$ rpki-client -vvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft File: 8FFAA6656CAEB189705F03C7B4148624E4A80597.mft (raw, json) Hash identifier: xOVWGczjRjid4XpN9FN3qluMqbYvxpx9Blja95uqLx4= Subject key identifier: 92:B2:B0:D9:AF:95:85:FE:81:2E:1B:84:F3:BF:B0:BC:F4:1B:6F:D1 Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 Certificate issuer: /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Certificate serial: 363B6CA44C47497D33AC85CCF0DE8E58C8312FBF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:34:29 +0000 Manifest this update: Tue 12 May 2026 04:29:29 +0000 Manifest next update: Wed 13 May 2026 08:33:29 +0000 Files and hashes: 1: 8FFAA6656CAEB189705F03C7B4148624E4A80597.crl (hash: UYN0AKTWZnyyXga8qFG93jsFpbrdPp8bLeuQqqIgNMA=) 2: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: j7IknYgKj7dl1bu8AJ/aQ/eLpW5VQAB5YDLHEEVUQxU=) 3: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: 9g/ng/5n6hJoQNhHnUHUl6+xhhnGERFtgslQ205VyPU=) 4: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 5tE3feCM9vyNUB/qpwvXZKU/4/GsAVh0LYhHMntcLoo=) 5: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: QgX53d3ZPmwqUeHqTZtdjccW/DQcVacKXuBLz3xuE+Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:3b:6c:a4:4c:47:49:7d:33:ac:85:cc:f0:de:8e:58:c8:31:2f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Validity Not Before: May 12 04:29:29 2026 GMT Not After : May 13 08:33:29 2026 GMT Subject: CN=92B2B0D9AF9585FE812E1B84F3BFB0BCF41B6FD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:77:f3:fc:2e:b9:01:17:fd:ac:4b:4e:0f:57: d0:a2:cc:a3:41:0a:e1:b7:24:5f:b3:50:1a:93:7f: 2e:f1:9d:0a:ae:16:ca:9b:1f:16:e1:4d:c0:7a:a0: 27:bc:00:61:9c:b6:8b:b3:a2:31:81:34:04:87:52: 7f:5b:7b:31:65:c5:82:94:a7:bf:8d:7f:56:c8:c4: 6a:84:0c:f5:e4:93:78:a6:63:4b:e3:79:71:95:3e: 44:db:2f:99:3f:04:82:88:92:ba:5f:20:e4:65:3a: 7e:8f:ba:a2:b7:46:67:24:04:98:05:52:b5:8f:62: 34:3c:ff:88:5b:19:9c:ef:d7:e2:99:f4:6a:09:62: de:56:a0:07:1c:a6:68:40:d3:21:33:ac:f5:fa:74: 8c:a9:12:c0:2c:93:f2:a6:be:af:a9:b9:46:51:3d: 07:e5:fd:b3:24:86:92:1d:25:f9:16:fb:aa:a4:c1: a9:02:31:b8:47:1b:ab:3e:71:d8:a7:32:23:8e:d0: 33:1a:5b:7b:6c:d1:93:eb:11:b7:d6:65:ab:c9:38: 39:30:e3:cd:00:db:53:67:ba:17:6a:07:72:cb:7a: 32:fa:c8:13:9c:4d:50:51:21:a4:b4:6c:04:40:07: 44:80:73:d9:14:9b:0c:35:70:1c:8e:14:fa:08:05: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B2:B0:D9:AF:95:85:FE:81:2E:1B:84:F3:BF:B0:BC:F4:1B:6F:D1 X509v3 Authority Key Identifier: keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:64:26:ea:02:33:d2:c2:b3:05:ba:05:8d:e3:27:29:b2:7a: 22:68:f7:73:10:01:63:1c:ba:f7:5d:a4:11:6f:3a:7a:7f:38: d1:ab:2a:d8:44:15:2c:4f:f7:72:f4:ca:2c:13:48:a7:92:5e: 14:17:d4:97:16:e5:47:1f:1e:77:55:b5:d6:c4:5d:36:21:d6: 06:5e:00:c1:8e:27:a6:3f:cb:1f:12:e3:2e:62:6e:69:a7:1f: 6c:4f:1f:de:41:69:43:b7:4d:f2:62:37:b6:eb:be:99:9b:3f: 01:d2:be:c2:f6:a1:51:72:c5:ed:bb:c1:bb:a4:98:d1:aa:6c: bc:a5:56:a1:38:5d:b0:ad:64:bd:f2:06:f6:58:71:91:e9:2e: a4:a7:3a:0c:2a:49:d1:aa:6c:fa:e7:53:81:54:36:dc:72:a2: 33:f9:ee:a8:d2:70:7b:e1:67:f8:74:81:de:21:23:13:06:38: 1e:09:c4:b2:05:a2:41:33:93:ed:da:45:f8:c0:bd:e6:8c:2b: 57:da:ce:c4:64:d1:e7:48:3f:9b:6f:ca:31:9a:78:06:22:26: e3:46:30:67:56:bd:00:c8:9f:cf:70:2a:70:d6:66:c1:96:d6: 94:09:ff:39:6f:24:6b:7b:5f:ea:d4:26:f5:e0:0d:55:bf:6b: ff:f0:f4:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjtspExHSX0zrIXM8N6OWMgxL78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRF NEE4MDU5NzAeFw0yNjA1MTIwNDI5MjlaFw0yNjA1MTMwODMzMjlaMDMxMTAvBgNV BAMTKDkyQjJCMEQ5QUY5NTg1RkU4MTJFMUI4NEYzQkZCMEJDRjQxQjZGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrd/P8LrkBF/2sS04PV9CizKNB CuG3JF+zUBqTfy7xnQquFsqbHxbhTcB6oCe8AGGctouzojGBNASHUn9bezFlxYKU p7+Nf1bIxGqEDPXkk3imY0vjeXGVPkTbL5k/BIKIkrpfIORlOn6PuqK3RmckBJgF UrWPYjQ8/4hbGZzv1+KZ9GoJYt5WoAccpmhA0yEzrPX6dIypEsAsk/Kmvq+puUZR PQfl/bMkhpIdJfkW+6qkwakCMbhHG6s+cdinMiOO0DMaW3ts0ZPrEbfWZavJODkw 480A21NnuhdqB3LLejL6yBOcTVBRIaS0bARAB0SAc9kUmww1cByOFPoIBQrVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkrKw2a+Vhf6BLhuE87+wvPQbb9EwHwYDVR0j BBgwFoAUj/qmZWyusYlwXwPHtBSGJOSoBZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI4ODBkZWUtN2FhMi00YmU0LWJmMzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2 Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRFNEE4MDU5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBQTY2NTZDQUVCMTg5NzA1RjAzQzdCNDE0ODYyNEU0QTgw NTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2 MjRFNEE4MDU5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBkJuoCM9LCswW6BY3jJymyeiJo93MQAWMc uvddpBFvOnp/ONGrKthEFSxP93L0yiwTSKeSXhQX1JcW5UcfHndVtdbEXTYh1gZe AMGOJ6Y/yx8S4y5ibmmnH2xPH95BaUO3TfJiN7brvpmbPwHSvsL2oVFyxe27wbuk mNGqbLylVqE4XbCtZL3yBvZYcZHpLqSnOgwqSdGqbPrnU4FUNtxyojP57qjScHvh Z/h0gd4hIxMGOB4JxLIFokEzk+3aRfjAveaMK1fazsRk0edIP5tvyjGaeAYiJuNG MGdWvQDIn89wKnDWZsGW1pQJ/zlvJGt7X+rUJvXgDVW/a//w9Mw= -----END CERTIFICATE-----Generated at Wed May 13 00:44:15 2026 by rpki-client