$ rpki-client -vvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft File: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft (raw, json) Hash identifier: L6BYa5cQHYPCsUiZB4nB6s4DoK/WU2nIyzL65Z1L0YY= Subject key identifier: 9E:21:A5:C6:8C:14:14:34:5A:0D:1E:7A:57:FB:A7:17:D3:FD:BB:38 Authority key identifier: D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 Certificate issuer: /CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Certificate serial: 1EA648307395D755EBA2A9E3125555D82E6B0AD8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:51:16 +0000 Manifest this update: Tue 12 May 2026 19:46:16 +0000 Manifest next update: Wed 13 May 2026 20:38:16 +0000 Files and hashes: 1: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl (hash: VVrmVgLWELLd1ZDn0ucISEY3ZiYzz4635WcpFlS4ZdE=) 2: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: JFxGecPe7UA2eaCg+ZKJcplW/KcDw+sS4WqX6uOvlVg=) 3: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: eXGHZrGd4sU2DLSEdy3de330+Fw4LKj8QHf1Kk8jl8M=) 4: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: JFK4m68zG0lJAd7+KDHHharwdbO7qzWlnuoWt7ljQFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a6:48:30:73:95:d7:55:eb:a2:a9:e3:12:55:55:d8:2e:6b:0a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Validity Not Before: May 12 19:46:16 2026 GMT Not After : May 13 20:38:16 2026 GMT Subject: CN=9E21A5C68C1414345A0D1E7A57FBA717D3FDBB38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:68:3d:6c:cd:f4:8d:6a:b6:20:c6:76:42:27: ab:4b:58:da:5f:3c:58:b9:f3:50:07:21:bb:4a:8e: 09:7c:7c:0a:8f:5f:0a:d7:fc:c8:2c:8e:0f:ec:5a: ba:cc:6d:bf:d2:3c:12:15:09:bc:4e:c0:15:26:ab: d1:b8:87:74:7f:b0:50:b0:98:05:fc:79:d1:c0:7f: 0a:6a:d8:1e:5c:88:95:f8:2a:2d:63:8e:03:a9:88: dd:c1:d8:ac:1f:cb:29:1d:ad:c8:04:52:d6:a6:e7: 3e:66:ff:6b:b8:b7:76:c8:8a:e6:86:6f:90:09:16: 47:92:7f:0b:c6:61:f0:49:98:04:81:2e:29:ed:f7: cc:5d:b5:2e:3a:eb:5a:5b:e6:5f:8f:c9:ab:eb:a2: 71:27:39:2a:77:de:28:d2:93:1f:63:ff:58:82:67: 03:c6:bc:87:70:8c:78:60:dd:12:9d:9f:22:a4:fb: 13:9e:02:69:c8:ac:7d:ec:74:9c:95:d5:cd:e3:ba: 8c:00:2e:3e:4e:83:27:0f:b2:4c:6d:60:6f:61:b1: 68:6e:ec:c3:8c:a7:aa:4c:c6:1b:7f:fd:29:1a:4b: 20:8e:3c:74:be:1a:a1:8f:f7:c2:69:61:c4:31:9d: 03:8d:ef:1f:db:34:ff:88:4b:5c:1e:e0:14:80:99: 1e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:21:A5:C6:8C:14:14:34:5A:0D:1E:7A:57:FB:A7:17:D3:FD:BB:38 X509v3 Authority Key Identifier: keyid:D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:3a:67:fa:2c:87:43:f9:fd:fb:5e:76:98:86:0b:21:0f:28: 20:82:04:75:08:4e:3d:d3:37:b0:4b:56:05:a9:06:81:85:43: c7:32:16:38:66:38:ec:74:89:c7:a4:32:32:f6:4c:fd:27:6f: 61:44:00:81:08:50:f4:97:3c:76:98:49:6a:e4:3a:b8:4b:5a: 34:32:13:3d:5f:e5:1a:d9:a4:08:f6:53:26:ed:1c:9e:55:d4: 56:1e:eb:14:6b:4d:74:f2:e1:05:26:e5:9d:36:9d:66:13:8c: 31:18:3f:f0:a4:e6:3f:4b:a8:ee:c1:71:67:db:ae:92:dd:4f: 9f:34:f2:24:ae:5c:8e:fd:b4:35:9e:fa:d8:9c:aa:77:7a:2f: 20:08:4e:8a:89:c1:8c:22:ad:ef:98:b6:bc:ce:39:a4:13:79: 04:5f:47:07:6b:d6:e9:59:a6:b1:e3:74:0d:d7:87:db:9d:cb: 50:23:0b:c5:d6:d6:00:d5:a0:5e:a9:37:d7:d5:a7:1f:e0:97: 00:0d:09:76:91:7d:75:ec:10:50:83:14:fc:a8:9f:3a:97:ba: 5b:93:e7:99:f4:62:91:1c:47:3c:8c:74:29:75:c9:cb:76:a7: 14:52:98:7d:d4:3f:8c:ea:8a:3b:18:c2:52:fa:8c:16:c9:a8: 20:f9:3f:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqZIMHOV11XroqnjElVV2C5rCtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdCRURB NDMwODJDMzAeFw0yNjA1MTIxOTQ2MTZaFw0yNjA1MTMyMDM4MTZaMDMxMTAvBgNV BAMTKDlFMjFBNUM2OEMxNDE0MzQ1QTBEMUU3QTU3RkJBNzE3RDNGREJCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaD1szfSNarYgxnZCJ6tLWNpf PFi581AHIbtKjgl8fAqPXwrX/Mgsjg/sWrrMbb/SPBIVCbxOwBUmq9G4h3R/sFCw mAX8edHAfwpq2B5ciJX4Ki1jjgOpiN3B2KwfyykdrcgEUtam5z5m/2u4t3bIiuaG b5AJFkeSfwvGYfBJmASBLint98xdtS4661pb5l+PyavronEnOSp33ijSkx9j/1iC ZwPGvIdwjHhg3RKdnyKk+xOeAmnIrH3sdJyV1c3juowALj5OgycPskxtYG9hsWhu 7MOMp6pMxht//SkaSyCOPHS+GqGP98JpYcQxnQON7x/bNP+IS1we4BSAmR4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUniGlxowUFDRaDR56V/unF9P9uzgwHwYDVR0j BBgwFoAU2L91kMQN5zFvUqHe58577aQwgsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBD NDBERTczMTZGNTJBMURFRTdDRTdCRURBNDMwODJDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOEJGNzU5MEM0MERFNzMxNkY1MkExREVFN0NFN0JFREE0MzA4 MkMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdC RURBNDMwODJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAE6Z/osh0P5/ftedpiGCyEPKCCCBHUITj3T N7BLVgWpBoGFQ8cyFjhmOOx0icekMjL2TP0nb2FEAIEIUPSXPHaYSWrkOrhLWjQy Ez1f5RrZpAj2UybtHJ5V1FYe6xRrTXTy4QUm5Z02nWYTjDEYP/Ck5j9LqO7BcWfb rpLdT5808iSuXI79tDWe+ticqnd6LyAIToqJwYwire+YtrzOOaQTeQRfRwdr1ulZ prHjdA3Xh9udy1AjC8XW1gDVoF6pN9fVpx/glwANCXaRfXXsEFCDFPyonzqXuluT 55n0YpEcRzyMdCl1yct2pxRSmH3UP4zqijsYwlL6jBbJqCD5P8g= -----END CERTIFICATE-----Generated at Wed May 13 04:09:29 2026 by rpki-client