$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft File: 8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft (raw, json) Hash identifier: BSrPihkgnbqm+LwuXW7pDHbeR9sjbT158jwxpVEUz6M= Subject key identifier: 43:66:6A:EC:7F:88:31:46:3E:F4:B9:32:CD:21:C8:C8:03:99:66:BC Authority key identifier: 8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7 Certificate issuer: /CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7 Certificate serial: 6B6469DED3BF7FCCC584E3072A38E82AF9A56527 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:40:56 +0000 Manifest this update: Tue 12 May 2026 19:35:56 +0000 Manifest next update: Wed 13 May 2026 20:44:56 +0000 Files and hashes: 1: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: c2UfSKD11fX4h2x5HJIXy7pbYdyuzBLTiInfb4Fri14=) 2: 8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl (hash: mSo3/IlzGEyKOwhQHOVOZ861oFDuI2EYGNrjAal1lr0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:64:69:de:d3:bf:7f:cc:c5:84:e3:07:2a:38:e8:2a:f9:a5:65:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7 Validity Not Before: May 12 19:35:56 2026 GMT Not After : May 13 20:44:56 2026 GMT Subject: CN=43666AEC7F8831463EF4B932CD21C8C8039966BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ef:f5:cd:21:fa:c3:82:1c:bc:6f:d0:af:42: 49:24:ee:29:07:9f:d3:8a:f6:0b:e2:29:ed:01:cb: a4:a9:49:2a:c4:81:26:2a:1d:aa:ff:bc:6e:b7:6e: c7:f9:80:70:f5:9d:d7:e6:59:e9:63:e0:6c:6e:77: a2:44:ba:e3:f2:3c:69:62:03:41:ca:a6:f0:05:f1: 3b:3b:e8:c7:ff:d4:02:f8:93:a9:b6:4f:6c:9f:84: d6:77:cf:7c:67:a1:f5:2f:ab:1f:5c:04:8c:8b:d3: 28:0a:45:99:5d:e3:27:ca:64:2b:a2:a5:be:b6:d0: 87:84:4c:09:6d:17:0e:af:2e:9d:ab:ce:89:ba:c7: a0:35:5c:92:3a:e0:8e:57:05:7d:e3:28:c9:17:b4: 06:a1:34:31:57:e8:92:e6:e0:2c:74:d5:d3:0d:26: 4c:7d:36:a8:0b:77:7e:3c:5c:6e:7a:1f:16:76:dd: b5:eb:7f:eb:7e:21:a2:8e:dc:50:57:6d:3d:3e:4c: 34:e5:b4:35:6b:07:a0:a8:49:c4:f2:0e:4c:41:5a: 0f:63:d3:ee:cc:68:fe:c0:d6:2e:7b:9c:c8:af:f1: 4d:e8:3d:4c:95:52:88:70:86:79:a4:d0:42:02:7d: 64:81:3b:54:5b:8f:a3:a5:0f:3c:7f:83:5c:5b:f8: c9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:66:6A:EC:7F:88:31:46:3E:F4:B9:32:CD:21:C8:C8:03:99:66:BC X509v3 Authority Key Identifier: keyid:8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:26:7f:c7:7a:15:d4:8c:96:46:aa:2f:6c:8f:4f:15:58:4d: 21:f3:1a:2a:75:4b:5c:d8:d1:13:5e:da:37:8e:f4:73:37:9d: ea:cf:30:81:ef:57:31:08:b9:cb:b6:e8:78:bb:7c:91:f0:a0: 64:b9:46:ae:bd:42:2a:3d:02:c9:44:73:c9:8b:bd:34:78:6c: 8a:31:97:bc:d6:5f:16:78:8f:bf:95:0b:34:d6:5e:5b:22:e6: 1a:14:50:52:68:dd:37:17:61:31:9f:a7:49:d1:57:47:b9:b0: 2f:f6:3b:2a:f3:f1:79:53:76:28:3a:42:71:a1:05:83:a1:cc: c2:62:1b:f3:85:7a:f8:c6:44:23:19:62:75:92:4c:36:1a:39: 9d:93:0c:a0:ba:f9:05:7c:a7:e2:b9:f4:95:6c:35:f2:7e:aa: e0:e4:0f:c7:19:64:19:58:b1:43:18:fa:3c:43:b2:13:5c:ee: d4:a5:15:41:a4:f1:1c:3b:49:1d:e0:b1:3d:86:eb:d4:d7:af: aa:1a:4c:4e:82:69:62:a7:32:ba:2b:89:46:37:f2:a5:98:ab: f3:89:cf:2e:81:fa:66:04:20:b4:26:ea:1a:09:9a:17:a1:a5: 2f:5d:79:b5:1a:dc:7c:b4:d7:64:8f:a1:71:89:c9:b2:11:6d: b1:c9:7e:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2Rp3tO/f8zFhOMHKjjoKvmlZScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0NjM5ODRDMTY1MjJBMzVGQUFCNjA3MDhEMzRDODlE OUQ5RjFFNzAeFw0yNjA1MTIxOTM1NTZaFw0yNjA1MTMyMDQ0NTZaMDMxMTAvBgNV BAMTKDQzNjY2QUVDN0Y4ODMxNDYzRUY0QjkzMkNEMjFDOEM4MDM5OTY2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7/XNIfrDghy8b9CvQkkk7ikH n9OK9gviKe0By6SpSSrEgSYqHar/vG63bsf5gHD1ndfmWelj4Gxud6JEuuPyPGli A0HKpvAF8Ts76Mf/1AL4k6m2T2yfhNZ3z3xnofUvqx9cBIyL0ygKRZld4yfKZCui pb620IeETAltFw6vLp2rzom6x6A1XJI64I5XBX3jKMkXtAahNDFX6JLm4Cx01dMN Jkx9NqgLd348XG56HxZ23bXrf+t+IaKO3FBXbT0+TDTltDVrB6CoScTyDkxBWg9j 0+7MaP7A1i57nMiv8U3oPUyVUohwhnmk0EICfWSBO1Rbj6OlDzx/g1xb+Ml7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ2Zq7H+IMUY+9LkyzSHIyAOZZrwwHwYDVR0j BBgwFoAUi0Y5hMFlIqNfqrYHCNNMidnZ8ecwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQ3NTUzNDctNmIxYy00MmMxLTlmNTQtZDdlYWIyMmUxODJjLzAvOEI0NjM5ODRD MTY1MjJBMzVGQUFCNjA3MDhEMzRDODlEOUQ5RjFFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQ2Mzk4NEMxNjUyMkEzNUZBQUI2MDcwOEQzNEM4OUQ5RDlG MUU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvOEI0NjM5ODRDMTY1MjJBMzVGQUFCNjA3MDhEMzRD ODlEOUQ5RjFFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMmf8d6FdSMlkaqL2yPTxVYTSHzGip1S1zY 0RNe2jeO9HM3nerPMIHvVzEIucu26Hi7fJHwoGS5Rq69Qio9AslEc8mLvTR4bIox l7zWXxZ4j7+VCzTWXlsi5hoUUFJo3TcXYTGfp0nRV0e5sC/2Oyrz8XlTdig6QnGh BYOhzMJiG/OFevjGRCMZYnWSTDYaOZ2TDKC6+QV8p+K59JVsNfJ+quDkD8cZZBlY sUMY+jxDshNc7tSlFUGk8Rw7SR3gsT2G69TXr6oaTE6CaWKnMroriUY38qWYq/OJ zy6B+mYEILQm6hoJmhehpS9debUa3Hy012SPoXGJybIRbbHJfr4= -----END CERTIFICATE-----Generated at Wed May 13 05:15:02 2026 by rpki-client