$ rpki-client -vvf rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft File: 8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft (raw, json) Hash identifier: i/mMKDFxXPI0a+MzULzlgQwqshbeoFFberyColaN8jE= Subject key identifier: 65:DE:73:23:C4:BB:46:76:B2:7F:F1:CD:80:86:18:64:78:62:3B:20 Authority key identifier: 8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D Certificate issuer: /CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D Certificate serial: 1F4986840A321E06EE10FFF43DA6EF26EA70438B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:20:34 +0000 Manifest this update: Tue 12 May 2026 22:15:34 +0000 Manifest next update: Thu 14 May 2026 01:11:34 +0000 Files and hashes: 1: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: NY8uhqteE/p2Oynj2juQDQqNJOeFUT9zptMVOdrA1BE=) 2: 8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl (hash: xFncin0UJZzPeYpc2vFs4tfNF2nGOEw6YLegrl3FVpw=) 3: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: LvhMo9Ji9pG6mVQPdJp//+4N2gdaqqVMar2Fp2RKr1Q=) 4: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: 7H5ayDey2sF8s3x7vuViq2lu5YPxfK0ha8SKey7N61Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:49:86:84:0a:32:1e:06:ee:10:ff:f4:3d:a6:ef:26:ea:70:43:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D Validity Not Before: May 12 22:15:34 2026 GMT Not After : May 14 01:11:34 2026 GMT Subject: CN=65DE7323C4BB4676B27FF1CD8086186478623B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:47:93:23:a8:6b:e6:c1:8c:a4:3f:76:a6:f8: 8d:b5:ea:d7:d8:1c:a0:8f:6b:d6:7f:69:56:3b:66: f3:71:3d:40:93:12:bd:2d:fc:b2:e5:0d:b1:2e:a8: a3:48:62:0e:a1:4c:ee:9c:25:5b:ab:82:24:42:3f: 95:ac:f4:27:fe:72:c5:4c:bb:45:87:a3:0a:2b:6e: 1e:7d:25:f8:ea:f5:ff:d7:44:18:be:17:31:e9:d6: 5d:15:79:93:13:cf:2e:48:76:e6:d7:6d:ab:77:bb: 3c:88:8b:e1:ad:f3:e8:75:3e:5b:e5:01:d9:9d:b7: f6:1c:2f:18:09:76:bc:df:0a:53:dd:bb:b9:27:e4: 10:c5:be:d8:b4:70:f7:22:15:29:f4:7d:32:01:81: 4d:42:8f:a1:89:5c:7f:e7:8f:37:41:0b:79:b6:fe: 5d:c4:4a:02:02:2e:00:f0:fb:b8:d9:e1:6f:3b:fc: ee:e1:24:61:de:fd:d0:c4:53:82:d6:e9:bd:ff:33: 40:73:92:13:8a:d0:65:59:34:13:0c:98:3f:94:3e: 43:a4:c5:fb:12:25:1a:97:5c:19:b7:fe:a4:fb:dc: f2:94:d8:49:69:ea:a5:49:df:5f:54:32:d3:ff:86: 19:df:87:67:df:5d:0f:47:65:f6:03:97:73:49:3e: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DE:73:23:C4:BB:46:76:B2:7F:F1:CD:80:86:18:64:78:62:3B:20 X509v3 Authority Key Identifier: keyid:8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fd:56:24:35:91:26:97:63:92:1b:53:a1:8e:d7:2a:19:d0: f1:21:bd:f3:3c:eb:a6:c8:41:24:ec:d6:b2:de:c0:96:c0:00: 32:8f:51:4d:c7:12:8a:32:6b:b9:26:d4:16:23:63:db:ef:0e: 9d:72:58:e1:eb:dd:9e:e4:d1:5a:eb:f4:32:7e:40:cc:ef:df: 0a:ce:ac:68:c7:90:ab:2b:b5:fb:8b:4a:4b:5f:bc:77:f0:ec: 22:25:88:f7:54:b9:f3:79:25:24:b5:20:7f:9a:6c:7e:42:3a: c5:7c:1d:9f:eb:ff:9a:96:bb:58:c5:75:3e:e0:1a:42:6f:ce: dd:68:6e:67:e9:d6:5e:0d:fb:85:b1:34:c9:2d:c4:6f:eb:83: 99:f8:3b:29:cc:c3:30:40:33:a2:23:8e:38:77:4e:53:f5:5a: 41:eb:ac:8c:92:5e:85:89:2c:16:1b:ca:33:cb:1c:e7:66:50: 57:17:14:1a:7f:aa:d2:fc:2a:c9:90:94:4c:9e:5b:a7:d5:15: fc:19:08:f9:08:ff:f9:ca:76:46:22:5b:ba:77:d4:e6:0c:2b: ca:49:6c:3a:93:ee:c3:48:fc:b3:fb:71:e8:43:2c:02:b5:bd: bf:76:07:e0:f4:6d:76:3f:85:bf:c6:d6:bf:ff:5d:9c:a1:b5: 63:92:07:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH0mGhAoyHgbuEP/0PabvJupwQ4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjY4NDY1Q0UzQkY1RUIwREYzNjEzRkVCREQzQzI3 NkY1QkIyRDAeFw0yNjA1MTIyMjE1MzRaFw0yNjA1MTQwMTExMzRaMDMxMTAvBgNV BAMTKDY1REU3MzIzQzRCQjQ2NzZCMjdGRjFDRDgwODYxODY0Nzg2MjNCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXR5MjqGvmwYykP3am+I216tfY HKCPa9Z/aVY7ZvNxPUCTEr0t/LLlDbEuqKNIYg6hTO6cJVurgiRCP5Ws9Cf+csVM u0WHoworbh59Jfjq9f/XRBi+FzHp1l0VeZMTzy5IdubXbat3uzyIi+Gt8+h1Plvl Admdt/YcLxgJdrzfClPdu7kn5BDFvti0cPciFSn0fTIBgU1Cj6GJXH/njzdBC3m2 /l3ESgICLgDw+7jZ4W87/O7hJGHe/dDEU4LW6b3/M0BzkhOK0GVZNBMMmD+UPkOk xfsSJRqXXBm3/qT73PKU2Elp6qVJ319UMtP/hhnfh2ffXQ9HZfYDl3NJPl4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZd5zI8S7Rnayf/HNgIYYZHhiOyAwHwYDVR0j BBgwFoAUi+JoRlzjv16w3zYT/r3Twnb1uy0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZmZDlhNTgtYTkwNi00MDI5LTkyZTItYWRjYjU2YWUxOGJkLzAvOEJFMjY4NDY1 Q0UzQkY1RUIwREYzNjEzRkVCREQzQzI3NkY1QkIyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkUyNjg0NjVDRTNCRjVFQjBERjM2MTNGRUJERDNDMjc2RjVC QjJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmZDlhNTgtYTkwNi00MDI5LTky ZTItYWRjYjU2YWUxOGJkLzAvOEJFMjY4NDY1Q0UzQkY1RUIwREYzNjEzRkVCREQz QzI3NkY1QkIyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJv9ViQ1kSaXY5IbU6GO1yoZ0PEhvfM866bI QSTs1rLewJbAADKPUU3HEooya7km1BYjY9vvDp1yWOHr3Z7k0Vrr9DJ+QMzv3wrO rGjHkKsrtfuLSktfvHfw7CIliPdUufN5JSS1IH+abH5COsV8HZ/r/5qWu1jFdT7g GkJvzt1obmfp1l4N+4WxNMktxG/rg5n4OynMwzBAM6Ijjjh3TlP1WkHrrIySXoWJ LBYbyjPLHOdmUFcXFBp/qtL8KsmQlEyeW6fVFfwZCPkI//nKdkYiW7p31OYMK8pJ bDqT7sNI/LP7cehDLAK1vb92B+D0bXY/hb/G1r//XZyhtWOSB0k= -----END CERTIFICATE-----Generated at Wed May 13 02:36:27 2026 by rpki-client