$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft File: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft (raw, json) Hash identifier: EfMIaQuRddsy8MnbmvTM+h8GaoDnKm19WQ/R20HOdBc= Subject key identifier: C1:8D:F0:D4:7C:7B:10:62:3C:02:20:84:BE:4E:D6:C5:A8:C2:BE:C7 Authority key identifier: 8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 Certificate issuer: /CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Certificate serial: 1FDE97170E9B67DB612E865A6340DD1E73D874B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:52:50 +0000 Manifest this update: Tue 12 May 2026 17:47:50 +0000 Manifest next update: Wed 13 May 2026 19:23:50 +0000 Files and hashes: 1: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl (hash: seOpuECFcExeLTVGtLLtKeFyYW2okIuAo/4fDK9c7lM=) 2: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: +9zDigXxWl0KHwFSHRJ8vK8jloGtZKIEVRmfMrusxTQ=) 3: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5uR0k9um/4xZDeF/1OtaEeN9gAbE1nIuTIkh38U5XcA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:de:97:17:0e:9b:67:db:61:2e:86:5a:63:40:dd:1e:73:d8:74:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Validity Not Before: May 12 17:47:50 2026 GMT Not After : May 13 19:23:50 2026 GMT Subject: CN=C18DF0D47C7B10623C022084BE4ED6C5A8C2BEC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bf:e3:04:38:dc:ce:ef:88:4c:c4:c4:06:f6: aa:a5:e5:2e:c6:1d:db:30:70:f7:df:ef:fe:10:04: 5e:14:f7:fd:7e:0f:17:0b:17:87:51:09:da:9d:ce: 92:b4:c8:42:1a:40:f5:94:4a:bb:14:3e:08:27:03: 6d:26:e5:81:bf:38:33:b6:23:fa:53:17:b9:00:b7: 60:74:f5:ea:b9:3a:c3:23:63:5b:87:1d:6a:6b:03: 15:2c:94:cc:42:be:f4:84:3d:bb:7f:ac:0d:e8:fa: 71:f2:eb:f2:80:59:bd:d0:2b:b0:b4:93:c7:79:14: cf:89:11:9b:b7:88:ac:6e:52:04:a4:ba:31:62:b4: 59:b5:4f:d2:10:25:8e:9e:e9:26:48:8b:0c:62:ac: c6:8e:a5:01:46:31:a0:36:4e:b3:f5:31:a8:5f:d5: d2:4e:9f:e5:78:21:7e:53:bb:c5:73:36:c0:54:a0: d2:ca:dc:a0:ed:8b:11:7a:96:79:af:fd:c1:4b:a8: dd:99:8a:5e:52:f8:c1:7b:4d:1e:cd:29:6f:74:f4: 3e:7a:0a:75:f5:a0:7e:e9:26:aa:75:9d:28:06:27: 94:70:05:70:6c:02:ce:90:78:a4:ee:15:05:ad:76: 22:28:6a:07:75:4e:9d:c3:eb:6e:1c:0d:1d:30:e3: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8D:F0:D4:7C:7B:10:62:3C:02:20:84:BE:4E:D6:C5:A8:C2:BE:C7 X509v3 Authority Key Identifier: keyid:8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e2:f6:1f:de:74:04:2e:48:1d:b1:3b:70:5d:6c:0a:bc:bd: 02:e0:df:1a:52:df:b7:c0:77:56:a6:4b:2a:6d:7b:3a:94:d5: e2:cb:7c:42:82:ef:5a:72:c7:d4:5b:48:ff:c7:c0:6a:30:5d: 50:61:74:77:63:b8:11:68:e2:e6:cf:25:2c:a5:f1:a6:37:2a: 0c:d0:0f:3a:4b:bd:9c:3b:62:8b:dc:63:41:87:81:b6:90:2a: 22:40:61:5b:fd:38:ac:f8:cf:ae:fd:de:31:3f:e0:b1:8a:21: 62:81:b1:b6:4c:82:dd:f9:3f:78:b7:1a:ac:27:a1:f4:e5:98: a2:f8:59:8a:7b:d8:7f:92:f2:e7:0e:ac:63:82:23:cd:7b:9c: 42:5c:48:b2:69:73:0d:85:2d:0e:71:29:9b:89:82:af:5b:ea: 63:98:5e:fb:3c:25:6a:62:2b:90:c8:44:b3:82:b3:87:6c:91: 97:db:53:9c:50:34:c1:a5:ff:1b:dd:5b:8b:ff:4d:d1:13:80: a3:e1:25:2b:7a:ed:38:6b:11:63:1e:1a:8e:3f:cf:36:f7:dc: 9b:d7:59:2b:36:53:eb:96:3f:af:d2:f0:d5:2d:dd:9a:14:e6: fb:09:66:ae:52:d9:74:5b:88:ec:3d:11:85:dc:0f:37:cc:67: ae:cd:1f:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH96XFw6bZ9thLoZaY0DdHnPYdLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1 NjZEMDA2MDAeFw0yNjA1MTIxNzQ3NTBaFw0yNjA1MTMxOTIzNTBaMDMxMTAvBgNV BAMTKEMxOERGMEQ0N0M3QjEwNjIzQzAyMjA4NEJFNEVENkM1QThDMkJFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRv+MEONzO74hMxMQG9qql5S7G HdswcPff7/4QBF4U9/1+DxcLF4dRCdqdzpK0yEIaQPWUSrsUPggnA20m5YG/ODO2 I/pTF7kAt2B09eq5OsMjY1uHHWprAxUslMxCvvSEPbt/rA3o+nHy6/KAWb3QK7C0 k8d5FM+JEZu3iKxuUgSkujFitFm1T9IQJY6e6SZIiwxirMaOpQFGMaA2TrP1Mahf 1dJOn+V4IX5Tu8VzNsBUoNLK3KDtixF6lnmv/cFLqN2Zil5S+MF7TR7NKW909D56 CnX1oH7pJqp1nSgGJ5RwBXBsAs6QeKTuFQWtdiIoagd1Tp3D624cDR0w435vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwY3w1Hx7EGI8AiCEvk7WxajCvscwHwYDVR0j BBgwFoAUjx9Sxju4dITUxenYVRrnZ1ZtAGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWE4ZjY5ZjctOTMzMi00Y2Q0LWIzZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYz QkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1NjZEMDA2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjFGNTJDNjNCQjg3NDg0RDRDNUU5RDg1NTFBRTc2NzU2NkQw MDYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3 Njc1NjZEMDA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3i9h/edAQuSB2xO3BdbAq8vQLg3xpS37fA d1amSyptezqU1eLLfEKC71pyx9RbSP/HwGowXVBhdHdjuBFo4ubPJSyl8aY3KgzQ DzpLvZw7YovcY0GHgbaQKiJAYVv9OKz4z6793jE/4LGKIWKBsbZMgt35P3i3Gqwn ofTlmKL4WYp72H+S8ucOrGOCI817nEJcSLJpcw2FLQ5xKZuJgq9b6mOYXvs8JWpi K5DIRLOCs4dskZfbU5xQNMGl/xvdW4v/TdETgKPhJSt67ThrEWMeGo4/zzb33JvX WSs2U+uWP6/S8NUt3ZoU5vsJZq5S2XRbiOw9EYXcDzfMZ67NHxU= -----END CERTIFICATE-----Generated at Wed May 13 02:12:08 2026 by rpki-client