$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft File: 8B57121B495DA86939D79B7BA261CF6D38C999CF.mft (raw, json) Hash identifier: cTYcJBXI8L6JEb9NWwy/7hhQk+uzf8rXutB8+UWY3Lo= Subject key identifier: A0:86:C9:57:0B:1C:6B:08:E5:53:27:35:3E:4C:23:51:8A:8B:E8:A3 Authority key identifier: 8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF Certificate issuer: /CN=8B57121B495DA86939D79B7BA261CF6D38C999CF Certificate serial: 48B94D754532A772DCD503F41D77C5A07722DA7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:22:16 +0000 Manifest this update: Tue 12 May 2026 20:17:16 +0000 Manifest next update: Wed 13 May 2026 23:46:16 +0000 Files and hashes: 1: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: w+XxfdGQbvXdRZjpGQCwUdlhFyEQmevCuv9dcfZGuKE=) 2: 8B57121B495DA86939D79B7BA261CF6D38C999CF.crl (hash: KY5fPlxRCihaHmifT4Wxd/+ZonH5KtK82lPFukWPWxQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b9:4d:75:45:32:a7:72:dc:d5:03:f4:1d:77:c5:a0:77:22:da:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B57121B495DA86939D79B7BA261CF6D38C999CF Validity Not Before: May 12 20:17:16 2026 GMT Not After : May 13 23:46:16 2026 GMT Subject: CN=A086C9570B1C6B08E55327353E4C23518A8BE8A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cc:ab:41:a6:91:7e:6c:13:63:6d:bb:d2:39: 33:e8:0d:37:d2:a1:57:07:ff:01:3c:7e:f1:b3:bf: a8:90:19:af:d9:33:20:c8:ee:00:60:cd:96:cf:80: 82:cc:5a:96:67:ec:16:59:5b:8f:39:b6:a3:dc:51: f7:b6:71:42:26:c0:75:bd:d0:91:42:2f:fc:c7:7b: 96:ef:6e:9d:17:ca:05:cc:d2:c4:8a:ab:91:58:41: 11:dd:98:41:67:12:c9:fe:68:b4:10:a8:a6:40:a7: 33:0c:a7:49:f4:6e:d0:f9:43:4e:68:1e:3e:eb:92: f7:25:89:d8:d0:c2:52:f6:6c:b8:7a:a8:67:0b:1a: a5:ef:06:79:99:58:af:c8:1a:a7:2a:4a:bb:5e:f9: 9e:b1:f2:99:0f:96:a1:b8:f2:f6:39:25:d0:32:40: 79:ab:90:c4:17:e5:b4:6d:c2:5e:97:29:0e:e3:7a: 84:b7:51:f7:bd:67:2f:5f:17:7f:ee:53:18:b7:af: 93:46:72:14:71:c3:fd:bd:94:a1:74:19:a0:45:60: 1b:bd:52:d0:06:48:7d:83:ba:45:64:44:68:bc:8c: f6:40:bc:ae:4d:5c:16:b3:9d:a3:69:a2:dc:3f:0b: 7a:e7:0e:7a:40:d7:86:2f:67:4e:66:bd:f4:0c:8c: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:86:C9:57:0B:1C:6B:08:E5:53:27:35:3E:4C:23:51:8A:8B:E8:A3 X509v3 Authority Key Identifier: keyid:8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:9d:d6:8a:a6:a1:e6:c6:47:17:65:1b:14:f1:ba:d4:d7:dd: 34:d5:4c:fe:53:02:75:62:7e:66:55:7a:bc:f6:21:2f:20:aa: 08:1d:c1:39:3e:2a:1a:47:7e:1d:2d:c5:50:2c:e2:9b:0a:16: 9f:54:43:cf:80:08:93:e7:1c:78:00:ac:2f:0b:4a:34:c7:f2: 32:67:f6:dd:80:58:80:65:e2:d4:0f:cd:4a:bb:7a:6a:70:17: 8a:23:96:d0:bc:90:db:bb:6b:68:50:ed:05:f5:08:c4:8c:f2: c2:1c:ad:09:b3:82:ca:c7:b5:e3:70:c2:45:c1:23:32:03:48: 71:8e:a1:9e:fa:05:ad:9b:36:05:57:ba:33:4a:2a:00:8e:98: 4f:2b:7b:15:f8:eb:e9:7a:5f:fa:2e:22:2f:e0:90:b0:d9:03: e1:eb:61:9e:74:cc:93:a7:5b:8d:ef:4a:41:4f:c9:4b:42:4c: 69:6d:01:43:31:dd:af:0a:fc:c6:2d:f5:90:c1:a8:da:0d:d6: ab:a4:e4:ac:fd:1d:88:0a:f5:62:b6:95:1a:27:66:8e:18:81: 05:1e:e9:40:72:ca:b4:bd:14:a0:87:9a:03:8b:0f:10:79:5d: 37:e0:af:70:3d:61:e7:45:93:2e:34:fd:fc:b8:85:55:bc:11: 78:b8:95:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLlNdUUyp3Lc1QP0HXfFoHci2nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI1NzEyMUI0OTVEQTg2OTM5RDc5QjdCQTI2MUNGNkQz OEM5OTlDRjAeFw0yNjA1MTIyMDE3MTZaFw0yNjA1MTMyMzQ2MTZaMDMxMTAvBgNV BAMTKEEwODZDOTU3MEIxQzZCMDhFNTUzMjczNTNFNEMyMzUxOEE4QkU4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYzKtBppF+bBNjbbvSOTPoDTfS oVcH/wE8fvGzv6iQGa/ZMyDI7gBgzZbPgILMWpZn7BZZW485tqPcUfe2cUImwHW9 0JFCL/zHe5bvbp0XygXM0sSKq5FYQRHdmEFnEsn+aLQQqKZApzMMp0n0btD5Q05o Hj7rkvclidjQwlL2bLh6qGcLGqXvBnmZWK/IGqcqSrte+Z6x8pkPlqG48vY5JdAy QHmrkMQX5bRtwl6XKQ7jeoS3Ufe9Zy9fF3/uUxi3r5NGchRxw/29lKF0GaBFYBu9 UtAGSH2DukVkRGi8jPZAvK5NXBaznaNpotw/C3rnDnpA14YvZ05mvfQMjAXvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoIbJVwscawjlUyc1PkwjUYqL6KMwHwYDVR0j BBgwFoAUi1cSG0ldqGk515t7omHPbTjJmc8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NjNTYwNWQtZjE3YS00MDEwLTkyNTMtMjEwYzY0ZjE0OGJkLzAvOEI1NzEyMUI0 OTVEQTg2OTM5RDc5QjdCQTI2MUNGNkQzOEM5OTlDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjU3MTIxQjQ5NURBODY5MzlENzlCN0JBMjYxQ0Y2RDM4Qzk5 OUNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky NTMtMjEwYzY0ZjE0OGJkLzAvOEI1NzEyMUI0OTVEQTg2OTM5RDc5QjdCQTI2MUNG NkQzOEM5OTlDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGd1oqmoebGRxdlGxTxutTX3TTVTP5TAnVi fmZVerz2IS8gqggdwTk+KhpHfh0txVAs4psKFp9UQ8+ACJPnHHgArC8LSjTH8jJn 9t2AWIBl4tQPzUq7empwF4ojltC8kNu7a2hQ7QX1CMSM8sIcrQmzgsrHteNwwkXB IzIDSHGOoZ76Ba2bNgVXujNKKgCOmE8rexX46+l6X/ouIi/gkLDZA+HrYZ50zJOn W43vSkFPyUtCTGltAUMx3a8K/MYt9ZDBqNoN1quk5Kz9HYgK9WK2lRonZo4YgQUe 6UByyrS9FKCHmgOLDxB5XTfgr3A9YedFky40/fy4hVW8EXi4le0= -----END CERTIFICATE-----Generated at Wed May 13 10:20:39 2026 by rpki-client