$ rpki-client -vvf rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft File: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft (raw, json) Hash identifier: 5qPX8j5ENHoUqpSwj4W2Q37v/AYg3ZP0+fCFS3w42yc= Subject key identifier: 65:42:70:A4:02:9A:98:D6:13:60:D1:6E:A5:A5:19:62:B6:FC:05:C3 Authority key identifier: 8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D Certificate issuer: /CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Certificate serial: 29EB86CB54616251C079D8319E1A6CF8F015C8D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:49:25 +0000 Manifest this update: Tue 12 May 2026 18:44:25 +0000 Manifest next update: Wed 13 May 2026 19:18:25 +0000 Files and hashes: 1: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl (hash: veJiaZeMlUj4B9TUkgcK22dAYRVPnsSF0fQz2ggmFvY=) 2: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: Iad4oKdG+cP+QGtzN+0DsTs9ponKGFoBE7JkBGARiyQ=) 3: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: xeD49NnJaETxYZ89zZqsZvQW0lQqtHHDYp/1/JjzAG8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:eb:86:cb:54:61:62:51:c0:79:d8:31:9e:1a:6c:f8:f0:15:c8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Validity Not Before: May 12 18:44:25 2026 GMT Not After : May 13 19:18:25 2026 GMT Subject: CN=654270A4029A98D61360D16EA5A51962B6FC05C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6f:cd:3f:b6:e9:e6:74:c0:be:1e:74:41:4c: f7:ca:c4:74:57:2d:a0:9c:d3:aa:0a:2a:d7:f6:16: 01:e2:2a:b5:8c:61:bb:7f:0b:56:e0:ea:09:8b:e1: d3:54:83:5b:70:38:d2:86:95:c0:da:4b:ba:7d:7e: 36:a3:4c:ce:05:9b:10:df:b7:24:86:f6:47:b4:73: 9c:c4:ff:43:68:02:37:e1:fb:9d:bb:23:30:d3:2f: cb:c1:41:35:b6:a0:3c:58:a0:09:ba:dc:24:bf:72: 31:2f:7d:70:26:ac:69:c5:ba:e6:e5:8f:24:ee:53: 97:1d:5b:8b:6b:cb:97:cf:a6:e3:07:0b:b8:f3:39: ec:0f:2d:f1:20:e0:ea:09:95:70:fb:35:44:3e:ac: 02:06:41:81:5e:69:9d:75:9b:b8:b5:b3:7e:1d:25: fc:fd:e3:ac:ce:59:f3:8a:b1:31:a2:f1:2b:3a:21: 6a:b2:38:df:89:4e:46:2f:67:a9:23:8b:31:6c:7e: ef:13:19:4a:2d:60:fe:b4:7b:27:97:29:b6:38:69: 35:88:84:6a:59:e8:23:73:6d:2c:7c:bc:be:df:77: 43:4b:af:be:9e:6d:e4:26:74:d7:82:ba:55:d6:35: 00:48:3f:a8:4d:8c:fe:ca:6f:38:99:c4:d9:b8:23: f4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:42:70:A4:02:9A:98:D6:13:60:D1:6E:A5:A5:19:62:B6:FC:05:C3 X509v3 Authority Key Identifier: keyid:8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d6:44:2c:bf:2d:ad:0e:db:06:0b:db:20:09:52:c0:96:a0: 14:df:91:ae:ba:cf:9a:10:ea:ac:69:92:52:85:eb:fb:97:1b: 6a:3f:dd:6a:84:b0:82:88:10:29:56:43:f6:32:05:e9:b6:a1: b7:10:d4:c0:0f:86:14:e8:7a:32:0d:42:97:04:c9:a3:f7:35: f9:e5:5b:4f:c4:21:c1:a0:e6:20:2d:69:77:9e:30:57:01:91: 8c:75:47:b4:1b:c2:5e:a1:5a:82:f9:73:bb:c2:8c:8b:2c:8f: 6f:60:39:63:2a:88:ae:e3:2b:74:3b:8f:69:c7:fc:fd:4c:a4: 9d:55:8e:89:78:40:52:aa:c8:d5:83:4f:97:25:1d:49:7d:8c: 33:1b:06:60:3f:8e:b6:c3:61:34:b4:00:91:33:b2:fd:74:2e: 71:54:2f:3b:45:06:24:32:85:34:95:f2:72:83:b3:d0:9b:35: b3:f5:5f:a4:96:84:e8:8e:60:e4:20:05:7c:20:d0:3b:ae:d1: a3:a0:c2:21:69:88:e2:b1:82:48:bd:a1:6d:db:b5:6f:02:a9: 39:83:89:02:26:ce:8f:fb:f6:38:cf:64:f3:05:df:db:48:aa: 22:53:d9:a2:29:0d:e2:25:7d:d2:e4:ad:57:d8:58:35:6f:81: 1f:91:87:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKeuGy1RhYlHAedgxnhps+PAVyNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3MTcx RUEzRDk2RDAeFw0yNjA1MTIxODQ0MjVaFw0yNjA1MTMxOTE4MjVaMDMxMTAvBgNV BAMTKDY1NDI3MEE0MDI5QTk4RDYxMzYwRDE2RUE1QTUxOTYyQjZGQzA1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeb80/tunmdMC+HnRBTPfKxHRX LaCc06oKKtf2FgHiKrWMYbt/C1bg6gmL4dNUg1twONKGlcDaS7p9fjajTM4FmxDf tySG9ke0c5zE/0NoAjfh+527IzDTL8vBQTW2oDxYoAm63CS/cjEvfXAmrGnFuubl jyTuU5cdW4try5fPpuMHC7jzOewPLfEg4OoJlXD7NUQ+rAIGQYFeaZ11m7i1s34d Jfz946zOWfOKsTGi8Ss6IWqyON+JTkYvZ6kjizFsfu8TGUotYP60eyeXKbY4aTWI hGpZ6CNzbSx8vL7fd0NLr76ebeQmdNeCulXWNQBIP6hNjP7KbziZxNm4I/QrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZUJwpAKamNYTYNFupaUZYrb8BcMwHwYDVR0j BBgwFoAUjNhuNOGiG+hzt63MjSrnFx6j2W0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njg0NjY4ODktYzFlZi00NDEwLWFkOWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRF MUEyMUJFODczQjdBRENDOEQyQUU3MTcxRUEzRDk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q4NkUzNEUxQTIxQkU4NzNCN0FEQ0M4RDJBRTcxNzFFQTNE OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3 MTcxRUEzRDk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLWRCy/La0O2wYL2yAJUsCWoBTfka66z5oQ 6qxpklKF6/uXG2o/3WqEsIKIEClWQ/YyBem2obcQ1MAPhhToejINQpcEyaP3Nfnl W0/EIcGg5iAtaXeeMFcBkYx1R7Qbwl6hWoL5c7vCjIssj29gOWMqiK7jK3Q7j2nH /P1MpJ1Vjol4QFKqyNWDT5clHUl9jDMbBmA/jrbDYTS0AJEzsv10LnFULztFBiQy hTSV8nKDs9CbNbP1X6SWhOiOYOQgBXwg0Duu0aOgwiFpiOKxgki9oW3btW8CqTmD iQImzo/79jjPZPMF39tIqiJT2aIpDeIlfdLkrVfYWDVvgR+Rh94= -----END CERTIFICATE-----Generated at Wed May 13 05:51:08 2026 by rpki-client