$ rpki-client -vvf rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft File: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft (raw, json) Hash identifier: znP8cEuxUjy4v5XNuHWzJxxdQh5pfpomIyuSi0xU0z4= Subject key identifier: FC:D7:78:ED:5E:A5:93:35:9E:58:31:02:A3:6C:2B:0F:A2:96:3D:1F Authority key identifier: 8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 Certificate issuer: /CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Certificate serial: 224E6330AD83153C706D5AF9FBC4CC386EFB699C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:10:43 +0000 Manifest this update: Tue 12 May 2026 16:05:43 +0000 Manifest next update: Wed 13 May 2026 17:53:43 +0000 Files and hashes: 1: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: 71PyqcaPYwvm2e6i8fnxEnvNfxXMokDQ1xxLp0rozYA=) 2: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: HeHfGZB/GAp4q9T9TRaLUnaN9SyHYBb/bDC0hRan7Ak=) 3: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl (hash: WXS9ycrSn8j+pXHDGlYeAJhMn/2qi8ecQehrSvxQKSQ=) 4: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: NdF7z4Axz0mBE/lC0pc0IGrEEOoXFiCSmtcjnukP0y4=) 5: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: PZbtbKk588SOuMSDyRHv/Fg/EjC+9RQB0ZQtHocb618=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4e:63:30:ad:83:15:3c:70:6d:5a:f9:fb:c4:cc:38:6e:fb:69:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Validity Not Before: May 12 16:05:43 2026 GMT Not After : May 13 17:53:43 2026 GMT Subject: CN=FCD778ED5EA593359E583102A36C2B0FA2963D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d2:5b:e1:2f:8b:8f:0d:d3:9a:8b:1f:99:d6: 90:18:13:3f:57:39:5f:fa:25:55:9c:4b:f5:ba:2c: 9f:5e:7a:f3:53:0b:74:f4:eb:d7:99:13:97:4c:a6: 91:a1:94:48:6d:4f:a4:ee:40:4b:58:07:e6:d3:24: 62:f0:8b:02:62:e5:81:2a:64:f9:26:de:f3:8b:ca: ec:bb:13:e0:85:65:d1:f6:19:9a:82:14:89:ff:82: 4c:7f:9f:56:71:55:91:07:fb:fc:90:34:63:29:3d: 4c:4a:4c:79:cb:42:39:00:5f:4c:47:e0:24:1f:d4: 1e:94:8e:23:3a:a8:7e:74:84:4d:31:47:5e:18:af: 0e:21:d2:53:39:56:00:a8:18:b6:64:33:bc:f1:08: ce:16:01:07:92:ae:ad:56:7b:8e:20:30:ee:16:f6: 00:77:10:c1:f7:81:e9:d2:f7:b7:b5:29:78:22:5d: 37:81:d5:dc:9e:c3:73:47:16:72:e3:94:c7:9d:e2: 7b:6e:49:19:6f:22:02:06:b3:80:97:07:ae:cd:80: ef:39:a7:72:77:dc:bb:84:06:73:c6:9f:bd:19:37: 9f:58:3d:f9:c7:f0:f3:77:c8:9d:1e:5c:20:e0:d8: 9f:87:3c:e0:e7:44:21:c6:74:ac:cc:b1:3b:70:80: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D7:78:ED:5E:A5:93:35:9E:58:31:02:A3:6C:2B:0F:A2:96:3D:1F X509v3 Authority Key Identifier: keyid:8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:4f:5c:99:5c:3f:b6:db:63:7e:48:27:df:c1:14:ac:87:3a: 03:ab:72:62:0e:df:61:c5:11:96:dc:3c:51:32:17:a0:ec:35: 81:5a:b4:be:82:b0:99:ff:db:9f:e7:87:82:26:d1:ec:11:35: 2e:6f:44:ef:fa:27:83:a7:b4:30:3f:5b:7f:cc:f4:d2:9e:b0: 01:28:f7:e7:db:59:32:a7:4b:68:83:5e:48:96:3b:fd:09:55: 31:1d:73:91:bf:6a:c2:c0:53:5b:a3:60:e8:45:b9:17:f7:ef: ab:e7:68:ad:03:d8:9b:49:62:f7:18:d6:17:29:b7:81:7d:ca: 56:ea:9d:89:ef:2e:30:f3:b8:b1:f0:f7:1a:96:b1:4f:d2:e7: 6f:38:69:a4:74:cd:e0:26:02:34:47:17:10:4e:90:9a:d4:4c: 15:22:b1:04:71:f0:6d:22:fb:87:05:f4:80:bc:83:48:a4:5d: c1:8d:f4:0d:7a:02:f9:ac:63:cc:78:88:9e:93:7c:fe:c2:15: b5:be:13:d3:2c:dc:9a:d9:84:27:ac:08:09:ff:a4:d7:04:ec: b1:07:b8:e6:43:3a:fc:86:59:41:47:6d:33:ae:ba:62:4d:a4: 76:2c:76:d4:68:8e:29:3a:01:14:e8:f4:b9:16:5a:8d:b1:27: 65:95:e4:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIk5jMK2DFTxwbVr5+8TMOG77aZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFQzFFMDNCOEU1MkY2NkEwNzEzREVCMTQyMTdDODdG OUVBMTdBNzAeFw0yNjA1MTIxNjA1NDNaFw0yNjA1MTMxNzUzNDNaMDMxMTAvBgNV BAMTKEZDRDc3OEVENUVBNTkzMzU5RTU4MzEwMkEzNkMyQjBGQTI5NjNEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj0lvhL4uPDdOaix+Z1pAYEz9X OV/6JVWcS/W6LJ9eevNTC3T069eZE5dMppGhlEhtT6TuQEtYB+bTJGLwiwJi5YEq ZPkm3vOLyuy7E+CFZdH2GZqCFIn/gkx/n1ZxVZEH+/yQNGMpPUxKTHnLQjkAX0xH 4CQf1B6UjiM6qH50hE0xR14Yrw4h0lM5VgCoGLZkM7zxCM4WAQeSrq1We44gMO4W 9gB3EMH3genS97e1KXgiXTeB1dyew3NHFnLjlMed4ntuSRlvIgIGs4CXB67NgO85 p3J33LuEBnPGn70ZN59YPfnH8PN3yJ0eXCDg2J+HPODnRCHGdKzMsTtwgIM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Nd47V6lkzWeWDECo2wrD6KWPR8wHwYDVR0j BBgwFoAUjuweA7jlL2agcT3rFCF8h/nqF6cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMyNTA2NjItM2VlZi00YWE5LTllZGUtNTYyOWQ1YjZlYTk1LzAvOEVFQzFFMDNC OEU1MkY2NkEwNzEzREVCMTQyMTdDODdGOUVBMTdBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUVDMUUwM0I4RTUyRjY2QTA3MTNERUIxNDIxN0M4N0Y5RUEx N0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvOEVFQzFFMDNCOEU1MkY2NkEwNzEzREVCMTQyMTdD ODdGOUVBMTdBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZPXJlcP7bbY35IJ9/BFKyHOgOrcmIO32HF EZbcPFEyF6DsNYFatL6CsJn/25/nh4Im0ewRNS5vRO/6J4OntDA/W3/M9NKesAEo 9+fbWTKnS2iDXkiWO/0JVTEdc5G/asLAU1ujYOhFuRf376vnaK0D2JtJYvcY1hcp t4F9ylbqnYnvLjDzuLHw9xqWsU/S5284aaR0zeAmAjRHFxBOkJrUTBUisQRx8G0i +4cF9IC8g0ikXcGN9A16AvmsY8x4iJ6TfP7CFbW+E9Ms3JrZhCesCAn/pNcE7LEH uOZDOvyGWUFHbTOuumJNpHYsdtRojik6ARTo9LkWWo2xJ2WV5E0= -----END CERTIFICATE-----Generated at Wed May 13 05:46:40 2026 by rpki-client