$ rpki-client -vvf rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft File: 8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft (raw, json) Hash identifier: YHZrBb3dAvzEctSV274xql4YhSw9BW/cQMKwwT/CLcU= Subject key identifier: 4C:DD:C6:AB:45:96:99:9B:15:7F:18:9D:82:8A:09:9A:F9:F0:E5:0C Authority key identifier: 8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 Certificate issuer: /CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Certificate serial: 58D7856BDA16FDF58955AB4255396AE56085B335 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:32:24 +0000 Manifest this update: Tue 12 May 2026 17:27:24 +0000 Manifest next update: Wed 13 May 2026 20:32:24 +0000 Files and hashes: 1: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: vEKBFb87szZHK58hOoWh27DXWyqF6KjiEygYywKcCcA=) 2: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: FAM0vFS+CEP/k4I2FWb6JASyBXq3gfqT8CiCE9WHTo0=) 3: 8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl (hash: bdyQnb+epbWCKRNCkasH62SdYuYQLly15HBu/DCoEUI=) 4: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: nhCth3GuuL56/ZX/YpeRjeCAIHYgJ/lFofg+gthNMoU=) 5: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: r7dovsQ2SZSV7IfPAfAuGK0MlNXhEY5b9y9M8jygZbk=) 6: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: 3gBu5z4wg47/tNqaD7YsE1EFFZZ6JYTR0325QFX63A0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d7:85:6b:da:16:fd:f5:89:55:ab:42:55:39:6a:e5:60:85:b3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Validity Not Before: May 12 17:27:24 2026 GMT Not After : May 13 20:32:24 2026 GMT Subject: CN=4CDDC6AB4596999B157F189D828A099AF9F0E50C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:cb:8b:3a:60:43:d7:70:58:63:d7:8e:1f: 19:01:43:9c:9c:59:93:20:bf:7e:ef:c9:e4:3c:16: e4:3e:ca:18:96:c6:4c:13:17:18:1e:67:71:83:13: cf:3d:0d:71:81:47:1a:1a:1e:8c:79:7e:ff:f0:4a: 12:7c:f9:a7:5a:00:5b:a4:d9:3c:25:18:77:7d:8f: 6e:ad:6e:0a:b7:51:d5:cd:a9:bc:31:82:a3:be:18: a1:1b:e6:a4:1e:f5:96:75:6c:5a:d6:9a:87:59:bc: e7:d4:04:a2:2e:30:54:40:2f:13:cf:9b:ea:7c:5f: 4a:fa:87:26:99:6d:04:c5:65:d1:b7:5b:01:e7:b0: d2:8c:c2:9a:d0:d8:c8:1b:d8:4c:c8:dc:46:c0:1e: 13:60:51:47:ac:ff:24:21:ee:aa:be:61:c9:29:32: b6:1c:97:75:68:36:88:8e:a6:84:fd:06:3c:21:9b: 9f:cd:f3:23:00:06:7a:a6:c3:cd:8b:14:0f:25:99: cc:e8:38:a0:c2:32:a4:24:86:66:de:d7:7d:80:cf: 1b:25:aa:30:af:75:3b:92:9f:5e:61:74:0d:60:4e: 1f:05:87:f1:07:d8:d9:47:36:74:76:7b:45:66:f4: 14:88:9d:d4:34:82:8e:b0:00:8f:53:f5:85:cf:bb: 20:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DD:C6:AB:45:96:99:9B:15:7F:18:9D:82:8A:09:9A:F9:F0:E5:0C X509v3 Authority Key Identifier: keyid:8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:9c:65:67:32:ca:7f:aa:5d:b4:97:16:ec:12:71:3f:1f:02: 78:a6:bb:a9:b1:61:ca:fc:43:02:01:f4:8a:87:e4:93:d3:ac: 2d:07:fb:8f:a5:41:d4:c4:41:3c:bb:5e:b9:c6:79:2c:fc:3b: e8:44:ee:09:47:6d:d4:b3:65:c2:2c:d8:8e:09:1a:6e:7b:72: bd:fa:e1:08:f5:82:13:86:27:3d:13:06:fd:c9:c4:0f:da:34: 2d:15:33:60:d0:48:13:20:52:ae:ab:dc:ae:9e:e2:89:b5:49: f7:e1:b0:6b:65:b8:5f:58:4d:14:d2:cd:8e:0b:b8:9d:c9:a4: 23:23:e6:77:85:1a:96:01:15:72:d9:b5:a2:00:43:96:53:57: c7:c0:5d:5d:fd:c4:d2:34:a5:fe:96:e7:19:8b:b9:6b:35:98: 46:2c:2c:81:33:7a:77:6f:ae:d7:c6:a6:90:77:de:c4:46:5b: 6d:86:fc:b0:a0:90:19:4f:1f:63:7d:bf:76:62:ed:ae:ef:c9: 02:8d:f3:58:26:82:c2:fa:ec:26:e1:fa:ee:9b:a5:aa:bb:69: 09:25:84:35:b3:b4:97:73:7a:35:b4:a7:e7:b7:1d:7f:e8:7b: f4:cd:d3:49:f9:97:f6:41:b4:d6:61:78:c1:25:7d:8a:10:50: 53:16:89:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNeFa9oW/fWJVatCVTlq5WCFszUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU3RDI5QjhCMkU2RjJGMDlCNTA3RkMzNkIzMTczMTYy QTQzMTZFOTAeFw0yNjA1MTIxNzI3MjRaFw0yNjA1MTMyMDMyMjRaMDMxMTAvBgNV BAMTKDRDRERDNkFCNDU5Njk5OUIxNTdGMTg5RDgyOEEwOTlBRjlGMEU1MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDcuLOmBD13BYY9eOHxkBQ5yc WZMgv37vyeQ8FuQ+yhiWxkwTFxgeZ3GDE889DXGBRxoaHox5fv/wShJ8+adaAFuk 2TwlGHd9j26tbgq3UdXNqbwxgqO+GKEb5qQe9ZZ1bFrWmodZvOfUBKIuMFRALxPP m+p8X0r6hyaZbQTFZdG3WwHnsNKMwprQ2Mgb2EzI3EbAHhNgUUes/yQh7qq+Yckp MrYcl3VoNoiOpoT9Bjwhm5/N8yMABnqmw82LFA8lmczoOKDCMqQkhmbe132Azxsl qjCvdTuSn15hdA1gTh8Fh/EH2NlHNnR2e0Vm9BSIndQ0go6wAI9T9YXPuyCFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTN3Gq0WWmZsVfxidgooJmvnw5QwwHwYDVR0j BBgwFoAUjn0puLLm8vCbUH/DazFzFipDFukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI1MmVhZDMtZGM4Zi00ZDg2LWFmY2YtYTE0MGU1Yjg3NTMyLzAvOEU3RDI5QjhC MkU2RjJGMDlCNTA3RkMzNkIzMTczMTYyQTQzMTZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTdEMjlCOEIyRTZGMkYwOUI1MDdGQzM2QjMxNzMxNjJBNDMx NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOEU3RDI5QjhCMkU2RjJGMDlCNTA3RkMzNkIzMTcz MTYyQTQzMTZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWcZWcyyn+qXbSXFuwScT8fAnimu6mxYcr8 QwIB9IqH5JPTrC0H+4+lQdTEQTy7XrnGeSz8O+hE7glHbdSzZcIs2I4JGm57cr36 4Qj1ghOGJz0TBv3JxA/aNC0VM2DQSBMgUq6r3K6e4om1SffhsGtluF9YTRTSzY4L uJ3JpCMj5neFGpYBFXLZtaIAQ5ZTV8fAXV39xNI0pf6W5xmLuWs1mEYsLIEzendv rtfGppB33sRGW22G/LCgkBlPH2N9v3Zi7a7vyQKN81gmgsL67Cbh+u6bpaq7aQkl hDWztJdzejW0p+e3HX/oe/TN00n5l/ZBtNZheMElfYoQUFMWibQ= -----END CERTIFICATE-----Generated at Tue May 12 22:19:47 2026 by rpki-client