$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft File: 8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft (raw, json) Hash identifier: 2BvzwjnosTz/fLzJPPqS1t1ILrKvN8Tr0ph8ZxxSVyQ= Subject key identifier: 74:CE:E8:F6:C9:F7:E6:C6:F2:A7:D0:4B:2D:7D:CE:5C:C7:42:EA:B5 Authority key identifier: 8A:7F:3E:F8:5C:F3:AF:D7:26:AC:A3:1F:35:E7:09:D8:EF:F0:C1:3C Certificate issuer: /CN=8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C Certificate serial: 2E57A8A52A29B3169C662313B69F58D2A3121C4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft Manifest number: 0E Signing time: Tue 12 May 2026 12:48:00 +0000 Manifest this update: Tue 12 May 2026 12:43:00 +0000 Manifest next update: Wed 13 May 2026 16:25:00 +0000 Files and hashes: 1: 8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl (hash: rtGjOht/6xEbizZ7X8Yb9HN8bgTTxa0L8N5zxVESjGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:57:a8:a5:2a:29:b3:16:9c:66:23:13:b6:9f:58:d2:a3:12:1c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C Validity Not Before: May 12 12:43:00 2026 GMT Not After : May 13 16:25:00 2026 GMT Subject: CN=74CEE8F6C9F7E6C6F2A7D04B2D7DCE5CC742EAB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:52:4d:7b:76:cc:05:fe:db:64:dd:78:86: 4e:a8:e7:d2:98:51:3d:f1:7d:ef:9d:75:76:45:8b: 87:62:e3:10:bc:9c:e9:38:b2:26:10:f0:80:50:77: 32:de:8a:cf:52:5d:08:96:bd:b0:ca:37:c5:e8:2e: cb:13:b7:2e:39:10:49:d8:e0:3d:44:54:40:65:d8: 5d:46:bb:c7:58:f5:4e:4c:e9:05:33:15:52:f5:0f: 20:f6:34:17:8b:18:ec:5c:2a:dc:fc:8f:d4:13:f5: dc:6d:eb:34:4c:0a:8c:c4:98:d6:80:de:02:2e:22: 0b:1f:b4:66:14:13:83:6e:b0:65:fb:ee:10:04:6c: 5c:cb:85:19:79:19:42:ad:ca:5e:58:cd:f2:5c:43: 83:d5:89:06:22:64:5d:16:34:5d:b5:22:88:2f:be: 10:b6:5f:01:3b:4a:c5:ea:82:c0:bc:89:9c:d4:89: 2b:bb:8f:44:4a:8f:bb:47:16:03:42:57:9d:61:64: f5:44:a3:7b:68:ac:ad:6e:8d:f4:d9:4c:b8:77:18: a4:6b:0d:bf:57:3f:78:7a:03:5a:83:f5:63:4c:8b: 93:b3:e0:5b:ed:72:48:b9:43:25:7c:d7:bc:f7:07: f1:24:48:ba:f3:56:c1:c3:df:1d:0c:58:c6:da:b9: b3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CE:E8:F6:C9:F7:E6:C6:F2:A7:D0:4B:2D:7D:CE:5C:C7:42:EA:B5 X509v3 Authority Key Identifier: keyid:8A:7F:3E:F8:5C:F3:AF:D7:26:AC:A3:1F:35:E7:09:D8:EF:F0:C1:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:bf:30:df:f3:21:f0:be:16:dc:e3:eb:e6:97:bf:93:ca:c0: e4:f3:91:6e:32:42:4f:5f:1f:a3:7a:82:cf:42:47:11:a7:4b: cd:84:4b:b2:8a:f1:76:55:4f:08:d0:82:b5:56:41:a1:6b:b4: 3e:0b:82:08:95:5c:32:41:7d:d0:25:6f:b8:99:4f:d3:f0:96: bb:64:b3:2a:5c:4c:89:78:d2:89:cc:89:85:74:b8:84:f0:8e: 7c:fc:41:d1:7f:41:1b:ab:fd:10:41:b8:fc:f2:a3:f6:dc:73: 27:e9:3a:a7:2e:5f:6f:94:91:08:dd:50:af:e8:7b:ad:31:ef: 5f:55:1f:5d:20:3b:b9:ce:c0:c2:8d:c2:62:fe:ef:62:32:d5: 35:6a:5a:b3:75:fa:45:1f:2d:54:68:1b:56:fd:0e:cd:cf:e9: 60:cd:6f:0b:94:5c:59:c4:60:60:1c:21:48:5f:82:cc:21:3d: 0f:ae:d7:56:52:d5:e0:cb:9e:c9:c9:18:47:ba:91:85:d4:7f: ee:68:25:9d:f2:32:2e:5e:8d:97:2b:e3:e7:2a:35:1c:43:64: 70:d3:e8:17:07:e8:01:26:ec:d3:42:ff:d8:f4:13:4a:c7:d6: 07:17:5e:fd:9c:23:e8:81:3a:8d:7a:73:0c:b3:6e:fb:2f:48: c3:1f:5d:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULleopSopsxacZiMTtp9Y0qMSHE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3RjNFRjg1Q0YzQUZENzI2QUNBMzFGMzVFNzA5RDhF RkYwQzEzQzAeFw0yNjA1MTIxMjQzMDBaFw0yNjA1MTMxNjI1MDBaMDMxMTAvBgNV BAMTKDc0Q0VFOEY2QzlGN0U2QzZGMkE3RDA0QjJEN0RDRTVDQzc0MkVBQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk4VJNe3bMBf7bZN14hk6o59KY UT3xfe+ddXZFi4di4xC8nOk4siYQ8IBQdzLeis9SXQiWvbDKN8XoLssTty45EEnY 4D1EVEBl2F1Gu8dY9U5M6QUzFVL1DyD2NBeLGOxcKtz8j9QT9dxt6zRMCozEmNaA 3gIuIgsftGYUE4NusGX77hAEbFzLhRl5GUKtyl5YzfJcQ4PViQYiZF0WNF21Iogv vhC2XwE7SsXqgsC8iZzUiSu7j0RKj7tHFgNCV51hZPVEo3torK1ujfTZTLh3GKRr Db9XP3h6A1qD9WNMi5Oz4Fvtcki5QyV817z3B/EkSLrzVsHD3x0MWMbaubOjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdM7o9sn35sbyp9BLLX3OXMdC6rUwHwYDVR0j BBgwFoAUin8++Fzzr9cmrKMfNecJ2O/wwTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NlNjhiNTAtMGU5ZS00YWU2LTgyNTMtNWJjMmNkMTIxMzczLzAvOEE3RjNFRjg1 Q0YzQUZENzI2QUNBMzFGMzVFNzA5RDhFRkYwQzEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QTdGM0VGODVDRjNBRkQ3MjZBQ0EzMUYzNUU3MDlEOEVGRjBD MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NlNjhiNTAtMGU5ZS00YWU2LTgy NTMtNWJjMmNkMTIxMzczLzAvOEE3RjNFRjg1Q0YzQUZENzI2QUNBMzFGMzVFNzA5 RDhFRkYwQzEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy/MN/zIfC+Ftzj6+aXv5PKwOTzkW4yQk9f H6N6gs9CRxGnS82ES7KK8XZVTwjQgrVWQaFrtD4LggiVXDJBfdAlb7iZT9Pwlrtk sypcTIl40onMiYV0uITwjnz8QdF/QRur/RBBuPzyo/bccyfpOqcuX2+UkQjdUK/o e60x719VH10gO7nOwMKNwmL+72Iy1TVqWrN1+kUfLVRoG1b9Ds3P6WDNbwuUXFnE YGAcIUhfgswhPQ+u11ZS1eDLnsnJGEe6kYXUf+5oJZ3yMi5ejZcr4+cqNRxDZHDT 6BcH6AEm7NNC/9j0E0rH1gcXXv2cI+iBOo16cwyzbvsvSMMfXVY= -----END CERTIFICATE-----Generated at Tue May 12 22:46:59 2026 by rpki-client