$ rpki-client -vvf rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft File: 8828D395B775E6267ED1C496B6DA870C9DA36235.mft (raw, json) Hash identifier: 8aiIlxbM6UVFotPXyuYNCb3xzT68+dwdJ72EDq2cQkU= Subject key identifier: 52:A5:12:CD:0F:B0:D0:FD:75:E1:A2:1C:24:4C:A7:E8:1D:EA:A1:68 Authority key identifier: 88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 Certificate issuer: /CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Certificate serial: 798BA1E23A0E39B0A68EB2A573C0FEDFF254BC4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:04:42 +0000 Manifest this update: Tue 12 May 2026 18:59:42 +0000 Manifest next update: Wed 13 May 2026 19:29:42 +0000 Files and hashes: 1: 8828D395B775E6267ED1C496B6DA870C9DA36235.crl (hash: ctplTFwlatAjC8pVRHv68F883crKmv6IBj+42Tp58eo=) 2: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: KKSmfUNkqalCLO37YcNIo/DR91Odj11Ccmn9dQDHPBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:8b:a1:e2:3a:0e:39:b0:a6:8e:b2:a5:73:c0:fe:df:f2:54:bc:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Validity Not Before: May 12 18:59:42 2026 GMT Not After : May 13 19:29:42 2026 GMT Subject: CN=52A512CD0FB0D0FD75E1A21C244CA7E81DEAA168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:fb:44:97:1c:80:24:1e:79:2f:0b:e9:3f: 98:b5:fe:d4:64:60:03:ed:9c:aa:a8:3b:03:a8:d2: ef:22:ce:22:62:b2:e1:31:8d:5b:a1:1b:a0:44:0e: dc:5d:40:99:0d:ca:d4:9d:94:78:89:ee:3b:b2:aa: 90:30:3e:14:82:0e:8f:7b:df:c6:04:e4:95:7e:d7: 83:67:1d:0e:9e:80:23:c1:40:6c:e2:d4:f0:2a:85: e5:63:b3:92:79:01:76:cd:2e:72:77:75:83:7e:53: 55:d1:bc:03:e8:c9:67:22:8c:05:85:a1:41:bb:f9: b3:ad:fb:d5:9f:3a:a1:25:20:dc:11:6b:8b:30:d1: ed:1c:e2:96:f7:fc:e2:67:72:9e:f6:81:58:87:6f: 8c:9e:e2:60:26:c9:dd:8d:4a:8e:d6:7d:96:22:da: 24:06:82:68:c2:32:90:5b:cf:1a:fe:9a:0e:20:75: 5f:49:b6:7e:07:45:67:74:db:24:b3:92:60:8a:ce: 5a:63:f6:19:e9:94:1a:07:ad:22:79:90:02:2e:94: fd:92:1f:c4:c5:39:d0:6d:a4:1b:2f:74:90:03:b0: 0a:13:77:6d:31:0c:40:5d:73:31:d1:84:a2:64:d2: ae:4f:a6:30:e0:13:33:86:49:41:34:8f:13:e7:9f: 21:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A5:12:CD:0F:B0:D0:FD:75:E1:A2:1C:24:4C:A7:E8:1D:EA:A1:68 X509v3 Authority Key Identifier: keyid:88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:ae:c0:06:cf:d3:a7:a6:59:25:bc:b9:4d:2c:a7:d3:e5:22: 4e:0d:61:76:5f:44:1d:93:bf:c1:c3:58:2c:a4:d2:a7:4a:1f: 31:6b:c2:a1:f4:0e:82:bd:6f:f0:81:25:81:a4:0a:87:43:5e: 68:39:b9:21:1a:d3:45:de:a7:00:d3:d6:2c:8b:0c:72:10:f6: c3:05:7e:75:b9:16:38:01:74:85:18:42:1b:c4:96:b2:ed:c6: 16:49:72:66:41:ca:8a:87:b9:16:e6:95:f2:77:27:67:f3:77: ae:07:c4:c3:b2:ee:7b:0d:57:c1:c9:f4:36:b2:ac:60:4d:82: 8e:df:66:f2:3d:da:35:b4:fb:fb:a7:c7:ca:be:50:47:64:a2: 66:a3:5e:35:a3:f6:1c:8b:fc:21:e7:22:d4:06:f4:e8:99:e9: f0:f6:f7:d2:fb:8b:26:6c:3c:a8:93:87:76:b1:30:22:14:e2: 8c:bf:6f:ec:07:c7:a6:c3:78:fe:84:71:73:1b:9f:7c:8b:2b: b6:02:e2:a9:58:52:83:ab:a7:17:70:ad:1c:3b:0e:6e:fd:0e: b2:81:24:30:d6:00:59:3c:31:85:de:0d:2c:bf:dc:25:6c:40: cc:df:38:f3:e2:3f:b6:85:3e:4e:83:d7:c8:83:8d:d1:bb:73: 86:b4:36:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeYuh4joOObCmjrKlc8D+3/JUvE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyOEQzOTVCNzc1RTYyNjdFRDFDNDk2QjZEQTg3MEM5 REEzNjIzNTAeFw0yNjA1MTIxODU5NDJaFw0yNjA1MTMxOTI5NDJaMDMxMTAvBgNV BAMTKDUyQTUxMkNEMEZCMEQwRkQ3NUUxQTIxQzI0NENBN0U4MURFQUExNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLqPtElxyAJB55LwvpP5i1/tRk YAPtnKqoOwOo0u8iziJisuExjVuhG6BEDtxdQJkNytSdlHiJ7juyqpAwPhSCDo97 38YE5JV+14NnHQ6egCPBQGzi1PAqheVjs5J5AXbNLnJ3dYN+U1XRvAPoyWcijAWF oUG7+bOt+9WfOqElINwRa4sw0e0c4pb3/OJncp72gViHb4ye4mAmyd2NSo7WfZYi 2iQGgmjCMpBbzxr+mg4gdV9Jtn4HRWd02ySzkmCKzlpj9hnplBoHrSJ5kAIulP2S H8TFOdBtpBsvdJADsAoTd20xDEBdczHRhKJk0q5PpjDgEzOGSUE0jxPnnyHNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUqUSzQ+w0P114aIcJEyn6B3qoWgwHwYDVR0j BBgwFoAUiCjTlbd15iZ+0cSWttqHDJ2jYjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTljMjc2MjEtZTI5Ny00MTAwLTk3MWEtMWM2OTY3YzUyYjFiLzAvODgyOEQzOTVC Nzc1RTYyNjdFRDFDNDk2QjZEQTg3MEM5REEzNjIzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODI4RDM5NUI3NzVFNjI2N0VEMUM0OTZCNkRBODcwQzlEQTM2 MjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvODgyOEQzOTVCNzc1RTYyNjdFRDFDNDk2QjZEQTg3 MEM5REEzNjIzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALauwAbP06emWSW8uU0sp9PlIk4NYXZfRB2T v8HDWCyk0qdKHzFrwqH0DoK9b/CBJYGkCodDXmg5uSEa00XepwDT1iyLDHIQ9sMF fnW5FjgBdIUYQhvElrLtxhZJcmZByoqHuRbmlfJ3J2fzd64HxMOy7nsNV8HJ9Day rGBNgo7fZvI92jW0+/unx8q+UEdkomajXjWj9hyL/CHnItQG9OiZ6fD299L7iyZs PKiTh3axMCIU4oy/b+wHx6bDeP6EcXMbn3yLK7YC4qlYUoOrpxdwrRw7Dm79DrKB JDDWAFk8MYXeDSy/3CVsQMzfOPPiP7aFPk6D18iDjdG7c4a0NsA= -----END CERTIFICATE-----Generated at Wed May 13 02:51:00 2026 by rpki-client