$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft File: A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft (raw, json) Hash identifier: ZL6RpdJbM/Bj2WSEJPmORfzJNpnpNj7FyEMEBoe9k0Y= Subject key identifier: FB:17:52:94:DE:C9:3A:CF:FE:0B:9A:48:31:21:5C:15:12:FE:C5:9A Authority key identifier: A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF Certificate issuer: /CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Certificate serial: 64BAD22ED5F6C53D5F74FA2C7EDC6D922CFAF776 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:48:17 +0000 Manifest this update: Tue 12 May 2026 03:43:17 +0000 Manifest next update: Wed 13 May 2026 06:59:17 +0000 Files and hashes: 1: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: h1TE3m56WQ+gTVyqOOSf1UTeQzb1azE9LGSpzK549vA=) 2: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: /KfC4nr32tMCkBy7+tyxmf0Ms+3hn6LQNee4YzYVhVM=) 3: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: pahHbmXTulV++MGHGhEL8jSNz3xJ/1KdhQdlxBhfIw4=) 4: A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl (hash: KxR7WwgCJXxT7GxzaVJKxolLJY/h9e+jYUabHTC+Enk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ba:d2:2e:d5:f6:c5:3d:5f:74:fa:2c:7e:dc:6d:92:2c:fa:f7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Validity Not Before: May 12 03:43:17 2026 GMT Not After : May 13 06:59:17 2026 GMT Subject: CN=FB175294DEC93ACFFE0B9A4831215C1512FEC59A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:76:8a:91:be:04:81:b2:54:04:f2:28:4f:aa: 08:91:3c:f7:0e:d1:93:f6:4d:38:a9:09:f0:fa:b2: 69:00:52:f3:fa:be:f8:26:37:90:fe:5d:54:eb:5e: 75:e7:00:77:8d:51:7a:b4:90:af:2a:4d:7f:37:67: ab:2a:c3:df:4b:ba:af:f3:89:10:03:94:be:e4:83: c3:08:a1:1d:38:f7:a5:3f:06:33:dd:cc:43:fa:66: 12:00:1a:57:aa:e3:a9:df:35:b2:0a:b2:82:17:5c: 4c:ca:ec:1a:d6:f5:16:19:87:b9:33:58:d0:67:ea: 5a:93:f5:d2:de:2a:45:1a:f3:23:d8:6e:a2:45:1f: 41:3d:b5:6b:02:c4:f1:d6:1f:7b:c5:69:f2:5e:da: 0c:bb:5f:14:dc:99:c3:75:40:bd:d9:6d:ba:47:a4: 02:ea:93:a3:8d:f1:b7:45:90:d9:58:09:fc:a8:6b: b4:56:87:b5:f7:b1:e4:32:7d:65:28:97:5b:a9:50: d1:77:1a:ed:0b:b2:7a:78:d7:28:06:14:46:1d:3a: a7:d8:d4:01:c4:62:bd:62:77:a1:a0:7d:78:d1:49: 7a:23:e3:4d:0f:b3:04:1f:17:53:41:fd:50:57:f3: 5c:5f:0c:6a:d2:4b:9d:6b:7b:ff:1f:05:48:1b:a9: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:17:52:94:DE:C9:3A:CF:FE:0B:9A:48:31:21:5C:15:12:FE:C5:9A X509v3 Authority Key Identifier: keyid:A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d9:b2:2c:14:1d:dc:20:10:92:d8:aa:3b:a0:29:d7:2f:80: 27:ef:8c:da:79:9c:c7:ce:af:96:89:0e:66:6c:22:bb:a2:f7: 9a:b4:e5:47:42:29:06:b7:ab:03:8d:ee:5f:fa:a8:a9:af:5f: 5a:8d:e5:66:78:61:24:13:3d:bd:69:3b:dd:5f:61:5f:57:64: 04:70:0e:80:8e:07:95:52:fa:49:12:5d:35:5b:45:a8:b7:b4: 4a:d8:cb:72:48:80:dc:95:5a:15:ff:6a:e5:54:a5:a8:24:04: 1b:bc:fd:08:dc:78:c9:06:7d:9f:94:2d:10:cc:a7:d0:1a:eb: 77:3d:b5:06:17:60:f0:3b:c3:22:b1:c6:c4:56:d0:9b:79:83: 74:94:f6:d1:b6:a4:b0:b0:bf:64:49:2e:2a:5c:e7:6a:63:ae: 0b:88:ee:9f:95:18:0d:5e:29:6b:30:7f:65:cb:30:d2:4d:ea: 24:a0:78:9a:45:95:94:54:c5:4b:5c:18:5c:9c:42:37:94:4b: f6:77:78:81:24:5c:2f:3b:9d:df:63:a2:45:22:d6:bf:e5:f3: 63:44:3f:a3:30:5d:b6:7a:b2:9a:78:a5:21:a1:15:bb:f8:75: 7c:a5:6c:39:d8:3c:54:3d:11:0f:d2:f2:e3:49:6e:72:04:dc: d7:d5:88:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZLrSLtX2xT1fdPosftxtkiz693YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFFREYx MUQ0NzhDRjAeFw0yNjA1MTIwMzQzMTdaFw0yNjA1MTMwNjU5MTdaMDMxMTAvBgNV BAMTKEZCMTc1Mjk0REVDOTNBQ0ZGRTBCOUE0ODMxMjE1QzE1MTJGRUM1OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQdoqRvgSBslQE8ihPqgiRPPcO 0ZP2TTipCfD6smkAUvP6vvgmN5D+XVTrXnXnAHeNUXq0kK8qTX83Z6sqw99Luq/z iRADlL7kg8MIoR0496U/BjPdzEP6ZhIAGleq46nfNbIKsoIXXEzK7BrW9RYZh7kz WNBn6lqT9dLeKkUa8yPYbqJFH0E9tWsCxPHWH3vFafJe2gy7XxTcmcN1QL3ZbbpH pALqk6ON8bdFkNlYCfyoa7RWh7X3seQyfWUol1upUNF3Gu0Lsnp41ygGFEYdOqfY 1AHEYr1id6GgfXjRSXoj400PswQfF1NB/VBX81xfDGrSS51re/8fBUgbqe2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+xdSlN7JOs/+C5pIMSFcFRL+xZowHwYDVR0j BBgwFoAUqLQpDbHVABFykYWNrxse3xHUeM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMxZTQ5YWItNTBjYS00YjNlLTgyM2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERC MUQ1MDAxMTcyOTE4NThEQUYxQjFFREYxMUQ0NzhDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI0MjkwREIxRDUwMDExNzI5MTg1OERBRjFCMUVERjExRDQ3 OENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFF REYxMUQ0NzhDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDZsiwUHdwgEJLYqjugKdcvgCfvjNp5nMfO r5aJDmZsIrui95q05UdCKQa3qwON7l/6qKmvX1qN5WZ4YSQTPb1pO91fYV9XZARw DoCOB5VS+kkSXTVbRai3tErYy3JIgNyVWhX/auVUpagkBBu8/QjceMkGfZ+ULRDM p9Aa63c9tQYXYPA7wyKxxsRW0Jt5g3SU9tG2pLCwv2RJLipc52pjrguI7p+VGA1e KWswf2XLMNJN6iSgeJpFlZRUxUtcGFycQjeUS/Z3eIEkXC87nd9jokUi1r/l82NE P6MwXbZ6spp4pSGhFbv4dXylbDnYPFQ9EQ/S8uNJbnIE3NfViDE= -----END CERTIFICATE-----Generated at Wed May 13 00:21:26 2026 by rpki-client