$ rpki-client -vvf rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft File: F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft (raw, json) Hash identifier: 53Qfrc7mJPeJl9cB51zvPXqMaZ0jb26otImgNC6NaA0= Subject key identifier: 22:E5:AB:94:78:8B:2E:B5:8C:45:6D:88:F5:CA:66:22:5E:8B:CB:69 Authority key identifier: F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 Certificate issuer: /CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Certificate serial: 5FFA2A373AF55184317CA52AE963401B12970E61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft Manifest number: 05 Signing time: Tue 05 May 2026 10:46:12 +0000 Manifest this update: Tue 05 May 2026 10:41:12 +0000 Manifest next update: Wed 06 May 2026 11:48:12 +0000 Files and hashes: 1: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: /vHPttEy0S/+L0N0xJZEd760O2VDEp7iklZoHe07g/s=) 2: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: NyzMvcvP5P8597pti0RlOgOJdexX/ZQfgDt+YCdTIKE=) 3: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: aue2+kr7HTRk/tNCSk94pVQ+a17G6VqHTtAotfDji1I=) 4: F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl (hash: NR/xWniOlwAjH2noyT4pWkzTTCF7qch3egoMOU1De6U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:fa:2a:37:3a:f5:51:84:31:7c:a5:2a:e9:63:40:1b:12:97:0e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Validity Not Before: May 5 10:41:12 2026 GMT Not After : May 6 11:48:12 2026 GMT Subject: CN=22E5AB94788B2EB58C456D88F5CA66225E8BCB69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f0:38:90:0a:e9:23:02:84:3b:33:e5:4a:07: 87:b8:97:d8:7c:aa:70:12:66:1c:8f:f6:d8:ff:aa: d5:29:01:2e:cd:8f:c0:d8:ed:75:f8:4a:a9:d3:4f: 2e:fa:77:b7:ec:84:d4:12:dd:29:98:5f:23:a2:3f: cd:b2:11:2b:06:2e:c3:fb:1a:f7:d7:13:b6:14:85: 11:37:aa:94:62:eb:f6:4a:9a:81:24:10:93:39:25: eb:22:ef:dc:72:eb:b9:cb:4e:77:e9:6b:61:05:f7: ec:6a:f9:dd:20:8e:9d:55:be:bf:fb:9d:ce:82:9b: 4e:f3:0d:f4:31:81:7d:17:49:22:c2:52:0b:18:e7: 33:d2:e2:b6:ce:1e:b8:b1:4b:28:3b:2c:29:ee:12: f0:57:c1:da:c5:34:30:3e:15:e7:27:72:df:91:f6: 09:25:83:fd:e6:67:cc:f5:31:bc:2b:27:a9:7b:9a: d4:fd:92:c0:a8:8d:e1:0d:b6:4e:a5:7b:d0:5c:b3: b3:5f:44:e9:71:15:24:16:55:0a:12:57:ee:41:d0: 72:d8:78:3c:e2:61:0c:e4:f8:b2:4b:db:87:dd:72: e8:5a:69:c9:2c:cf:2f:9b:e3:8f:bb:c9:e4:55:54: 12:50:57:a8:be:18:3b:dc:94:6b:e1:b8:eb:73:b2: fd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E5:AB:94:78:8B:2E:B5:8C:45:6D:88:F5:CA:66:22:5E:8B:CB:69 X509v3 Authority Key Identifier: keyid:F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ca:5c:11:2c:1f:40:c0:68:c1:f3:e5:51:2b:a4:a5:b0:31: 1b:2e:b7:0b:a6:c0:01:18:50:27:c0:0a:bd:92:ac:dd:14:23: d7:2e:64:da:f6:98:38:74:86:e2:59:6a:8a:5d:72:a2:61:dd: 31:f7:7f:80:17:56:4c:af:51:17:b6:42:96:47:bc:ac:c4:7f: 3d:db:b8:ed:79:a5:08:da:c9:b9:91:1e:0e:ce:0f:31:b2:cd: ff:b2:2b:83:eb:cc:64:c8:a9:ce:9f:83:4f:ca:a2:07:90:ed: bc:c9:1a:dc:8a:f6:4d:4b:43:48:92:b6:da:bf:dc:56:51:2e: 2f:b2:3e:67:6e:e6:23:47:32:1f:f9:34:37:fd:b6:27:c2:ec: a7:f8:bf:91:04:6e:88:f7:19:ca:da:12:ef:57:8a:37:2d:88: 4a:e3:63:04:11:36:ef:02:78:d0:44:11:b5:40:bc:6a:2f:a5: b9:59:c1:40:ea:f0:be:91:bc:44:7b:27:fe:80:88:42:5e:bf: 86:45:56:09:0d:a5:58:cf:2e:e2:d9:3c:46:0a:99:61:ae:9a: f1:c4:58:f2:5e:da:1e:37:c8:11:5b:5c:23:1d:de:6e:4b:48: a0:76:af:39:49:7c:1a:46:3d:1e:89:ab:d9:f2:6e:f4:66:68: bd:0e:c0:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/oqNzr1UYQxfKUq6WNAGxKXDmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4NTQy N0IyNDA0MDAeFw0yNjA1MDUxMDQxMTJaFw0yNjA1MDYxMTQ4MTJaMDMxMTAvBgNV BAMTKDIyRTVBQjk0Nzg4QjJFQjU4QzQ1NkQ4OEY1Q0E2NjIyNUU4QkNCNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg8DiQCukjAoQ7M+VKB4e4l9h8 qnASZhyP9tj/qtUpAS7Nj8DY7XX4SqnTTy76d7fshNQS3SmYXyOiP82yESsGLsP7 GvfXE7YUhRE3qpRi6/ZKmoEkEJM5Jesi79xy67nLTnfpa2EF9+xq+d0gjp1Vvr/7 nc6Cm07zDfQxgX0XSSLCUgsY5zPS4rbOHrixSyg7LCnuEvBXwdrFNDA+Fecnct+R 9gklg/3mZ8z1MbwrJ6l7mtT9ksCojeENtk6le9Bcs7NfROlxFSQWVQoSV+5B0HLY eDziYQzk+LJL24fdcuhaackszy+b44+7yeRVVBJQV6i+GDvclGvhuOtzsv1PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIuWrlHiLLrWMRW2I9cpmIl6Ly2kwHwYDVR0j BBgwFoAU+ED4ttMy5X6j3Lhn27DYVCeyQEAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA0M2E4ODktYzg2MS00ZDI5LTlkNzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZE MzMyRTU3RUEzRENCODY3REJCMEQ4NTQyN0IyNDA0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODQwRjhCNkQzMzJFNTdFQTNEQ0I4NjdEQkIwRDg1NDI3QjI0 MDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk NzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4 NTQyN0IyNDA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDKXBEsH0DAaMHz5VErpKWwMRsutwumwAEY UCfACr2SrN0UI9cuZNr2mDh0huJZaopdcqJh3TH3f4AXVkyvURe2QpZHvKzEfz3b uO15pQjaybmRHg7ODzGyzf+yK4PrzGTIqc6fg0/KogeQ7bzJGtyK9k1LQ0iSttq/ 3FZRLi+yPmdu5iNHMh/5NDf9tifC7Kf4v5EEboj3GcraEu9XijctiErjYwQRNu8C eNBEEbVAvGovpblZwUDq8L6RvER7J/6AiEJev4ZFVgkNpVjPLuLZPEYKmWGumvHE WPJe2h43yBFbXCMd3m5LSKB2rzlJfBpGPR6Jq9nybvRmaL0OwO0= -----END CERTIFICATE-----Generated at Tue May 5 14:17:17 2026 by rpki-client