$ rpki-client -vvf rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft File: 8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft (raw, json) Hash identifier: 93kTPd/7xailPSbT5+a/UqeBor+KsQSyPEl7+0HT3vo= Subject key identifier: 30:61:F3:66:BC:F0:C2:95:6F:EF:43:A1:09:3E:85:D2:1D:08:5D:EE Authority key identifier: 8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC Certificate issuer: /CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC Certificate serial: 395CCD6CAFD761A1767BE39DAFD32EA34E3456FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:22:12 +0000 Manifest this update: Tue 12 May 2026 20:17:12 +0000 Manifest next update: Wed 13 May 2026 22:49:12 +0000 Files and hashes: 1: 8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl (hash: yGxNNVIolvIfzoFqnj/cVkH70g2pxTxjhnRM290vq84=) 2: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: fGKw2WFahFPpQMw21POO2xmihiDm+uI9kc4e8STtyBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5c:cd:6c:af:d7:61:a1:76:7b:e3:9d:af:d3:2e:a3:4e:34:56:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC Validity Not Before: May 12 20:17:12 2026 GMT Not After : May 13 22:49:12 2026 GMT Subject: CN=3061F366BCF0C2956FEF43A1093E85D21D085DEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:4c:c0:9b:30:ce:d6:5f:1a:cd:fe:41:b0: 01:70:85:65:5a:d0:e0:33:c4:f6:1e:f7:23:60:49: 35:53:b8:43:b7:88:9c:d5:29:1b:d9:e5:17:17:c0: 37:ff:91:55:39:e3:d3:0e:ef:72:ee:d4:48:79:96: 95:23:19:ab:62:d5:09:bb:ab:06:59:e9:5d:60:9d: 05:27:ac:52:68:50:b9:85:7e:3d:05:b9:1d:64:a6: b6:08:95:5e:8d:2a:c0:d6:45:c2:38:97:6e:ed:3a: cf:a7:46:6e:df:0d:08:a6:18:07:38:d6:e6:d0:de: 32:eb:11:ca:01:15:bd:e6:d4:f8:0e:61:60:a2:e0: 04:f1:4e:bf:d3:a8:a9:99:97:25:42:06:11:20:4a: 5c:ee:01:11:97:d5:32:bc:b7:98:f9:02:a1:b0:f6: 85:d2:85:a9:17:a4:9d:9b:67:a7:d2:71:ba:b0:d1: 22:7c:57:e9:cd:5f:eb:cc:79:12:74:30:a7:8f:c7: 4f:41:3d:48:8a:76:5a:0a:69:3b:47:73:04:fc:58: 9a:5e:2a:42:60:89:0c:f7:42:60:5d:66:e4:d3:e9: 8a:c6:ac:9b:e3:ed:c3:94:da:1c:57:85:29:4c:a5: f3:3a:8b:be:e4:c5:38:1d:bc:58:ae:13:c3:2e:c0: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:61:F3:66:BC:F0:C2:95:6F:EF:43:A1:09:3E:85:D2:1D:08:5D:EE X509v3 Authority Key Identifier: keyid:8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:4d:8d:e0:ed:18:7c:a6:a8:66:26:cc:1d:1d:65:96:dc:5c: 3b:f2:81:c5:bf:e1:17:ef:48:aa:6c:c8:0c:53:34:db:c0:f1: 2a:e1:41:5f:70:95:a0:dd:b2:91:ab:4d:73:84:53:bf:a2:a3: 96:25:c3:91:6a:50:e8:6c:91:c5:37:34:cb:81:46:92:14:93: 18:74:b1:60:ff:11:2d:77:e2:66:e0:4d:50:a7:d0:af:20:e8: b1:f7:ef:33:ef:02:b1:f3:33:4c:3e:77:d2:9e:5e:98:a7:ad: 45:12:32:0d:90:6a:ac:e2:d2:8a:7f:0e:9a:c4:67:67:a5:dd: f1:0e:0c:31:ae:86:b0:a1:2c:a6:2f:7b:dc:f5:1f:32:98:f0: b4:7c:78:c4:bc:48:a1:b3:b1:84:61:2f:0c:65:26:98:17:60: 25:f2:48:02:9f:f0:cd:14:cb:10:60:da:64:24:47:43:12:b3: 74:75:39:f5:28:99:05:c3:f9:2f:cc:48:c3:0f:86:90:96:b6: c9:21:4b:f1:47:68:91:7a:f5:e3:a4:8b:71:41:6b:dd:a8:03: c2:44:4c:00:24:ce:35:00:d9:c2:81:e4:86:14:03:74:0f:d1: 5d:fd:87:19:e1:f1:df:cc:b8:23:a3:0d:b4:08:40:15:55:ab: 84:ec:21:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVzNbK/XYaF2e+Odr9Muo040VvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUxMzEyNDVFMzhFODQ1QkUyQTIxOEY5OTI4RUFENTMw RkZGRkVBQzAeFw0yNjA1MTIyMDE3MTJaFw0yNjA1MTMyMjQ5MTJaMDMxMTAvBgNV BAMTKDMwNjFGMzY2QkNGMEMyOTU2RkVGNDNBMTA5M0U4NUQyMUQwODVERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5r0zAmzDO1l8azf5BsAFwhWVa 0OAzxPYe9yNgSTVTuEO3iJzVKRvZ5RcXwDf/kVU549MO73Lu1Eh5lpUjGati1Qm7 qwZZ6V1gnQUnrFJoULmFfj0FuR1kprYIlV6NKsDWRcI4l27tOs+nRm7fDQimGAc4 1ubQ3jLrEcoBFb3m1PgOYWCi4ATxTr/TqKmZlyVCBhEgSlzuARGX1TK8t5j5AqGw 9oXShakXpJ2bZ6fScbqw0SJ8V+nNX+vMeRJ0MKePx09BPUiKdloKaTtHcwT8WJpe KkJgiQz3QmBdZuTT6YrGrJvj7cOU2hxXhSlMpfM6i77kxTgdvFiuE8MuwITDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMGHzZrzwwpVv70OhCT6F0h0IXe4wHwYDVR0j BBgwFoAUjhMSReOOhFviohj5ko6tUw///qwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjcyOTA3ZDMtYmUyNC00ZGE4LTk2YmItZjEyMjhmYzk5MjA1LzAvOEUxMzEyNDVF MzhFODQ1QkUyQTIxOEY5OTI4RUFENTMwRkZGRkVBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTEzMTI0NUUzOEU4NDVCRTJBMjE4Rjk5MjhFQUQ1MzBGRkZG RUFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjcyOTA3ZDMtYmUyNC00ZGE4LTk2 YmItZjEyMjhmYzk5MjA1LzAvOEUxMzEyNDVFMzhFODQ1QkUyQTIxOEY5OTI4RUFE NTMwRkZGRkVBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOVNjeDtGHymqGYmzB0dZZbcXDvygcW/4Rfv SKpsyAxTNNvA8SrhQV9wlaDdspGrTXOEU7+io5Ylw5FqUOhskcU3NMuBRpIUkxh0 sWD/ES134mbgTVCn0K8g6LH37zPvArHzM0w+d9KeXpinrUUSMg2Qaqzi0op/DprE Z2el3fEODDGuhrChLKYve9z1HzKY8LR8eMS8SKGzsYRhLwxlJpgXYCXySAKf8M0U yxBg2mQkR0MSs3R1OfUomQXD+S/MSMMPhpCWtskhS/FHaJF69eOki3FBa92oA8JE TAAkzjUA2cKB5IYUA3QP0V39hxnh8d/MuCOjDbQIQBVVq4TsIYU= -----END CERTIFICATE-----Generated at Wed May 13 07:57:04 2026 by rpki-client