$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft File: E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft (raw, json) Hash identifier: NjaeG2Hh3hmJyLspGv7BNcAj+/rUFIE744W4/ep4l2Q= Subject key identifier: 5F:F7:85:AA:83:93:D9:A3:2B:D1:98:1E:4C:D0:30:46:7C:DE:CA:26 Authority key identifier: E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6 Certificate issuer: /CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6 Certificate serial: 04A956BC29333FA13E8D57E263EA00733627AE5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:23:39 +0000 Manifest this update: Tue 12 May 2026 18:18:39 +0000 Manifest next update: Wed 13 May 2026 20:21:39 +0000 Files and hashes: 1: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: 7Kp38WdKSSiLKliiaFpY9zvvkr9TIBcqJ58D1X388bM=) 2: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: /pHfUH1NlBnMVG+9w4rBpFljBqBGm2WJrHAQRZot61U=) 3: E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl (hash: PioaoWYzSZcp7/nxZM98PnQ0wU+ooI9xNdSQIHIDuaE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a9:56:bc:29:33:3f:a1:3e:8d:57:e2:63:ea:00:73:36:27:ae:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6 Validity Not Before: May 12 18:18:39 2026 GMT Not After : May 13 20:21:39 2026 GMT Subject: CN=5FF785AA8393D9A32BD1981E4CD030467CDECA26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:15:29:d9:d3:68:37:62:1e:08:25:0b:99:0d: ad:23:a9:c3:68:92:c4:c0:2d:68:65:7c:1a:8f:c4: 7c:b8:1e:28:fa:ab:70:0e:23:ac:19:2e:99:66:a7: 0d:80:d3:02:3e:7a:fb:9e:21:4c:21:df:42:3e:fd: f7:b8:45:a3:52:70:f2:47:36:bf:b7:d4:a6:98:63: 37:fa:4f:7c:24:48:9a:0c:e6:f0:ff:1e:31:7f:07: 04:22:c1:13:0b:5b:73:39:b3:68:08:c0:6d:a9:a2: f6:c3:9c:f2:9f:09:2d:f1:88:85:8b:7a:4a:28:dd: fe:5d:65:48:85:b3:be:99:d5:ef:e6:d1:9f:29:74: a4:75:b2:cc:bc:67:b2:7e:bc:32:fd:da:f1:0e:2c: 82:de:b0:ff:3e:4d:b0:f5:5b:12:6e:30:d4:6e:ac: 28:d7:e8:60:89:95:09:e3:4f:f9:04:5e:d7:4f:94: c1:10:c9:cd:1f:47:8b:88:4e:55:1f:db:f7:c5:a4: 64:fd:06:16:3e:d6:56:41:7f:8f:e9:57:19:36:e1: 82:79:98:44:b4:0c:01:2d:82:0a:f1:43:7a:8d:45: 60:6a:9f:70:da:7f:83:bb:29:b4:3a:77:5a:8f:a1: 7d:95:0c:d6:0e:50:74:5d:5e:5d:1e:e1:e0:38:8b: 42:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F7:85:AA:83:93:D9:A3:2B:D1:98:1E:4C:D0:30:46:7C:DE:CA:26 X509v3 Authority Key Identifier: keyid:E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:4e:68:07:fe:64:b5:6d:9a:5e:cc:bc:0d:7f:f9:d3:3d:a0: d8:58:54:fe:5a:07:10:ff:ba:35:58:bb:c8:8c:b6:94:7b:58: e5:53:e4:55:66:6b:f6:d5:4e:c5:c8:bb:1f:ad:0b:8c:9e:d2: e9:c6:de:99:8e:af:ab:28:b5:6f:87:91:9d:8e:81:a2:67:56: 2c:b7:dd:5e:1d:6e:68:ff:97:f2:d5:e1:65:0d:15:eb:c8:94: b5:34:0c:6f:40:42:f1:ac:1e:ca:87:0b:49:f9:02:bb:ee:45: fd:35:95:e6:bd:6a:c1:65:b3:64:ed:3a:a2:b6:e0:a1:16:d9: 1a:42:dc:28:f1:2d:2e:42:5f:88:da:43:16:70:4e:ec:74:44: 3e:9f:50:1f:0d:e0:ea:17:f6:94:f0:11:8b:4f:82:97:53:4a: 84:e6:d0:99:ea:ce:0c:d7:86:64:36:29:88:42:7e:52:97:66: 09:1d:bc:e0:32:29:4c:f7:6a:f3:70:d1:39:79:ce:b4:5a:12: b9:23:87:40:b6:c5:88:c1:a7:e8:2d:4a:b3:29:d4:ca:42:ba: ed:1c:2e:37:5d:67:e4:d8:12:ba:1e:ad:4e:5d:d2:86:2a:53: 7e:88:c9:b8:7f:e6:14:c0:53:d1:05:f7:d8:05:19:85:6a:0c: 1a:f5:51:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKlWvCkzP6E+jVfiY+oAczYnrl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEMUMxQjQxMkNCNjRGRTU4MzUwODNGNzZBNzQ4N0NF MzQ0NTJCNjAeFw0yNjA1MTIxODE4MzlaFw0yNjA1MTMyMDIxMzlaMDMxMTAvBgNV BAMTKDVGRjc4NUFBODM5M0Q5QTMyQkQxOTgxRTRDRDAzMDQ2N0NERUNBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOFSnZ02g3Yh4IJQuZDa0jqcNo ksTALWhlfBqPxHy4Hij6q3AOI6wZLplmpw2A0wI+evueIUwh30I+/fe4RaNScPJH Nr+31KaYYzf6T3wkSJoM5vD/HjF/BwQiwRMLW3M5s2gIwG2povbDnPKfCS3xiIWL ekoo3f5dZUiFs76Z1e/m0Z8pdKR1ssy8Z7J+vDL92vEOLILesP8+TbD1WxJuMNRu rCjX6GCJlQnjT/kEXtdPlMEQyc0fR4uITlUf2/fFpGT9BhY+1lZBf4/pVxk24YJ5 mES0DAEtggrxQ3qNRWBqn3Daf4O7KbQ6d1qPoX2VDNYOUHRdXl0e4eA4i0KHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX/eFqoOT2aMr0ZgeTNAwRnzeyiYwHwYDVR0j BBgwFoAU6NHBtBLLZP5YNQg/dqdIfONEUrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIxNjY0YTctYzljOS00NDQyLTg3MTgtOWFlYzllMjExMGEyLzAvRThEMUMxQjQx MkNCNjRGRTU4MzUwODNGNzZBNzQ4N0NFMzQ0NTJCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEQxQzFCNDEyQ0I2NEZFNTgzNTA4M0Y3NkE3NDg3Q0UzNDQ1 MkI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRThEMUMxQjQxMkNCNjRGRTU4MzUwODNGNzZBNzQ4 N0NFMzQ0NTJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOdOaAf+ZLVtml7MvA1/+dM9oNhYVP5aBxD/ ujVYu8iMtpR7WOVT5FVma/bVTsXIux+tC4ye0unG3pmOr6sotW+HkZ2OgaJnViy3 3V4dbmj/l/LV4WUNFevIlLU0DG9AQvGsHsqHC0n5ArvuRf01lea9asFls2TtOqK2 4KEW2RpC3CjxLS5CX4jaQxZwTux0RD6fUB8N4OoX9pTwEYtPgpdTSoTm0JnqzgzX hmQ2KYhCflKXZgkdvOAyKUz3avNw0Tl5zrRaErkjh0C2xYjBp+gtSrMp1MpCuu0c LjddZ+TYEroerU5d0oYqU36Iybh/5hTAU9EF99gFGYVqDBr1UZI= -----END CERTIFICATE-----Generated at Wed May 13 05:38:18 2026 by rpki-client