$ rpki-client -vvf rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft File: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft (raw, json) Hash identifier: /KhJyBsDpLydlvEo5KVh1uIcMFzJEyHTWtMa3rb5Nqw= Subject key identifier: 0B:BB:32:5E:EB:DE:7C:98:11:0E:33:01:5C:3D:13:86:36:A5:A6:6A Authority key identifier: A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB Certificate issuer: /CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB Certificate serial: 10460E3AE67B495A3C6E74201985DE3F247E4FE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft Manifest number: 05 Signing time: Tue 05 May 2026 11:12:09 +0000 Manifest this update: Tue 05 May 2026 11:07:09 +0000 Manifest next update: Wed 06 May 2026 14:18:09 +0000 Files and hashes: 1: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: arp0yrywbkd7qbxITxZkrDIJBVD5KXTuWljeFd5i2Ew=) 2: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: DwAPimZJbs1WQtoDvmv2aTJgkFvbbEdXOIPeLqLhsYM=) 3: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: gUMtJPlmcfCKnK+8j2GeQFyhHBPFelpdjIC7KLgp3HM=) 4: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl (hash: hZ9YjnzAXw8SwPebOKjWraDvJH2M2ynxzo+wYydXaOs=) 5: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: C/DT7XHL3SGEbqpViWF85bXoznD5c80gdYcaatqLy54=) 6: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: J7QP2a/G6U6CecSpH3luJmb2dfsPBa3lWp+XbtAjzpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:46:0e:3a:e6:7b:49:5a:3c:6e:74:20:19:85:de:3f:24:7e:4f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB Validity Not Before: May 5 11:07:09 2026 GMT Not After : May 6 14:18:09 2026 GMT Subject: CN=0BBB325EEBDE7C98110E33015C3D138636A5A66A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:bb:87:dd:ae:88:b6:0e:5c:8c:c9:86:78:b7: df:4d:bd:7a:3c:92:a5:0f:8f:fe:25:fb:f9:69:d9: e2:74:10:85:a4:d3:1d:0b:58:71:e1:b7:f0:f3:fd: 6d:76:94:a1:21:f9:42:ff:f4:f7:ce:3a:68:aa:ea: ca:95:75:b8:44:f4:2e:d7:e3:bf:3b:8b:2e:25:5f: 89:ea:fa:00:b9:4d:79:78:bd:c7:9c:3f:84:2b:96: 16:92:43:d3:8b:c6:7f:88:56:5f:c6:6b:2f:8f:30: 8f:98:f2:6f:b0:b9:3d:0a:a2:11:c5:66:49:f6:ed: 17:6d:33:28:9a:bf:5c:76:e6:82:f6:72:75:6f:28: 77:43:e1:e8:d0:a6:01:df:aa:24:fc:9e:70:f6:57: ca:c5:0a:13:6c:ef:36:87:76:f1:49:94:f7:cd:fd: a0:8f:cc:71:2f:c0:e2:c7:5e:d8:52:4f:0e:f6:83: 89:0b:48:a0:62:8f:d3:2f:2c:c6:0f:0c:5b:d5:93: 32:aa:2d:d3:fd:ad:d9:99:03:ff:ea:35:48:41:fc: ef:de:cf:da:d7:6c:66:8a:c5:7c:e8:d0:ca:ad:f6: 7c:7c:57:75:54:1b:b8:39:b6:12:f1:4a:73:26:f8: 1a:02:22:71:2b:8e:54:06:be:0e:4a:fd:39:73:2c: e2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BB:32:5E:EB:DE:7C:98:11:0E:33:01:5C:3D:13:86:36:A5:A6:6A X509v3 Authority Key Identifier: keyid:A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:c9:1f:39:53:61:bf:98:db:86:e6:23:d2:d9:3e:fc:d4:c3: 31:2d:74:fd:5d:d2:35:7e:67:e3:4d:7e:86:34:23:8f:ad:5c: 6b:d6:d6:69:1d:aa:0d:b1:de:e4:50:8b:53:d6:e0:26:ae:d0: be:82:6e:81:59:b9:ac:a2:1b:56:03:2b:fc:76:ba:67:4b:d6: 14:9d:e9:7d:2d:05:d5:34:2b:4f:46:11:04:ba:69:e6:74:ca: 98:e9:5a:e2:61:14:ba:1e:a3:85:1a:c1:b2:f3:b6:fa:f7:f4: 08:3f:16:7d:da:05:49:38:1f:84:ca:ba:b8:25:16:3c:f3:d9: ac:7c:a9:45:ae:97:2c:78:56:d8:cc:41:5d:fe:1f:57:cc:58: 80:22:de:86:fa:b3:0b:63:88:36:3a:06:a9:5a:81:db:75:b2: 23:5b:bc:3c:7d:3b:7c:d6:f2:73:38:c1:f7:4f:14:e4:39:d8: eb:e1:e7:83:a7:64:43:c6:06:a8:57:c8:2a:f3:d5:28:1e:fc: 42:6b:aa:09:a1:1a:00:41:21:ea:45:ba:c2:5a:62:a2:c0:40: 3c:42:6c:02:7f:c5:09:5b:27:82:97:9d:28:52:c2:2f:57:cb: 5a:22:88:15:63:7c:6e:77:c5:f3:30:dc:cc:8a:87:47:1e:0d: 65:48:e4:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEEYOOuZ7SVo8bnQgGYXePyR+T+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0Ex QzYzMDJEQjAeFw0yNjA1MDUxMTA3MDlaFw0yNjA1MDYxNDE4MDlaMDMxMTAvBgNV BAMTKDBCQkIzMjVFRUJERTdDOTgxMTBFMzMwMTVDM0QxMzg2MzZBNUE2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2u4fdroi2DlyMyYZ4t99NvXo8 kqUPj/4l+/lp2eJ0EIWk0x0LWHHht/Dz/W12lKEh+UL/9PfOOmiq6sqVdbhE9C7X 4787iy4lX4nq+gC5TXl4vcecP4QrlhaSQ9OLxn+IVl/Gay+PMI+Y8m+wuT0KohHF Zkn27RdtMyiav1x25oL2cnVvKHdD4ejQpgHfqiT8nnD2V8rFChNs7zaHdvFJlPfN /aCPzHEvwOLHXthSTw72g4kLSKBij9MvLMYPDFvVkzKqLdP9rdmZA//qNUhB/O/e z9rXbGaKxXzo0Mqt9nx8V3VUG7g5thLxSnMm+BoCInErjlQGvg5K/TlzLOKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC7syXuvefJgRDjMBXD0ThjalpmowHwYDVR0j BBgwFoAUpz1p7ewYAxv5F1p8p07WOhxjAtswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0ZjBmZmEtZTAzMS00ZWUxLWJmMGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURF QzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0ExQzYzMDJEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzNENjlFREVDMTgwMzFCRjkxNzVBN0NBNzRFRDYzQTFDNjMw MkRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0ZjBmZmEtZTAzMS00ZWUxLWJm MGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2 M0ExQzYzMDJEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATJHzlTYb+Y24bmI9LZPvzUwzEtdP1d0jV+ Z+NNfoY0I4+tXGvW1mkdqg2x3uRQi1PW4Cau0L6CboFZuayiG1YDK/x2umdL1hSd 6X0tBdU0K09GEQS6aeZ0ypjpWuJhFLoeo4UawbLztvr39Ag/Fn3aBUk4H4TKurgl Fjzz2ax8qUWulyx4VtjMQV3+H1fMWIAi3ob6swtjiDY6Bqlagdt1siNbvDx9O3zW 8nM4wfdPFOQ52Ovh54OnZEPGBqhXyCrz1Sge/EJrqgmhGgBBIepFusJaYqLAQDxC bAJ/xQlbJ4KXnShSwi9Xy1oiiBVjfG53xfMw3MyKh0ceDWVI5As= -----END CERTIFICATE-----Generated at Tue May 5 17:51:33 2026 by rpki-client