$ rpki-client -vvf rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft File: 885F36F281B0D4CC516E3818323CB9C1F30AF373.mft (raw, json) Hash identifier: m1ZFhnmPUScJvbVNZjZOo6ZPZ7zwTIpObXPJHM/OL8Q= Subject key identifier: 50:8A:37:5A:A4:24:23:CC:2C:3C:F2:B8:93:50:83:0F:E9:D7:B9:9B Authority key identifier: 88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73 Certificate issuer: /CN=885F36F281B0D4CC516E3818323CB9C1F30AF373 Certificate serial: 5CE8C67387BAE3E8B257FA88D16715D4362F0E21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:17:03 +0000 Manifest this update: Tue 12 May 2026 17:12:03 +0000 Manifest next update: Wed 13 May 2026 19:24:03 +0000 Files and hashes: 1: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: vKe09VJpirx3d8Vkqz6gLuC+DkGeanu2r5WmGCErId4=) 2: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: 7FbZ5pEtfFRoEPaeAL7hu5dTo4RHGPeRroJ1/nBeqOo=) 3: 885F36F281B0D4CC516E3818323CB9C1F30AF373.crl (hash: vTWWh5fEMJRMtmzQGN84PrOgxpTvIM4pkrBMzLpJtZs=) 4: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: OhU6QiMCF4ACcpqhynxB56U3zBuIn9qNb0BYC0SetEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e8:c6:73:87:ba:e3:e8:b2:57:fa:88:d1:67:15:d4:36:2f:0e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885F36F281B0D4CC516E3818323CB9C1F30AF373 Validity Not Before: May 12 17:12:03 2026 GMT Not After : May 13 19:24:03 2026 GMT Subject: CN=508A375AA42423CC2C3CF2B89350830FE9D7B99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:d9:58:81:0e:c9:7b:c3:41:ca:92:42:b3: fb:68:56:2c:91:4b:a7:e1:12:0b:57:94:75:53:14: 2c:6f:f3:0b:c1:36:e4:e5:53:36:40:31:50:d6:79: 61:f9:1b:ec:26:48:98:ba:2b:fd:62:45:a0:49:6f: fc:20:04:ca:00:9c:0e:e7:60:2a:2c:bb:83:58:82: 25:7f:0e:9e:59:f3:6a:a3:51:b8:1b:f3:93:a5:0f: 4a:b7:c3:c0:df:03:13:3b:7d:e0:8c:03:7d:20:9b: 2f:04:a7:78:7e:1f:e9:5b:ff:2d:03:35:98:56:88: ae:74:c3:57:43:4c:c4:1e:3e:89:8f:63:01:88:86: 81:17:85:0f:d8:cd:9d:d2:98:cc:c2:61:ff:0c:88: a8:ec:65:b5:5c:7f:77:6d:35:92:32:ef:36:23:4e: df:73:5c:80:8c:f0:af:ef:fa:d0:b2:fe:cb:3f:f8: ad:47:e1:a0:e9:ba:e2:c3:03:50:74:16:d6:6d:2f: 54:0f:75:fe:25:f8:f1:9a:33:7a:ed:7a:7a:99:57: 44:49:4d:77:b7:ef:d2:82:9d:c2:b5:be:97:3f:c3: c8:07:10:ce:cd:5b:75:75:2d:47:8d:14:24:1c:a2: 89:06:64:02:17:16:ee:15:3b:e3:2c:c6:aa:07:aa: 0e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8A:37:5A:A4:24:23:CC:2C:3C:F2:B8:93:50:83:0F:E9:D7:B9:9B X509v3 Authority Key Identifier: keyid:88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:02:00:a6:9e:99:a5:07:23:30:4f:1c:3e:57:37:07:1d:cc: fe:ad:ee:51:f9:7f:10:31:df:5b:2e:76:ab:a7:76:31:a3:22: 0e:77:49:24:7a:3d:fe:60:19:07:af:8e:56:fc:60:03:fb:d4: d9:b9:fb:d0:ff:56:3d:72:8b:37:31:e5:ed:49:7f:f6:9d:f1: 99:75:9d:f4:60:79:15:d3:ee:70:1d:75:2f:3b:9d:da:5e:4a: fb:a3:2c:c5:33:32:08:c1:8d:0e:de:a3:de:b0:6e:60:6e:80: 2c:fd:a1:6f:3f:a2:bf:88:0f:f4:91:81:53:5b:e4:9c:1a:4b: f7:15:ac:18:d8:9a:ce:b2:a0:e2:01:1e:19:44:dd:2f:63:1c: 58:e2:da:41:8f:c8:95:1a:a0:28:50:8f:68:75:c1:fa:e1:6a: 4f:65:8f:95:27:3d:61:05:a3:d0:63:08:ea:3b:f4:e8:8a:9e: 1e:24:c8:63:b0:c1:ab:0f:2a:0c:32:f5:00:3e:8c:d6:b3:ac: d0:98:ab:bb:80:3b:38:92:11:d0:e6:f7:7f:62:2f:25:11:fb: 5c:44:0c:a8:69:1b:c9:ce:f8:3d:2a:04:64:9a:f0:3c:29:bc: 8b:15:dd:f0:8e:db:cb:6f:c6:47:1e:bf:f5:06:31:21:ad:85: 0f:ab:67:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOjGc4e64+iyV/qI0WcV1DYvDiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg1RjM2RjI4MUIwRDRDQzUxNkUzODE4MzIzQ0I5QzFG MzBBRjM3MzAeFw0yNjA1MTIxNzEyMDNaFw0yNjA1MTMxOTI0MDNaMDMxMTAvBgNV BAMTKDUwOEEzNzVBQTQyNDIzQ0MyQzNDRjJCODkzNTA4MzBGRTlEN0I5OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqptlYgQ7Je8NBypJCs/toViyR S6fhEgtXlHVTFCxv8wvBNuTlUzZAMVDWeWH5G+wmSJi6K/1iRaBJb/wgBMoAnA7n YCosu4NYgiV/Dp5Z82qjUbgb85OlD0q3w8DfAxM7feCMA30gmy8Ep3h+H+lb/y0D NZhWiK50w1dDTMQePomPYwGIhoEXhQ/YzZ3SmMzCYf8MiKjsZbVcf3dtNZIy7zYj Tt9zXICM8K/v+tCy/ss/+K1H4aDpuuLDA1B0FtZtL1QPdf4l+PGaM3rtenqZV0RJ TXe379KCncK1vpc/w8gHEM7NW3V1LUeNFCQcookGZAIXFu4VO+MsxqoHqg7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUIo3WqQkI8wsPPK4k1CDD+nXuZswHwYDVR0j BBgwFoAUiF828oGw1MxRbjgYMjy5wfMK83MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUyMjI2ZWEtNWUyNi00ZWE1LWE2ODktNDc1N2FkMDVmOTUyLzAvODg1RjM2RjI4 MUIwRDRDQzUxNkUzODE4MzIzQ0I5QzFGMzBBRjM3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODVGMzZGMjgxQjBENENDNTE2RTM4MTgzMjNDQjlDMUYzMEFG MzczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvODg1RjM2RjI4MUIwRDRDQzUxNkUzODE4MzIzQ0I5 QzFGMzBBRjM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHACAKaemaUHIzBPHD5XNwcdzP6t7lH5fxAx 31sudqundjGjIg53SSR6Pf5gGQevjlb8YAP71Nm5+9D/Vj1yizcx5e1Jf/ad8Zl1 nfRgeRXT7nAddS87ndpeSvujLMUzMgjBjQ7eo96wbmBugCz9oW8/or+ID/SRgVNb 5JwaS/cVrBjYms6yoOIBHhlE3S9jHFji2kGPyJUaoChQj2h1wfrhak9lj5UnPWEF o9BjCOo79OiKnh4kyGOwwasPKgwy9QA+jNazrNCYq7uAOziSEdDm939iLyUR+1xE DKhpG8nO+D0qBGSa8DwpvIsV3fCO28tvxkcev/UGMSGthQ+rZ3Q= -----END CERTIFICATE-----Generated at Wed May 13 02:13:34 2026 by rpki-client