$ rpki-client -vvf rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft File: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft (raw, json) Hash identifier: sh256RzIzjpFwrOhYBpkHzoziGQq9MuzgXnNT5XmAMo= Subject key identifier: 58:18:D1:73:FC:5C:00:C5:85:B6:70:AA:3B:E4:DB:96:EE:7C:B2:16 Authority key identifier: D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E Certificate issuer: /CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Certificate serial: E8A953BF87EC334EDF5C2F7ACAC46D0C957A63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:10:27 +0000 Manifest this update: Tue 12 May 2026 22:05:27 +0000 Manifest next update: Thu 14 May 2026 01:12:27 +0000 Files and hashes: 1: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl (hash: vDdlQ7PAFmCt42uMChGyzi4mSHv0qDRtRbKczt+sfSc=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: yr/oT9BlQ/M4JMNvCd0w0W7t+J3wxH6iIKEMfOlwP+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e8:a9:53:bf:87:ec:33:4e:df:5c:2f:7a:ca:c4:6d:0c:95:7a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Validity Not Before: May 12 22:05:27 2026 GMT Not After : May 14 01:12:27 2026 GMT Subject: CN=5818D173FC5C00C585B670AA3BE4DB96EE7CB216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:fa:6e:bf:88:28:51:2c:a3:ca:9d:50:04: 26:9c:12:54:e9:36:03:15:f7:58:be:c5:42:a2:49: bb:54:07:36:ce:b7:11:09:b7:0d:41:d2:11:19:0f: f4:43:d0:b1:51:0b:8d:65:b0:f8:f6:c9:62:66:57: 65:f5:72:8d:2d:e3:1a:e5:95:13:41:43:9d:90:e6: 8a:40:48:07:fc:f6:80:e5:d0:4b:dc:2c:39:1c:e8: a4:52:20:79:ee:05:28:03:57:d9:4f:b8:5e:5e:32: ec:6b:a2:64:50:50:89:3d:59:d5:f8:a3:36:b6:35: 05:13:11:b6:60:ad:0d:66:85:59:71:d4:d2:86:46: 8c:22:cc:09:9b:13:6f:82:08:4f:3c:d4:b1:8d:aa: 6c:20:49:cf:0c:14:81:92:0d:4a:79:a9:cd:b1:e6: 26:58:94:14:ed:1c:00:ff:71:2c:83:52:b0:7f:1b: 8c:df:50:bf:53:7b:e5:5d:9c:69:23:01:77:38:dc: d3:fe:fe:df:7d:24:4e:0f:8e:23:ab:a7:51:72:50: 3e:77:89:75:9f:65:6e:17:80:2c:f1:e1:a8:81:00: ad:19:f0:b2:1b:00:d5:01:2d:32:02:8d:b9:2c:37: 0c:21:d4:34:a0:b2:76:03:7e:df:dd:c4:3e:92:af: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:18:D1:73:FC:5C:00:C5:85:B6:70:AA:3B:E4:DB:96:EE:7C:B2:16 X509v3 Authority Key Identifier: keyid:D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e4:86:71:b3:db:68:40:e8:da:d6:50:db:3d:33:44:3e:8f: 87:f6:7e:a2:fa:d1:46:79:6a:d4:3b:2d:b5:ac:42:12:f5:75: 89:c3:ff:c9:80:23:db:bd:49:34:e8:bf:2f:7e:e3:cf:00:92: ed:99:11:18:19:7a:60:c9:59:64:a9:4e:8f:56:7a:20:58:d4: 1f:65:be:85:b5:4d:8f:cd:fe:7b:ea:eb:cb:90:3c:d7:aa:5f: e2:d7:84:de:b6:0e:4c:7c:52:57:9f:92:d5:b6:fd:1e:c9:bd: 54:74:1b:11:b5:02:ec:ef:e6:2c:a3:ec:9e:c6:0b:8e:01:db: 70:b4:9f:24:69:79:f0:95:61:f1:0c:9e:b1:8f:8a:db:28:c0: df:a9:6f:0b:4b:d9:99:fb:01:9d:d7:e5:ae:be:2b:7f:1f:92: 09:3f:97:b1:96:da:54:43:20:66:fc:b9:0d:2a:92:63:cd:24: 2c:97:a7:12:ad:3e:fc:30:b4:12:0c:bf:9d:ea:c0:61:a0:52: b6:77:b9:33:95:4e:c7:86:03:ee:72:fc:05:04:fd:38:6e:84: fd:bc:40:4e:5f:b1:25:75:a4:75:d8:dc:07:9d:93:59:29:61: 15:7f:12:47:93:3f:93:62:ae:99:f3:3c:35:ad:4f:15:f4:ea: 1a:67:7c:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOipU7+H7DNO31wvesrEbQyVemMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThC Q0M3NEI4RTAeFw0yNjA1MTIyMjA1MjdaFw0yNjA1MTQwMTEyMjdaMDMxMTAvBgNV BAMTKDU4MThEMTczRkM1QzAwQzU4NUI2NzBBQTNCRTREQjk2RUU3Q0IyMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmPpuv4goUSyjyp1QBCacElTp NgMV91i+xUKiSbtUBzbOtxEJtw1B0hEZD/RD0LFRC41lsPj2yWJmV2X1co0t4xrl lRNBQ52Q5opASAf89oDl0EvcLDkc6KRSIHnuBSgDV9lPuF5eMuxromRQUIk9WdX4 oza2NQUTEbZgrQ1mhVlx1NKGRowizAmbE2+CCE881LGNqmwgSc8MFIGSDUp5qc2x 5iZYlBTtHAD/cSyDUrB/G4zfUL9Te+VdnGkjAXc43NP+/t99JE4PjiOrp1FyUD53 iXWfZW4XgCzx4aiBAK0Z8LIbANUBLTICjbksNwwh1DSgsnYDft/dxD6Sr2KnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWBjRc/xcAMWFtnCqO+Tblu58shYwHwYDVR0j BBgwFoAU0Mi0OuhfDwnUmHMpIyvs6LzHS44wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkZDRmMTYtNTcwZS00YzhjLWE5OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FF ODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThCQ0M3NEI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEM4QjQzQUU4NUYwRjA5RDQ5ODczMjkyMzJCRUNFOEJDQzc0 QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVD RThCQ0M3NEI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfkhnGz22hA6NrWUNs9M0Q+j4f2fqL60UZ5 atQ7LbWsQhL1dYnD/8mAI9u9STTovy9+488Aku2ZERgZemDJWWSpTo9WeiBY1B9l voW1TY/N/nvq68uQPNeqX+LXhN62Dkx8UlefktW2/R7JvVR0GxG1Auzv5iyj7J7G C44B23C0nyRpefCVYfEMnrGPitsowN+pbwtL2Zn7AZ3X5a6+K38fkgk/l7GW2lRD IGb8uQ0qkmPNJCyXpxKtPvwwtBIMv53qwGGgUrZ3uTOVTseGA+5y/AUE/ThuhP28 QE5fsSV1pHXY3Aedk1kpYRV/EkeTP5NirpnzPDWtTxX06hpnfA8= -----END CERTIFICATE-----Generated at Wed May 13 01:37:27 2026 by rpki-client