$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft File: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft (raw, json) Hash identifier: OiiyU0vITSRAEaQr8Nu8Q8Gb7IzwK5ruE3eH+oUbWTA= Subject key identifier: 97:74:8B:96:40:F7:6F:8A:B5:67:EC:78:3D:02:2D:AB:F7:B0:B1:BE Authority key identifier: 8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC Certificate issuer: /CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Certificate serial: 3387AF0453EE293101DF8CBEA044774F67F8ADE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:00:35 +0000 Manifest this update: Tue 12 May 2026 15:55:35 +0000 Manifest next update: Wed 13 May 2026 19:19:35 +0000 Files and hashes: 1: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl (hash: QNnT0TUBP810Ff4iC7xN+mnfUhbAjJPlHa01FrD2WUY=) 2: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: ohA41RSForcViKph50xgqT5CqEd5p9C2x10sK3Y5aMA=) 3: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: SmTgUdBZ5Gm9MMySo1hy5IKAztpPtBz8UdMvR7+0nS8=) 4: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: b/pe4WCQVQeP9RG6dCLewRuXkpf7Roy9CSyh5UkTXss=) 5: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: lR/t7u2Id9Tm/5RG+xZK/WwNnzBrvYgkf9KgY4fbdVM=) 6: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: 1A2FPi3qFfpFktBr0BMwE4Qlw/qHnARWJ5AeRKnXK6A=) 7: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: UPuTvMckcIYLBYZ54B2+SqyW/0kMWr4eDhHIIPK9IxA=) 8: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: 4f9KIpK4kwJHh2WI32w5acQI96jbMxoNcHopJHYsb/k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:87:af:04:53:ee:29:31:01:df:8c:be:a0:44:77:4f:67:f8:ad:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Validity Not Before: May 12 15:55:35 2026 GMT Not After : May 13 19:19:35 2026 GMT Subject: CN=97748B9640F76F8AB567EC783D022DABF7B0B1BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:90:1f:3d:57:dc:33:33:97:6b:a5:e6:c9: ec:33:69:29:b3:26:6a:57:87:f5:fe:69:3f:45:e7: 9a:c9:4a:b2:64:59:cb:8a:aa:8b:2a:4a:0d:a1:b3: a9:8b:23:83:65:9c:90:93:9f:57:2a:b3:af:75:3e: 8e:db:12:be:36:0a:db:84:5c:5d:11:44:5e:0b:c7: a6:15:08:ea:a2:78:47:00:91:e3:3f:92:b4:e8:54: d0:e9:22:25:5d:df:49:c1:ef:6c:33:f2:04:01:71: f7:cd:cf:db:a7:fb:34:b7:34:3d:83:c4:d3:af:63: b1:07:30:af:db:85:41:a4:7a:42:58:67:5c:04:b4: 29:c8:fb:10:aa:47:41:06:da:22:54:23:51:27:2e: 70:7e:74:7a:1f:a1:a9:54:16:0d:4b:92:2c:8c:65: b3:e5:53:83:d7:f5:b1:f2:10:be:96:8c:cc:ef:f8: 58:bc:54:89:ab:86:29:80:57:b7:b4:3b:e2:96:db: da:eb:ec:14:c3:23:9f:5a:a4:66:be:45:47:07:68: 19:f1:3b:6a:32:93:20:87:d9:92:09:0b:db:44:31: 1b:9a:c4:f9:a2:96:4e:6d:27:45:b5:25:33:a7:8b: df:ba:04:4f:28:bd:9f:6a:af:5b:9d:07:a7:3e:3e: 61:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:74:8B:96:40:F7:6F:8A:B5:67:EC:78:3D:02:2D:AB:F7:B0:B1:BE X509v3 Authority Key Identifier: keyid:8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2b:91:bc:96:75:3e:23:f3:0b:f5:81:e3:d8:2e:41:e3:98: 43:68:6e:dc:ae:54:b8:f6:47:54:06:8d:71:72:64:92:1b:48: b3:2d:90:b9:fe:48:bb:cf:0d:3f:09:b0:21:87:04:47:4f:ad: ee:f3:00:71:d1:50:db:15:3c:55:2d:27:94:b0:a3:db:29:27: 92:c3:36:33:a4:65:14:dd:62:26:b9:08:98:5c:52:9c:09:38: de:67:7c:f1:71:57:6c:8e:12:d5:ef:09:4e:6a:3e:e9:27:4a: b5:e1:91:7d:78:98:2d:74:1e:3b:bc:40:73:e6:b2:d4:7d:0a: 46:30:0e:a1:d3:87:6c:bd:a2:ef:53:6a:5e:62:82:78:be:3a: 2d:fd:85:49:eb:e4:f6:b7:b7:00:e5:a8:6c:e7:5e:95:cf:99: 8b:34:28:11:b8:d4:d8:af:81:35:0f:b3:bc:f0:1c:aa:23:d5: 56:82:22:f6:80:e8:0b:15:9b:f5:79:f2:4a:7b:fb:0a:18:93: e0:14:0a:d4:6b:4c:5d:00:d7:5b:7a:e6:8c:d1:75:de:e3:d6: d0:a6:bf:3a:02:cd:15:c7:65:2a:df:b2:33:0f:f8:41:a5:9d: 3d:88:e0:f3:55:cd:a7:a5:d7:be:d5:0b:83:2c:ef:65:f7:f5: 6a:fe:6a:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4evBFPuKTEB34y+oER3T2f4reIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0 RTNBRTZFQzAeFw0yNjA1MTIxNTU1MzVaFw0yNjA1MTMxOTE5MzVaMDMxMTAvBgNV BAMTKDk3NzQ4Qjk2NDBGNzZGOEFCNTY3RUM3ODNEMDIyREFCRjdCMEIxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnN5AfPVfcMzOXa6XmyewzaSmz JmpXh/X+aT9F55rJSrJkWcuKqosqSg2hs6mLI4NlnJCTn1cqs691Po7bEr42CtuE XF0RRF4Lx6YVCOqieEcAkeM/krToVNDpIiVd30nB72wz8gQBcffNz9un+zS3ND2D xNOvY7EHMK/bhUGkekJYZ1wEtCnI+xCqR0EG2iJUI1EnLnB+dHofoalUFg1LkiyM ZbPlU4PX9bHyEL6WjMzv+Fi8VImrhimAV7e0O+KW29rr7BTDI59apGa+RUcHaBnx O2oykyCH2ZIJC9tEMRuaxPmilk5tJ0W1JTOni9+6BE8ovZ9qr1udB6c+PmGnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl3SLlkD3b4q1Z+x4PQItq/ewsb4wHwYDVR0j BBgwFoAUjuNZiH7UeUfnTsw9Etfdh0465uwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTVjN2E0MDQtZWIzZi00Y2YxLTk5ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3 RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0RTNBRTZFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUUzNTk4ODdFRDQ3OTQ3RTc0RUNDM0QxMkQ3REQ4NzRFM0FF NkVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0RE ODc0RTNBRTZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsrkbyWdT4j8wv1gePYLkHjmENobtyuVLj2 R1QGjXFyZJIbSLMtkLn+SLvPDT8JsCGHBEdPre7zAHHRUNsVPFUtJ5Swo9spJ5LD NjOkZRTdYia5CJhcUpwJON5nfPFxV2yOEtXvCU5qPuknSrXhkX14mC10Hju8QHPm stR9CkYwDqHTh2y9ou9Tal5igni+Oi39hUnr5Pa3twDlqGznXpXPmYs0KBG41Niv gTUPs7zwHKoj1VaCIvaA6AsVm/V58kp7+woYk+AUCtRrTF0A11t65ozRdd7j1tCm vzoCzRXHZSrfsjMP+EGlnT2I4PNVzael177VC4Ms72X39Wr+ahA= -----END CERTIFICATE-----Generated at Wed May 13 02:37:31 2026 by rpki-client