial: 3FEE3D3C9F19AD22B70F7342800CFD4E32FF2705 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft Manifest number: 05 Signing time: Tue 05 May 2026 08:03:36 +0000 Manifest this update: Tue 05 May 2026 07:58:36 +0000 Manifest next update: Wed 06 May 2026 09:46:36 +0000 Files and hashes: 1: 01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl (hash: WIQGW61Hw7Y7pQrHBl78oajBj6gg/i+eFb7Kk31+XMM=) 2: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: VsXO58FTVSxasgY1Mnu3yqI7EZkkcRqpzQFvmDd4qLs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ee:3d:3c:9f:19:ad:22:b7:0f:73:42:80:0c:fd:4e:32:ff:27:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01F324EF5A8F6ACC92174D6AEED1129E1623A616 Validity Not Before: May 5 07:58:36 2026 GMT Not After : May 6 09:46:36 2026 GMT Subject: CN=0564D9A30FC58F4ACD77215428BA3FC1498CE81F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6a:2f:ee:9a:81:57:1e:d0:6e:60:63:6a:40: 71:71:f7:61:ec:2d:76:87:b1:ea:d1:fe:cc:bd:25: 6f:1f:4a:48:ac:72:26:54:7e:98:38:74:9a:34:e9: 41:46:70:83:11:27:f0:15:de:44:66:15:9f:5a:97: bb:e7:fa:41:4f:90:a9:01:2c:3a:06:86:55:f5:3f: d6:eb:dd:d5:2f:77:71:67:67:38:6f:be:46:1f:ed: c8:5d:89:02:27:be:78:58:a3:37:41:d9:4a:ea:af: 24:71:6c:2f:c3:4b:2f:f8:8c:6b:58:9c:08:99:1c: 70:35:68:34:66:f7:e4:02:97:82:f4:04:2c:74:75: c8:b9:01:c7:51:ec:dc:11:d9:09:02:ef:ec:93:82: 5d:a7:e5:fc:96:34:c7:17:0c:3a:3c:b8:be:e8:11: 48:73:c4:97:39:d7:92:82:42:ba:63:ad:57:ca:ba: d3:62:13:68:a8:58:38:fa:90:c8:06:17:dd:bc:10: f9:8b:f5:dd:08:95:bd:ff:77:f3:b3:82:7c:3e:c0: b8:20:2a:c1:ab:96:5d:1a:0b:0c:62:56:f1:67:5c: 96:0e:f0:10:f1:3b:9d:8d:25:c3:e4:bc:8a:a7:6e: 5c:3d:0f:21:62:7c:56:08:f7:c8:d9:b1:aa:1c:e5: 05:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:64:D9:A3:0F:C5:8F:4A:CD:77:21:54:28:BA:3F:C1:49:8C:E8:1F X509v3 Authority Key Identifier: keyid:01:F3:24:EF:5A:8F:6A:CC:92:17:4D:6A:EE:D1:12:9E:16:23:A6:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:51:37:36:9a:af:9e:7a:3b:b7:da:17:4f:d6:df:c6:a2:21: c5:cd:96:57:86:9d:b0:47:72:41:c7:d9:53:1e:2a:49:6d:37: d7:c5:a9:fc:fd:6a:2c:d1:34:f4:d2:1c:41:b0:26:5c:fd:25: c0:b1:1a:1c:90:1b:45:d3:f3:33:03:1d:dc:88:4e:8c:99:34: ce:ee:1a:50:b1:2e:33:6a:29:80:1a:42:af:e0:f4:33:f5:cd: 14:df:20:af:e0:1d:04:1e:90:64:a2:30:78:39:d0:f1:72:cb: de:63:1c:46:ba:3e:af:18:f5:93:d0:f0:3e:e1:1a:ac:a8:99: 32:da:55:95:01:a6:15:d3:c0:05:36:78:d3:cd:5a:59:fc:9b: 5f:38:49:b3:c8:67:57:8c:6f:0c:6e:3b:fc:e2:9d:0d:c6:10: 25:65:82:74:9f:f4:43:88:c8:9a:cb:29:2a:ab:80:a3:5b:aa: dc:b5:9e:60:59:2e:44:c3:c6:13:e9:2c:c8:d1:ea:7d:26:eb: 65:47:f2:ae:bc:d8:6f:f7:15:a0:95:10:bd:4b:af:47:41:d2: 9d:43:0a:fc:b9:81:1a:58:76:d0:bd:70:66:c2:24:07:ae:1c: 71:7b:3f:85:e2:97:41:c6:63:a9:38:60:71:ff:1c:c6:9c:de: 0c:27:95:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+49PJ8ZrSK3D3NCgAz9TjL/JwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGMzI0RUY1QThGNkFDQzkyMTc0RDZBRUVEMTEyOUUx NjIzQTYxNjAeFw0yNjA1MDUwNzU4MzZaFw0yNjA1MDYwOTQ2MzZaMDMxMTAvBgNV BAMTKDA1NjREOUEzMEZDNThGNEFDRDc3MjE1NDI4QkEzRkMxNDk4Q0U4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtai/umoFXHtBuYGNqQHFx92Hs LXaHserR/sy9JW8fSkisciZUfpg4dJo06UFGcIMRJ/AV3kRmFZ9al7vn+kFPkKkB LDoGhlX1P9br3dUvd3FnZzhvvkYf7chdiQInvnhYozdB2UrqryRxbC/DSy/4jGtY nAiZHHA1aDRm9+QCl4L0BCx0dci5AcdR7NwR2QkC7+yTgl2n5fyWNMcXDDo8uL7o EUhzxJc515KCQrpjrVfKutNiE2ioWDj6kMgGF928EPmL9d0Ilb3/d/Ozgnw+wLgg KsGrll0aCwxiVvFnXJYO8BDxO52NJcPkvIqnblw9DyFifFYI98jZsaoc5QWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBWTZow/Fj0rNdyFUKLo/wUmM6B8wHwYDVR0j BBgwFoAUAfMk71qPasySF01q7tESnhYjphYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3OTQ3YWEtY2U2OS00MDEzLWEyNTYtNTg3OTlhNTY1ODFjLzAvMDFGMzI0RUY1 QThGNkFDQzkyMTc0RDZBRUVEMTEyOUUxNjIzQTYxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUYzMjRFRjVBOEY2QUNDOTIxNzRENkFFRUQxMTI5RTE2MjNB NjE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3OTQ3YWEtY2U2OS00MDEzLWEy NTYtNTg3OTlhNTY1ODFjLzAvMDFGMzI0RUY1QThGNkFDQzkyMTc0RDZBRUVEMTEy OUUxNjIzQTYxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZRNzaar556O7faF0/W38aiIcXNlleGnbBH ckHH2VMeKkltN9fFqfz9aizRNPTSHEGwJlz9JcCxGhyQG0XT8zMDHdyIToyZNM7u GlCxLjNqKYAaQq/g9DP1zRTfIK/gHQQekGSiMHg50PFyy95jHEa6Pq8Y9ZPQ8D7h GqyomTLaVZUBphXTwAU2eNPNWln8m184SbPIZ1eMbwxuO/zinQ3GECVlgnSf9EOI yJrLKSqrgKNbqty1nmBZLkTDxhPpLMjR6n0m62VH8q682G/3FaCVEL1Lr0dB0p1D Cvy5gRpYdtC9cGbCJAeuHHF7P4Xil0HGY6k4YHH/HMac3gwnlfM= -----END CERTIFICATE-----Generated at Tue May 5 17:52:57 2026 by rpki-client