$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft File: D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft (raw, json) Hash identifier: mXeRYsXynXoqAsvWuQR2Y70S/j24eDQ6Ho7AFPypAVU= Subject key identifier: 7E:EB:01:74:C5:85:25:FA:71:00:44:BA:B8:FE:F9:59:76:B0:33:A2 Authority key identifier: D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 Certificate issuer: /CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Certificate serial: 0659EBE6F2D78BABED1C3F295974491E223F3AED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:30:29 +0000 Manifest this update: Tue 12 May 2026 19:25:29 +0000 Manifest next update: Wed 13 May 2026 20:49:29 +0000 Files and hashes: 1: D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl (hash: b5JjywlAXIyarQAZxgOVMQheADwbIYrPSnzo1AMxLkI=) 2: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: bR+rHQrh2BbDBIEXZD76jtCgM3z29GB3K8OSA3PHxZ8=) 3: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: B9uGziJoJ3vGf5NvgTMOSPQWAPSbs6/SbCQ1GHvUQS0=) 4: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: GMEzbs3Ig2nQxKeMH+leqKXvdoQrLyt3lFNSHrwIV3w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:59:eb:e6:f2:d7:8b:ab:ed:1c:3f:29:59:74:49:1e:22:3f:3a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Validity Not Before: May 12 19:25:29 2026 GMT Not After : May 13 20:49:29 2026 GMT Subject: CN=7EEB0174C58525FA710044BAB8FEF95976B033A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:ad:44:5c:37:b2:4d:81:48:2d:f7:09:e9: d1:fb:61:c8:e9:07:f4:c6:35:cc:6e:b6:41:cf:41: de:53:c3:21:b8:60:58:df:8c:47:a3:bf:bd:f1:3e: c4:30:54:40:3d:2d:0f:9b:ca:08:cf:52:1d:a2:27: bd:6d:75:27:b5:78:ce:ae:99:61:09:46:79:96:20: 2d:ca:19:cb:e5:f9:f7:12:97:7e:f8:88:4b:93:ee: 4a:7f:82:3d:09:5f:5b:18:c4:b9:77:f1:56:75:92: 7a:f9:56:12:64:50:24:63:51:e3:4e:f6:e8:f0:46: ff:c4:10:c5:7a:01:de:b4:dd:af:03:97:8a:fc:2b: ef:0a:53:ed:99:be:37:7a:53:e2:4b:48:5e:5b:26: 33:84:86:56:d5:10:20:16:5d:af:98:8e:c5:58:41: e4:ed:1d:d6:15:bc:5c:40:76:8b:8b:d3:a7:d1:84: c4:78:3b:29:6f:b9:2b:34:06:69:ec:19:e9:8b:f1: ea:5f:35:32:a6:62:9d:96:2c:ae:d7:9b:f9:da:b7: a8:0d:7f:2b:93:80:d8:85:b7:7f:e5:4a:c9:93:52: 3d:17:cb:a9:5f:6d:c6:30:58:4b:04:c9:d1:b2:1b: a6:c6:50:7f:1f:62:f3:02:da:d9:78:5a:a0:ce:57: 71:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EB:01:74:C5:85:25:FA:71:00:44:BA:B8:FE:F9:59:76:B0:33:A2 X509v3 Authority Key Identifier: keyid:D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:74:d9:b2:68:3b:2e:1e:bc:6c:f5:c4:f7:a2:e3:bd:1a:e9: 88:1a:5e:3e:cf:6b:11:c6:91:51:10:03:a1:b5:a3:96:39:b3: d5:18:ce:cb:90:47:12:b5:12:04:83:0f:f3:aa:73:43:e6:22: bb:d4:43:f0:e2:08:bd:58:5c:f6:91:c1:36:0d:19:aa:eb:81: c0:ba:40:20:7a:c5:0d:0b:e2:fb:24:87:d5:56:0e:3c:6b:10: 97:2e:c5:c7:d5:dd:a6:17:a1:82:0a:79:f1:56:a8:15:6b:28: 88:53:85:4a:05:1a:50:d9:6b:9f:5a:ed:0e:f0:0d:1c:a8:26: db:79:a4:13:d4:18:3f:8b:ef:61:ec:05:6b:5a:ac:51:ae:13: 6c:3e:51:01:ff:f6:f0:d6:f0:73:92:4c:59:29:63:23:09:23: 27:c3:3a:b2:9a:ca:67:9a:57:df:e2:bd:c7:23:9e:18:f5:12: 08:5d:78:f4:63:3a:1e:00:61:24:78:94:42:52:26:b1:6a:47: ba:a3:60:5e:6a:f1:fa:07:1b:8d:9a:f2:56:f3:16:8b:af:ba: b6:65:b8:57:00:13:b0:95:4c:0c:9a:eb:25:05:68:cf:47:f5: 27:e7:72:4f:c7:63:21:65:3b:e6:83:6d:1f:19:17:30:9a:b4: 88:c7:92:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBlnr5vLXi6vtHD8pWXRJHiI/Ou0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCMUFBQTREMjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0 REQxRjUyNDAeFw0yNjA1MTIxOTI1MjlaFw0yNjA1MTMyMDQ5MjlaMDMxMTAvBgNV BAMTKDdFRUIwMTc0QzU4NTI1RkE3MTAwNDRCQUI4RkVGOTU5NzZCMDMzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJD61EXDeyTYFILfcJ6dH7Ycjp B/TGNcxutkHPQd5TwyG4YFjfjEejv73xPsQwVEA9LQ+bygjPUh2iJ71tdSe1eM6u mWEJRnmWIC3KGcvl+fcSl374iEuT7kp/gj0JX1sYxLl38VZ1knr5VhJkUCRjUeNO 9ujwRv/EEMV6Ad603a8Dl4r8K+8KU+2Zvjd6U+JLSF5bJjOEhlbVECAWXa+YjsVY QeTtHdYVvFxAdouL06fRhMR4OylvuSs0BmnsGemL8epfNTKmYp2WLK7Xm/nat6gN fyuTgNiFt3/lSsmTUj0Xy6lfbcYwWEsEydGyG6bGUH8fYvMC2tl4WqDOV3HlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfusBdMWFJfpxAES6uP75WXawM6IwHwYDVR0j BBgwFoAU2LGqpNIqLiJZ5V56UMsV/03R9SQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2IzZWFiYjQtNGRiMy00MzczLWEzNDgtZmIxZWQ3MDU1NjUxLzAvRDhCMUFBQTRE MjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0REQxRjUyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEIxQUFBNEQyMkEyRTIyNTlFNTVFN0E1MENCMTVGRjRERDFG NTI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvRDhCMUFBQTREMjJBMkUyMjU5RTU1RTdBNTBDQjE1 RkY0REQxRjUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHh02bJoOy4evGz1xPei470a6YgaXj7PaxHG kVEQA6G1o5Y5s9UYzsuQRxK1EgSDD/Oqc0PmIrvUQ/DiCL1YXPaRwTYNGarrgcC6 QCB6xQ0L4vskh9VWDjxrEJcuxcfV3aYXoYIKefFWqBVrKIhThUoFGlDZa59a7Q7w DRyoJtt5pBPUGD+L72HsBWtarFGuE2w+UQH/9vDW8HOSTFkpYyMJIyfDOrKaymea V9/ivccjnhj1EghdePRjOh4AYSR4lEJSJrFqR7qjYF5q8foHG42a8lbzFouvurZl uFcAE7CVTAya6yUFaM9H9Sfnck/HYyFlO+aDbR8ZFzCatIjHksc= -----END CERTIFICATE-----Generated at Wed May 13 02:16:15 2026 by rpki-client