$ rpki-client -vvf rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft File: A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft (raw, json) Hash identifier: C2KXoO996N4nNh74IP3EqsFmSGn5HPUKVY3Uu8otpNw= Subject key identifier: B4:7C:B6:DB:40:93:89:DC:46:A3:E7:D8:53:E4:79:7A:2D:66:F3:44 Authority key identifier: A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A Certificate issuer: /CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A Certificate serial: 771E778980D7D39072D4D425006C66EA933A0AFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft Manifest number: 11 Signing time: Thu 14 May 2026 05:22:07 +0000 Manifest this update: Thu 14 May 2026 05:17:07 +0000 Manifest next update: Fri 15 May 2026 06:05:07 +0000 Files and hashes: 1: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: UXHn8bg4Zb9U+P+TCueeNhsm/n24BjvW6TOuDV9tWgQ=) 2: A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl (hash: HPEfZFgHld1FgvzjqhKd8E6g1ckoSbwXT7HkwtWavI8=) 3: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 0vj1+ur+imczmOrtruw1pJmka20ZQffLE5EcHd3zqlo=) 4: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: g3SYguF2gjNopDU5fkgr7wfvMxsOOXZGBV4A3PJx+Es=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 03:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:1e:77:89:80:d7:d3:90:72:d4:d4:25:00:6c:66:ea:93:3a:0a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A Validity Not Before: May 14 05:17:07 2026 GMT Not After : May 15 06:05:07 2026 GMT Subject: CN=B47CB6DB409389DC46A3E7D853E4797A2D66F344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d5:7f:8b:69:3b:32:c4:c3:30:bf:86:a4:35: ba:de:5f:bf:94:e1:92:4d:eb:d8:14:08:c4:af:15: d3:1f:6e:16:85:48:26:6b:a9:21:21:3d:ce:d3:e5: 88:95:9b:fd:c0:55:3b:2c:18:9c:43:b6:aa:b6:a7: cb:97:b7:19:f9:d2:2d:be:67:63:f9:42:79:b3:27: d6:6f:fe:ea:9f:5c:b5:17:4d:7a:22:f1:6b:21:03: 25:9a:61:d4:cb:46:90:8c:4a:da:a5:6d:28:8f:24: 91:7d:c7:28:fc:35:66:75:a8:f1:4d:02:fd:24:90: 0e:5b:0c:c2:f3:07:c8:17:44:1c:4c:ee:31:bf:57: cd:51:95:f0:52:f3:5b:74:e5:06:13:2c:e4:44:83: 98:6d:2b:6c:49:95:a1:2e:5f:6b:0d:0c:f9:87:e5: 0e:73:6a:05:ec:2c:6c:d5:3c:6a:11:dc:1f:9c:b4: 5b:d3:1b:74:2e:48:0b:e2:6d:b5:12:aa:47:16:4c: f1:55:3d:a1:ef:c2:84:fc:ab:96:8c:9e:4c:b8:dd: b1:f9:b0:0c:f8:57:ed:07:a0:12:e3:cd:14:16:ba: 21:43:d7:52:25:4a:ee:a7:cb:76:4a:81:da:dc:0a: c9:67:bf:68:a5:b0:3f:63:26:e8:53:ab:e4:c5:c1: 99:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7C:B6:DB:40:93:89:DC:46:A3:E7:D8:53:E4:79:7A:2D:66:F3:44 X509v3 Authority Key Identifier: keyid:A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:da:c8:49:80:c1:92:c1:0b:92:5a:6b:d1:75:11:56:00:73: cc:90:77:30:8f:4b:90:a0:46:af:5f:f4:75:3b:07:b4:15:09: ca:98:d1:a1:5b:3a:27:85:66:d8:6b:07:37:02:7d:53:fa:ea: 44:93:12:6c:35:56:26:18:ea:10:ff:98:1f:bf:62:a4:10:0f: b2:79:14:f6:a5:52:9e:d8:8b:ff:59:79:79:95:e5:20:04:0f: 36:a8:4f:aa:91:d2:b3:3f:3f:1e:2b:c3:30:c9:9a:2f:05:7a: 31:0a:38:0f:88:bb:78:42:df:6c:5e:0a:83:a5:78:6a:da:a4: 51:12:e0:04:2d:61:dd:99:db:b2:3c:33:f9:fa:55:11:e0:af: 48:82:94:7b:47:27:76:f9:be:ab:3c:07:ee:0d:7b:29:e2:49: 94:b2:70:44:eb:5a:4b:8f:9c:57:04:98:db:4a:08:b4:cb:2c: 08:3f:93:d6:55:cd:46:d5:34:bd:3a:02:96:c8:43:fe:11:94: b7:92:93:07:ce:3a:5b:7d:ec:42:99:7f:ca:05:35:7e:92:58: b1:84:5c:56:a2:20:b9:55:b0:b2:bc:b2:08:32:c7:84:2e:94: 94:b8:53:eb:05:40:7c:96:43:3e:fe:a5:e9:03:65:98:cd:b9: f5:4c:09:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdx53iYDX05By1NQlAGxm6pM6Cv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg0QkJENzhCREFEMDdDODU1NEJENzBDQTYzREJEQzg0 QTM3RDYzQTAeFw0yNjA1MTQwNTE3MDdaFw0yNjA1MTUwNjA1MDdaMDMxMTAvBgNV BAMTKEI0N0NCNkRCNDA5Mzg5REM0NkEzRTdEODUzRTQ3OTdBMkQ2NkYzNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt1X+LaTsyxMMwv4akNbreX7+U 4ZJN69gUCMSvFdMfbhaFSCZrqSEhPc7T5YiVm/3AVTssGJxDtqq2p8uXtxn50i2+ Z2P5QnmzJ9Zv/uqfXLUXTXoi8WshAyWaYdTLRpCMStqlbSiPJJF9xyj8NWZ1qPFN Av0kkA5bDMLzB8gXRBxM7jG/V81RlfBS81t05QYTLOREg5htK2xJlaEuX2sNDPmH 5Q5zagXsLGzVPGoR3B+ctFvTG3QuSAvibbUSqkcWTPFVPaHvwoT8q5aMnky43bH5 sAz4V+0HoBLjzRQWuiFD11IlSu6ny3ZKgdrcCslnv2ilsD9jJuhTq+TFwZkfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtHy220CTidxGo+fYU+R5ei1m80QwHwYDVR0j BBgwFoAUqEu9eL2tB8hVS9cMpj29yEo31jowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgxZTkyMzgtNDI2Ny00OGVmLWIwMmUtMWQ3ZDA0NDAwOTQxLzAvQTg0QkJENzhC REFEMDdDODU1NEJENzBDQTYzREJEQzg0QTM3RDYzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODRCQkQ3OEJEQUQwN0M4NTU0QkQ3MENBNjNEQkRDODRBMzdE NjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQTg0QkJENzhCREFEMDdDODU1NEJENzBDQTYzREJE Qzg0QTM3RDYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrayEmAwZLBC5Jaa9F1EVYAc8yQdzCPS5Cg Rq9f9HU7B7QVCcqY0aFbOieFZthrBzcCfVP66kSTEmw1ViYY6hD/mB+/YqQQD7J5 FPalUp7Yi/9ZeXmV5SAEDzaoT6qR0rM/Px4rwzDJmi8FejEKOA+Iu3hC32xeCoOl eGrapFES4AQtYd2Z27I8M/n6VRHgr0iClHtHJ3b5vqs8B+4NeyniSZSycETrWkuP nFcEmNtKCLTLLAg/k9ZVzUbVNL06ApbIQ/4RlLeSkwfOOlt97EKZf8oFNX6SWLGE XFaiILlVsLK8sggyx4QulJS4U+sFQHyWQz7+pekDZZjNufVMCeM= -----END CERTIFICATE-----Generated at Thu May 14 09:09:49 2026 by rpki-client