$ rpki-client -vvf rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/F8C619ADD100D297A2F864708157AB59332532B3.mft File: F8C619ADD100D297A2F864708157AB59332532B3.mft (raw, json) Hash identifier: KcfEHQrEb1VbVVyD4gmtm1wBy31CmG3l+ZxpFw950O4= Subject key identifier: E4:7A:44:A4:93:BD:F3:CE:9D:8D:9E:1F:A7:AE:FC:3B:2F:C5:30:7A Authority key identifier: F8:C6:19:AD:D1:00:D2:97:A2:F8:64:70:81:57:AB:59:33:25:32:B3 Certificate issuer: /CN=F8C619ADD100D297A2F864708157AB59332532B3 Certificate serial: 47DB2D1B23B5D94E53B039A07CCD734C2799B6CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8C619ADD100D297A2F864708157AB59332532B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/F8C619ADD100D297A2F864708157AB59332532B3.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:11:23 +0000 Manifest this update: Tue 12 May 2026 10:06:23 +0000 Manifest next update: Wed 13 May 2026 13:37:23 +0000 Files and hashes: 1: F8C619ADD100D297A2F864708157AB59332532B3.crl (hash: 5i6E5JcLY4IN1fjBR1p3/VPQfeB7tZOxoRGvmVV6IKI=) 2: 323030313a6466303a62363a3a2f34382d3438203d3e203633353130.roa (hash: wArTDRmaVYsY0J6RNUpo0G6vqPez2HQdmxKAlx8JtIQ=) 3: 3230322e342e3138362e302f32342d3234203d3e203633353130.roa (hash: Y380Bf6Ty0JUDKpPGnmQoN1ZYxHE14RFa+w38naXDlU=) 4: 3130332e34312e3136392e302f32342d3234203d3e203633353130.roa (hash: NWrDL4HQruXcRGSFFLmK8xPJ7odBtIR2ME628pc5nKQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/F8C619ADD100D297A2F864708157AB59332532B3.crl rsync://rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/F8C619ADD100D297A2F864708157AB59332532B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8C619ADD100D297A2F864708157AB59332532B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:db:2d:1b:23:b5:d9:4e:53:b0:39:a0:7c:cd:73:4c:27:99:b6:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C619ADD100D297A2F864708157AB59332532B3 Validity Not Before: May 12 10:06:23 2026 GMT Not After : May 13 13:37:23 2026 GMT Subject: CN=E47A44A493BDF3CE9D8D9E1FA7AEFC3B2FC5307A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:27:ca:96:da:92:a7:f7:11:94:d9:a2:7f: ba:9f:f9:73:35:b9:b5:4f:51:38:94:d7:8f:47:8d: a2:b4:6d:54:e8:65:f4:30:c8:f6:68:3d:85:5e:ef: 83:de:d7:fd:d7:8d:07:4c:40:f7:9b:21:3c:04:35: 98:0d:f9:1e:4d:74:84:e7:87:38:7e:e4:1b:a8:23: 32:82:63:f3:03:7b:a9:33:73:8e:fe:18:d3:44:96: eb:1d:c8:ad:c2:04:f4:bb:cd:33:bb:b0:42:3f:01: 89:a9:43:6e:2b:7c:cf:71:a6:ea:d5:99:f4:05:af: ed:ff:cd:bd:77:07:55:3e:bc:c5:ef:f9:9b:a9:04: e4:84:ff:1a:be:b3:c0:f9:6a:46:ae:9d:4e:2e:9d: e9:5e:78:fa:68:86:52:5e:05:5d:24:7b:1c:4a:47: d6:44:7a:30:0a:3f:ca:9c:e0:58:e2:5a:b8:4f:27: 37:5e:6f:24:00:4d:10:f2:fb:72:2e:a1:8a:25:4e: eb:77:bd:b9:b3:a9:fb:75:c2:31:11:5b:0f:0e:55: 90:80:38:55:bb:0e:40:9f:d6:dc:88:8b:0a:08:3d: 3f:a7:63:50:51:8f:34:0f:25:5a:00:0b:e7:aa:a9: 5f:c9:8e:27:11:17:95:2d:94:df:f9:8d:0a:aa:20: 79:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7A:44:A4:93:BD:F3:CE:9D:8D:9E:1F:A7:AE:FC:3B:2F:C5:30:7A X509v3 Authority Key Identifier: keyid:F8:C6:19:AD:D1:00:D2:97:A2:F8:64:70:81:57:AB:59:33:25:32:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/F8C619ADD100D297A2F864708157AB59332532B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8C619ADD100D297A2F864708157AB59332532B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/F8C619ADD100D297A2F864708157AB59332532B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ee:c2:b7:c0:4b:2c:59:6d:07:14:3d:57:99:1c:63:ad:46: 55:53:6e:f3:12:be:45:3e:24:23:98:a3:41:51:77:a9:f6:fa: 8e:d3:08:39:09:06:69:f4:6e:40:73:8c:26:fc:7e:39:e2:72: 93:e2:f7:05:d3:80:13:a5:0e:b9:a0:6a:fa:ed:5c:5c:c2:13: a7:c3:9f:90:d3:85:53:b8:bd:14:fb:22:44:3d:58:13:05:27: ca:d6:5c:78:5b:d1:f0:02:bc:be:85:cb:c6:4c:5a:e8:9a:1f: 8f:aa:9f:04:75:2b:69:38:62:24:5e:e6:02:97:3e:de:86:a3: 39:7c:d8:08:c4:16:d0:fa:e9:3b:58:1e:f3:ea:0e:8d:ac:c7: 5a:fd:5e:7d:f5:33:55:b9:da:f8:cf:9b:36:bb:32:4d:7e:6f: 0d:88:52:bd:c0:c1:8a:58:92:b5:54:52:79:5b:1e:50:a1:a5: d2:0b:ee:63:57:35:91:68:60:2a:4e:b4:c1:00:e1:5b:1e:e5: 88:32:3d:2d:dd:4d:17:5b:8f:18:44:fe:85:89:6a:ff:9d:9c: fb:48:0d:98:0d:4c:1c:c4:ac:86:d4:94:69:a2:08:3b:a6:67: 5b:82:0d:3a:45:b1:5a:91:28:81:95:0c:4b:e5:b5:95:46:b4: c0:63:10:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR9stGyO12U5TsDmgfM1zTCeZtsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDNjE5QUREMTAwRDI5N0EyRjg2NDcwODE1N0FCNTkz MzI1MzJCMzAeFw0yNjA1MTIxMDA2MjNaFw0yNjA1MTMxMzM3MjNaMDMxMTAvBgNV BAMTKEU0N0E0NEE0OTNCREYzQ0U5RDhEOUUxRkE3QUVGQzNCMkZDNTMwN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxyfKltqSp/cRlNmif7qf+XM1 ubVPUTiU149HjaK0bVToZfQwyPZoPYVe74Pe1/3XjQdMQPebITwENZgN+R5NdITn hzh+5BuoIzKCY/MDe6kzc47+GNNElusdyK3CBPS7zTO7sEI/AYmpQ24rfM9xpurV mfQFr+3/zb13B1U+vMXv+ZupBOSE/xq+s8D5akaunU4uneleePpohlJeBV0kexxK R9ZEejAKP8qc4FjiWrhPJzdebyQATRDy+3IuoYolTut3vbmzqft1wjERWw8OVZCA OFW7DkCf1tyIiwoIPT+nY1BRjzQPJVoAC+eqqV/JjicRF5UtlN/5jQqqIHnXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5HpEpJO9886djZ4fp678Oy/FMHowHwYDVR0j BBgwFoAU+MYZrdEA0pei+GRwgVerWTMlMrMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDU4NjkxODEtZWE1NS00MjFkLWFiYTgtNjk2ODMxNGM4ZDgwLzAvRjhDNjE5QURE MTAwRDI5N0EyRjg2NDcwODE1N0FCNTkzMzI1MzJCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEM2MTlBREQxMDBEMjk3QTJGODY0NzA4MTU3QUI1OTMzMjUz MkIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDU4NjkxODEtZWE1NS00MjFkLWFi YTgtNjk2ODMxNGM4ZDgwLzAvRjhDNjE5QUREMTAwRDI5N0EyRjg2NDcwODE1N0FC NTkzMzI1MzJCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHuwrfASyxZbQcUPVeZHGOtRlVTbvMSvkU+ JCOYo0FRd6n2+o7TCDkJBmn0bkBzjCb8fjnicpPi9wXTgBOlDrmgavrtXFzCE6fD n5DThVO4vRT7IkQ9WBMFJ8rWXHhb0fACvL6Fy8ZMWuiaH4+qnwR1K2k4YiRe5gKX Pt6Gozl82AjEFtD66TtYHvPqDo2sx1r9Xn31M1W52vjPmza7Mk1+bw2IUr3AwYpY krVUUnlbHlChpdIL7mNXNZFoYCpOtMEA4Vse5YgyPS3dTRdbjxhE/oWJav+dnPtI DZgNTBzErIbUlGmiCDumZ1uCDTpFsVqRKIGVDEvltZVGtMBjEAM= -----END CERTIFICATE-----Generated at Wed May 13 00:43:33 2026 by rpki-client