$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft File: D88374740C8E344956042586CFB98762292C9BED.mft (raw, json) Hash identifier: wA7KPrVnkaRpBAEEPkjDu+hNh1v3taPv2kKl7U9nJO4= Subject key identifier: 88:54:E9:D1:1E:28:0E:7A:2B:D7:B1:26:E6:44:40:38:5C:33:36:87 Authority key identifier: D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED Certificate issuer: /CN=D88374740C8E344956042586CFB98762292C9BED Certificate serial: 0A77C53F5C51F68159F371B372E01DD44B7A6308 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft Manifest number: 14 Signing time: Sat 16 May 2026 20:05:17 +0000 Manifest this update: Sat 16 May 2026 20:00:17 +0000 Manifest next update: Sun 17 May 2026 23:34:17 +0000 Files and hashes: 1: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: lP4x2eURdSlbv1g2ymW9KzMnGg6tWIQJ2QaIxsnxvtg=) 2: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: 5Is2TaaRgt6RZbxF5fTOe8DOSBDKMRf8+8dK8LxpkgM=) 3: D88374740C8E344956042586CFB98762292C9BED.crl (hash: AVwis3rMC8QgDZqM6NSp1ssvLqMK/KasI2WfsE/ctG4=) 4: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: pi4GpQEqsy5D0pG1/itP4Rd3gKkO+zB1DmoOxM7Tnmw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:77:c5:3f:5c:51:f6:81:59:f3:71:b3:72:e0:1d:d4:4b:7a:63:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88374740C8E344956042586CFB98762292C9BED Validity Not Before: May 16 20:00:17 2026 GMT Not After : May 17 23:34:17 2026 GMT Subject: CN=8854E9D11E280E7A2BD7B126E64440385C333687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:e3:19:b9:ae:a2:8e:48:d6:ee:5b:8c:d6: c3:ac:6b:86:24:1c:26:39:be:4c:23:12:ae:37:15: cd:c2:b7:94:05:e2:eb:27:05:0f:2d:6a:74:b8:23: 72:e3:bd:43:b7:99:10:1c:5c:d6:d0:31:ed:45:c7: 74:38:7d:ee:9e:11:89:29:9b:33:e4:1a:98:5b:37: 79:96:7d:a5:b6:84:0f:b2:8d:36:5e:53:c5:b1:28: f4:41:e1:32:cf:53:cb:7a:2c:10:85:09:c5:9f:32: 85:d8:d4:d3:a2:1f:51:67:f7:f5:20:63:9c:d0:56: 0b:11:4b:18:bc:b0:a7:a0:7c:4d:7b:98:16:a6:8b: d0:19:b7:5d:b2:8d:ba:0e:41:4c:d9:b8:7e:f4:d1: a4:ac:7d:8f:a4:50:ef:d2:d7:27:09:e4:9a:f7:91: bc:be:59:91:06:d8:18:16:7c:07:81:86:72:4f:56: 48:f9:d4:00:50:ba:52:f0:35:9d:69:a9:1d:5c:00: cb:6b:c0:66:70:69:23:f5:e2:43:10:60:29:16:88: 71:77:cc:37:72:3d:99:71:4f:ff:51:de:f5:0f:32: a1:8c:5e:7a:21:49:31:42:37:48:aa:9b:1a:c7:d7: 27:ae:6f:36:83:34:18:5b:de:63:0a:a9:c1:ac:02: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:54:E9:D1:1E:28:0E:7A:2B:D7:B1:26:E6:44:40:38:5C:33:36:87 X509v3 Authority Key Identifier: keyid:D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:be:d4:fa:68:56:bd:1e:69:13:81:dd:96:94:08:89:03:1a: c5:0e:d7:22:84:d3:ac:b4:11:c7:a9:f4:7d:bb:e5:8b:f9:df: 9d:0f:a6:5b:ff:65:fa:5d:09:83:a6:cb:a7:cf:b0:12:39:23: eb:aa:92:fd:94:ed:10:5f:c0:04:56:81:4d:8a:11:8d:79:d0: 4e:9f:1e:b9:ec:11:18:ce:7d:94:c8:f2:49:73:92:dd:18:d3: 0c:26:15:95:40:53:19:7c:15:3e:8e:08:2f:9e:c8:3d:45:65: fc:da:a9:95:1f:ba:3d:1a:f9:61:e2:99:58:17:3e:00:2a:0a: 07:80:b1:00:af:34:b7:1a:ba:13:fe:36:d0:b9:58:bc:06:f2: c6:7c:50:f5:18:89:11:50:76:54:19:67:61:82:f7:4f:8c:db: 93:93:a8:eb:04:98:6f:07:24:b7:3b:8b:88:9f:6a:b5:61:0a: ab:36:d7:2a:6a:99:a3:72:8a:6c:b8:02:9e:08:6e:7f:1a:87: 1c:9a:17:31:ca:f3:26:a2:67:1f:0f:e1:3b:bd:ab:50:5d:7e: 83:6c:e4:b5:76:44:c3:f2:3d:a3:00:77:f4:c1:30:4b:d8:72: 2d:20:8c:56:e4:a4:20:10:ed:90:73:cb:6e:80:43:8e:4a:6f: ae:b5:89:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCnfFP1xR9oFZ83GzcuAd1Et6YwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIy OTJDOUJFRDAeFw0yNjA1MTYyMDAwMTdaFw0yNjA1MTcyMzM0MTdaMDMxMTAvBgNV BAMTKDg4NTRFOUQxMUUyODBFN0EyQkQ3QjEyNkU2NDQ0MDM4NUMzMzM2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj3+MZua6ijkjW7luM1sOsa4Yk HCY5vkwjEq43Fc3Ct5QF4usnBQ8tanS4I3LjvUO3mRAcXNbQMe1Fx3Q4fe6eEYkp mzPkGphbN3mWfaW2hA+yjTZeU8WxKPRB4TLPU8t6LBCFCcWfMoXY1NOiH1Fn9/Ug Y5zQVgsRSxi8sKegfE17mBami9AZt12yjboOQUzZuH700aSsfY+kUO/S1ycJ5Jr3 kby+WZEG2BgWfAeBhnJPVkj51ABQulLwNZ1pqR1cAMtrwGZwaSP14kMQYCkWiHF3 zDdyPZlxT/9R3vUPMqGMXnohSTFCN0iqmxrH1yeubzaDNBhb3mMKqcGsAiIfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiFTp0R4oDnor17Em5kRAOFwzNocwHwYDVR0j BBgwFoAU2IN0dAyONElWBCWGz7mHYiksm+0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWViZTdhZDgtZTE1Yy00MDE0LWJmYjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQw QzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIyOTJDOUJFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODgzNzQ3NDBDOEUzNDQ5NTYwNDI1ODZDRkI5ODc2MjI5MkM5 QkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3 NjIyOTJDOUJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEq+1PpoVr0eaROB3ZaUCIkDGsUO1yKE06y0 Ecep9H275Yv5350Pplv/ZfpdCYOmy6fPsBI5I+uqkv2U7RBfwARWgU2KEY150E6f HrnsERjOfZTI8klzkt0Y0wwmFZVAUxl8FT6OCC+eyD1FZfzaqZUfuj0a+WHimVgX PgAqCgeAsQCvNLcauhP+NtC5WLwG8sZ8UPUYiRFQdlQZZ2GC90+M25OTqOsEmG8H JLc7i4ifarVhCqs21ypqmaNyimy4Ap4Ibn8ahxyaFzHK8yaiZx8P4Tu9q1BdfoNs 5LV2RMPyPaMAd/TBMEvYci0gjFbkpCAQ7ZBzy26AQ45Kb661iSE= -----END CERTIFICATE-----Generated at Sun May 17 00:03:38 2026 by rpki-client