$ rpki-client -vvf rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft File: C8C1A31E42E799E9EDC0FAB813163052945845AC.mft (raw, json) Hash identifier: V/jQq6eLwECqB7YHFoQYhUyRRnOT2t8k+fSM7LNpnYo= Subject key identifier: 40:2C:39:18:BB:1D:F0:56:84:F1:AA:6E:72:C8:29:D4:85:FC:7A:31 Authority key identifier: C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC Certificate issuer: /CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Certificate serial: 0D78B4E86E19386DAAA3E5A5D0B6B15AAA022E46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:37:37 +0000 Manifest this update: Tue 12 May 2026 23:32:37 +0000 Manifest next update: Thu 14 May 2026 01:38:37 +0000 Files and hashes: 1: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: FEgS5ex34lgarvKtqbdAVQc0toy/dLHosJymf/4jCzU=) 2: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: QTf5TvW/sGJCtiqjYOWSFSyqMXy6xLfUyzA5Wf2VFMo=) 3: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: UWH9gD1/4ElZU52MCqktUtjxRojq4daDEIdWkUnok2k=) 4: C8C1A31E42E799E9EDC0FAB813163052945845AC.crl (hash: KLZWCSJXw/U+Mo4xvNzu1Tb2SdOrm1yRh98xstoqWEk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:78:b4:e8:6e:19:38:6d:aa:a3:e5:a5:d0:b6:b1:5a:aa:02:2e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Validity Not Before: May 12 23:32:37 2026 GMT Not After : May 14 01:38:37 2026 GMT Subject: CN=402C3918BB1DF05684F1AA6E72C829D485FC7A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:77:e3:a3:5c:ef:b9:5a:dd:d6:46:e5:4e:65: 85:99:b4:11:f9:3f:0e:8d:9c:bf:07:c7:a7:ae:87: 76:88:9c:e2:04:dd:c9:a7:63:0a:9c:f0:01:07:1d: 37:28:08:b8:f7:14:6f:c2:1d:3c:5f:e5:52:54:65: 5d:cf:02:ee:43:7a:3f:fb:80:59:61:b7:fb:c1:e9: 2c:c9:22:0e:e4:71:1b:3e:84:25:85:d6:57:2c:ac: 39:3f:c4:a9:04:46:8c:b5:49:b5:9d:c2:98:66:85: 4d:27:3c:55:e3:db:fe:7e:14:31:2b:40:e1:f9:d4: e2:6b:90:70:21:b3:cc:e1:da:2d:3b:6b:9e:cd:7e: 46:a4:fd:2c:d5:99:0c:8c:bd:87:af:d9:3e:56:f8: 8b:bb:65:36:ff:0d:5a:2b:f2:eb:b1:fa:80:dc:c2: 8e:0b:35:90:f2:14:05:c3:d0:c4:63:c9:d7:84:e5: b8:90:c0:59:6c:98:21:e4:5f:99:db:bb:94:1d:ec: c1:1c:46:cb:5d:06:0a:6d:eb:b4:d6:75:e9:ad:4b: 8c:55:0c:1a:e0:7d:2d:ba:98:33:98:62:6e:54:68: 2c:d4:79:91:87:59:68:da:fb:36:3f:9d:15:62:f6: 83:46:95:58:66:be:52:ef:d1:0f:56:8e:f7:64:b6: a5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2C:39:18:BB:1D:F0:56:84:F1:AA:6E:72:C8:29:D4:85:FC:7A:31 X509v3 Authority Key Identifier: keyid:C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8e:6d:86:00:08:3c:f7:a2:d2:64:45:11:2a:5b:ef:71:a0: 60:b3:db:02:27:fa:bb:49:03:6f:f2:ff:59:7f:d6:cc:1b:bf: 87:9f:89:0b:9a:fe:48:d7:63:90:cb:fc:aa:9d:08:99:df:f9: b7:a3:fb:28:d8:7f:06:cf:ee:f9:8b:25:08:6c:e8:f2:14:5c: 5f:ee:ed:64:cd:69:9f:20:ca:a1:3e:28:a7:bf:b6:86:4a:73: 40:47:32:27:54:ba:26:0e:01:09:03:1b:06:62:b0:43:b6:88: 5d:17:94:17:07:02:de:ba:80:73:db:22:f5:6b:39:21:be:39: 9a:2c:41:c1:9f:ae:b5:48:fb:50:6a:67:20:b2:28:e0:d1:f3: 57:c8:a1:d2:fc:e1:50:0b:41:72:81:20:a5:21:75:14:fa:33: b0:69:53:a8:ac:41:1a:e8:c0:87:10:5e:25:79:90:49:b1:5d: 8a:30:51:19:28:2e:17:ad:a0:21:29:da:ac:73:88:48:37:ca: e2:31:a1:9f:1c:35:65:ff:f0:30:49:71:33:4f:5e:ed:1e:90: 0b:3d:6c:25:a3:6e:e2:13:db:7f:f6:f2:fe:09:8d:a8:4e:b6: 6a:4e:32:66:1f:ad:96:8f:7c:19:ef:1e:df:fd:5c:b8:05:3f: 3d:8b:9e:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDXi06G4ZOG2qo+Wl0LaxWqoCLkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5 NDU4NDVBQzAeFw0yNjA1MTIyMzMyMzdaFw0yNjA1MTQwMTM4MzdaMDMxMTAvBgNV BAMTKDQwMkMzOTE4QkIxREYwNTY4NEYxQUE2RTcyQzgyOUQ0ODVGQzdBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDid+OjXO+5Wt3WRuVOZYWZtBH5 Pw6NnL8Hx6euh3aInOIE3cmnYwqc8AEHHTcoCLj3FG/CHTxf5VJUZV3PAu5Dej/7 gFlht/vB6SzJIg7kcRs+hCWF1lcsrDk/xKkERoy1SbWdwphmhU0nPFXj2/5+FDEr QOH51OJrkHAhs8zh2i07a57Nfkak/SzVmQyMvYev2T5W+Iu7ZTb/DVor8uux+oDc wo4LNZDyFAXD0MRjydeE5biQwFlsmCHkX5nbu5Qd7MEcRstdBgpt67TWdemtS4xV DBrgfS26mDOYYm5UaCzUeZGHWWja+zY/nRVi9oNGlVhmvlLv0Q9WjvdktqUPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQCw5GLsd8FaE8apucsgp1IX8ejEwHwYDVR0j BBgwFoAUyMGjHkLnmentwPq4ExYwUpRYRawwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhjOWMyNTItZjdjYS00ZGQ1LTg4ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0 MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5NDU4NDVBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEMxQTMxRTQyRTc5OUU5RURDMEZBQjgxMzE2MzA1Mjk0NTg0 NUFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMw NTI5NDU4NDVBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCObYYACDz3otJkRREqW+9xoGCz2wIn+rtJ A2/y/1l/1swbv4efiQua/kjXY5DL/KqdCJnf+bej+yjYfwbP7vmLJQhs6PIUXF/u 7WTNaZ8gyqE+KKe/toZKc0BHMidUuiYOAQkDGwZisEO2iF0XlBcHAt66gHPbIvVr OSG+OZosQcGfrrVI+1BqZyCyKODR81fIodL84VALQXKBIKUhdRT6M7BpU6isQRro wIcQXiV5kEmxXYowURkoLhetoCEp2qxziEg3yuIxoZ8cNWX/8DBJcTNPXu0ekAs9 bCWjbuIT23/28v4JjahOtmpOMmYfrZaPfBnvHt/9XLgFPz2Lnv0= -----END CERTIFICATE-----Generated at Wed May 13 13:53:49 2026 by rpki-client