$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft File: E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft (raw, json) Hash identifier: qSfGin1Ksf3RfncfJP0Ps4x+cPfUTwVmLey5xi6YMXY= Subject key identifier: C4:50:C9:DB:F7:75:0F:4B:B5:C6:40:8F:74:58:99:6A:8E:54:57:59 Authority key identifier: E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3 Certificate issuer: /CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3 Certificate serial: 4340B3710176D28BA7D8D2D2AE39B11A397B358A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:44:24 +0000 Manifest this update: Tue 12 May 2026 14:39:24 +0000 Manifest next update: Wed 13 May 2026 17:15:24 +0000 Files and hashes: 1: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: /GUQyhQCCG48GVOr5PjkMlvyumHtwdaSkLWzQJVBKPU=) 2: E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl (hash: +eDYyMb/HsHC3GS6R8HJwM2eesOrYzb8JMFiWFiOUAE=) 3: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: hL7QfKjtDKqwKchVRtqitw7xLrTQDNQicxI0MMMupQI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:40:b3:71:01:76:d2:8b:a7:d8:d2:d2:ae:39:b1:1a:39:7b:35:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3 Validity Not Before: May 12 14:39:24 2026 GMT Not After : May 13 17:15:24 2026 GMT Subject: CN=C450C9DBF7750F4BB5C6408F7458996A8E545759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:3e:23:8a:b8:c4:95:f0:07:18:6e:43:ab: 68:e0:12:ea:72:5d:ef:bd:98:e5:39:29:b9:6b:06: 18:fb:cd:ea:81:38:07:2f:e8:9f:74:32:3a:f0:22: 89:45:8d:2a:a2:58:ae:42:50:11:ee:ef:c5:2e:c4: 12:35:47:ff:6a:fa:5e:a3:45:3a:cf:45:8e:22:2f: 64:20:0e:2a:c3:97:1f:8e:7f:5a:d8:be:b1:f3:9b: a8:19:f2:18:d2:1f:be:c4:2a:c1:df:e4:18:8e:c3: 0d:56:ef:eb:27:f7:97:e4:a4:e4:b5:93:af:97:03: 91:50:ab:1e:53:37:43:35:09:5e:e1:03:b0:ca:52: 0f:95:6f:da:7c:2f:31:9a:d9:ac:7c:b4:d0:55:c3: 4c:7d:3d:b1:50:d2:e9:b9:fb:95:4c:ea:4e:b5:56: db:68:ed:23:f0:aa:20:6b:78:c8:06:2c:d7:b5:48: 65:0e:a9:bd:05:21:43:2e:a5:82:cf:43:a6:c7:f7: 73:7f:92:47:d7:bc:7f:0a:26:14:88:53:00:b8:a5: 77:ba:1e:96:f2:33:5d:97:27:ac:9f:05:68:ee:ed: 11:a2:cc:59:a0:cc:0c:54:a4:e4:74:ce:18:a3:f9: 8d:b1:ee:a2:63:8b:a7:c6:61:fb:af:32:d6:9f:22: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:50:C9:DB:F7:75:0F:4B:B5:C6:40:8F:74:58:99:6A:8E:54:57:59 X509v3 Authority Key Identifier: keyid:E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:73:b3:47:8f:04:2c:88:c8:2e:24:a0:0b:4e:8a:e7:91:81: b8:5d:79:ed:c9:b3:1d:ba:8f:cf:24:f6:4e:68:24:f7:a0:16: 6f:68:a9:2e:aa:2a:e7:c0:92:fd:89:c4:98:21:13:a4:f8:9b: e5:dd:62:3a:3d:3a:94:ea:89:5e:9b:9b:f1:26:9f:ad:88:9a: 4c:5a:62:33:90:1a:05:05:55:f2:c3:12:b2:d3:93:1d:58:9b: c6:22:14:e9:2a:14:85:e4:57:d2:29:89:56:72:89:b4:54:99: 4a:3b:53:9c:f9:4d:01:9e:6a:0b:40:5c:6a:42:4b:d1:47:04: d9:f3:4e:aa:85:75:9f:cf:e5:c4:e9:d9:fe:c4:0a:4a:e0:2f: c6:1f:b1:b4:7d:49:dc:cd:52:18:42:99:20:bf:90:f1:ee:ae: a6:f5:a6:b0:70:c0:bf:5b:1c:39:64:71:87:d3:6e:ea:8b:c6: 80:7e:18:9e:b2:f1:48:97:5f:6e:87:ed:96:70:b5:a8:e0:88: e6:95:b0:91:c4:96:25:fb:1f:e4:d5:26:d9:30:3a:cb:aa:f0: 88:24:80:cc:62:83:da:6c:23:74:84:8d:99:1b:d6:7b:6c:f6: 8e:f9:6a:47:32:18:b7:0e:ca:3c:d4:97:23:29:4d:59:76:b5: 44:69:42:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0CzcQF20oun2NLSrjmxGjl7NYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThGMjM5NDJDODcxQjFBMjNENTBBQTcwMjdBNzRBQkRD NzE3MkVBMzAeFw0yNjA1MTIxNDM5MjRaFw0yNjA1MTMxNzE1MjRaMDMxMTAvBgNV BAMTKEM0NTBDOURCRjc3NTBGNEJCNUM2NDA4Rjc0NTg5OTZBOEU1NDU3NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Gj4jirjElfAHGG5Dq2jgEupy Xe+9mOU5KblrBhj7zeqBOAcv6J90MjrwIolFjSqiWK5CUBHu78UuxBI1R/9q+l6j RTrPRY4iL2QgDirDlx+Of1rYvrHzm6gZ8hjSH77EKsHf5BiOww1W7+sn95fkpOS1 k6+XA5FQqx5TN0M1CV7hA7DKUg+Vb9p8LzGa2ax8tNBVw0x9PbFQ0um5+5VM6k61 Vtto7SPwqiBreMgGLNe1SGUOqb0FIUMupYLPQ6bH93N/kkfXvH8KJhSIUwC4pXe6 HpbyM12XJ6yfBWju7RGizFmgzAxUpOR0zhij+Y2x7qJji6fGYfuvMtafIkW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxFDJ2/d1D0u1xkCPdFiZao5UV1kwHwYDVR0j BBgwFoAU6PI5QshxsaI9UKpwJ6dKvccXLqMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJhZTU4YWMtNTkxNy00MDY5LTlhNmMtODNkYzFiYTMyMTI2LzAvRThGMjM5NDJD ODcxQjFBMjNENTBBQTcwMjdBNzRBQkRDNzE3MkVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEYyMzk0MkM4NzFCMUEyM0Q1MEFBNzAyN0E3NEFCREM3MTcy RUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvRThGMjM5NDJDODcxQjFBMjNENTBBQTcwMjdBNzRB QkRDNzE3MkVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZzs0ePBCyIyC4koAtOiueRgbhdee3Jsx26 j88k9k5oJPegFm9oqS6qKufAkv2JxJghE6T4m+XdYjo9OpTqiV6bm/Emn62Imkxa YjOQGgUFVfLDErLTkx1Ym8YiFOkqFIXkV9IpiVZyibRUmUo7U5z5TQGeagtAXGpC S9FHBNnzTqqFdZ/P5cTp2f7ECkrgL8YfsbR9SdzNUhhCmSC/kPHurqb1prBwwL9b HDlkcYfTbuqLxoB+GJ6y8UiXX26H7ZZwtajgiOaVsJHEliX7H+TVJtkwOsuq8Igk gMxig9psI3SEjZkb1nts9o75akcyGLcOyjzUlyMpTVl2tURpQmo= -----END CERTIFICATE-----Generated at Wed May 13 09:17:19 2026 by rpki-client