$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft File: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft (raw, json) Hash identifier: cV30abCSe8B0e0x3uqU+C9Q744WRmuLccGNMCQF07w0= Subject key identifier: 53:D4:39:19:D4:18:91:4D:3C:36:AA:1C:59:E2:56:A9:77:21:DB:8A Authority key identifier: 85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E Certificate issuer: /CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Certificate serial: 7BB924506D7421A7DDB1CB4D94B626323B950385 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:20:18 +0000 Manifest this update: Tue 12 May 2026 19:15:18 +0000 Manifest next update: Wed 13 May 2026 20:58:18 +0000 Files and hashes: 1: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: ymv/QzmelT0mY8Z1NXChI2j7830jRvZf9HvAHfEuKp0=) 2: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl (hash: z4j5BoyxcysWbqyoqg/UAYcTTqDIDwNMNClEcPLPVB0=) 3: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: b9vSoEj12pKvRl6GFlwGqwDqlYjOzNMwdmXHDB/QoPA=) 4: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uYXVOfIT7P6Dr33KoZiS4hHMvBugVDHDvO0rydITSy0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b9:24:50:6d:74:21:a7:dd:b1:cb:4d:94:b6:26:32:3b:95:03:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Validity Not Before: May 12 19:15:18 2026 GMT Not After : May 13 20:58:18 2026 GMT Subject: CN=53D43919D418914D3C36AA1C59E256A97721DB8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:99:e4:ab:e1:60:a4:ee:ca:13:cb:80:a8: 57:db:10:57:27:aa:77:36:17:3b:fd:f9:8e:27:af: e0:02:95:d8:9c:ca:63:da:52:88:70:fe:cd:36:b6: 88:a8:94:b2:3b:c2:8a:36:85:7e:9f:22:4f:ca:d6: 3b:70:30:7f:42:f3:5f:32:d0:0b:d8:64:a1:8f:1c: c9:05:8d:0c:96:cc:ca:f2:dc:99:3e:62:7d:ab:85: 33:34:4e:ef:14:f4:d5:e0:37:98:03:31:2d:93:5a: 69:52:7a:b6:71:cd:3a:1a:5f:67:46:aa:96:7e:50: b0:22:07:5d:a2:da:1e:a7:12:ec:e1:9c:f6:a2:5f: b5:6d:12:02:ba:a4:0e:70:df:e2:32:79:6c:1d:08: 04:60:b3:4c:e6:a0:8a:6a:5b:a7:8f:46:5f:e4:b3: 68:7b:1f:f6:6d:4f:53:2f:df:8c:fd:79:ea:38:51: 2c:2a:31:f2:16:0b:0b:56:2e:db:87:de:f1:d7:59: c3:08:cd:6b:58:8f:83:ef:e5:85:3b:2a:6b:39:5e: 9e:52:d2:85:d7:bd:15:7f:ef:a3:97:35:11:16:8f: 28:aa:dc:6e:28:6a:ac:79:43:df:6b:29:87:0e:b6: 11:a1:cc:e2:c0:4e:2a:71:db:6a:7f:cb:8c:a5:e1: a5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D4:39:19:D4:18:91:4D:3C:36:AA:1C:59:E2:56:A9:77:21:DB:8A X509v3 Authority Key Identifier: keyid:85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:35:9b:4f:52:a1:c4:e1:38:03:65:9a:eb:aa:e3:d6:05:bc: 9f:70:24:fd:a0:65:51:d0:3d:f4:df:f5:2c:92:0a:b5:e4:ad: 6f:5d:a0:17:0d:66:25:1d:42:9b:1c:b3:15:35:af:79:e9:3f: 66:61:38:42:8e:a9:80:97:ac:6c:ce:ca:e5:b2:a3:7f:e5:74: 80:35:a8:2a:a2:c8:fb:fd:ac:9a:d2:90:51:3d:17:53:e2:37: 17:ee:c4:72:a8:57:4f:a5:d2:c3:55:0f:86:fb:5a:d7:f3:e1: 5d:39:a9:76:d9:e3:8e:cd:70:38:17:1f:a6:8b:59:12:8d:6e: 87:ac:75:56:c6:49:4b:28:75:ad:f0:b5:80:69:80:2a:2a:94: fa:da:0d:38:1d:4a:bb:0d:9d:79:2e:48:9b:a8:7c:ad:39:07: 2f:4e:f7:93:b0:8b:69:fa:93:ef:76:a4:2c:48:19:ac:da:59: 19:16:88:94:52:8f:6d:77:5a:5b:27:36:13:01:34:34:10:d8: 18:29:61:e8:ce:ac:11:9e:91:2f:8b:28:a3:3f:7a:87:e5:d2: 12:88:f2:61:55:60:3f:6f:1a:6f:ae:db:fc:b9:e0:82:ca:0b: 1c:25:b7:81:27:64:4f:be:62:84:09:63:ac:bf:2e:29:9d:17: e7:62:21:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7kkUG10IafdsctNlLYmMjuVA4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRB QzY2QTQwRTAeFw0yNjA1MTIxOTE1MThaFw0yNjA1MTMyMDU4MThaMDMxMTAvBgNV BAMTKDUzRDQzOTE5RDQxODkxNEQzQzM2QUExQzU5RTI1NkE5NzcyMURCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZZnkq+FgpO7KE8uAqFfbEFcn qnc2Fzv9+Y4nr+ACldicymPaUohw/s02toiolLI7woo2hX6fIk/K1jtwMH9C818y 0AvYZKGPHMkFjQyWzMry3Jk+Yn2rhTM0Tu8U9NXgN5gDMS2TWmlSerZxzToaX2dG qpZ+ULAiB12i2h6nEuzhnPaiX7VtEgK6pA5w3+IyeWwdCARgs0zmoIpqW6ePRl/k s2h7H/ZtT1Mv34z9eeo4USwqMfIWCwtWLtuH3vHXWcMIzWtYj4Pv5YU7Kms5Xp5S 0oXXvRV/76OXNREWjyiq3G4oaqx5Q99rKYcOthGhzOLATipx22p/y4yl4aVBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU9Q5GdQYkU08NqocWeJWqXch24owHwYDVR0j BBgwFoAUhXdwLWFMjLgpyizFHCszdKxmpA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU0ODE2MDYtZDVmZC00MTk2LWFiY2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2 MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRBQzY2QTQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NTc3NzAyRDYxNEM4Q0I4MjlDQTJDQzUxQzJCMzM3NEFDNjZB NDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMz NzRBQzY2QTQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF01m09SocThOANlmuuq49YFvJ9wJP2gZVHQ PfTf9SySCrXkrW9doBcNZiUdQpscsxU1r3npP2ZhOEKOqYCXrGzOyuWyo3/ldIA1 qCqiyPv9rJrSkFE9F1PiNxfuxHKoV0+l0sNVD4b7Wtfz4V05qXbZ447NcDgXH6aL WRKNboesdVbGSUsoda3wtYBpgCoqlPraDTgdSrsNnXkuSJuofK05By9O95Owi2n6 k+92pCxIGazaWRkWiJRSj213WlsnNhMBNDQQ2BgpYejOrBGekS+LKKM/eofl0hKI 8mFVYD9vGm+u2/y54ILKCxwlt4EnZE++YoQJY6y/LimdF+diIak= -----END CERTIFICATE-----Generated at Wed May 13 01:36:43 2026 by rpki-client