$ rpki-client -vvf rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft File: C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft (raw, json) Hash identifier: 9A3lg/BFajFIZsvcpjcD79dgmiY54KpnKV4/jkX4NI0= Subject key identifier: 46:0A:AD:B8:BF:CF:BC:B7:1E:2B:50:AC:89:0A:60:CD:F5:E3:70:FB Authority key identifier: C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B Certificate issuer: /CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B Certificate serial: 6E72A7A97FA83FC73155CFF75DAA42290F4F3B52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:32:34 +0000 Manifest this update: Tue 12 May 2026 23:27:34 +0000 Manifest next update: Thu 14 May 2026 00:51:34 +0000 Files and hashes: 1: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: yHStdJOfwpXotUrFqNRyBFcevnLpf2rHuaCz1qS9rN0=) 2: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: T5iXYEZsEylyp3JdGzhmtU2Kjr1HhNQabu6sAc+svIA=) 3: C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl (hash: if2FUVP/W5BHeMtHyifHCVxIMIJT+jGoLCYcInHmm1U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:72:a7:a9:7f:a8:3f:c7:31:55:cf:f7:5d:aa:42:29:0f:4f:3b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B Validity Not Before: May 12 23:27:34 2026 GMT Not After : May 14 00:51:34 2026 GMT Subject: CN=460AADB8BFCFBCB71E2B50AC890A60CDF5E370FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:80:00:b9:b2:96:71:d9:b7:5a:d5:7c:56:8a: 36:03:8f:ba:37:d1:b1:e2:70:57:eb:a1:b0:5e:59: f3:88:f1:c4:fb:ff:56:9a:09:ef:60:ed:56:f8:d7: ca:c2:2b:6e:69:75:0f:5a:96:b0:f5:ce:dc:b1:29: c0:01:d0:98:b6:fe:1a:ce:b9:ec:e8:0e:f0:41:a1: 88:ba:41:ea:97:3e:51:ca:d5:09:65:25:bd:de:be: 0f:e3:f5:73:04:6f:68:ce:9a:ed:40:ff:42:55:29: 4a:19:01:1a:be:b5:41:4b:5b:79:b4:f8:ec:62:8c: 39:8f:17:f8:bb:4c:af:ad:9a:dc:55:b1:a8:3f:b1: 2b:3c:d5:91:ae:d9:bf:3e:46:a0:17:c7:66:31:49: a6:27:d5:8b:eb:13:ba:ea:5f:e3:28:4b:f1:dc:92: f2:b4:1a:29:6e:e5:73:92:c8:d8:ee:fc:9c:41:83: e1:44:a4:39:d8:ba:3b:e0:cf:c9:64:2c:d4:e0:58: 0e:e7:75:93:f3:09:d7:75:47:2f:31:69:78:7f:7f: af:fd:93:0e:11:47:de:59:b6:4d:cc:3e:8b:51:eb: ae:2d:87:4a:7d:9a:7c:0a:16:c0:1d:c5:52:56:ec: a6:6a:5a:10:d3:73:33:eb:f6:ae:be:a5:cd:76:fc: 06:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0A:AD:B8:BF:CF:BC:B7:1E:2B:50:AC:89:0A:60:CD:F5:E3:70:FB X509v3 Authority Key Identifier: keyid:C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cd:d2:38:54:c3:33:4a:be:45:bf:63:6c:cd:92:a7:b5:00: d6:b7:32:78:ba:e9:cd:b0:cc:e7:8b:d2:20:8c:f4:ae:6f:47: f9:53:36:34:c2:d3:59:ab:88:21:06:21:53:78:4d:5a:d3:93: 49:56:0b:9e:16:78:76:ac:ec:d4:9a:6e:fc:21:fa:75:d4:08: 05:84:0b:a9:81:8d:2f:15:12:a1:4c:40:f1:e4:5c:2a:06:23: 56:1b:08:ce:18:12:9e:f5:90:da:f1:50:8e:1e:03:b5:b2:d5: 61:55:fc:15:e5:8b:e8:87:cb:c0:e6:52:26:98:11:37:e7:86: 66:9c:2c:65:79:02:c8:92:43:60:2b:aa:a8:46:34:c5:bd:84: 6f:b6:b2:4f:13:83:6e:0f:46:3c:77:db:c3:68:28:cc:28:29: 3c:a6:ef:27:ff:44:bf:dc:41:cd:31:09:ba:35:0c:2d:c3:3f: a6:0b:e3:9a:85:02:db:e2:ca:47:5e:5b:30:c6:a6:92:3b:b8: 0a:d8:e4:ef:ab:c4:59:78:4a:e4:70:fc:eb:9f:b8:67:dd:c5: d2:e2:cd:4a:d4:39:9e:4c:2b:1d:4f:3f:9d:5a:81:07:dc:be: 08:17:99:64:27:67:3e:f0:68:5d:89:6a:df:d7:09:6f:4c:44: 3a:fb:99:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbnKnqX+oP8cxVc/3XapCKQ9PO1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhEMjRBREY1Qzc0MzJFNUUzQzFENTk4ODc3NDEwN0E3 MTdGODI3QjAeFw0yNjA1MTIyMzI3MzRaFw0yNjA1MTQwMDUxMzRaMDMxMTAvBgNV BAMTKDQ2MEFBREI4QkZDRkJDQjcxRTJCNTBBQzg5MEE2MENERjVFMzcwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2gAC5spZx2bda1XxWijYDj7o3 0bHicFfrobBeWfOI8cT7/1aaCe9g7Vb418rCK25pdQ9alrD1ztyxKcAB0Ji2/hrO uezoDvBBoYi6QeqXPlHK1QllJb3evg/j9XMEb2jOmu1A/0JVKUoZARq+tUFLW3m0 +OxijDmPF/i7TK+tmtxVsag/sSs81ZGu2b8+RqAXx2YxSaYn1YvrE7rqX+MoS/Hc kvK0Gilu5XOSyNju/JxBg+FEpDnYujvgz8lkLNTgWA7ndZPzCdd1Ry8xaXh/f6/9 kw4RR95Ztk3MPotR664th0p9mnwKFsAdxVJW7KZqWhDTczPr9q6+pc12/AbbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURgqtuL/PvLceK1CsiQpgzfXjcPswHwYDVR0j BBgwFoAUyNJK31x0MuXjwdWYh3QQenF/gnswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhZDA5ZjMtMDAyMy00NDQ1LTg0MTYtNWNiZGUxM2ZkZDQwLzAvQzhEMjRBREY1 Qzc0MzJFNUUzQzFENTk4ODc3NDEwN0E3MTdGODI3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEQyNEFERjVDNzQzMkU1RTNDMUQ1OTg4Nzc0MTA3QTcxN0Y4 MjdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvQzhEMjRBREY1Qzc0MzJFNUUzQzFENTk4ODc3NDEw N0E3MTdGODI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7N0jhUwzNKvkW/Y2zNkqe1ANa3Mni66c2w zOeL0iCM9K5vR/lTNjTC01mriCEGIVN4TVrTk0lWC54WeHas7NSabvwh+nXUCAWE C6mBjS8VEqFMQPHkXCoGI1YbCM4YEp71kNrxUI4eA7Wy1WFV/BXli+iHy8DmUiaY ETfnhmacLGV5AsiSQ2ArqqhGNMW9hG+2sk8Tg24PRjx328NoKMwoKTym7yf/RL/c Qc0xCbo1DC3DP6YL45qFAtviykdeWzDGppI7uArY5O+rxFl4SuRw/OufuGfdxdLi zUrUOZ5MKx1PP51agQfcvggXmWQnZz7waF2Jat/XCW9MRDr7mQ8= -----END CERTIFICATE-----Generated at Wed May 13 05:57:23 2026 by rpki-client