$ rpki-client -vvf rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft File: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft (raw, json) Hash identifier: l86fuLI995nwZcRziG+DMf6z6PO+75/s44C+xKHLpUY= Subject key identifier: 71:C6:BC:9A:C6:53:DF:0F:92:2B:0C:95:AC:7F:8C:4A:10:5D:DA:C3 Authority key identifier: F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB Certificate issuer: /CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB Certificate serial: 2CD07989833EDDCA73E05D38DE1893EFE86964F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:54:58 +0000 Manifest this update: Tue 12 May 2026 21:49:58 +0000 Manifest next update: Thu 14 May 2026 00:16:58 +0000 Files and hashes: 1: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl (hash: 6wuYRzhwLBlbPgbZRmIPovnsi3I0uNrT81UygEQ7rek=) 2: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: wGUQKy4FIVL/pJvzv4ocXf6nJRNeroqTQeM/u7L/DBg=) 3: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: 4SizHs7Y7jbN84W7yqURK/C+aTckSwx11cvn67uUtqg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d0:79:89:83:3e:dd:ca:73:e0:5d:38:de:18:93:ef:e8:69:64:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB Validity Not Before: May 12 21:49:58 2026 GMT Not After : May 14 00:16:58 2026 GMT Subject: CN=71C6BC9AC653DF0F922B0C95AC7F8C4A105DDAC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:65:04:3f:9d:d9:81:7b:45:99:11:ea:68: 83:7b:ac:ec:e3:59:15:7c:e4:54:9d:2c:01:04:eb: a2:58:88:93:02:0b:5b:12:8b:6e:9c:1d:5e:4a:75: 9f:6f:89:3d:41:d0:0a:f6:75:23:78:8c:e1:45:70: 78:b6:5d:86:64:ec:0d:a9:4b:12:4b:7c:80:e7:77: 74:74:a3:f8:43:c0:53:f1:d9:41:e8:fe:72:8e:3c: 41:2c:44:80:6e:8c:7d:64:a6:32:8d:dc:f4:ec:78: cb:16:bd:8c:b1:24:3e:2d:65:a9:52:a6:24:b2:94: c3:86:e7:39:9e:3c:45:63:44:ce:74:42:89:65:96: c4:4e:55:f8:5c:da:9a:93:85:af:bc:e5:87:a8:72: f2:e8:ba:bf:46:07:db:b5:30:60:8a:60:0d:44:13: 24:cd:e6:b1:28:ba:8d:1a:4b:09:3a:e5:18:0d:7f: a2:09:f4:a4:19:86:69:ba:81:20:9d:86:6c:0c:00: e0:f4:25:5f:85:1a:5a:52:4f:67:0c:20:5b:03:27: 39:bd:1b:c5:11:a9:b9:ad:bb:c4:b1:99:ec:69:8a: 45:31:96:e7:55:9a:76:cd:09:f2:d6:fc:10:67:0b: 6f:38:e3:f7:d3:12:3b:0b:fa:d9:b3:56:5f:b1:2f: 16:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C6:BC:9A:C6:53:DF:0F:92:2B:0C:95:AC:7F:8C:4A:10:5D:DA:C3 X509v3 Authority Key Identifier: keyid:F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b9:9a:8a:42:75:63:d8:ad:00:42:8a:16:04:76:06:01:18: 01:59:e0:d5:8c:0b:f2:07:5a:22:bd:cc:5b:45:ed:8d:c7:1c: 43:77:b8:e3:26:b6:fa:8f:4a:b8:66:35:51:45:a1:78:b5:c6: b9:6d:d4:7a:9a:5b:77:1a:f2:4c:40:dc:10:85:c6:c3:ba:1a: 52:4a:15:9e:1f:21:46:93:b1:a2:f5:01:82:f8:94:b0:c4:e5: fe:36:99:bd:36:9e:b3:f9:a5:e2:c4:4c:fe:7a:54:65:c7:75: a4:12:31:f5:e0:e3:1b:72:fa:34:d4:d1:b0:49:f6:ca:a1:cc: 6a:0f:c7:a3:17:b0:29:a3:ed:ea:08:a6:2b:43:3e:68:4d:8c: de:a1:dd:20:a9:db:46:cf:f9:0d:8a:6b:63:3e:af:58:f5:85: e3:aa:c2:d7:43:34:c5:23:a8:40:1e:13:e6:66:58:45:8e:77: 89:50:26:00:b2:43:d8:c3:3e:43:06:9a:d5:ad:6d:63:ad:b4: b4:f4:6d:18:54:52:47:69:59:1e:59:59:9c:91:6d:64:44:e3: a0:7b:0c:c7:db:ab:9e:bd:a9:6a:3d:79:32:4e:57:8c:71:5b: 0c:3f:07:ed:64:1f:26:e6:a7:bf:a2:a1:b5:5c:e0:95:20:07: f8:82:c6:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNB5iYM+3cpz4F043hiT7+hpZPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRjNFRTU3MUIwRTU1MjEzMkIyQzZBQkEzMEVGODE2 QTA0NDNCQjAeFw0yNjA1MTIyMTQ5NThaFw0yNjA1MTQwMDE2NThaMDMxMTAvBgNV BAMTKDcxQzZCQzlBQzY1M0RGMEY5MjJCMEM5NUFDN0Y4QzRBMTA1RERBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DGUEP53ZgXtFmRHqaIN7rOzj WRV85FSdLAEE66JYiJMCC1sSi26cHV5KdZ9viT1B0Ar2dSN4jOFFcHi2XYZk7A2p SxJLfIDnd3R0o/hDwFPx2UHo/nKOPEEsRIBujH1kpjKN3PTseMsWvYyxJD4tZalS piSylMOG5zmePEVjRM50QolllsROVfhc2pqTha+85YeocvLour9GB9u1MGCKYA1E EyTN5rEouo0aSwk65RgNf6IJ9KQZhmm6gSCdhmwMAOD0JV+FGlpST2cMIFsDJzm9 G8URqbmtu8SxmexpikUxludVmnbNCfLW/BBnC2844/fTEjsL+tmzVl+xLxY7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcca8msZT3w+SKwyVrH+MShBd2sMwHwYDVR0j BBgwFoAU+O8+5XGw5VITKyxqujDvgWoEQ7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NThiNThhZWUtZThlZS00Mjg3LWEyYjgtNjE2MTU1YzNlZWMyLzAvRjhFRjNFRTU3 MUIwRTU1MjEzMkIyQzZBQkEzMEVGODE2QTA0NDNCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVGM0VFNTcxQjBFNTUyMTMyQjJDNkFCQTMwRUY4MTZBMDQ0 M0JCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvRjhFRjNFRTU3MUIwRTU1MjEzMkIyQzZBQkEzMEVG ODE2QTA0NDNCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAW5mopCdWPYrQBCihYEdgYBGAFZ4NWMC/IH WiK9zFtF7Y3HHEN3uOMmtvqPSrhmNVFFoXi1xrlt1HqaW3ca8kxA3BCFxsO6GlJK FZ4fIUaTsaL1AYL4lLDE5f42mb02nrP5peLETP56VGXHdaQSMfXg4xty+jTU0bBJ 9sqhzGoPx6MXsCmj7eoIpitDPmhNjN6h3SCp20bP+Q2Ka2M+r1j1heOqwtdDNMUj qEAeE+ZmWEWOd4lQJgCyQ9jDPkMGmtWtbWOttLT0bRhUUkdpWR5ZWZyRbWRE46B7 DMfbq569qWo9eTJOV4xxWww/B+1kHybmp7+iobVc4JUgB/iCxhA= -----END CERTIFICATE-----Generated at Wed May 13 00:45:25 2026 by rpki-client