$ rpki-client -vvf rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft File: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft (raw, json) Hash identifier: VnxyEDrlX8cpcvIDkgZUuPxytSEmFa1rbfnxycCDaMg= Subject key identifier: EE:48:3E:CA:D5:5B:F7:87:B8:07:9B:70:A9:44:8E:2A:98:99:9C:CD Authority key identifier: C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 Certificate issuer: /CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Certificate serial: 0DEF5EDF095F844763A5C85772F948D89C68A736 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:44:40 +0000 Manifest this update: Tue 12 May 2026 04:39:40 +0000 Manifest next update: Wed 13 May 2026 07:14:40 +0000 Files and hashes: 1: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: qW0AGce8XtjjXQ3Aq1xPuwzcIhd6zyH7ybAi9hoWtzA=) 2: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl (hash: 1htoPmkMeT6thmzR+srIadKBOG3oZswbqKlQvAjbwFo=) 3: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: W+SevG4xTFDq1sgkDkONqUQc3ucQK2u8ntiRI2DImrc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ef:5e:df:09:5f:84:47:63:a5:c8:57:72:f9:48:d8:9c:68:a7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Validity Not Before: May 12 04:39:40 2026 GMT Not After : May 13 07:14:40 2026 GMT Subject: CN=EE483ECAD55BF787B8079B70A9448E2A98999CCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:97:92:26:2f:c0:8f:92:1f:2c:4a:d0:85:a8: d1:19:b4:e7:c6:48:4a:05:ee:21:ff:68:25:64:04: ab:c6:01:49:f0:cf:da:ff:a7:4f:3f:b1:87:d4:51: a4:01:a0:19:d8:49:ba:3f:80:04:12:54:c6:67:9b: 3d:f0:bf:02:56:05:39:ff:50:a6:28:6c:36:45:3b: 6b:80:15:40:2a:6b:d4:cf:34:e3:3d:22:8c:d6:26: 27:c8:62:ce:c6:f3:50:dd:03:c8:b4:c5:82:00:1a: d0:0e:d4:4e:0a:60:f1:a9:a8:38:32:56:8e:7d:47: b6:a5:1e:13:d5:61:a8:76:69:1d:d4:ce:77:55:54: 66:28:29:59:d9:cf:61:80:57:d9:fb:83:0f:d7:96: 93:a0:e2:78:65:08:cb:d0:ba:8a:23:4d:51:ea:08: 85:a1:8b:b8:d0:0b:8c:05:29:f8:4f:d2:1e:c1:10: 61:67:5e:5f:01:91:4b:03:0e:25:2b:8c:34:f5:f7: 17:3f:31:19:0f:61:33:39:87:f5:92:30:21:86:a6: d1:db:a8:88:ed:1d:10:2c:ad:24:f7:f8:ca:eb:ed: d1:7a:98:70:8e:d9:8d:fd:47:15:f8:a3:9c:56:0a: 42:a7:0d:d1:67:a8:10:01:7a:c7:47:18:b7:87:13: c0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:48:3E:CA:D5:5B:F7:87:B8:07:9B:70:A9:44:8E:2A:98:99:9C:CD X509v3 Authority Key Identifier: keyid:C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2f:bc:f9:5b:f8:42:24:b3:cb:ec:3f:0f:e6:24:14:5d:0e: 64:65:b5:34:69:b2:bc:3a:0c:e3:de:93:28:7f:0a:84:23:ab: bf:d0:a2:20:fb:13:2c:37:c6:8d:bc:6f:71:23:4a:4f:61:26: 6f:b4:ba:32:ca:cd:7f:51:a6:9a:24:7f:25:bc:33:a9:be:12: e9:85:98:f6:96:0b:b6:d5:89:74:f5:27:67:1c:2e:49:08:3e: 2c:30:34:fd:6b:63:66:0c:d3:be:cd:76:48:ba:dd:ce:b7:6c: 4d:d8:01:f9:eb:01:bf:f3:37:48:49:93:c3:4c:22:8d:b2:7a: 12:11:3f:f1:c8:cf:05:99:94:e7:de:4e:b6:90:65:e4:f1:72: 40:9b:84:b7:63:67:c6:9c:da:ec:75:0a:60:f0:da:6f:a0:f1: e0:ed:7f:5a:0b:ff:81:4f:97:07:4f:6b:37:00:db:6b:19:d1: 89:4c:fb:b6:b2:2c:80:21:87:ce:34:e0:e7:c4:47:b9:01:9d: 05:c3:31:91:1d:35:22:d4:d0:e5:89:52:95:b4:82:b5:71:9e: 9c:f4:76:85:31:14:d1:a7:f2:d2:ed:77:20:94:31:32:d8:c3: 8f:63:ce:1e:7d:13:5d:36:e3:05:c4:fc:6f:e2:66:94:bb:17: bb:91:c1:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDe9e3wlfhEdjpchXcvlI2JxopzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2 QzRFREMzMjAeFw0yNjA1MTIwNDM5NDBaFw0yNjA1MTMwNzE0NDBaMDMxMTAvBgNV BAMTKEVFNDgzRUNBRDU1QkY3ODdCODA3OUI3MEE5NDQ4RTJBOTg5OTlDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXl5ImL8CPkh8sStCFqNEZtOfG SEoF7iH/aCVkBKvGAUnwz9r/p08/sYfUUaQBoBnYSbo/gAQSVMZnmz3wvwJWBTn/ UKYobDZFO2uAFUAqa9TPNOM9IozWJifIYs7G81DdA8i0xYIAGtAO1E4KYPGpqDgy Vo59R7alHhPVYah2aR3UzndVVGYoKVnZz2GAV9n7gw/XlpOg4nhlCMvQuoojTVHq CIWhi7jQC4wFKfhP0h7BEGFnXl8BkUsDDiUrjDT19xc/MRkPYTM5h/WSMCGGptHb qIjtHRAsrST3+Mrr7dF6mHCO2Y39RxX4o5xWCkKnDdFnqBABesdHGLeHE8DpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7kg+ytVb94e4B5twqUSOKpiZnM0wHwYDVR0j BBgwFoAUyKJ3s97IwPCqTB+lQugZNmxO3DIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIyNmIzZTEtZDdmNi00NjVlLTgzMDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNE RUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2QzRFREMzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEEyNzdCM0RFQzhDMEYwQUE0QzFGQTU0MkU4MTkzNjZDNEVE QzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5 MzY2QzRFREMzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYvvPlb+EIks8vsPw/mJBRdDmRltTRpsrw6 DOPekyh/CoQjq7/QoiD7Eyw3xo28b3EjSk9hJm+0ujLKzX9RppokfyW8M6m+EumF mPaWC7bViXT1J2ccLkkIPiwwNP1rY2YM077Ndki63c63bE3YAfnrAb/zN0hJk8NM Io2yehIRP/HIzwWZlOfeTraQZeTxckCbhLdjZ8ac2ux1CmDw2m+g8eDtf1oL/4FP lwdPazcA22sZ0YlM+7ayLIAhh8404OfER7kBnQXDMZEdNSLU0OWJUpW0grVxnpz0 doUxFNGn8tLtdyCUMTLYw49jzh59E1024wXE/G/iZpS7F7uRwYM= -----END CERTIFICATE-----Generated at Wed May 13 00:34:19 2026 by rpki-client