$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft File: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft (raw, json) Hash identifier: NOktRSkHW5S16v8C0Tvpli5G5rKk2eiMAdtLTixcLm8= Subject key identifier: 19:6A:85:E1:8F:4F:4F:3B:52:F3:A1:9C:ED:DF:66:9B:E7:2E:8B:C6 Authority key identifier: D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C Certificate issuer: /CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Certificate serial: 1D2BEC06F685B543380AFDB7DDD036EB7DBB701F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft Manifest number: 05 Signing time: Tue 05 May 2026 08:24:40 +0000 Manifest this update: Tue 05 May 2026 08:19:40 +0000 Manifest next update: Wed 06 May 2026 10:48:40 +0000 Files and hashes: 1: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: ecWkSgSwkV2u+u82kb3iMyEyHidsVg9ktP1OUEc0RVY=) 2: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl (hash: PbFpFTjYkOx6aWArV3OjXORBYkR6mJ5ZsRz/b75Pqkk=) 3: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: n33ojlZr3PPZOfsVvz1esHOzCxGjqSWfrz4yQc92lmw=) 4: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: mtrDV4mqgTGdX3FIVkCoXVE0ERKQErVYoLX9nuzS4rw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2b:ec:06:f6:85:b5:43:38:0a:fd:b7:dd:d0:36:eb:7d:bb:70:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Validity Not Before: May 5 08:19:40 2026 GMT Not After : May 6 10:48:40 2026 GMT Subject: CN=196A85E18F4F4F3B52F3A19CEDDF669BE72E8BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:b0:56:7b:e8:bf:41:24:f3:ad:2c:cd:6b: b4:2d:89:aa:5e:6f:f2:04:87:e7:de:e7:f9:5d:42: 20:87:13:22:85:e0:39:f6:76:60:2e:65:1a:40:ed: 8b:5a:2b:05:aa:8f:60:f9:01:bc:0f:8f:5a:35:12: 82:d6:6f:fc:35:6d:c8:e1:3b:b3:ec:98:d2:4b:70: fa:96:69:6f:58:b7:ea:77:33:35:0d:3d:9e:02:85: d2:f6:cf:31:eb:f8:2f:6f:53:a8:fe:b2:d1:38:8d: 18:06:36:6e:f4:a9:02:a8:8d:d0:59:fd:f0:98:3f: 7c:1a:f5:ea:ea:cd:0a:a8:53:19:d0:0b:a2:c2:6e: 19:78:06:93:d6:e8:fa:e2:0b:6d:ff:90:ff:f7:90: b9:c9:58:bd:f6:35:63:b8:99:c9:f7:92:72:e4:d6: 53:90:0b:9d:41:ca:8a:ef:ff:28:d8:0b:71:04:11: 30:30:97:1f:0e:d0:b6:3a:2c:65:17:7b:cc:19:58: 0f:dc:66:ed:77:ac:42:c2:3e:d1:16:e7:c6:4d:da: 07:cc:32:9c:78:06:b3:9a:e6:a4:ac:27:01:ad:20: 97:8e:f5:d6:1e:4c:4c:d0:d7:dc:20:90:d4:f3:e9: b5:a3:86:d9:ff:00:d7:84:41:19:0a:bc:6f:24:25: 53:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6A:85:E1:8F:4F:4F:3B:52:F3:A1:9C:ED:DF:66:9B:E7:2E:8B:C6 X509v3 Authority Key Identifier: keyid:D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b3:86:bc:65:77:be:3e:b6:fe:ba:74:5d:fb:c5:73:83:18: 0d:f1:45:7a:cb:0e:d7:2f:a7:8e:79:d1:73:27:3d:2a:9a:f2: f1:4c:53:16:06:0b:de:24:e2:18:33:f3:99:8a:d1:05:0b:f1: 44:7f:60:e4:e2:07:04:66:03:15:45:cd:85:1c:f0:fe:04:bc: 8d:2a:6a:ef:ef:64:b2:b4:de:c4:43:f1:66:f0:b0:f9:47:3c: 23:39:ff:65:62:a9:95:ac:f2:f5:e2:56:59:50:e5:4f:c5:95: 83:e4:88:0a:1b:84:cc:41:57:d1:a9:7e:6c:03:03:ba:e5:4a: 2e:cd:fc:5a:16:6b:08:ce:59:7c:40:a5:64:99:21:3a:7e:79: 93:d6:8c:61:ed:d2:77:36:e3:46:4c:b2:2a:b4:6d:6c:02:76: 98:d6:22:cf:8c:63:4b:80:5e:80:f8:56:14:d5:af:f8:fb:07: af:14:d1:8b:c6:bf:20:29:09:43:db:43:ea:81:f7:59:7f:c5: 35:cc:27:cf:9c:04:bb:e4:56:c1:f6:22:d4:3c:d5:a6:33:7f: ba:ca:51:55:7e:7c:ad:c0:dd:69:70:55:35:13:cb:41:a7:cf: 7e:bc:21:82:7e:3d:13:b3:07:ed:e2:69:87:36:5d:b8:4c:0d: 02:67:ec:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHSvsBvaFtUM4Cv233dA26327cB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4 NDg3Q0YyQzAeFw0yNjA1MDUwODE5NDBaFw0yNjA1MDYxMDQ4NDBaMDMxMTAvBgNV BAMTKDE5NkE4NUUxOEY0RjRGM0I1MkYzQTE5Q0VEREY2NjlCRTcyRThCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLrBWe+i/QSTzrSzNa7Qtiape b/IEh+fe5/ldQiCHEyKF4Dn2dmAuZRpA7YtaKwWqj2D5AbwPj1o1EoLWb/w1bcjh O7PsmNJLcPqWaW9Yt+p3MzUNPZ4ChdL2zzHr+C9vU6j+stE4jRgGNm70qQKojdBZ /fCYP3wa9erqzQqoUxnQC6LCbhl4BpPW6PriC23/kP/3kLnJWL32NWO4mcn3knLk 1lOQC51Byorv/yjYC3EEETAwlx8O0LY6LGUXe8wZWA/cZu13rELCPtEW58ZN2gfM Mpx4BrOa5qSsJwGtIJeO9dYeTEzQ19wgkNTz6bWjhtn/ANeEQRkKvG8kJVNtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGWqF4Y9PTztS86Gc7d9mm+cui8YwHwYDVR0j BBgwFoAU05ghQ/y6RCDAeqXO61DtsoSHzywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlZTgyYjctYzE4Mi00ZTgzLTg5N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNG Q0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4NDg3Q0YyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzk4MjE0M0ZDQkE0NDIwQzA3QUE1Q0VFQjUwRURCMjg0ODdD RjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVE QjI4NDg3Q0YyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGzhrxld74+tv66dF37xXODGA3xRXrLDtcv p4550XMnPSqa8vFMUxYGC94k4hgz85mK0QUL8UR/YOTiBwRmAxVFzYUc8P4EvI0q au/vZLK03sRD8WbwsPlHPCM5/2ViqZWs8vXiVllQ5U/FlYPkiAobhMxBV9GpfmwD A7rlSi7N/FoWawjOWXxApWSZITp+eZPWjGHt0nc240ZMsiq0bWwCdpjWIs+MY0uA XoD4VhTVr/j7B68U0YvGvyApCUPbQ+qB91l/xTXMJ8+cBLvkVsH2ItQ81aYzf7rK UVV+fK3A3WlwVTUTy0Gnz368IYJ+PROzB+3iaYc2XbhMDQJn7OM= -----END CERTIFICATE-----Generated at Tue May 5 14:09:19 2026 by rpki-client