$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft File: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft (raw, json) Hash identifier: vB7yAiEWnQNuzNL4sxTaIhdMx376Kfjy+lJ9xWRmLeA= Subject key identifier: 48:A2:FF:AB:48:AE:01:9B:84:39:DA:98:BC:13:12:B3:92:66:78:86 Authority key identifier: D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 Certificate issuer: /CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Certificate serial: 0DF5A02888EC325D681227DBB29F02099683193F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:04:29 +0000 Manifest this update: Tue 12 May 2026 07:59:29 +0000 Manifest next update: Wed 13 May 2026 11:31:29 +0000 Files and hashes: 1: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: L6oL2whYFSSKY1+OlvsQBxpegvioTL+JL/PrizaKM4w=) 2: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: dz8GDvSUHBxefCxM449tm0eNclhVLJnu4XpLW3XQ1J8=) 3: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl (hash: M7nY86bwX/PAKl8XRkA9oqnpfsmWlpzOrsdAeg7yH7g=) 4: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: Jbbv7LheQBY4j7uxSO+OAvKD/NoLJjSel5LCZW8mlwI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f5:a0:28:88:ec:32:5d:68:12:27:db:b2:9f:02:09:96:83:19:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Validity Not Before: May 12 07:59:29 2026 GMT Not After : May 13 11:31:29 2026 GMT Subject: CN=48A2FFAB48AE019B8439DA98BC1312B392667886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ec:d0:20:ba:16:6c:d7:5f:b7:3b:c3:3d:fe: 99:0f:87:fa:09:39:1f:82:61:9b:92:0f:92:aa:40: 8f:75:24:1d:fe:0b:6a:e6:79:66:09:bf:de:e0:03: 1e:df:8c:d3:00:bb:39:96:61:33:20:3e:40:28:13: 67:f4:9c:00:f1:49:51:9b:96:15:ac:94:37:3b:55: 8a:3a:b2:12:f7:97:42:2a:f8:39:be:d0:f6:aa:3c: 76:68:21:2b:6e:f5:fc:9c:e8:f1:2c:e5:d5:fa:b1: 05:bb:32:b9:ba:82:24:ac:5c:b8:f9:dd:f2:ea:06: b9:10:e6:2c:7e:e6:cc:bc:c7:19:f4:a3:af:0d:b1: f1:f9:a1:de:ca:8f:ab:92:52:e4:be:89:00:c5:e4: 44:02:a1:d7:77:88:f5:a5:d9:17:60:cd:b0:18:80: 48:a5:05:2f:41:78:06:a5:fd:5b:0d:5e:89:d6:c8: e8:42:cc:b2:e9:cf:d9:7a:7a:b1:4c:07:56:c0:57: 4a:2b:89:2d:52:37:43:3e:f4:31:35:03:32:e1:8c: 09:1a:a9:4f:7e:31:46:8f:c1:a5:fb:2d:07:2a:db: 79:f1:28:d7:f9:3e:3b:14:a8:27:90:4b:01:dd:a3: d1:81:47:7a:02:72:27:06:c1:d2:12:37:af:64:4d: af:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A2:FF:AB:48:AE:01:9B:84:39:DA:98:BC:13:12:B3:92:66:78:86 X509v3 Authority Key Identifier: keyid:D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8d:bb:8f:2c:84:14:b3:e2:84:43:33:6c:4e:7e:fb:2f:b7: 78:af:f3:22:0a:ab:a7:4d:19:e2:ba:3b:22:1a:81:91:a6:a2: 10:f2:b9:00:5a:09:a0:9b:29:48:f1:1c:c5:93:6d:99:81:49: b8:f3:e9:32:95:55:f3:2e:ca:14:28:0a:83:ca:70:2e:03:09: e6:a8:2c:b6:eb:76:56:c7:35:12:13:6a:26:29:cd:55:7a:d0: fe:0f:9f:87:f6:ae:05:f5:10:5c:a1:31:15:33:39:5c:b8:da: fd:5d:8d:db:33:59:c1:24:df:f7:71:90:54:57:78:87:ef:c2: 1c:01:0a:58:e0:86:32:c1:d3:6c:9d:04:e2:99:3d:7a:68:ac: 55:36:8d:4f:e4:55:3a:4f:4d:f4:22:68:34:27:52:5f:13:f3: 06:66:76:36:0b:e9:f6:36:08:b1:be:3a:10:83:b7:10:4e:39: 25:94:56:83:b3:8c:b3:e8:ea:93:ee:c6:d1:89:b8:f2:29:58: f1:e2:ba:be:dc:29:f6:6d:51:b8:2e:97:7d:ed:1f:f5:93:8e: 68:c1:ba:62:db:42:35:0a:5c:3d:c5:e7:6d:a5:c3:dc:78:d5: 99:4c:df:db:3c:88:b1:59:9d:c6:56:21:16:70:f2:04:02:ae: c7:aa:f1:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfWgKIjsMl1oEifbsp8CCZaDGT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBC REYzRkQ4OTAeFw0yNjA1MTIwNzU5MjlaFw0yNjA1MTMxMTMxMjlaMDMxMTAvBgNV BAMTKDQ4QTJGRkFCNDhBRTAxOUI4NDM5REE5OEJDMTMxMkIzOTI2Njc4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU7NAguhZs11+3O8M9/pkPh/oJ OR+CYZuSD5KqQI91JB3+C2rmeWYJv97gAx7fjNMAuzmWYTMgPkAoE2f0nADxSVGb lhWslDc7VYo6shL3l0Iq+Dm+0PaqPHZoIStu9fyc6PEs5dX6sQW7Mrm6giSsXLj5 3fLqBrkQ5ix+5sy8xxn0o68NsfH5od7Kj6uSUuS+iQDF5EQCodd3iPWl2RdgzbAY gEilBS9BeAal/VsNXonWyOhCzLLpz9l6erFMB1bAV0oriS1SN0M+9DE1AzLhjAka qU9+MUaPwaX7LQcq23nxKNf5PjsUqCeQSwHdo9GBR3oCcicGwdISN69kTa/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSKL/q0iuAZuEOdqYvBMSs5JmeIYwHwYDVR0j BBgwFoAU0oJVBnmOSO5Pa9C3yKS5gL3z/YkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGMxZTgwZDQtNmViZS00OTJjLWEwYzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3 OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBCREYzRkQ4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjgyNTUwNjc5OEU0OEVFNEY2QkQwQjdDOEE0Qjk4MEJERjNG RDg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5 ODBCREYzRkQ4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuNu48shBSz4oRDM2xOfvsvt3iv8yIKq6dN GeK6OyIagZGmohDyuQBaCaCbKUjxHMWTbZmBSbjz6TKVVfMuyhQoCoPKcC4DCeao LLbrdlbHNRITaiYpzVV60P4Pn4f2rgX1EFyhMRUzOVy42v1djdszWcEk3/dxkFRX eIfvwhwBCljghjLB02ydBOKZPXporFU2jU/kVTpPTfQiaDQnUl8T8wZmdjYL6fY2 CLG+OhCDtxBOOSWUVoOzjLPo6pPuxtGJuPIpWPHiur7cKfZtUbgul33tH/WTjmjB umLbQjUKXD3F522lw9x41ZlM39s8iLFZncZWIRZw8gQCrseq8SE= -----END CERTIFICATE-----Generated at Wed May 13 04:02:41 2026 by rpki-client