$ rpki-client -vvf rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft File: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft (raw, json) Hash identifier: eoVSOx3yXVSoJoCqVk8m2yPKGMIHgBXRjJvpgUolfTU= Subject key identifier: 7F:4C:B9:24:5C:0D:69:B4:C3:1D:ED:7B:18:13:25:BA:7C:3F:91:39 Authority key identifier: 8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C Certificate issuer: /CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Certificate serial: 78904F3E7AB45C4F376F484391E1CC28AA16FDAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:50:23 +0000 Manifest this update: Tue 12 May 2026 15:45:23 +0000 Manifest next update: Wed 13 May 2026 16:25:23 +0000 Files and hashes: 1: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: A0fye72fVewvJEctRltf+2Pc+fB290Pn79WveiWFgaQ=) 2: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl (hash: lXmBI1wMhVopuW14owBvVqiVbiXQ52rkDftvN7n7OFI=) 3: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: feHp+VgvlrJlDWnbvgKdK3q5FY7GJ/3YIOlQqsX2zUs=) 4: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 8luvuUZe/inH3n4D6OyQwwD6mGHctkX0bejCwUaYOvA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:90:4f:3e:7a:b4:5c:4f:37:6f:48:43:91:e1:cc:28:aa:16:fd:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Validity Not Before: May 12 15:45:23 2026 GMT Not After : May 13 16:25:23 2026 GMT Subject: CN=7F4CB9245C0D69B4C31DED7B181325BA7C3F9139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fa:6f:03:7c:e6:e5:d8:50:65:04:e9:c6:8e: 37:7d:11:69:bf:ff:79:38:73:26:c7:46:3f:49:bc: 8b:63:75:3f:46:19:25:b5:62:fa:1b:ad:8f:95:13: c7:0b:09:e9:12:6b:d5:5c:dc:18:91:62:a5:04:43: 72:79:1f:41:f7:ce:70:a3:88:01:24:f1:a3:4b:36: 9a:21:52:e3:9b:a2:d2:a3:b6:92:6d:d8:c7:fc:b2: bc:39:e3:ec:ea:fd:06:b1:e6:00:c2:1f:32:20:7d: 21:f4:2b:1e:af:f8:98:a9:c1:b3:fe:e6:dd:e0:fb: 43:de:45:30:73:86:0c:a4:59:e1:54:23:d8:7c:0a: 1d:d5:93:c7:db:9d:73:87:1c:46:f5:ff:11:27:ba: 2c:69:3c:c3:51:bc:28:b8:1a:7c:11:53:2c:ed:8f: a4:42:01:3f:4c:38:5f:fb:6f:46:64:08:fd:aa:61: 8d:67:d4:d3:3c:16:2c:8b:c0:22:f3:33:ba:2f:6a: fe:8d:34:65:65:0b:ad:fa:3c:54:03:38:27:9e:96: 56:58:30:15:0f:37:62:da:2c:52:53:12:73:31:4b: 52:4c:cc:e0:c8:3a:5d:85:4e:94:37:5f:ed:c5:26: 72:64:8a:d1:fe:38:f4:bb:b2:85:23:e6:e6:71:65: 4a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4C:B9:24:5C:0D:69:B4:C3:1D:ED:7B:18:13:25:BA:7C:3F:91:39 X509v3 Authority Key Identifier: keyid:8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:64:57:e6:23:67:d1:28:d1:70:4c:46:97:66:ba:0b:e8:7f: 53:43:0a:a0:de:8c:05:53:b7:6d:74:a1:9e:f2:6f:af:f5:68: b9:b6:16:e0:20:46:ed:09:32:d4:af:45:83:5c:2b:72:43:90: ee:24:1a:2a:5e:da:9b:6b:a4:c9:6e:68:27:5b:7c:2c:b4:04: 41:0f:05:01:7b:b4:da:f3:e6:f6:2e:75:38:24:8a:e6:fa:f4: 0c:f1:3f:4d:c4:32:38:e7:31:c3:eb:dd:22:49:92:11:d8:c3: b0:b8:a6:24:69:a1:a7:bf:c1:ae:86:b0:72:32:6e:29:ff:fa: e4:ce:59:92:09:cf:2d:5b:79:02:43:48:34:6c:fe:24:9b:b3: 4a:2d:2a:c2:02:9a:47:bd:7f:c9:d2:2b:f8:ca:9a:9a:63:ec: 39:d8:25:db:f8:5b:08:18:fe:70:70:cf:1f:a5:8d:c2:8d:3f: ce:08:c1:bd:05:c6:05:52:84:a1:da:d7:31:eb:13:86:92:de: 2c:86:6f:4a:ad:e2:b1:58:50:88:42:70:68:10:5d:b7:8d:ca: 50:26:87:f9:8c:2e:35:d2:b6:57:63:4a:db:16:94:69:f7:58: 45:ac:3f:97:8a:84:ca:dc:bf:7d:91:e3:fe:90:fe:6e:f3:da: 4f:e2:67:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeJBPPnq0XE83b0hDkeHMKKoW/awwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0 MUUyQkUxQzAeFw0yNjA1MTIxNTQ1MjNaFw0yNjA1MTMxNjI1MjNaMDMxMTAvBgNV BAMTKDdGNENCOTI0NUMwRDY5QjRDMzFERUQ3QjE4MTMyNUJBN0MzRjkxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj+m8DfObl2FBlBOnGjjd9EWm/ /3k4cybHRj9JvItjdT9GGSW1YvobrY+VE8cLCekSa9Vc3BiRYqUEQ3J5H0H3znCj iAEk8aNLNpohUuObotKjtpJt2Mf8srw54+zq/Qax5gDCHzIgfSH0Kx6v+JipwbP+ 5t3g+0PeRTBzhgykWeFUI9h8Ch3Vk8fbnXOHHEb1/xEnuixpPMNRvCi4GnwRUyzt j6RCAT9MOF/7b0ZkCP2qYY1n1NM8FiyLwCLzM7ovav6NNGVlC636PFQDOCeellZY MBUPN2LaLFJTEnMxS1JMzODIOl2FTpQ3X+3FJnJkitH+OPS7soUj5uZxZUo3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf0y5JFwNabTDHe17GBMlunw/kTkwHwYDVR0j BBgwFoAUiwz4fyNJ/IeH71LjsK2A4UHivhwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlhNDAwODktNjA0MS00NWVkLThlNDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0Yy MzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0MUUyQkUxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjBDRjg3RjIzNDlGQzg3ODdFRjUyRTNCMEFEODBFMTQxRTJC RTFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlhNDAwODktNjA0MS00NWVkLThl NDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgw RTE0MUUyQkUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZkV+YjZ9Eo0XBMRpdmugvof1NDCqDejAVT t210oZ7yb6/1aLm2FuAgRu0JMtSvRYNcK3JDkO4kGipe2ptrpMluaCdbfCy0BEEP BQF7tNrz5vYudTgkiub69AzxP03EMjjnMcPr3SJJkhHYw7C4piRpoae/wa6GsHIy bin/+uTOWZIJzy1beQJDSDRs/iSbs0otKsICmke9f8nSK/jKmppj7DnYJdv4WwgY /nBwzx+ljcKNP84Iwb0FxgVShKHa1zHrE4aS3iyGb0qt4rFYUIhCcGgQXbeNylAm h/mMLjXStldjStsWlGn3WEWsP5eKhMrcv32R4/6Q/m7z2k/iZxA= -----END CERTIFICATE-----Generated at Wed May 13 00:43:42 2026 by rpki-client