$ rpki-client -vvf rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft File: 8A88C62D67BF9B5D27095014663D7564A99145C4.mft (raw, json) Hash identifier: 5mpJr50nugVZjrjtKe4GQ96cktiBKB5ZiOv7vE5ItDg= Subject key identifier: 20:AE:6A:65:11:E4:1B:61:60:54:09:BE:DD:98:99:F6:0F:71:36:EA Authority key identifier: 8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4 Certificate issuer: /CN=8A88C62D67BF9B5D27095014663D7564A99145C4 Certificate serial: 6DD9012B8D58D6390C154F452BF82FD6CE2D8AEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft Manifest number: 0F Signing time: Tue 12 May 2026 05:51:27 +0000 Manifest this update: Tue 12 May 2026 05:46:27 +0000 Manifest next update: Wed 13 May 2026 09:27:27 +0000 Files and hashes: 1: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: F053eE0i+9sM4Zlpf0wasuwbYczZ4FiYljBeIYhXU8s=) 2: 8A88C62D67BF9B5D27095014663D7564A99145C4.crl (hash: oIISfYrBn10FC7MkGp0kaGpcxFECSEROh2JN7aKfdfQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d9:01:2b:8d:58:d6:39:0c:15:4f:45:2b:f8:2f:d6:ce:2d:8a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A88C62D67BF9B5D27095014663D7564A99145C4 Validity Not Before: May 12 05:46:27 2026 GMT Not After : May 13 09:27:27 2026 GMT Subject: CN=20AE6A6511E41B61605409BEDD9899F60F7136EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:7f:73:b3:3d:b5:b0:7f:eb:ae:2a:45:ae: ae:c5:a9:b0:29:0d:a6:bd:c9:4d:0d:82:75:71:c5: 81:65:56:4c:64:ba:00:d5:cc:77:e3:2e:9f:95:21: 31:21:78:f1:f2:5d:32:08:da:31:3a:00:24:a2:5e: 4c:45:ff:37:67:31:7a:16:16:3b:14:ad:fb:ce:0b: da:cc:34:0e:a7:4e:09:35:0a:81:1a:c3:70:4c:24: b1:72:04:02:4e:09:f3:1b:be:6b:5d:07:b3:d4:2e: 0b:2e:39:fb:4e:64:05:a4:ce:12:c4:8d:9a:04:52: f6:ad:64:81:99:c5:42:33:7c:53:46:06:b4:8e:ae: 10:4f:b4:e9:cc:2c:d8:84:9f:64:63:73:3f:d6:50: 8b:05:ec:09:62:c0:f1:f0:ab:c9:bc:48:2e:5b:e7: 2d:0f:57:e6:51:32:0f:66:c7:7d:0c:3a:d3:be:f8: 21:00:68:73:22:71:0e:f6:fc:79:77:a7:30:8f:b0: 6f:0c:dc:d6:01:73:e1:8f:76:16:23:c9:e0:31:97: a9:d9:6b:06:e1:16:8a:bb:be:74:7a:2f:90:50:83: 80:1b:06:ab:ca:d0:07:f9:28:1f:0b:8f:b9:a6:58: ea:70:e0:bc:2c:bb:68:1f:a9:a7:87:cf:b1:dc:4e: 4a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AE:6A:65:11:E4:1B:61:60:54:09:BE:DD:98:99:F6:0F:71:36:EA X509v3 Authority Key Identifier: keyid:8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:76:c0:d9:ac:7c:00:91:68:e4:7c:0c:0a:2a:e2:a4:ea:d1: a4:44:4b:e7:54:33:43:50:61:96:c6:3f:cf:8e:ee:0d:0a:2e: 3a:a9:da:57:10:b7:0e:7f:1d:2a:8b:f0:27:1c:4b:ee:52:99: 5d:62:fc:6c:49:57:ed:dc:a1:6b:c6:86:8a:e3:13:59:43:b2: 1a:93:93:e0:cd:97:a8:64:75:7a:56:f0:9c:76:97:cf:c0:cd: 2a:4f:b3:f4:14:bb:a2:61:82:65:18:46:d2:a2:97:f6:68:6b: 99:d0:df:c6:f6:ed:85:49:7b:6c:31:87:46:bd:a5:3e:5d:3d: ef:d1:cc:86:c8:7a:a3:45:35:5f:77:b6:11:e3:83:e3:5f:5a: 7c:53:ba:e8:70:a6:f5:5d:45:2a:76:7a:81:61:2c:b3:93:bf: 6c:ec:fe:c2:91:9f:42:d5:3d:b5:ca:b7:04:9a:7e:9a:d2:4f: 79:d6:fa:de:9b:82:09:94:fe:14:e7:36:be:e8:4c:28:08:7c: 9e:b3:3b:31:6d:0d:54:4b:c9:70:3f:2a:d6:93:c4:63:f5:e9: 07:09:d7:a8:35:a5:a9:50:4b:5d:e0:68:0f:fa:e4:26:13:eb: df:56:fe:0e:20:50:6d:bf:8c:d6:3b:10:d8:b5:b7:b2:2c:ab: b2:88:e1:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbdkBK41Y1jkMFU9FK/gv1s4tiuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OEM2MkQ2N0JGOUI1RDI3MDk1MDE0NjYzRDc1NjRB OTkxNDVDNDAeFw0yNjA1MTIwNTQ2MjdaFw0yNjA1MTMwOTI3MjdaMDMxMTAvBgNV BAMTKDIwQUU2QTY1MTFFNDFCNjE2MDU0MDlCRUREOTg5OUY2MEY3MTM2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD339zsz21sH/rripFrq7FqbAp Daa9yU0NgnVxxYFlVkxkugDVzHfjLp+VITEhePHyXTII2jE6ACSiXkxF/zdnMXoW FjsUrfvOC9rMNA6nTgk1CoEaw3BMJLFyBAJOCfMbvmtdB7PULgsuOftOZAWkzhLE jZoEUvatZIGZxUIzfFNGBrSOrhBPtOnMLNiEn2Rjcz/WUIsF7AliwPHwq8m8SC5b 5y0PV+ZRMg9mx30MOtO++CEAaHMicQ72/Hl3pzCPsG8M3NYBc+GPdhYjyeAxl6nZ awbhFoq7vnR6L5BQg4AbBqvK0Af5KB8Lj7mmWOpw4Lwsu2gfqaeHz7HcTkrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIK5qZRHkG2FgVAm+3ZiZ9g9xNuowHwYDVR0j BBgwFoAUiojGLWe/m10nCVAUZj11ZKmRRcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY0YzMxNTUtYzhmZi00MjA3LWEyZGMtNTFlMDA1NTMwYjUyLzAvOEE4OEM2MkQ2 N0JGOUI1RDI3MDk1MDE0NjYzRDc1NjRBOTkxNDVDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QTg4QzYyRDY3QkY5QjVEMjcwOTUwMTQ2NjNENzU2NEE5OTE0 NUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY0YzMxNTUtYzhmZi00MjA3LWEy ZGMtNTFlMDA1NTMwYjUyLzAvOEE4OEM2MkQ2N0JGOUI1RDI3MDk1MDE0NjYzRDc1 NjRBOTkxNDVDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADx2wNmsfACRaOR8DAoq4qTq0aRES+dUM0NQ YZbGP8+O7g0KLjqp2lcQtw5/HSqL8CccS+5SmV1i/GxJV+3coWvGhorjE1lDshqT k+DNl6hkdXpW8Jx2l8/AzSpPs/QUu6JhgmUYRtKil/Zoa5nQ38b27YVJe2wxh0a9 pT5dPe/RzIbIeqNFNV93thHjg+NfWnxTuuhwpvVdRSp2eoFhLLOTv2zs/sKRn0LV PbXKtwSafprST3nW+t6bggmU/hTnNr7oTCgIfJ6zOzFtDVRLyXA/KtaTxGP16QcJ 16g1palQS13gaA/65CYT699W/g4gUG2/jNY7ENi1t7Isq7KI4Y8= -----END CERTIFICATE-----Generated at Wed May 13 02:37:26 2026 by rpki-client