$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft File: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft (raw, json) Hash identifier: 7Ah4wMw5d8fbC4HXVvJvuxPvKXnPz3VySid/uBlpIlU= Subject key identifier: 1C:75:E7:D1:25:B1:95:AB:74:6F:F1:52:21:99:68:D5:FA:F1:F6:1B Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 Certificate issuer: /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Certificate serial: 1892CC515E6391EE931F0C44F0825A10F5D28740 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:45:59 +0000 Manifest this update: Tue 12 May 2026 19:40:59 +0000 Manifest next update: Wed 13 May 2026 21:24:59 +0000 Files and hashes: 1: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: OJi67+qUPfc5UtqMYAV/z7dfCJOkcVNQkK5jTXZKwTQ=) 2: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: ZkDRUzZF2wR3zLgrv+xtI4hjJvx2gIYYCb4LSNtWkmg=) 3: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: 0kmlYn3U9dmyxdriKnU2KVYL6nRWvq4iRJ06VUJD99I=) 4: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl (hash: ia6FLfmfG6WmaigtfNPZFNf3runrP1y0RAGJpjwtOD4=) 5: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: MdXlPd40mbCtjh7iBEjKVSFA2qec8G7HYFT+dNSNEB4=) 6: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: 4e1qd57hMv+OkXmKRzkE4lf5ZpRQjvmNHhGL7MHMPZQ=) 7: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: QKq/ZGAbqKpUm7CoKZ+QT0ihf4BxzPyawZc6Ixihqm0=) 8: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: p8zNdOn26qSx4BGXz+vWlqG1YbrlG0OsNQVGyFkCQnw=) 9: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: ABGORh4lWt4WpXDSQFC2AfJLsKMZzwquOOsUkRU5KZw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:92:cc:51:5e:63:91:ee:93:1f:0c:44:f0:82:5a:10:f5:d2:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Validity Not Before: May 12 19:40:59 2026 GMT Not After : May 13 21:24:59 2026 GMT Subject: CN=1C75E7D125B195AB746FF152219968D5FAF1F61B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ff:6e:94:66:b1:64:64:e8:ca:ef:92:24:47: 0a:00:23:96:a7:c6:69:c1:6f:e1:ec:a3:c4:7b:d9: 56:43:fa:d1:91:69:11:c6:90:44:a9:2f:a6:3a:bf: c4:9f:0a:09:68:20:a0:e1:c3:4d:f7:5e:3c:c7:3b: ce:83:5a:44:b6:68:78:38:27:17:72:19:23:30:c8: 2b:b7:fe:20:a0:5e:70:1c:51:1a:5f:f9:8a:a3:f6: 2d:21:96:b9:a4:02:1b:15:fa:d5:df:5e:d2:8e:54: 2b:ff:60:77:02:8e:44:74:d8:ec:ad:a2:35:69:5d: a5:a7:ec:13:f2:91:28:fe:c6:60:b0:74:37:93:35: 7e:17:0e:a6:26:d7:a3:8c:a5:4a:f0:20:61:6b:9c: 13:2d:5b:72:e4:2b:ce:0a:de:f9:f6:5a:35:60:a5: de:48:7a:9b:25:61:79:a7:96:a4:d9:10:30:d8:f7: 0b:c1:6b:65:fc:8c:f5:b1:ef:10:d9:6c:4c:9c:47: 68:f3:62:52:03:40:40:c6:6d:7f:12:e2:ae:fa:7a: c1:1b:4f:92:17:dd:05:9b:96:09:93:01:c2:b9:95: d3:b8:3b:17:ef:18:e8:51:f5:f7:6b:96:91:81:7b: 00:d0:5d:38:8c:8a:fa:6a:31:4f:7f:90:8c:90:b1: b7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:75:E7:D1:25:B1:95:AB:74:6F:F1:52:21:99:68:D5:FA:F1:F6:1B X509v3 Authority Key Identifier: keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d4:d1:7e:6e:fc:1f:33:fe:6b:13:96:98:8f:70:f1:37:c1: 31:cd:3a:57:29:39:97:36:c7:4e:0c:6d:bd:d3:a3:d0:b9:71: b7:ed:97:9f:0e:e2:3a:fb:7b:e7:1d:46:1f:35:62:e2:6e:ef: 53:dc:2b:4f:6f:c6:ce:a8:0f:26:b2:4c:33:49:dd:56:f1:7c: b7:a0:8a:c0:88:e6:2d:b6:3e:89:19:58:57:ae:ec:0e:98:36: 92:50:97:cb:23:7f:ed:e3:d5:c6:b7:84:a2:fc:40:9d:7d:4a: 34:8b:1c:8f:b8:9e:d6:74:bc:12:36:12:34:c4:7f:ad:fd:68: 19:8c:a8:18:7f:42:04:57:77:c1:ba:36:fc:56:6d:ab:4f:26: 66:73:da:fa:39:ff:06:b5:15:15:b7:53:69:37:18:61:a4:97: d0:60:c5:db:e0:6b:3f:56:03:72:ff:1c:97:21:99:c6:28:28: 17:34:79:98:3e:5b:24:14:1f:38:77:5a:bf:fa:cc:53:7b:75: a9:31:a0:f8:1d:c8:ad:66:f2:d0:2c:3f:d8:b3:d4:f7:5d:e4: cb:c3:63:ab:6b:e9:ca:8a:e6:8d:a6:b7:9d:25:aa:32:99:2e: 54:fd:08:20:22:12:e3:b8:12:4e:85:2a:9c:a7:39:f0:83:37: fa:1d:60:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJLMUV5jke6THwxE8IJaEPXSh0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExMDU3MENFNTVEODUxMkZDQkRGMDI4MTlGQjhBMEQz QkFEMUY5NDAeFw0yNjA1MTIxOTQwNTlaFw0yNjA1MTMyMTI0NTlaMDMxMTAvBgNV BAMTKDFDNzVFN0QxMjVCMTk1QUI3NDZGRjE1MjIxOTk2OEQ1RkFGMUY2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb/26UZrFkZOjK75IkRwoAI5an xmnBb+Hso8R72VZD+tGRaRHGkESpL6Y6v8SfCgloIKDhw033XjzHO86DWkS2aHg4 JxdyGSMwyCu3/iCgXnAcURpf+Yqj9i0hlrmkAhsV+tXfXtKOVCv/YHcCjkR02Oyt ojVpXaWn7BPykSj+xmCwdDeTNX4XDqYm16OMpUrwIGFrnBMtW3LkK84K3vn2WjVg pd5IepslYXmnlqTZEDDY9wvBa2X8jPWx7xDZbEycR2jzYlIDQEDGbX8S4q76esEb T5IX3QWblgmTAcK5ldO4OxfvGOhR9fdrlpGBewDQXTiMivpqMU9/kIyQsbejAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHHXn0SWxlat0b/FSIZlo1frx9hswHwYDVR0j BBgwFoAUgRBXDOVdhRL8vfAoGfuKDTutH5QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE0OTYwODItYTBhYS00ODM2LWI1ODctOTczZGQ3ZTI5N2FmLzAvODExMDU3MENF NTVEODUxMkZDQkRGMDI4MTlGQjhBMEQzQkFEMUY5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTEwNTcwQ0U1NUQ4NTEyRkNCREYwMjgxOUZCOEEwRDNCQUQx Rjk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODExMDU3MENFNTVEODUxMkZDQkRGMDI4MTlGQjhB MEQzQkFEMUY5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3U0X5u/B8z/msTlpiPcPE3wTHNOlcpOZc2 x04Mbb3To9C5cbftl58O4jr7e+cdRh81YuJu71PcK09vxs6oDyayTDNJ3VbxfLeg isCI5i22PokZWFeu7A6YNpJQl8sjf+3j1ca3hKL8QJ19SjSLHI+4ntZ0vBI2EjTE f639aBmMqBh/QgRXd8G6NvxWbatPJmZz2vo5/wa1FRW3U2k3GGGkl9Bgxdvgaz9W A3L/HJchmcYoKBc0eZg+WyQUHzh3Wr/6zFN7dakxoPgdyK1m8tAsP9iz1Pdd5MvD Y6tr6cqK5o2mt50lqjKZLlT9CCAiEuO4Ek6FKpynOfCDN/odYKo= -----END CERTIFICATE-----Generated at Wed May 13 00:44:40 2026 by rpki-client