$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft File: C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft (raw, json) Hash identifier: ANJIECEWmUGeXPEnoL1p+8wf1+/e8ZD2bmOe4Xpygsc= Subject key identifier: 28:97:E8:1B:FE:7A:8C:15:8F:BF:0A:3F:BA:04:C9:3F:95:07:53:5B Authority key identifier: C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28 Certificate issuer: /CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28 Certificate serial: 4735968EC65513EF0642D087FCF58991F063DB6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft Manifest number: 0F Signing time: Tue 12 May 2026 09:00:25 +0000 Manifest this update: Tue 12 May 2026 08:55:25 +0000 Manifest next update: Wed 13 May 2026 09:42:25 +0000 Files and hashes: 1: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: C54NnNs4f4gmLL9qO83WVBxOgZKL0rmUD589emvzz4I=) 2: C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl (hash: JuUtl8lc526fy98iYCnZLW5HPbfhieBxYGgrP+W1kjE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:35:96:8e:c6:55:13:ef:06:42:d0:87:fc:f5:89:91:f0:63:db:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28 Validity Not Before: May 12 08:55:25 2026 GMT Not After : May 13 09:42:25 2026 GMT Subject: CN=2897E81BFE7A8C158FBF0A3FBA04C93F9507535B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:32:b6:ef:cf:2a:df:d6:88:44:c1:f5:c1:2b: 6a:f0:d3:c9:41:10:94:6b:31:a7:95:01:7c:c7:95: dd:42:d6:9f:fc:ed:bb:49:f4:69:00:d4:7f:6a:3a: 0b:05:c9:94:af:37:6f:88:4f:44:b6:66:35:bd:1b: b7:3b:db:af:6b:c2:35:60:2e:99:02:bc:cf:06:f1: 90:4f:73:03:46:b4:e2:f2:c9:4e:f7:44:7b:b8:06: 89:af:e5:84:65:a2:d3:e6:76:6e:63:0f:78:c3:d5: 04:4f:57:25:88:ef:c2:38:b3:f9:35:cc:d1:c8:a6: 7a:fb:74:15:c2:71:7b:42:51:4b:2b:07:dc:7a:19: 54:5d:27:fb:10:22:86:56:97:9b:a3:90:72:35:33: 13:03:3e:97:c2:ba:3b:a0:27:2b:df:9d:59:cf:36: d1:9d:50:0f:ae:cb:bd:d9:65:a8:98:ea:ed:b7:24: 43:2f:bc:9f:40:52:79:ce:ed:bc:e3:05:88:15:f1: fa:78:0a:05:8c:01:37:08:ca:a1:c8:e6:7c:e2:50: f6:e3:bb:24:a6:29:65:8c:c4:c6:ea:bc:66:72:4e: dd:50:a1:5b:8c:ec:be:dd:86:60:55:9a:eb:32:31: f6:db:e4:7e:f9:6f:b6:80:a5:4e:87:01:dc:24:84: d5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:97:E8:1B:FE:7A:8C:15:8F:BF:0A:3F:BA:04:C9:3F:95:07:53:5B X509v3 Authority Key Identifier: keyid:C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:a0:72:67:46:86:8c:10:64:24:23:2e:fd:bb:3f:97:20:a8: ed:54:27:bc:db:8a:ff:bc:6a:84:05:f6:4e:2c:d3:b2:60:f9: 5d:7d:bd:68:a9:cd:69:40:97:e4:53:89:47:74:38:a5:42:94: 93:46:24:4b:50:5d:e6:24:8f:f9:9f:39:18:93:c3:20:da:e8: b1:99:ca:3a:36:d4:ca:82:9e:ec:33:d0:f4:ab:4f:59:95:91: 44:96:dd:3e:27:81:27:16:69:98:bc:54:cb:83:5a:5a:a0:a2: 4a:f4:37:12:a6:5e:4c:6d:a1:ed:a0:38:47:3a:d4:61:4d:c8: dc:fa:0e:c1:52:2c:17:7c:e7:5c:33:0e:5b:44:6c:b5:c9:f6: a4:0c:58:f6:64:7a:f0:0c:14:0a:79:18:ff:80:0a:a2:2d:01: 1d:97:2e:90:88:42:c3:6c:c8:09:27:e2:0a:2c:cc:70:e1:87: 1a:e4:df:9d:dc:a8:70:9a:24:b2:64:97:d9:51:2c:82:6f:3a: 30:e6:96:d3:c4:f4:c3:7f:b0:56:09:46:95:39:67:07:c0:ed: d1:b7:9a:1c:26:fc:21:b1:2a:59:1f:1c:b3:c7:d3:f7:dc:07: 10:5a:02:76:62:26:81:ef:6a:30:27:31:92:b6:fa:de:5f:91: 46:a6:ce:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzWWjsZVE+8GQtCH/PWJkfBj228wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4 QjQzNUIyODAeFw0yNjA1MTIwODU1MjVaFw0yNjA1MTMwOTQyMjVaMDMxMTAvBgNV BAMTKDI4OTdFODFCRkU3QThDMTU4RkJGMEEzRkJBMDRDOTNGOTUwNzUzNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrMrbvzyrf1ohEwfXBK2rw08lB EJRrMaeVAXzHld1C1p/87btJ9GkA1H9qOgsFyZSvN2+IT0S2ZjW9G7c7269rwjVg LpkCvM8G8ZBPcwNGtOLyyU73RHu4Bomv5YRlotPmdm5jD3jD1QRPVyWI78I4s/k1 zNHIpnr7dBXCcXtCUUsrB9x6GVRdJ/sQIoZWl5ujkHI1MxMDPpfCujugJyvfnVnP NtGdUA+uy73ZZaiY6u23JEMvvJ9AUnnO7bzjBYgV8fp4CgWMATcIyqHI5nziUPbj uySmKWWMxMbqvGZyTt1QoVuM7L7dhmBVmusyMfbb5H75b7aApU6HAdwkhNX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKJfoG/56jBWPvwo/ugTJP5UHU1swHwYDVR0j BBgwFoAUyNBFR8M0kCYiyNfPKfPx3ItDWygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3NWQzNzEtMThjNy00OGRmLThmNjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdD MzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4QjQzNUIyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEQwNDU0N0MzMzQ5MDI2MjJDOEQ3Q0YyOUYzRjFEQzhCNDM1 QjI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm NjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0Yx REM4QjQzNUIyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMigcmdGhowQZCQjLv27P5cgqO1UJ7zbiv+8 aoQF9k4s07Jg+V19vWipzWlAl+RTiUd0OKVClJNGJEtQXeYkj/mfORiTwyDa6LGZ yjo21MqCnuwz0PSrT1mVkUSW3T4ngScWaZi8VMuDWlqgokr0NxKmXkxtoe2gOEc6 1GFNyNz6DsFSLBd851wzDltEbLXJ9qQMWPZkevAMFAp5GP+ACqItAR2XLpCIQsNs yAkn4goszHDhhxrk353cqHCaJLJkl9lRLIJvOjDmltPE9MN/sFYJRpU5ZwfA7dG3 mhwm/CGxKlkfHLPH0/fcBxBaAnZiJoHvajAnMZK2+t5fkUamzs0= -----END CERTIFICATE-----Generated at Tue May 12 22:49:41 2026 by rpki-client