$ rpki-client -vvf rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft File: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft (raw, json) Hash identifier: S8QxSwsEYCP3qfggZSdJiopRNPUtxWHdHpy+hup3mRs= Subject key identifier: D9:42:B8:AE:E2:77:2E:25:7E:0A:78:A4:E6:BE:A9:2E:E8:FD:FA:2E Authority key identifier: 8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 Certificate issuer: /CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Certificate serial: 23CABC74C059824A4339BFF21C87881BFA27DED8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:42:51 +0000 Manifest this update: Tue 12 May 2026 20:37:51 +0000 Manifest next update: Thu 14 May 2026 00:05:51 +0000 Files and hashes: 1: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: NR10Bfbwh6SYopHFVcr7fLYC1ZrjLqSPhi8hfWEGSfc=) 2: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl (hash: LuJ6f8a+OwCITl0hA+VWU1Ik/W6mlT1HF9NaQ29ZQtI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ca:bc:74:c0:59:82:4a:43:39:bf:f2:1c:87:88:1b:fa:27:de:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Validity Not Before: May 12 20:37:51 2026 GMT Not After : May 14 00:05:51 2026 GMT Subject: CN=D942B8AEE2772E257E0A78A4E6BEA92EE8FDFA2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8a:87:a6:ac:4d:45:b7:6c:c4:c7:58:ad:67: cf:63:87:b3:71:14:df:ed:ff:dd:11:ad:ca:a4:3b: b4:c5:46:fb:76:24:30:4c:22:78:c7:42:91:f6:ca: a0:0d:bb:68:3c:cc:df:1e:9c:9a:26:f3:6a:47:2d: eb:09:2d:5c:46:2b:e3:57:09:61:85:33:fb:4f:d4: 5a:e2:e3:ea:ab:4d:f5:72:d4:0d:11:c6:50:71:a7: f2:40:88:d9:68:8f:3a:a7:4d:ff:91:23:cd:33:91: f0:47:5b:90:24:3d:73:4c:18:6f:71:1c:3f:33:47: c7:46:83:70:0c:22:fc:37:01:27:12:fe:3c:1a:06: 55:24:4e:42:11:bc:a5:27:bb:f7:d4:74:55:c6:5e: 34:05:69:47:b3:92:a6:6f:62:0b:88:86:44:07:1a: af:bf:36:64:3c:7b:20:d6:d7:7a:9b:27:a3:56:a7: 1b:93:c4:46:ad:55:13:f5:f5:aa:52:4a:52:f6:ad: b1:e9:a4:15:37:24:cc:9c:1f:de:d8:70:fc:e8:26: 1b:88:56:58:8b:f0:52:8a:cf:10:a2:ae:a1:f8:33: 82:cf:99:77:64:44:5b:5b:8e:0f:47:e3:38:21:f0: 71:da:98:13:24:1f:e3:9e:c7:14:f6:e7:84:75:53: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:42:B8:AE:E2:77:2E:25:7E:0A:78:A4:E6:BE:A9:2E:E8:FD:FA:2E X509v3 Authority Key Identifier: keyid:8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:54:5f:11:b8:55:53:da:a7:4b:2f:7a:8e:ff:1e:6e:16:96: 0f:05:fa:5e:a1:4d:7f:d3:b0:e9:a1:8f:9e:8a:01:54:ea:f2: 74:aa:a6:6b:e9:ee:a9:94:45:37:ec:75:32:36:64:b6:60:7d: da:48:45:0a:77:db:80:66:1d:39:75:23:f2:a8:8a:42:76:62: e1:4e:00:54:3b:75:b4:18:66:9d:c3:b1:87:b2:bc:8b:55:21: e2:bd:12:0c:af:46:93:19:ad:30:fd:3a:bd:61:8c:ae:6d:c8: 2f:c8:92:f4:68:2a:0e:b4:53:d0:5a:44:ab:9f:cc:60:b1:32: 44:24:13:0a:4d:00:60:48:ef:81:b7:38:8a:7f:67:59:a4:26: e7:e7:f7:8b:08:e9:58:fe:70:07:d9:d8:b7:97:b5:25:35:63: e2:82:1a:fa:47:97:c0:fc:e3:b7:1e:40:d8:3f:d6:07:01:02: ed:59:8b:00:da:0f:53:5d:71:5c:6d:66:0c:f1:a6:48:14:89: 1b:d6:47:b8:2f:82:00:48:88:c2:9d:09:27:2e:3f:67:bd:42: eb:9e:be:2b:d9:8d:4d:e9:49:24:af:0f:cc:44:3f:75:f5:f9: a3:28:fd:aa:4d:ec:cf:f0:a6:ec:ec:71:ba:a6:99:0b:7e:2e: 26:45:7c:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI8q8dMBZgkpDOb/yHIeIG/on3tgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5 QjFCNDU3MzAeFw0yNjA1MTIyMDM3NTFaFw0yNjA1MTQwMDA1NTFaMDMxMTAvBgNV BAMTKEQ5NDJCOEFFRTI3NzJFMjU3RTBBNzhBNEU2QkVBOTJFRThGREZBMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTioemrE1Ft2zEx1itZ89jh7Nx FN/t/90RrcqkO7TFRvt2JDBMInjHQpH2yqANu2g8zN8enJom82pHLesJLVxGK+NX CWGFM/tP1Fri4+qrTfVy1A0RxlBxp/JAiNlojzqnTf+RI80zkfBHW5AkPXNMGG9x HD8zR8dGg3AMIvw3AScS/jwaBlUkTkIRvKUnu/fUdFXGXjQFaUezkqZvYguIhkQH Gq+/NmQ8eyDW13qbJ6NWpxuTxEatVRP19apSSlL2rbHppBU3JMycH97YcPzoJhuI VliL8FKKzxCirqH4M4LPmXdkRFtbjg9H4zgh8HHamBMkH+OexxT254R1U+yPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2UK4ruJ3LiV+Cnik5r6pLuj9+i4wHwYDVR0j BBgwFoAUjRqU6g+f1RSOCcrgowe9yZsbRXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2MjExMWQtMGExMy00NDA3LWFmMzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEw RjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5QjFCNDU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDFBOTRFQTBGOUZENTE0OEUwOUNBRTBBMzA3QkRDOTlCMUI0 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JE Qzk5QjFCNDU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJUXxG4VVPap0sveo7/Hm4Wlg8F+l6hTX/T sOmhj56KAVTq8nSqpmvp7qmURTfsdTI2ZLZgfdpIRQp324BmHTl1I/KoikJ2YuFO AFQ7dbQYZp3DsYeyvItVIeK9EgyvRpMZrTD9Or1hjK5tyC/IkvRoKg60U9BaRKuf zGCxMkQkEwpNAGBI74G3OIp/Z1mkJufn94sI6Vj+cAfZ2LeXtSU1Y+KCGvpHl8D8 47ceQNg/1gcBAu1ZiwDaD1NdcVxtZgzxpkgUiRvWR7gvggBIiMKdCScuP2e9Quue vivZjU3pSSSvD8xEP3X1+aMo/apN7M/wpuzscbqmmQt+LiZFfI4= -----END CERTIFICATE-----Generated at Wed May 13 04:26:30 2026 by rpki-client