$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft File: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft (raw, json) Hash identifier: R5W3x3kKNASTHNU9B/JV4dFWKgNwfrusJtiQZ5sLKxo= Subject key identifier: F9:DD:51:54:84:7B:C2:EF:9E:1A:59:D3:33:C8:0D:A0:B6:2E:9E:E9 Authority key identifier: 88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 Certificate issuer: /CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Certificate serial: 16A3744B39B1EB94860CF4B9FE1B1256732A85B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:59:34 +0000 Manifest this update: Tue 12 May 2026 18:54:34 +0000 Manifest next update: Wed 13 May 2026 22:20:34 +0000 Files and hashes: 1: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: YJRCBupflF/I8POF8sMQ3AXgFo1nrT6mZHr4XrUFzvU=) 2: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 0+nHSjmEBtHrdpW5swBsy/CGgBdToecJRrJ4YRQ1Ieo=) 3: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl (hash: +ufOFdDeQb5KKe+xjkjGKWbeINUpVpr5rjjHkwhkS9I=) 4: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: l0DIBrvHKOmdXYA8EMn7r3ept4hzvTyfATy5T2AkXgc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a3:74:4b:39:b1:eb:94:86:0c:f4:b9:fe:1b:12:56:73:2a:85:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Validity Not Before: May 12 18:54:34 2026 GMT Not After : May 13 22:20:34 2026 GMT Subject: CN=F9DD5154847BC2EF9E1A59D333C80DA0B62E9EE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3a:24:94:e9:91:f5:c1:1f:65:0a:4d:c5:bc: d9:31:55:75:4c:aa:76:9b:4c:c5:c3:22:72:c6:f2: 0c:17:ad:0f:e3:c1:93:87:6b:e4:71:81:46:d4:5c: 7f:39:2a:18:95:77:2b:0d:e4:f4:51:3e:04:22:93: 30:30:30:9a:4d:0a:45:52:da:55:61:c3:ef:cb:b8: db:c9:d4:48:84:b6:8a:f1:55:da:b2:8d:d9:36:ab: 36:76:3b:7f:17:d2:fc:ee:1c:23:dd:72:f0:3e:96: 1a:ef:0a:f9:e7:61:48:4b:cd:09:2a:23:69:9f:3a: c8:ca:88:e5:6f:8c:8c:a4:79:45:9a:31:f2:38:86: 9e:15:f9:90:cc:ae:2b:74:6d:0d:7f:f4:45:f1:ff: e3:8a:f3:f4:b2:78:f3:3c:d1:98:e7:04:28:36:38: 1b:22:6e:d2:3a:ba:c5:32:34:6a:9c:3a:59:9f:85: 3c:fe:f9:af:52:a9:34:d7:9d:49:10:5b:e3:be:5d: 26:6a:46:86:96:fe:f3:37:eb:d5:c9:9d:1b:92:4f: 86:f4:9a:b2:66:d5:e8:19:82:99:de:7a:e8:b5:9d: 9b:af:c3:0f:63:dd:ed:31:55:9f:b1:19:d0:5e:ce: 8a:54:f4:7b:2b:c8:03:a2:7e:7f:fe:08:c4:13:13: eb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DD:51:54:84:7B:C2:EF:9E:1A:59:D3:33:C8:0D:A0:B6:2E:9E:E9 X509v3 Authority Key Identifier: keyid:88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7d:1d:b4:3b:52:36:b8:60:2f:fe:7b:1b:2a:11:36:f2:a9: 34:5d:67:91:78:c6:b7:3b:05:58:d0:28:2f:d9:c8:58:cd:ec: 9e:5e:1e:72:ab:f4:71:14:52:18:df:df:40:7e:39:08:e5:8a: 37:c6:36:10:d7:49:30:fe:56:bb:11:6b:dc:d6:1f:ac:04:47: 09:45:0b:0a:08:a8:11:99:8a:c9:de:81:1c:e1:9c:80:d4:fe: 4f:d8:e9:62:42:00:ae:03:0b:4e:b2:6b:ac:56:00:1b:0c:f6: be:96:c8:d1:77:94:d7:ec:0c:5a:d8:a6:58:a7:f3:1e:91:d5: 57:6e:62:36:39:87:2d:2a:37:49:0d:84:5d:49:f4:e3:9d:65: c0:0a:31:21:39:5d:65:a7:d4:72:48:1f:e0:b2:d0:ec:7a:64: fc:57:26:5f:41:8e:f6:c0:d1:36:51:1b:ab:57:39:bc:24:86: ec:7b:46:78:ba:9e:27:a6:17:da:af:ad:4e:10:6b:a5:8c:7a: bd:42:15:1d:c5:34:11:b1:c0:5d:17:73:be:0e:b6:2c:34:0b: 19:3d:5b:dd:eb:6c:10:9b:21:d4:fa:87:86:c5:81:26:b9:39: 1c:07:d0:7f:3d:2e:6f:96:3b:9b:21:3f:79:47:67:b5:69:ec: 5e:84:ae:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqN0Szmx65SGDPS5/hsSVnMqhbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1 QzRGMjk4NTAeFw0yNjA1MTIxODU0MzRaFw0yNjA1MTMyMjIwMzRaMDMxMTAvBgNV BAMTKEY5REQ1MTU0ODQ3QkMyRUY5RTFBNTlEMzMzQzgwREEwQjYyRTlFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmOiSU6ZH1wR9lCk3FvNkxVXVM qnabTMXDInLG8gwXrQ/jwZOHa+RxgUbUXH85KhiVdysN5PRRPgQikzAwMJpNCkVS 2lVhw+/LuNvJ1EiEtorxVdqyjdk2qzZ2O38X0vzuHCPdcvA+lhrvCvnnYUhLzQkq I2mfOsjKiOVvjIykeUWaMfI4hp4V+ZDMrit0bQ1/9EXx/+OK8/SyePM80ZjnBCg2 OBsibtI6usUyNGqcOlmfhTz++a9SqTTXnUkQW+O+XSZqRoaW/vM369XJnRuST4b0 mrJm1egZgpneeui1nZuvww9j3e0xVZ+xGdBezopU9HsryAOifn/+CMQTE+tlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+d1RVIR7wu+eGlnTM8gNoLYunukwHwYDVR0j BBgwFoAUiGPUPCzTbp3ijH5V8YkcwlxPKYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVlOTQwMTQtODdmYS00YmMyLWIxYzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0My Q0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1QzRGMjk4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODYzRDQzQzJDRDM2RTlERTI4QzdFNTVGMTg5MUNDMjVDNEYy OTg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFD QzI1QzRGMjk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH19HbQ7Uja4YC/+exsqETbyqTRdZ5F4xrc7 BVjQKC/ZyFjN7J5eHnKr9HEUUhjf30B+OQjlijfGNhDXSTD+VrsRa9zWH6wERwlF CwoIqBGZisnegRzhnIDU/k/Y6WJCAK4DC06ya6xWABsM9r6WyNF3lNfsDFrYplin 8x6R1VduYjY5hy0qN0kNhF1J9OOdZcAKMSE5XWWn1HJIH+Cy0Ox6ZPxXJl9BjvbA 0TZRG6tXObwkhux7Rni6niemF9qvrU4Qa6WMer1CFR3FNBGxwF0Xc74Otiw0Cxk9 W93rbBCbIdT6h4bFgSa5ORwH0H89Lm+WO5shP3lHZ7Vp7F6Ernc= -----END CERTIFICATE-----Generated at Wed May 13 00:45:18 2026 by rpki-client