$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft File: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft (raw, json) Hash identifier: M20MVKHJcxdOScefFChlVDNBR/79z1d7v4tCSi+IBMc= Subject key identifier: B2:5D:19:A6:F4:52:5A:42:3F:25:0C:06:53:DB:7C:A1:22:34:34:EA Authority key identifier: 8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C Certificate issuer: /CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Certificate serial: 771E16688049F1EE0C8166D7E383F7A98A43C719 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:49:40 +0000 Manifest this update: Wed 13 May 2026 00:44:40 +0000 Manifest next update: Thu 14 May 2026 04:29:40 +0000 Files and hashes: 1: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: gHaL9xm6upsCMiwuTIzMiljzjIKdP3tM2s5bdfg68uM=) 2: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl (hash: ZZxi2N72G1OYu6A+az1rffv1idn3dLUu9/2Wrk0f+xw=) 3: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: kAF9XX+k/l/rK1GEr+bjFHX1YeYovpaBVZcUfCaqwVQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:1e:16:68:80:49:f1:ee:0c:81:66:d7:e3:83:f7:a9:8a:43:c7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Validity Not Before: May 13 00:44:40 2026 GMT Not After : May 14 04:29:40 2026 GMT Subject: CN=B25D19A6F4525A423F250C0653DB7CA1223434EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:63:7d:f6:6a:68:06:45:2a:ea:fa:c3:4c:df: 1a:a9:44:6f:68:8c:c5:cf:ad:43:a1:38:3b:e1:96: 01:ce:3a:c8:b4:27:31:ce:75:3a:62:75:5f:ce:2f: 7d:20:49:ea:5a:a3:75:af:e0:a9:30:22:1d:8b:ce: 6b:4b:87:97:c2:84:00:da:67:49:bb:f9:c3:6c:f4: e2:06:8a:cc:2b:ee:72:67:e8:b4:9a:61:fd:8c:8f: fa:ee:02:2b:3f:0a:1a:6d:5f:90:8b:8a:92:24:2a: 99:f5:3d:07:51:1c:5c:65:3e:55:25:db:9b:91:f0: 3f:b9:be:42:28:1b:44:cf:bf:1a:dd:b2:ff:4b:44: 03:9d:be:b3:29:35:72:9e:cc:58:da:ba:ba:7c:7b: 11:4b:84:8b:e0:f8:1d:8f:2a:38:7d:86:3c:7c:5f: cf:90:94:de:3d:09:0e:60:e3:31:19:98:80:64:46: 62:8e:5b:ad:1e:c2:b9:13:7d:38:53:9f:d6:cd:d3: c1:72:4d:7b:87:38:cc:9e:40:2d:9a:f5:22:07:0f: 4b:8c:c3:10:67:ac:bf:1f:f6:be:08:6d:c0:0c:90: dd:6c:71:1f:37:17:d9:20:d8:4f:10:f6:e1:5d:09: 16:02:4d:91:93:ef:51:5c:f0:18:21:49:9a:07:b9: 67:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5D:19:A6:F4:52:5A:42:3F:25:0C:06:53:DB:7C:A1:22:34:34:EA X509v3 Authority Key Identifier: keyid:8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:05:d5:d9:64:af:03:32:c2:77:76:d2:d5:8d:58:fe:b0:91: 59:56:e2:d5:01:02:57:ee:91:50:71:48:5d:fb:30:d9:e4:a8: 07:70:92:ea:5b:f5:bb:0f:3c:4d:05:80:e6:39:2c:2f:ec:28: d6:63:fb:93:0e:34:d1:3b:07:d0:dc:fe:73:a2:26:d3:6a:79: e6:81:33:8d:6f:f8:05:5c:5a:c7:30:5e:b6:7b:ea:53:e8:b1: 16:40:90:2d:99:92:f5:0c:be:40:84:45:6d:b3:7a:01:65:2d: f1:2d:0e:49:45:d5:63:40:80:2a:7e:3d:e2:a8:24:b2:e5:a5: e5:e6:07:e1:59:1b:09:dd:7c:cc:e3:9c:d0:e7:50:76:98:be: 05:23:24:76:e4:0a:6e:17:57:24:36:e5:ea:1c:2c:90:55:ce: f5:a6:0f:21:35:51:0c:f5:cf:14:c0:b7:f7:e2:d1:cf:90:8a: 14:5a:d2:7d:47:15:c5:8a:54:60:65:e2:0f:d0:94:90:df:ba: 59:45:a5:23:c4:09:d1:63:f4:32:e1:87:c0:1d:81:a0:ef:e4: a1:ae:5a:d6:6a:6f:53:39:82:14:57:0b:16:63:33:56:7b:51: 0f:b9:26:39:b2:3f:55:c1:3d:b6:12:39:94:fa:cd:9f:5c:b7: 88:6b:b6:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdx4WaIBJ8e4MgWbX44P3qYpDxxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVC MTRDODk2QzAeFw0yNjA1MTMwMDQ0NDBaFw0yNjA1MTQwNDI5NDBaMDMxMTAvBgNV BAMTKEIyNUQxOUE2RjQ1MjVBNDIzRjI1MEMwNjUzREI3Q0ExMjIzNDM0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGY332amgGRSrq+sNM3xqpRG9o jMXPrUOhODvhlgHOOsi0JzHOdTpidV/OL30gSepao3Wv4KkwIh2LzmtLh5fChADa Z0m7+cNs9OIGiswr7nJn6LSaYf2Mj/ruAis/ChptX5CLipIkKpn1PQdRHFxlPlUl 25uR8D+5vkIoG0TPvxrdsv9LRAOdvrMpNXKezFjaurp8exFLhIvg+B2PKjh9hjx8 X8+QlN49CQ5g4zEZmIBkRmKOW60ewrkTfThTn9bN08FyTXuHOMyeQC2a9SIHD0uM wxBnrL8f9r4IbcAMkN1scR83F9kg2E8Q9uFdCRYCTZGT71Fc8BghSZoHuWfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsl0ZpvRSWkI/JQwGU9t8oSI0NOowHwYDVR0j BBgwFoAUj/qLucCdxMpCyVyBfA/9lbFMiWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ1YWYyMmMtN2UzZS00MGI1LWFjNTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlD MDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVCMTRDODk2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBOEJCOUMwOURDNENBNDJDOTVDODE3QzBGRkQ5NUIxNEM4 OTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZE OTVCMTRDODk2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL8F1dlkrwMywnd20tWNWP6wkVlW4tUBAlfu kVBxSF37MNnkqAdwkupb9bsPPE0FgOY5LC/sKNZj+5MONNE7B9Dc/nOiJtNqeeaB M41v+AVcWscwXrZ76lPosRZAkC2ZkvUMvkCERW2zegFlLfEtDklF1WNAgCp+PeKo JLLlpeXmB+FZGwndfMzjnNDnUHaYvgUjJHbkCm4XVyQ25eocLJBVzvWmDyE1UQz1 zxTAt/fi0c+QihRa0n1HFcWKVGBl4g/QlJDfullFpSPECdFj9DLhh8AdgaDv5KGu WtZqb1M5ghRXCxZjM1Z7UQ+5JjmyP1XBPbYSOZT6zZ9ct4hrtrk= -----END CERTIFICATE-----Generated at Wed May 13 05:43:05 2026 by rpki-client