$ rpki-client -vvf rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft File: 8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft (raw, json) Hash identifier: 9c+Tiymz3d/vZwH6iZIX4mv/mkDhic8SKP/obo+xh/o= Subject key identifier: 61:A6:3A:3D:57:BC:EC:5B:19:F1:68:6C:EA:A1:D8:B2:B3:87:B2:C2 Authority key identifier: 8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B Certificate issuer: /CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B Certificate serial: 79D85368ADE26277F924792DE89309C83759A334 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:58:01 +0000 Manifest this update: Tue 12 May 2026 17:53:01 +0000 Manifest next update: Wed 13 May 2026 19:05:01 +0000 Files and hashes: 1: 3130332e3137352e33382e302f32332d3234203d3e20313534343130.roa (hash: OeG/PNeipoOhOvGu8q4WBcsQGgNJ6UhKACe8udTmev0=) 2: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: Lndmx8VAy2DFBCTOeRbYATrs2gBsgQhEdnrs3xfeT3Y=) 3: 8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl (hash: A7CZyfvB08oiGfaAXXJjlYOUPON8h22/WH+negNyQms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d8:53:68:ad:e2:62:77:f9:24:79:2d:e8:93:09:c8:37:59:a3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B Validity Not Before: May 12 17:53:01 2026 GMT Not After : May 13 19:05:01 2026 GMT Subject: CN=61A63A3D57BCEC5B19F1686CEAA1D8B2B387B2C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a1:0e:40:e6:22:d2:40:c4:33:ec:08:fc:38: cf:57:89:4e:fc:1c:53:34:30:31:8f:51:bc:36:1f: 18:f9:82:86:13:52:42:db:6b:ec:24:53:50:6a:50: da:96:e7:23:8d:bc:81:71:a3:81:cd:be:37:3a:da: ce:28:4d:64:e7:12:02:46:08:40:ff:11:ee:62:aa: 98:30:6a:10:26:8b:f1:57:eb:f8:b0:d8:ca:3c:aa: b5:b3:55:0f:de:12:77:2c:13:03:11:fc:a9:f0:e0: 4f:28:a7:90:b2:cb:51:0e:a9:2a:f7:21:ab:77:e0: 39:a9:d9:8f:a8:ed:17:60:03:e9:5c:68:13:19:d7: de:74:7f:9f:64:33:4d:38:b4:e0:3a:e6:a5:58:f4: f3:ce:bb:0c:27:5c:c0:05:9e:51:4d:6a:2f:f9:37: 32:30:cf:00:78:38:d3:64:6f:9a:17:67:93:b7:d3: b7:98:da:0e:52:62:e3:98:f6:04:dd:53:c0:2f:e4: c5:9f:02:a6:70:41:4e:78:1a:31:dc:f6:a8:4c:b5: 2a:ec:65:46:ff:18:04:dd:c4:be:7a:d1:ab:f6:39: e7:d1:78:75:de:7c:fe:f7:f4:9b:ee:55:4e:ff:b9: 03:16:c5:5a:48:63:9d:68:24:2d:a2:86:56:bc:19: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A6:3A:3D:57:BC:EC:5B:19:F1:68:6C:EA:A1:D8:B2:B3:87:B2:C2 X509v3 Authority Key Identifier: keyid:8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:69:60:9b:ec:7e:63:46:40:35:57:7f:40:20:49:e3:80:cf: 67:d7:40:32:6f:bd:fc:4e:58:04:35:47:8e:c5:2a:85:ca:37: e7:8d:11:db:67:70:0a:d5:63:45:7e:d0:ea:89:a8:92:f5:bc: f4:e3:17:bf:7f:87:c8:69:65:1d:ef:ad:61:44:b4:25:bd:73: 9f:1f:7c:b8:84:86:31:20:9e:27:66:6a:a1:96:ef:ad:a0:21: 01:e4:28:8f:b8:67:17:b4:04:9d:62:13:0f:da:7f:f1:33:2e: 8e:60:cf:f4:ca:7d:ed:50:02:98:b7:70:bd:b8:06:fa:19:b8: 06:e0:f8:1d:95:83:e1:16:34:17:94:06:6e:92:16:42:c9:5a: 59:08:e3:8c:55:48:0d:31:de:17:e9:1e:33:91:c9:76:a5:0f: 17:9f:f6:64:c3:24:c2:ec:df:a4:5e:67:f6:50:31:b5:96:8b: 62:42:59:41:f9:ff:39:08:41:22:8c:69:64:ce:e9:10:3a:64: 45:00:81:00:f8:af:e5:ae:88:cb:a4:5b:04:31:c7:47:94:9f: c2:80:98:a0:14:99:17:dd:47:84:31:48:aa:f9:0f:66:5a:92: c7:b5:fe:34:3b:b6:b7:58:0b:b8:ec:b6:68:6f:5e:d1:54:e0: 28:38:81:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUedhTaK3iYnf5JHkt6JMJyDdZozQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYwNDlCNDNERDYxMjg1QzZDREM4MTkzODdDQUQwNjUx QjBDRjM4QjAeFw0yNjA1MTIxNzUzMDFaFw0yNjA1MTMxOTA1MDFaMDMxMTAvBgNV BAMTKDYxQTYzQTNENTdCQ0VDNUIxOUYxNjg2Q0VBQTFEOEIyQjM4N0IyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVoQ5A5iLSQMQz7Aj8OM9XiU78 HFM0MDGPUbw2Hxj5goYTUkLba+wkU1BqUNqW5yONvIFxo4HNvjc62s4oTWTnEgJG CED/Ee5iqpgwahAmi/FX6/iw2Mo8qrWzVQ/eEncsEwMR/Knw4E8op5Cyy1EOqSr3 Iat34Dmp2Y+o7RdgA+lcaBMZ1950f59kM004tOA65qVY9PPOuwwnXMAFnlFNai/5 NzIwzwB4ONNkb5oXZ5O307eY2g5SYuOY9gTdU8Av5MWfAqZwQU54GjHc9qhMtSrs ZUb/GATdxL560av2OefReHXefP739JvuVU7/uQMWxVpIY51oJC2ihla8GdmnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYaY6PVe87FsZ8Whs6qHYsrOHssIwHwYDVR0j BBgwFoAUjwSbQ91hKFxs3IGTh8rQZRsM84swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJiMjkzNzgtNDVmMC00OWQzLWE2YWYtNTczYmU3ZGNhNmQwLzAvOEYwNDlCNDNE RDYxMjg1QzZDREM4MTkzODdDQUQwNjUxQjBDRjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjA0OUI0M0RENjEyODVDNkNEQzgxOTM4N0NBRDA2NTFCMENG MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJiMjkzNzgtNDVmMC00OWQzLWE2 YWYtNTczYmU3ZGNhNmQwLzAvOEYwNDlCNDNERDYxMjg1QzZDREM4MTkzODdDQUQw NjUxQjBDRjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtpYJvsfmNGQDVXf0AgSeOAz2fXQDJvvfxO WAQ1R47FKoXKN+eNEdtncArVY0V+0OqJqJL1vPTjF79/h8hpZR3vrWFEtCW9c58f fLiEhjEgnidmaqGW762gIQHkKI+4Zxe0BJ1iEw/af/EzLo5gz/TKfe1QApi3cL24 BvoZuAbg+B2Vg+EWNBeUBm6SFkLJWlkI44xVSA0x3hfpHjORyXalDxef9mTDJMLs 36ReZ/ZQMbWWi2JCWUH5/zkIQSKMaWTO6RA6ZEUAgQD4r+WuiMukWwQxx0eUn8KA mKAUmRfdR4QxSKr5D2Zakse1/jQ7trdYC7jstmhvXtFU4Cg4gUA= -----END CERTIFICATE-----Generated at Tue May 12 22:19:27 2026 by rpki-client