$ rpki-client -vvf rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft File: 8CDF206FDB99524CD59E5141686928A6FF94305F.mft (raw, json) Hash identifier: ng2cX0x+xMX8F193gotdOd8DlHlS5ccnWYB9ViFFys0= Subject key identifier: 81:C1:51:78:1A:A4:8F:24:C0:70:1B:2F:1C:C7:C7:FC:B8:65:98:90 Authority key identifier: 8C:DF:20:6F:DB:99:52:4C:D5:9E:51:41:68:69:28:A6:FF:94:30:5F Certificate issuer: /CN=8CDF206FDB99524CD59E5141686928A6FF94305F Certificate serial: 5C89BED92BCDF69FBC580AA355A46C06E4B5C104 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:46:02 +0000 Manifest this update: Tue 12 May 2026 19:41:02 +0000 Manifest next update: Wed 13 May 2026 22:18:02 +0000 Files and hashes: 1: 8CDF206FDB99524CD59E5141686928A6FF94305F.crl (hash: qA4TBEugGJRAwYdXVnfE8tdqdjhjBkXi0vcKE2XsatA=) 2: 3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (hash: AtW3qZZhBOBkSL0i4aoVF1GR5f7KIfCN2XApbUwdv2U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.crl rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:89:be:d9:2b:cd:f6:9f:bc:58:0a:a3:55:a4:6c:06:e4:b5:c1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF206FDB99524CD59E5141686928A6FF94305F Validity Not Before: May 12 19:41:02 2026 GMT Not After : May 13 22:18:02 2026 GMT Subject: CN=81C151781AA48F24C0701B2F1CC7C7FCB8659890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ae:a9:02:4a:16:97:f8:15:03:66:39:d8:78: 1e:89:35:3f:fb:81:50:77:4c:86:0f:76:b5:81:8e: c7:ac:30:4b:f4:42:0b:ba:1b:7c:45:6e:d3:21:d0: 01:0a:35:50:14:99:d1:7c:ed:77:48:95:3d:64:26: 8e:b2:77:1b:ed:45:28:a4:7e:e3:b6:24:56:c6:9b: 06:00:b5:93:9c:e6:3d:34:ad:f2:e7:61:ac:fc:e5: 46:0f:8a:38:1d:38:04:76:00:bb:a8:f8:0a:29:63: 63:ee:01:29:d4:b1:58:ed:a8:9a:e1:44:4e:4f:d7: dc:c7:16:94:82:30:e5:62:20:68:5b:73:0d:25:49: 3d:67:bd:e6:8c:ad:f4:77:cd:8b:3a:7d:94:f4:b1: 50:c1:db:77:3f:1e:35:fe:92:45:55:12:7c:d9:f6: 29:f8:c3:0d:3e:5c:48:ae:07:6b:b6:e5:a8:cb:57: e6:f9:0d:ce:75:33:4f:91:c3:28:e9:7d:ee:cb:7e: c8:80:92:10:1e:5f:4a:5c:3a:bc:fb:4f:cc:f0:89: df:81:10:98:ef:0f:a8:6d:e3:b0:93:11:6a:6e:3f: da:97:81:b7:a7:fd:59:3a:47:18:be:b9:9d:51:6c: e9:1e:b0:1f:ab:35:f1:39:54:af:e3:70:4b:fd:80: 51:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C1:51:78:1A:A4:8F:24:C0:70:1B:2F:1C:C7:C7:FC:B8:65:98:90 X509v3 Authority Key Identifier: keyid:8C:DF:20:6F:DB:99:52:4C:D5:9E:51:41:68:69:28:A6:FF:94:30:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6d:97:ea:25:91:8b:d1:98:6a:32:c1:06:70:8f:10:9f:71: 19:bb:27:23:bb:94:2d:78:5c:d3:f5:cb:d5:0d:d9:6f:d2:80: 23:e9:2d:1c:7f:30:f2:16:04:ef:b7:ee:49:43:f4:c3:44:74: 05:00:fc:fa:d1:6f:e1:d6:e8:4f:ee:f2:9d:70:63:a2:26:36: 2b:ce:fe:9e:9f:08:12:8f:20:0e:94:83:e3:a7:a4:9e:c3:79: c1:5e:7a:0b:35:c6:90:65:d9:b8:ba:5c:42:db:c1:90:ee:dd: 1b:01:e0:6d:66:9c:d6:dc:60:35:40:3a:9a:1d:55:be:cd:8f: 65:05:ff:55:33:7c:92:f7:66:42:4c:4f:2c:ba:94:7e:8c:49: ae:c2:50:c6:8c:6e:3a:8d:ce:d1:58:e8:b1:b3:ec:7b:ab:db: 9e:49:a3:4f:58:04:94:83:08:cf:bc:a9:c3:09:e8:4f:f2:20: 53:28:7f:c7:e3:98:81:ef:27:be:a2:cb:58:a1:a6:05:90:41: c3:8c:b8:1f:e3:57:31:ef:7e:53:17:65:84:98:d7:58:d5:35: 46:74:26:00:8f:1b:55:32:23:6a:06:1a:f8:d9:6b:41:64:87: da:c1:55:b0:e8:b5:2a:19:0b:6c:b3:1c:62:ca:76:1f:85:69: 3a:e1:16:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIm+2SvN9p+8WAqjVaRsBuS1wQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjIwNkZEQjk5NTI0Q0Q1OUU1MTQxNjg2OTI4QTZG Rjk0MzA1RjAeFw0yNjA1MTIxOTQxMDJaFw0yNjA1MTMyMjE4MDJaMDMxMTAvBgNV BAMTKDgxQzE1MTc4MUFBNDhGMjRDMDcwMUIyRjFDQzdDN0ZDQjg2NTk4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrqkCShaX+BUDZjnYeB6JNT/7 gVB3TIYPdrWBjsesMEv0Qgu6G3xFbtMh0AEKNVAUmdF87XdIlT1kJo6ydxvtRSik fuO2JFbGmwYAtZOc5j00rfLnYaz85UYPijgdOAR2ALuo+AopY2PuASnUsVjtqJrh RE5P19zHFpSCMOViIGhbcw0lST1nveaMrfR3zYs6fZT0sVDB23c/HjX+kkVVEnzZ 9in4ww0+XEiuB2u25ajLV+b5Dc51M0+Rwyjpfe7LfsiAkhAeX0pcOrz7T8zwid+B EJjvD6ht47CTEWpuP9qXgben/Vk6Rxi+uZ1RbOkesB+rNfE5VK/jcEv9gFGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgcFReBqkjyTAcBsvHMfH/LhlmJAwHwYDVR0j BBgwFoAUjN8gb9uZUkzVnlFBaGkopv+UMF8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjMzOTc4ZjgtYWVhYi00MjdhLWJkNzUtMmNkZjFkOWViNTE3LzAvOENERjIwNkZE Qjk5NTI0Q0Q1OUU1MTQxNjg2OTI4QTZGRjk0MzA1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0RGMjA2RkRCOTk1MjRDRDU5RTUxNDE2ODY5MjhBNkZGOTQz MDVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjMzOTc4ZjgtYWVhYi00MjdhLWJk NzUtMmNkZjFkOWViNTE3LzAvOENERjIwNkZEQjk5NTI0Q0Q1OUU1MTQxNjg2OTI4 QTZGRjk0MzA1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1tl+olkYvRmGoywQZwjxCfcRm7JyO7lC14 XNP1y9UN2W/SgCPpLRx/MPIWBO+37klD9MNEdAUA/PrRb+HW6E/u8p1wY6ImNivO /p6fCBKPIA6Ug+OnpJ7DecFeegs1xpBl2bi6XELbwZDu3RsB4G1mnNbcYDVAOpod Vb7Nj2UF/1UzfJL3ZkJMTyy6lH6MSa7CUMaMbjqNztFY6LGz7Hur255Jo09YBJSD CM+8qcMJ6E/yIFMof8fjmIHvJ76iy1ihpgWQQcOMuB/jVzHvflMXZYSY11jVNUZ0 JgCPG1UyI2oGGvjZa0Fkh9rBVbDotSoZC2yzHGLKdh+FaTrhFgI= -----END CERTIFICATE-----Generated at Wed May 13 02:50:04 2026 by rpki-client