$ rpki-client -vvf rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft File: 008FD9C34C50033457705A2A8FA8AD31C58901DF.mft (raw, json) Hash identifier: H2PTnssehdgqx5onWxrz2gadeFMim5sSLjyXixy6DsY= Subject key identifier: 8E:5B:7A:1F:46:9F:0D:AC:B3:65:FD:85:62:E4:4E:1B:75:23:B4:C9 Authority key identifier: 00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF Certificate issuer: /CN=008FD9C34C50033457705A2A8FA8AD31C58901DF Certificate serial: 296E0178D37010997C4418FE656F4C8CD98AF10F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:51:09 +0000 Manifest this update: Tue 12 May 2026 19:46:09 +0000 Manifest next update: Wed 13 May 2026 21:05:09 +0000 Files and hashes: 1: 3230322e3133332e352e302f32342d3234203d3e203234323030.roa (hash: Uo09a87NfO0QaaV8cWvKqLh7Yr8GIHaL3+B8rEdhvDg=) 2: 3230322e3133332e332e302f32342d3234203d3e203234323030.roa (hash: NbNZZ1h00KtVz1iU/OgERwDxHBaHy3Lol9PQ30yLH20=) 3: 3230322e3133332e362e302f32342d3234203d3e203234323030.roa (hash: Xc9Z6aCULt4h5E7uCljF8rbSvL2mpzVI9I3SrwLMdKA=) 4: 3230322e3133332e372e302f32342d3234203d3e203234323030.roa (hash: +gg97NXHVYnGyTZICqnb0be/ZegxXSjwLJ69frhtl8g=) 5: 008FD9C34C50033457705A2A8FA8AD31C58901DF.crl (hash: btx+7hyd4HbpfHAkNv0Kl6AHXdPLzQ6VVxzCyAvmphQ=) 6: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (hash: KRcAvz4S9RiZMOJ4ntySfmti6yb9mI07p7EYZgs2VTA=) 7: 3230322e3133332e322e302f32342d3234203d3e203234323030.roa (hash: 7PYR6KQD363PCA9CqbyRe3Hlyct7YlcslSh5J5MCne8=) 8: 3230322e3133332e312e302f32342d3234203d3e203234323030.roa (hash: ikR/F9w4LitTShzkD+KXZlE08zWYB4wLcQeSOu40MHY=) 9: 3230322e3133332e302e302f32312d3231203d3e203234323030.roa (hash: WS26qbff4FZd1gBCBy7MpBk2HRkLgCPS9ErpAbqZ1Kk=) 10: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (hash: Ym+oQJAC/FZcNlOtyNB+PyxQjFt4qpTGx2NjQCjEW8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:6e:01:78:d3:70:10:99:7c:44:18:fe:65:6f:4c:8c:d9:8a:f1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=008FD9C34C50033457705A2A8FA8AD31C58901DF Validity Not Before: May 12 19:46:09 2026 GMT Not After : May 13 21:05:09 2026 GMT Subject: CN=8E5B7A1F469F0DACB365FD8562E44E1B7523B4C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e1:70:dd:e6:31:18:c9:02:dd:d2:b3:4c:05: 6f:87:c5:58:44:40:d7:5e:d0:b0:e4:37:33:e9:3b: b1:db:07:0a:5f:08:6c:e7:01:92:64:16:15:49:26: 22:d0:6f:9e:a4:29:d4:c6:91:59:e2:56:a5:4c:04: 0d:a1:6c:f7:f9:b3:94:e5:2e:d2:fb:57:34:00:c4: e0:02:4e:97:47:4f:00:39:6d:b9:d2:ee:a3:fd:bc: 50:a4:89:33:85:25:0b:dd:56:44:16:13:07:44:69: c3:53:c0:52:6c:cc:77:c6:a1:4a:d4:e5:48:08:ad: c1:9d:31:e3:03:6f:70:12:9f:22:ce:1e:05:14:76: 14:94:2c:6f:fd:f0:6a:5c:a6:ca:9b:18:62:9f:f9: 51:c1:d5:4d:42:bf:58:00:8e:c4:5b:04:a1:a0:70: 10:66:65:e0:ba:42:0a:34:20:36:30:1b:db:bd:ba: 86:ff:d8:1b:f5:ea:75:4c:55:9e:9d:f0:71:c6:45: 6c:77:d7:ee:19:c9:90:eb:c8:0d:77:5b:b8:30:56: b2:60:9f:00:a2:39:fc:4e:24:c7:50:d4:86:d9:43: cb:d5:b5:7a:75:d4:cc:91:4e:81:ad:50:aa:d5:50: 09:e6:0d:7d:9a:3d:03:47:86:64:74:2e:41:34:87: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5B:7A:1F:46:9F:0D:AC:B3:65:FD:85:62:E4:4E:1B:75:23:B4:C9 X509v3 Authority Key Identifier: keyid:00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:35:4e:fb:47:3f:67:ba:7c:fc:bd:5e:c3:18:42:34:02:c9: ef:9a:93:87:3e:9a:4a:54:5e:89:8c:a3:95:16:bd:60:8a:80: e4:6b:71:03:f4:85:20:ea:2d:19:ab:e8:6e:d2:b3:68:80:2a: b7:4e:68:71:82:a2:39:24:43:c8:63:ec:fc:f7:16:ed:82:51: 24:98:35:42:1e:4c:a9:bd:9f:51:cf:2c:f5:30:ea:37:43:a3: 32:30:0d:aa:9a:87:9f:7a:92:d6:b0:4f:48:d4:a0:1b:9b:ca: 92:cf:48:36:ce:9a:4a:b5:59:a6:03:05:3c:4e:90:b7:66:59: a8:da:84:2e:42:7c:b5:e2:9c:57:66:b3:4b:63:de:2d:84:b0: 6e:e2:a8:e7:95:a2:b6:c2:b8:0f:22:6c:4d:42:68:17:06:5e: dd:a0:04:c7:67:1d:e3:8b:fb:8c:6a:a8:94:2a:e8:f3:f4:39: ba:c2:74:79:c3:dc:87:ba:50:66:e3:30:c6:d4:7f:a0:e7:17: 47:35:3d:9c:d3:35:bc:63:c8:79:e1:86:8d:b9:c8:bf:ee:12: a8:a7:f3:ed:3d:d8:58:8c:65:56:e6:90:10:ea:f0:da:36:50: 9a:22:dd:2a:e7:d1:77:2d:28:6a:f8:af:2b:24:00:94:f7:65: 97:34:93:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKW4BeNNwEJl8RBj+ZW9MjNmK8Q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4RkQ5QzM0QzUwMDMzNDU3NzA1QTJBOEZBOEFEMzFD NTg5MDFERjAeFw0yNjA1MTIxOTQ2MDlaFw0yNjA1MTMyMTA1MDlaMDMxMTAvBgNV BAMTKDhFNUI3QTFGNDY5RjBEQUNCMzY1RkQ4NTYyRTQ0RTFCNzUyM0I0QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz4XDd5jEYyQLd0rNMBW+HxVhE QNde0LDkNzPpO7HbBwpfCGznAZJkFhVJJiLQb56kKdTGkVniVqVMBA2hbPf5s5Tl LtL7VzQAxOACTpdHTwA5bbnS7qP9vFCkiTOFJQvdVkQWEwdEacNTwFJszHfGoUrU 5UgIrcGdMeMDb3ASnyLOHgUUdhSULG/98GpcpsqbGGKf+VHB1U1Cv1gAjsRbBKGg cBBmZeC6Qgo0IDYwG9u9uob/2Bv16nVMVZ6d8HHGRWx31+4ZyZDryA13W7gwVrJg nwCiOfxOJMdQ1IbZQ8vVtXp11MyRToGtUKrVUAnmDX2aPQNHhmR0LkE0hyP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjlt6H0afDayzZf2FYuROG3UjtMkwHwYDVR0j BBgwFoAUAI/Zw0xQAzRXcFoqj6itMcWJAd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM2NjllYTQtZTgyZi00NmMzLThkZDMtMmU5ODgxNTliMjAyLzAvMDA4RkQ5QzM0 QzUwMDMzNDU3NzA1QTJBOEZBOEFEMzFDNTg5MDFERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDhGRDlDMzRDNTAwMzM0NTc3MDVBMkE4RkE4QUQzMUM1ODkw MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjM2NjllYTQtZTgyZi00NmMzLThk ZDMtMmU5ODgxNTliMjAyLzAvMDA4RkQ5QzM0QzUwMDMzNDU3NzA1QTJBOEZBOEFE MzFDNTg5MDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGg1TvtHP2e6fPy9XsMYQjQCye+ak4c+mkpU XomMo5UWvWCKgORrcQP0hSDqLRmr6G7Ss2iAKrdOaHGCojkkQ8hj7Pz3Fu2CUSSY NUIeTKm9n1HPLPUw6jdDozIwDaqah596ktawT0jUoBubypLPSDbOmkq1WaYDBTxO kLdmWajahC5CfLXinFdms0tj3i2EsG7iqOeVorbCuA8ibE1CaBcGXt2gBMdnHeOL +4xqqJQq6PP0ObrCdHnD3Ie6UGbjMMbUf6DnF0c1PZzTNbxjyHnhho25yL/uEqin 8+092FiMZVbmkBDq8No2UJoi3Srn0XctKGr4ryskAJT3ZZc0k3A= -----END CERTIFICATE-----Generated at Tue May 12 22:52:01 2026 by rpki-client