$ rpki-client -vvf rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft File: 8F6B228755F970273B8D779247A1AE56FE0C9587.mft (raw, json) Hash identifier: UEGS3qFZxsw6yXvMk0xXHrK775PIZf846TTg0GvzIgo= Subject key identifier: FE:5F:3D:31:08:21:E1:D3:7E:50:23:AA:EC:C2:FB:50:98:14:53:B1 Authority key identifier: 8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87 Certificate issuer: /CN=8F6B228755F970273B8D779247A1AE56FE0C9587 Certificate serial: 58F11130D6FAA1B8FA2F258ED7503CA031851270 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:44:36 +0000 Manifest this update: Tue 12 May 2026 21:39:36 +0000 Manifest next update: Thu 14 May 2026 00:12:36 +0000 Files and hashes: 1: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: Xy8vvuZlhVSnjTAKWEI2yBt5W17a07XY3wxdN0sfnOc=) 2: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: ZGy+loCXTZu4lKXZ9Xy1tyQd/a/a5ZNJkzDyvD+H2Qo=) 3: 8F6B228755F970273B8D779247A1AE56FE0C9587.crl (hash: 60kByjVFK8iWLtIIDpR4SzGxsux4Au32yX6Ni0bRh9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f1:11:30:d6:fa:a1:b8:fa:2f:25:8e:d7:50:3c:a0:31:85:12:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F6B228755F970273B8D779247A1AE56FE0C9587 Validity Not Before: May 12 21:39:36 2026 GMT Not After : May 14 00:12:36 2026 GMT Subject: CN=FE5F3D310821E1D37E5023AAECC2FB50981453B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:84:ef:2e:23:17:31:3b:54:ed:49:36:5e:9c: ed:9a:ab:14:51:bc:b4:93:89:e2:e6:04:31:b7:58: 29:1e:98:b1:e5:64:fa:c1:bb:e1:23:42:1e:52:80: 1f:89:b5:0b:1b:6b:77:eb:ff:ae:3c:0e:24:0c:23: 21:48:fd:c1:08:95:7c:7d:8d:32:5f:86:c4:f5:e0: 76:af:27:e7:7f:67:78:bb:4c:47:fe:1c:fb:cd:ee: 5b:23:eb:fc:f5:42:ce:77:17:a6:71:81:f9:83:4a: b0:ad:dc:ce:fe:08:d7:eb:81:54:cc:e3:1e:0a:40: 0d:55:77:da:c0:af:79:f7:ba:d9:f6:13:83:ab:99: 96:e4:f2:5f:43:99:de:82:4a:30:d7:aa:af:8a:3c: 0a:56:b5:bb:5d:9b:2a:d8:9c:20:58:60:b3:f0:3e: ec:67:a6:36:ab:42:93:4b:38:d2:14:28:64:8e:4b: 32:1c:13:d7:ae:d6:f3:d3:ff:46:0a:88:79:b3:c1: 24:cd:f2:5e:47:26:68:22:89:23:9e:75:eb:7d:d0: 4c:c9:ce:6d:e4:41:14:c9:d7:9d:f1:7a:5b:5d:ab: 93:ad:1c:91:f6:bc:e6:8f:bd:63:d6:23:b4:c0:97: 2a:7f:08:64:b2:fb:f6:4c:13:0e:c2:bd:e9:0a:e8: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5F:3D:31:08:21:E1:D3:7E:50:23:AA:EC:C2:FB:50:98:14:53:B1 X509v3 Authority Key Identifier: keyid:8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:0b:d7:1b:82:b9:da:a3:cd:05:27:c7:f7:08:74:79:f1:16: 13:8c:2b:68:34:fe:ee:15:78:89:1d:0d:0b:87:9d:ee:e4:64: c0:96:48:c4:37:f3:c9:57:db:f4:6e:d4:e2:79:be:a5:04:6f: 33:31:4f:14:14:ce:99:ad:ba:fc:6f:10:59:58:91:d7:c5:13: 1d:f1:22:48:99:24:ff:40:f3:49:98:ea:fe:9d:32:9c:f7:2d: 5c:82:2c:25:9c:35:5d:c6:a8:e2:99:de:a5:a6:75:8c:f0:1f: 12:f6:02:8f:c7:29:8b:ef:4c:4e:c1:6f:b9:6f:0d:48:b9:b3: b0:09:29:00:b6:6a:77:ee:c2:32:6f:c3:0b:b1:69:56:b1:b0: 85:eb:b2:b4:70:00:f8:a1:87:43:f8:87:37:d8:fe:22:c3:d4: 22:cd:b3:1f:0e:09:2e:18:66:a9:a3:21:a6:65:60:3a:b5:d0: 12:ff:69:5b:e3:65:eb:43:cf:9d:5c:a4:82:57:6c:6e:7f:ef: 49:31:9b:cb:71:8e:08:6f:76:3f:be:d3:09:40:32:3b:65:af: 63:44:cd:0b:38:a5:17:c9:9e:10:ac:59:b2:52:ce:67:39:d7: 0d:bd:a9:0f:79:59:ad:9e:9b:ea:29:96:97:55:90:38:d5:a9: 7e:35:05:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWPERMNb6obj6LyWO11A8oDGFEnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY2QjIyODc1NUY5NzAyNzNCOEQ3NzkyNDdBMUFFNTZG RTBDOTU4NzAeFw0yNjA1MTIyMTM5MzZaFw0yNjA1MTQwMDEyMzZaMDMxMTAvBgNV BAMTKEZFNUYzRDMxMDgyMUUxRDM3RTUwMjNBQUVDQzJGQjUwOTgxNDUzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphO8uIxcxO1TtSTZenO2aqxRR vLSTieLmBDG3WCkemLHlZPrBu+EjQh5SgB+JtQsba3fr/648DiQMIyFI/cEIlXx9 jTJfhsT14HavJ+d/Z3i7TEf+HPvN7lsj6/z1Qs53F6ZxgfmDSrCt3M7+CNfrgVTM 4x4KQA1Vd9rAr3n3utn2E4OrmZbk8l9Dmd6CSjDXqq+KPApWtbtdmyrYnCBYYLPw PuxnpjarQpNLONIUKGSOSzIcE9eu1vPT/0YKiHmzwSTN8l5HJmgiiSOedet90EzJ zm3kQRTJ153xeltdq5OtHJH2vOaPvWPWI7TAlyp/CGSy+/ZMEw7CvekK6EWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/l89MQgh4dN+UCOq7ML7UJgUU7EwHwYDVR0j BBgwFoAUj2sih1X5cCc7jXeSR6GuVv4MlYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU3ZmIxN2UtOWQ1OC00ZDUxLTg0NmUtMGE4NGM4Njk5MTQyLzAvOEY2QjIyODc1 NUY5NzAyNzNCOEQ3NzkyNDdBMUFFNTZGRTBDOTU4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjZCMjI4NzU1Rjk3MDI3M0I4RDc3OTI0N0ExQUU1NkZFMEM5 NTg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU3ZmIxN2UtOWQ1OC00ZDUxLTg0 NmUtMGE4NGM4Njk5MTQyLzAvOEY2QjIyODc1NUY5NzAyNzNCOEQ3NzkyNDdBMUFF NTZGRTBDOTU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsL1xuCudqjzQUnx/cIdHnxFhOMK2g0/u4V eIkdDQuHne7kZMCWSMQ388lX2/Ru1OJ5vqUEbzMxTxQUzpmtuvxvEFlYkdfFEx3x IkiZJP9A80mY6v6dMpz3LVyCLCWcNV3GqOKZ3qWmdYzwHxL2Ao/HKYvvTE7Bb7lv DUi5s7AJKQC2anfuwjJvwwuxaVaxsIXrsrRwAPihh0P4hzfY/iLD1CLNsx8OCS4Y ZqmjIaZlYDq10BL/aVvjZetDz51cpIJXbG5/70kxm8txjghvdj++0wlAMjtlr2NE zQs4pRfJnhCsWbJSzmc51w29qQ95Wa2em+oplpdVkDjVqX41BU4= -----END CERTIFICATE-----Generated at Wed May 13 05:14:49 2026 by rpki-client