$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft File: 8BE5D6878B464D9FA654023C63F4762E67599164.mft (raw, json) Hash identifier: hwgMHxhWEZZLUg6pzz4h6QF3mvxdYB7cK1ja+eUp5DI= Subject key identifier: E4:7C:DD:43:BD:32:AF:F5:CB:AA:34:37:71:05:E2:60:24:31:BE:48 Authority key identifier: 8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64 Certificate issuer: /CN=8BE5D6878B464D9FA654023C63F4762E67599164 Certificate serial: 3DE779C8BC1B18FBA0F7EF1C76D522C6C804F3E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:22:14 +0000 Manifest this update: Tue 12 May 2026 20:17:14 +0000 Manifest next update: Wed 13 May 2026 23:11:14 +0000 Files and hashes: 1: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: gsCaOX96MCEfxecmW7euDwqW3eYjaAOY81K1Ab8R/sk=) 2: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: j1q7Tjwd0n3nZPl8Mige83XpdVNq8A8OBRmyY8xB6w0=) 3: 8BE5D6878B464D9FA654023C63F4762E67599164.crl (hash: lZTmWilAI5KSqlb8ZQS++QaEr5Jb9PP/nOf22KdT6Jk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e7:79:c8:bc:1b:18:fb:a0:f7:ef:1c:76:d5:22:c6:c8:04:f3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE5D6878B464D9FA654023C63F4762E67599164 Validity Not Before: May 12 20:17:14 2026 GMT Not After : May 13 23:11:14 2026 GMT Subject: CN=E47CDD43BD32AFF5CBAA34377105E2602431BE48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:06:2f:da:a5:04:c6:49:b3:bf:f1:1b:7b: 93:c6:08:62:f2:42:e9:da:7b:bb:58:61:cf:23:f0: ad:30:bb:aa:9a:e8:18:6a:81:ae:5a:38:b1:da:05: 0e:1e:e6:85:96:fa:25:a0:76:1f:2e:74:64:4a:00: ae:b5:c6:cb:03:d9:0b:01:51:c6:ad:f7:5f:00:25: fd:55:52:34:58:61:26:13:33:f8:43:ca:68:11:82: a7:11:ae:f8:50:0e:ee:7d:fd:8c:15:78:82:7f:1d: 14:f9:d0:42:17:ba:6b:d9:d6:bb:89:dc:82:46:79: aa:7f:51:12:9e:a3:36:81:b2:ce:c9:5c:fc:40:4e: 87:65:ec:1d:81:c9:b3:cb:8b:2c:99:11:aa:fa:fb: fb:bd:fd:fe:7e:4c:04:50:6c:07:1e:f4:52:c7:be: c2:61:f8:4f:96:0a:17:d3:61:9b:c4:c6:64:0f:37: c1:29:de:71:59:4f:79:a5:fe:da:a2:05:47:d9:98: db:11:eb:36:5c:51:87:eb:82:3c:6b:0b:9d:16:43: ce:d9:7b:03:0b:27:b9:0f:a7:ce:59:5b:27:63:7f: 7f:c1:07:8b:2c:2f:33:1d:23:0c:90:1f:77:12:a1: b5:f4:ea:24:3b:dd:17:40:fb:b8:49:57:7b:a6:57: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7C:DD:43:BD:32:AF:F5:CB:AA:34:37:71:05:E2:60:24:31:BE:48 X509v3 Authority Key Identifier: keyid:8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6a:08:15:72:7b:cb:b4:10:9a:eb:6f:46:e3:09:0e:ea:14: 5b:34:35:85:db:57:31:6e:b2:04:e5:43:09:bf:0e:63:4f:de: 59:a3:1b:c3:48:f4:39:07:67:4b:95:d3:56:68:10:a7:f7:a7: c5:cf:ae:33:5c:a7:ff:a6:c7:d0:75:81:31:46:d9:d1:8e:df: e0:bf:63:19:99:a1:01:50:3a:f9:b3:a1:80:d6:d2:8c:c5:94: ba:3f:21:60:89:f3:fb:d1:60:54:cc:09:03:94:4f:58:8e:86: ef:fc:c6:a8:eb:32:99:c4:3d:cd:3f:17:37:a1:6a:54:b2:e1: 24:a8:03:e1:d4:af:84:00:d9:f8:e3:13:36:ae:35:9c:21:fb: 23:52:10:50:37:94:98:12:74:75:44:a0:ef:cb:41:a5:d8:28: 64:f3:e6:2e:62:f7:a1:f5:89:6e:44:fb:8d:bc:fc:d5:a9:ff: 09:eb:56:24:b9:82:72:b8:ac:53:c8:12:a3:a1:37:00:ea:3f: 3b:ac:a5:81:38:6b:97:12:40:7d:fa:57:69:ce:d1:4d:42:b1: ed:03:f9:ce:3b:66:fd:8c:f2:fa:bc:ab:06:5d:2b:8b:f0:0f: ba:8b:89:e3:fb:ae:a8:af:2e:5d:b2:b1:58:1c:79:23:3e:10: 96:20:3a:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPed5yLwbGPug9+8cdtUixsgE8+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNUQ2ODc4QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2MkU2 NzU5OTE2NDAeFw0yNjA1MTIyMDE3MTRaFw0yNjA1MTMyMzExMTRaMDMxMTAvBgNV BAMTKEU0N0NERDQzQkQzMkFGRjVDQkFBMzQzNzcxMDVFMjYwMjQzMUJFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOFAYv2qUExkmzv/Ebe5PGCGLy Qunae7tYYc8j8K0wu6qa6Bhqga5aOLHaBQ4e5oWW+iWgdh8udGRKAK61xssD2QsB Ucat918AJf1VUjRYYSYTM/hDymgRgqcRrvhQDu59/YwVeIJ/HRT50EIXumvZ1ruJ 3IJGeap/URKeozaBss7JXPxATodl7B2BybPLiyyZEar6+/u9/f5+TARQbAce9FLH vsJh+E+WChfTYZvExmQPN8Ep3nFZT3ml/tqiBUfZmNsR6zZcUYfrgjxrC50WQ87Z ewMLJ7kPp85ZWydjf3/BB4ssLzMdIwyQH3cSobX06iQ73RdA+7hJV3umV1wbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5HzdQ70yr/XLqjQ3cQXiYCQxvkgwHwYDVR0j BBgwFoAUi+XWh4tGTZ+mVAI8Y/R2LmdZkWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I3ZWY1MTUtODU2NC00MWU4LTlkMjAtMmQzM2Q0NWNjYmQ2LzAvOEJFNUQ2ODc4 QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2MkU2NzU5OTE2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkU1RDY4NzhCNDY0RDlGQTY1NDAyM0M2M0Y0NzYyRTY3NTk5 MTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvOEJFNUQ2ODc4QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2 MkU2NzU5OTE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRqCBVye8u0EJrrb0bjCQ7qFFs0NYXbVzFu sgTlQwm/DmNP3lmjG8NI9DkHZ0uV01ZoEKf3p8XPrjNcp/+mx9B1gTFG2dGO3+C/ YxmZoQFQOvmzoYDW0ozFlLo/IWCJ8/vRYFTMCQOUT1iOhu/8xqjrMpnEPc0/Fzeh alSy4SSoA+HUr4QA2fjjEzauNZwh+yNSEFA3lJgSdHVEoO/LQaXYKGTz5i5i96H1 iW5E+428/NWp/wnrViS5gnK4rFPIEqOhNwDqPzuspYE4a5cSQH36V2nO0U1Cse0D +c47Zv2M8vq8qwZdK4vwD7qLieP7rqivLl2ysVgceSM+EJYgOlo= -----END CERTIFICATE-----Generated at Wed May 13 01:38:20 2026 by rpki-client