$ rpki-client -vvf rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft File: C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft (raw, json) Hash identifier: gKiQW636pt1DmtE02fM7ONZ8bZl4rQyQjWjVHHlmO4A= Subject key identifier: 57:3C:D6:61:B5:61:F5:E5:BA:ED:82:1A:AA:B2:23:06:76:C6:6B:D2 Authority key identifier: C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14 Certificate issuer: /CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14 Certificate serial: 614472C12A8F4CF63E3AFC9116C89F1B8252DF48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:44:14 +0000 Manifest this update: Tue 12 May 2026 18:39:14 +0000 Manifest next update: Wed 13 May 2026 20:24:14 +0000 Files and hashes: 1: C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl (hash: Su/jtExNsdJ5Lxz78/Pu7B138T89uhw9as2wYnYkkNE=) 2: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: oRViKlwXLb62v1XHH/P9v9PE35BuLaTpbEgB9nVLGXo=) 3: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: pBKVlpjSQfisARzQp/uCxR6vxT0fT2aUvnTqNxA3JGc=) 4: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: 1Jb72gV9Cql494HOmw4p+CcUceiPzhX48HtoigKm8xc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:44:72:c1:2a:8f:4c:f6:3e:3a:fc:91:16:c8:9f:1b:82:52:df:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14 Validity Not Before: May 12 18:39:14 2026 GMT Not After : May 13 20:24:14 2026 GMT Subject: CN=573CD661B561F5E5BAED821AAAB2230676C66BD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:25:ef:3e:91:2f:3c:86:bb:22:01:37:da: 7b:9f:9c:ee:d9:5a:fd:6c:0e:a0:0c:83:a3:64:6b: 8a:18:2d:43:b9:0a:dc:d5:eb:ac:66:ac:ec:19:be: 38:16:46:70:84:b5:c4:57:87:ed:a4:87:59:4e:eb: e2:c7:36:e2:9b:d2:19:02:9f:d3:f2:46:7e:c8:6e: 69:46:e4:d3:de:38:df:05:26:76:a5:6a:dd:1f:40: 4a:fe:71:3e:f8:01:13:48:64:66:8c:55:0a:72:4c: 26:23:d4:f6:71:9f:eb:61:a6:d1:88:ab:a3:ea:11: 1e:2a:e9:58:84:26:40:55:6f:9d:e8:9c:4b:2c:79: dc:02:45:ac:a8:3c:8e:54:06:6a:76:c8:03:97:e9: de:2c:96:f9:80:ac:18:88:78:58:c0:5a:33:2a:c3: ea:2a:de:76:be:86:6d:f2:76:45:53:1f:cc:e5:6e: da:a1:72:30:4d:da:31:60:07:fc:65:d6:06:17:75: 48:ed:11:e8:13:4c:e7:a4:48:9b:ba:7e:35:8d:68: ed:d0:c4:4c:00:a2:5d:b6:25:a3:92:ff:c6:61:a8: df:56:cc:55:b4:66:55:b1:bf:b3:56:af:4c:84:2a: 2a:f0:40:80:70:32:c3:48:b6:f9:72:7c:ac:bc:f0: af:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3C:D6:61:B5:61:F5:E5:BA:ED:82:1A:AA:B2:23:06:76:C6:6B:D2 X509v3 Authority Key Identifier: keyid:C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2e:e6:98:0e:72:c2:47:a1:9e:a5:ae:b6:45:40:59:e7:ee: c5:c7:b9:23:9c:96:45:da:56:f9:34:8b:77:0f:d5:34:52:5e: e2:f3:5e:8a:9e:4e:fa:4a:c2:61:b1:a0:d3:15:3b:26:12:c4: dc:bf:78:76:18:57:9f:64:a7:7a:66:c7:34:13:dd:92:d6:90: bd:79:7e:db:2b:45:2f:1b:83:b9:9b:f4:ea:19:6a:46:36:23: 0e:15:ef:1e:5c:4b:95:38:c7:2b:1d:52:27:a9:af:63:c2:a7: ed:e2:62:b9:ee:06:84:d2:d8:b9:79:8b:c6:37:9c:0a:d3:2d: a9:a0:7b:98:cc:a2:6e:85:79:5e:e4:91:74:6a:61:0f:45:dd: 0a:d4:db:09:3f:cb:c2:82:9e:1f:70:91:3b:96:fd:96:1b:af: 56:d6:aa:5a:08:c1:76:db:86:a9:e6:ae:62:35:03:57:83:7e: 3a:2b:15:dc:1d:57:4d:a2:15:a8:04:e9:35:2f:dd:77:69:ac: 02:0f:da:dc:f4:3c:c2:e5:35:2d:db:15:32:1c:d2:5e:0e:0e: 34:06:41:ed:62:b0:9e:85:ad:7d:db:f9:25:3d:2d:8b:93:da: 94:e9:89:35:86:28:e9:2a:d1:29:99:fd:92:46:60:c6:c6:12: 2e:2b:0d:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYURywSqPTPY+OvyRFsifG4JS30gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2NDdFREY1RUZERTk3MTIyOUY1RDc2ODE4QjM5NTdB QTZEOEExNDAeFw0yNjA1MTIxODM5MTRaFw0yNjA1MTMyMDI0MTRaMDMxMTAvBgNV BAMTKDU3M0NENjYxQjU2MUY1RTVCQUVEODIxQUFBQjIyMzA2NzZDNjZCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07yXvPpEvPIa7IgE32nufnO7Z Wv1sDqAMg6Nka4oYLUO5CtzV66xmrOwZvjgWRnCEtcRXh+2kh1lO6+LHNuKb0hkC n9PyRn7IbmlG5NPeON8FJnalat0fQEr+cT74ARNIZGaMVQpyTCYj1PZxn+thptGI q6PqER4q6ViEJkBVb53onEssedwCRayoPI5UBmp2yAOX6d4slvmArBiIeFjAWjMq w+oq3na+hm3ydkVTH8zlbtqhcjBN2jFgB/xl1gYXdUjtEegTTOekSJu6fjWNaO3Q xEwAol22JaOS/8ZhqN9WzFW0ZlWxv7NWr0yEKirwQIBwMsNItvlyfKy88K+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVzzWYbVh9eW67YIaqrIjBnbGa9IwHwYDVR0j BBgwFoAUyGR+31796XEin112gYs5V6ptihQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVkMzhiNDItYjdjMi00MmI2LWEyZmMtNjc1ZGEyNTRjNzc2LzAvQzg2NDdFREY1 RUZERTk3MTIyOUY1RDc2ODE4QjM5NTdBQTZEOEExNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODY0N0VERjVFRkRFOTcxMjI5RjVENzY4MThCMzk1N0FBNkQ4 QTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzg2NDdFREY1RUZERTk3MTIyOUY1RDc2ODE4QjM5 NTdBQTZEOEExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwu5pgOcsJHoZ6lrrZFQFnn7sXHuSOclkXa Vvk0i3cP1TRSXuLzXoqeTvpKwmGxoNMVOyYSxNy/eHYYV59kp3pmxzQT3ZLWkL15 ftsrRS8bg7mb9OoZakY2Iw4V7x5cS5U4xysdUiepr2PCp+3iYrnuBoTS2Ll5i8Y3 nArTLamge5jMom6FeV7kkXRqYQ9F3QrU2wk/y8KCnh9wkTuW/ZYbr1bWqloIwXbb hqnmrmI1A1eDfjorFdwdV02iFagE6TUv3XdprAIP2tz0PMLlNS3bFTIc0l4ODjQG Qe1isJ6FrX3b+SU9LYuT2pTpiTWGKOkq0SmZ/ZJGYMbGEi4rDR8= -----END CERTIFICATE-----Generated at Wed May 13 04:47:11 2026 by rpki-client