$ rpki-client -vvf rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft File: B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft (raw, json) Hash identifier: y3V5RR6BmSUoT5hGLTXoXlwF4a0ZWbtlknnvxceFWug= Subject key identifier: C3:F2:06:FE:B3:42:E8:36:D8:70:8B:6E:80:12:D5:80:65:A7:2E:32 Authority key identifier: B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70 Certificate issuer: /CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570 Certificate serial: 14142422A2EDF08A413838ECA7D404252F979C0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:22:08 +0000 Manifest this update: Tue 12 May 2026 17:17:08 +0000 Manifest next update: Wed 13 May 2026 18:30:08 +0000 Files and hashes: 1: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: HJdyg1CH1wYNkX3IJPS7n0ig1ABVkAurwagIizZ3YJY=) 2: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: 1XW8m/1HHafjwn856SxYeKjsgoK5KYpfAPCW/Yr3PaE=) 3: 323430353a636163303a313a3a2f34382d3438203d3e20313339393832.roa (hash: TOnsrcvIXglIicbrrGOcttljfn+j8zuH56+Uevu2CiA=) 4: B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl (hash: wXoyuG8oMyBnHTbAUBF6soc/3pXoE2DlJY5UGEXAA34=) 5: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: GK/q1qgmQxfM3voSc0k+YTmkhCDo78ptqyplH6DohgE=) 6: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: BFoAAOYL5cXcuIYHdcG6m2LVE3HWh1vuQutXqW1gBIM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:14:24:22:a2:ed:f0:8a:41:38:38:ec:a7:d4:04:25:2f:97:9c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570 Validity Not Before: May 12 17:17:08 2026 GMT Not After : May 13 18:30:08 2026 GMT Subject: CN=C3F206FEB342E836D8708B6E8012D58065A72E32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:c5:c9:bd:6b:67:76:30:a0:a2:be:c8:8e: 71:af:22:1c:67:75:ec:09:1e:57:98:7f:45:11:dc: 10:df:97:04:a3:04:14:c0:d6:20:b5:d6:ac:5b:a2: 5f:bd:8d:2f:8f:aa:2c:0f:93:e0:e9:44:68:55:e8: c5:f6:cb:0e:be:2b:32:41:2a:4b:2c:95:01:04:bc: aa:46:45:a0:43:aa:b0:25:90:5c:9c:3d:0a:9d:b4: 80:fe:a2:bd:ed:47:4d:58:d2:7c:13:41:46:7a:1a: 44:80:be:69:56:99:16:41:78:87:6b:e7:77:e4:c9: 72:78:97:4d:52:42:82:df:a6:ca:45:da:6d:3b:c8: bc:cb:af:dc:11:fe:5a:e5:b1:e6:58:67:16:14:48: 3e:8e:7c:a1:cd:1d:3e:af:ad:11:bc:8c:68:dc:85: 20:00:4c:b2:d8:2a:17:00:4b:79:2c:11:59:3d:be: bb:65:a3:01:35:8e:98:0c:a6:cd:3c:21:31:1c:e0: ec:ed:0a:e5:8c:a7:5e:8d:ea:db:15:96:47:93:2e: 19:f9:c8:2e:a8:88:35:a9:b4:97:0c:48:fb:6b:f6: f5:0f:04:26:6e:eb:9e:8b:5f:d7:f6:23:c8:53:ae: 79:0a:83:ac:3a:80:29:9e:db:cb:64:14:55:98:ab: 92:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F2:06:FE:B3:42:E8:36:D8:70:8B:6E:80:12:D5:80:65:A7:2E:32 X509v3 Authority Key Identifier: keyid:B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:8b:24:69:9f:9d:b3:d2:93:d5:7c:74:65:aa:c2:26:99:d8: f7:ad:76:ba:3d:31:34:e0:9d:a8:e1:85:bf:0d:57:ec:8d:31: f5:9b:3d:28:91:fc:08:d7:96:e3:55:31:7b:6d:db:f1:87:7a: a4:3e:6a:c7:7d:21:60:87:a5:36:7f:53:65:66:ce:00:f3:6a: 74:08:d9:6e:bb:d4:d8:f4:5e:35:93:ba:f2:9c:8b:7a:c1:50: 3a:09:f2:a1:26:29:54:67:37:94:51:e6:fb:41:29:ba:63:e0: 08:6b:d4:11:d6:6b:6b:31:77:d2:a2:6a:3a:e9:47:42:4a:23: 03:26:3e:15:95:4d:f5:7f:8b:88:d9:6c:22:53:e9:1f:0c:2f: 0c:f4:5a:d7:0d:01:3a:2f:10:e1:f7:46:e7:23:86:b5:1c:0a: 80:59:e2:41:2a:7a:fb:80:5d:97:07:b1:0b:db:92:ba:8c:9a: 5f:3e:af:a9:9c:6a:45:08:c6:db:83:68:5c:e5:64:3b:e8:b8: 22:69:05:bc:3b:1d:2d:81:8f:e1:ba:26:0d:2d:0f:b9:6d:86: 99:b3:71:79:ae:2f:67:8d:81:b5:c3:45:0c:58:5f:97:65:18: 55:d8:f0:68:a1:9b:8e:70:cb:b5:65:ed:85:5a:d6:f7:b6:64: 7a:0f:0b:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBQkIqLt8IpBODjsp9QEJS+XnAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgyRkRGQzYyNkU3M0NCMjI2OEY1QjFFRkVGNTc2NzE1 RkU1QTU3MDAeFw0yNjA1MTIxNzE3MDhaFw0yNjA1MTMxODMwMDhaMDMxMTAvBgNV BAMTKEMzRjIwNkZFQjM0MkU4MzZEODcwOEI2RTgwMTJENTgwNjVBNzJFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNycXJvWtndjCgor7IjnGvIhxn dewJHleYf0UR3BDflwSjBBTA1iC11qxbol+9jS+PqiwPk+DpRGhV6MX2yw6+KzJB KksslQEEvKpGRaBDqrAlkFycPQqdtID+or3tR01Y0nwTQUZ6GkSAvmlWmRZBeIdr 53fkyXJ4l01SQoLfpspF2m07yLzLr9wR/lrlseZYZxYUSD6OfKHNHT6vrRG8jGjc hSAATLLYKhcAS3ksEVk9vrtlowE1jpgMps08ITEc4OztCuWMp16N6tsVlkeTLhn5 yC6oiDWptJcMSPtr9vUPBCZu656LX9f2I8hTrnkKg6w6gCme28tkFFWYq5IXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw/IG/rNC6DbYcItugBLVgGWnLjIwHwYDVR0j BBgwFoAUuC/fxibnPLImj1se/vV2cV/lpXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlmMjZmYjgtNzJjNC00OWQ5LTljYmUtODIyNjM5NzI3MWEyLzAvQjgyRkRGQzYy NkU3M0NCMjI2OEY1QjFFRkVGNTc2NzE1RkU1QTU3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODJGREZDNjI2RTczQ0IyMjY4RjVCMUVGRUY1NzY3MTVGRTVB NTcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvQjgyRkRGQzYyNkU3M0NCMjI2OEY1QjFFRkVGNTc2 NzE1RkU1QTU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeLJGmfnbPSk9V8dGWqwiaZ2Petdro9MTTg najhhb8NV+yNMfWbPSiR/AjXluNVMXtt2/GHeqQ+asd9IWCHpTZ/U2VmzgDzanQI 2W671Nj0XjWTuvKci3rBUDoJ8qEmKVRnN5RR5vtBKbpj4Ahr1BHWa2sxd9Kiajrp R0JKIwMmPhWVTfV/i4jZbCJT6R8MLwz0WtcNATovEOH3RucjhrUcCoBZ4kEqevuA XZcHsQvbkrqMml8+r6mcakUIxtuDaFzlZDvouCJpBbw7HS2Bj+G6Jg0tD7lthpmz cXmuL2eNgbXDRQxYX5dlGFXY8Gihm45wy7Vl7YVa1ve2ZHoPC0U= -----END CERTIFICATE-----Generated at Wed May 13 00:27:47 2026 by rpki-client