$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft File: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft (raw, json) Hash identifier: 8mMGEDuvswKh6GGsDIFt+SX3QCOa7qQa7Z+FUGeS0Ps= Subject key identifier: D0:A3:3D:3C:51:04:13:23:96:CB:CD:E3:AF:C9:25:6F:CD:CC:C5:AB Authority key identifier: F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 Certificate issuer: /CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Certificate serial: 2025BAC1773EE24F4D3705BB40321606282B40C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:15:33 +0000 Manifest this update: Tue 12 May 2026 05:10:33 +0000 Manifest next update: Wed 13 May 2026 08:10:33 +0000 Files and hashes: 1: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: shXgjYK0NRlHgehnbq1wzNndxumpi8gg30laew1y7t0=) 2: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl (hash: Hs8C91PmghpVxHwHsXiVnfK5sK3dNfQan4cENqs2GTw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:25:ba:c1:77:3e:e2:4f:4d:37:05:bb:40:32:16:06:28:2b:40:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Validity Not Before: May 12 05:10:33 2026 GMT Not After : May 13 08:10:33 2026 GMT Subject: CN=D0A33D3C5104132396CBCDE3AFC9256FCDCCC5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:90:88:23:55:3d:d8:53:f8:00:c2:c6:40:a7: 6d:ef:ca:46:ce:39:30:29:b6:e6:a2:57:07:e6:a7: 0f:78:8b:c3:50:23:cb:e6:ba:34:19:75:15:d2:43: 12:58:dc:e7:5a:51:34:42:1e:c7:bd:04:86:be:a5: 2a:6f:22:03:11:47:05:1e:91:8c:26:a1:27:82:25: 33:99:4d:79:5e:e3:f5:b1:69:46:35:72:a4:c4:c8: 81:3f:2d:04:df:b5:92:6c:3a:97:46:ae:f2:04:51: ca:e5:99:a8:78:c8:63:b1:9b:73:f0:ff:1b:26:90: d4:fe:60:29:06:97:a3:96:8b:3a:eb:f4:9f:33:17: 64:a8:8b:6b:8c:18:f9:12:31:94:c4:b8:bf:00:3b: e0:4b:ca:03:6e:fb:61:57:0d:d1:c9:d4:ed:7f:59: 70:c1:5d:7b:97:a8:fa:a2:56:41:7b:f4:54:5a:16: f3:fb:ac:1d:95:6f:ef:34:5e:03:55:f6:65:21:a8: b6:6b:6e:f4:54:e3:59:92:83:0f:35:ca:3c:0e:e9: 82:eb:3a:ba:8c:ee:c3:a4:e3:03:d8:c3:48:85:fb: 67:df:c4:21:15:de:ce:3d:78:2a:ff:33:8e:35:7f: 1a:13:eb:e1:1f:67:43:c8:88:a6:ee:6a:b2:0e:71: fc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A3:3D:3C:51:04:13:23:96:CB:CD:E3:AF:C9:25:6F:CD:CC:C5:AB X509v3 Authority Key Identifier: keyid:F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:18:1d:58:56:32:83:3f:d2:5c:46:3b:08:ce:51:1a:40:74: 99:37:ac:a6:76:04:a5:71:a2:14:cd:39:41:0f:70:32:ff:98: d9:af:f1:3b:70:09:bb:c5:3a:ce:6b:39:2f:24:c8:f4:6d:4f: 02:6d:3a:df:ff:d2:e6:f6:45:bd:30:da:54:a6:05:85:99:6f: ee:3f:30:0f:77:97:33:96:69:9d:38:a0:c1:04:bd:3c:06:67: eb:42:13:41:a1:72:ca:d0:97:74:3f:4f:34:aa:0c:1f:ff:fb: 29:91:dc:21:cf:20:e3:7b:ef:0d:3e:8c:81:4e:46:b5:ec:56: 75:3b:f7:a2:58:99:ab:8d:d1:e3:88:ba:43:ba:0b:df:22:d5: 74:fd:6c:52:69:6c:3c:fa:ed:0a:d9:26:4b:52:5d:35:15:98: 51:7f:62:27:a9:e0:6c:67:0f:9a:6d:08:17:9c:15:7f:ea:c7: 64:f2:d1:92:10:df:72:b0:54:a6:b4:99:1b:6b:31:8b:10:b0: 0c:b0:b3:a0:17:a2:f9:b6:d4:da:6d:f5:2e:4f:b8:31:3b:f7: af:b1:f5:c0:61:aa:df:64:0b:6f:d2:0a:c5:22:35:cd:86:45: 97:67:c2:50:50:1e:fe:43:e0:87:cf:3f:a6:3f:70:7f:40:61: d7:c5:af:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICW6wXc+4k9NNwW7QDIWBigrQMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1RkUx QzUzNUJFMzAeFw0yNjA1MTIwNTEwMzNaFw0yNjA1MTMwODEwMzNaMDMxMTAvBgNV BAMTKEQwQTMzRDNDNTEwNDEzMjM5NkNCQ0RFM0FGQzkyNTZGQ0RDQ0M1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtkIgjVT3YU/gAwsZAp23vykbO OTAptuaiVwfmpw94i8NQI8vmujQZdRXSQxJY3OdaUTRCHse9BIa+pSpvIgMRRwUe kYwmoSeCJTOZTXle4/WxaUY1cqTEyIE/LQTftZJsOpdGrvIEUcrlmah4yGOxm3Pw /xsmkNT+YCkGl6OWizrr9J8zF2Soi2uMGPkSMZTEuL8AO+BLygNu+2FXDdHJ1O1/ WXDBXXuXqPqiVkF79FRaFvP7rB2Vb+80XgNV9mUhqLZrbvRU41mSgw81yjwO6YLr OrqM7sOk4wPYw0iF+2ffxCEV3s49eCr/M441fxoT6+EfZ0PIiKbuarIOcfxvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0KM9PFEEEyOWy83jr8klb83MxaswHwYDVR0j BBgwFoAU+OJKtL6rPv7d3U4f0ukF/hxTW+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MzNkY2YtOWY1ZS00Nzc1LTljZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRC RUFCM0VGRUREREQ0RTFGRDJFOTA1RkUxQzUzNUJFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEUyNEFCNEJFQUIzRUZFRERERDRFMUZEMkU5MDVGRTFDNTM1 QkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1 RkUxQzUzNUJFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUYHVhWMoM/0lxGOwjOURpAdJk3rKZ2BKVx ohTNOUEPcDL/mNmv8TtwCbvFOs5rOS8kyPRtTwJtOt//0ub2Rb0w2lSmBYWZb+4/ MA93lzOWaZ04oMEEvTwGZ+tCE0GhcsrQl3Q/TzSqDB//+ymR3CHPION77w0+jIFO RrXsVnU796JYmauN0eOIukO6C98i1XT9bFJpbDz67QrZJktSXTUVmFF/Yiep4Gxn D5ptCBecFX/qx2Ty0ZIQ33KwVKa0mRtrMYsQsAyws6AXovm21Npt9S5PuDE796+x 9cBhqt9kC2/SCsUiNc2GRZdnwlBQHv5D4IfPP6Y/cH9AYdfFrzE= -----END CERTIFICATE-----Generated at Tue May 12 23:10:31 2026 by rpki-client