$ rpki-client -vvf rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft File: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft (raw, json) Hash identifier: y5aDAme4ZCxsAgwLF83HzmnagjpmEs1mYduuCsDC4KU= Subject key identifier: 81:F9:D4:E6:4B:20:33:85:4F:25:28:33:21:7B:F6:30:F7:46:43:25 Authority key identifier: 8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 Certificate issuer: /CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Certificate serial: 67E9ACB6FBCC6578BB6B9D60D83EDBE1321BA0A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:47:45 +0000 Manifest this update: Tue 12 May 2026 17:42:45 +0000 Manifest next update: Wed 13 May 2026 19:53:45 +0000 Files and hashes: 1: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: lli6DgdKqwmEkLtB+BG1rU9nYBqGkyyXfGUHRRk2kyY=) 2: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: kq6A8cL9NTZnFPc2HUzKmlVXrKIf6u5lrw0WIGV14uo=) 3: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl (hash: jufEo+6wHOtIQ4HRdWMF2Iy6UINWdvtbqueoS0e5tYY=) 4: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: YXjtjwoesJUSGw40nC73us7OdL7eSn74JJVfMRae8cI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e9:ac:b6:fb:cc:65:78:bb:6b:9d:60:d8:3e:db:e1:32:1b:a0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Validity Not Before: May 12 17:42:45 2026 GMT Not After : May 13 19:53:45 2026 GMT Subject: CN=81F9D4E64B2033854F252833217BF630F7464325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:53:98:3b:31:cd:29:3a:bf:50:97:a6:4a: 02:92:44:2c:3d:4b:02:3b:09:3a:50:de:8d:95:1c: 1e:40:a4:71:0d:ff:27:05:5d:88:4d:a5:6f:3d:77: fc:bc:29:e3:e6:7e:d8:93:bc:3b:0c:8d:e1:55:28: a5:7f:dc:e4:64:af:ae:fb:a8:74:7e:12:cb:e1:dc: 87:83:b7:04:18:d0:3e:77:fe:aa:8b:6e:16:0c:cc: b7:89:93:fa:70:97:2f:11:6a:6c:5f:4c:f9:42:88: 13:ed:b4:e7:dd:52:7d:a4:31:dd:66:e8:ff:ea:1e: c6:aa:97:c3:4b:7b:a4:19:7e:46:96:60:59:53:04: 9e:25:21:88:4e:17:15:31:dd:79:e4:46:28:0f:43: 99:f9:2d:c6:6d:fd:59:a1:32:63:6d:d8:1b:58:19: 41:97:a5:2e:c0:0a:3f:87:9c:34:9a:21:67:81:c5: ca:44:53:38:b9:ff:31:b9:db:96:dd:0a:bb:d5:74: 9b:87:e0:6f:03:06:7d:8d:b5:24:72:0b:57:58:93: 88:ea:59:12:d1:fe:8d:d7:57:f2:6c:ac:3b:df:84: a6:7c:c4:b8:1a:b5:ad:56:6a:dc:bd:d3:cd:a2:e4: 1b:ff:3e:89:61:d2:fd:d4:7d:e9:3a:55:d5:89:08: e3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F9:D4:E6:4B:20:33:85:4F:25:28:33:21:7B:F6:30:F7:46:43:25 X509v3 Authority Key Identifier: keyid:8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:f0:43:ff:b4:2f:d4:73:a8:3b:f9:e5:54:86:f4:ff:b9:54: 1f:af:36:6f:42:58:01:ef:1a:5f:fc:d3:09:ab:41:45:8f:be: ce:2b:16:f0:08:de:7a:98:1e:bd:e1:93:4c:68:92:f8:03:0d: 98:1e:3a:4d:89:a9:5e:bb:7e:12:9b:e7:7a:eb:13:09:ba:d4: a0:4a:23:1b:92:a3:11:67:dd:e6:86:90:94:bc:9f:4b:16:04: df:66:98:61:77:97:1d:b7:b0:4f:90:50:5f:72:da:a3:a7:15: 64:19:97:fa:43:36:fb:38:a1:57:a7:97:92:3c:c1:9a:2b:6a: 1d:f9:4e:84:14:ce:93:66:02:4f:18:dc:b2:4a:1c:54:13:3d: 48:17:8b:c4:eb:bd:ee:fd:af:19:a4:19:83:0c:fe:d7:2e:9b: 9c:27:c0:f0:15:4d:97:62:43:67:6e:6e:32:dc:7d:81:3e:68: 86:a1:11:0f:31:26:66:d6:e6:4c:ee:62:74:94:7b:af:ed:47: c1:7b:74:ac:0b:f3:60:93:b5:70:b2:98:03:d0:dd:d8:a6:5a: 98:2c:88:7f:c1:40:2f:df:58:da:53:ca:92:8b:d8:c0:e7:fd: bf:ec:81:b5:35:36:26:82:22:fa:97:cb:44:60:03:d1:6e:0f: 32:72:f1:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+mstvvMZXi7a51g2D7b4TIboKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhD RjIyNTVEODAeFw0yNjA1MTIxNzQyNDVaFw0yNjA1MTMxOTUzNDVaMDMxMTAvBgNV BAMTKDgxRjlENEU2NEIyMDMzODU0RjI1MjgzMzIxN0JGNjMwRjc0NjQzMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/1OYOzHNKTq/UJemSgKSRCw9 SwI7CTpQ3o2VHB5ApHEN/ycFXYhNpW89d/y8KePmftiTvDsMjeFVKKV/3ORkr677 qHR+Esvh3IeDtwQY0D53/qqLbhYMzLeJk/pwly8RamxfTPlCiBPttOfdUn2kMd1m 6P/qHsaql8NLe6QZfkaWYFlTBJ4lIYhOFxUx3XnkRigPQ5n5LcZt/VmhMmNt2BtY GUGXpS7ACj+HnDSaIWeBxcpEUzi5/zG525bdCrvVdJuH4G8DBn2NtSRyC1dYk4jq WRLR/o3XV/JsrDvfhKZ8xLgata1Waty9082i5Bv/Polh0v3Ufek6VdWJCOPtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgfnU5ksgM4VPJSgzIXv2MPdGQyUwHwYDVR0j BBgwFoAUjqjsmRJT8GZfQUnV/kLD+M8iVdgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM5MDg3ODItNDUyMC00NWI0LTk5ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkx MjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhDRjIyNTVEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUE4RUM5OTEyNTNGMDY2NUY0MTQ5RDVGRTQyQzNGOENGMjI1 NUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMz RjhDRjIyNTVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjwQ/+0L9RzqDv55VSG9P+5VB+vNm9CWAHv Gl/80wmrQUWPvs4rFvAI3nqYHr3hk0xokvgDDZgeOk2JqV67fhKb53rrEwm61KBK IxuSoxFn3eaGkJS8n0sWBN9mmGF3lx23sE+QUF9y2qOnFWQZl/pDNvs4oVenl5I8 wZorah35ToQUzpNmAk8Y3LJKHFQTPUgXi8Trve79rxmkGYMM/tcum5wnwPAVTZdi Q2dubjLcfYE+aIahEQ8xJmbW5kzuYnSUe6/tR8F7dKwL82CTtXCymAPQ3dimWpgs iH/BQC/fWNpTypKL2MDn/b/sgbU1NiaCIvqXy0RgA9FuDzJy8Qo= -----END CERTIFICATE-----Generated at Wed May 13 04:09:22 2026 by rpki-client