$ rpki-client -vvf rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft File: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft (raw, json) Hash identifier: NTlrBKdmRBVWl+9GPGtQQZoFkyf1bSVuyj7ULCTRKso= Subject key identifier: 50:DA:89:58:D5:FF:80:10:C4:C3:26:C4:18:8E:A0:AF:62:7D:A6:95 Authority key identifier: 8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C Certificate issuer: /CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C Certificate serial: 46072D273EF1C95ADFD4E3526D904C5C9C653882 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:01:33 +0000 Manifest this update: Tue 12 May 2026 19:56:33 +0000 Manifest next update: Wed 13 May 2026 20:46:33 +0000 Files and hashes: 1: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl (hash: 40FzJXdg9cW83m5kxdD4T8ioUDqZh3mFshS8n5FFO5A=) 2: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: HIdPJqjIrOEvu8Fg+POUaS/pAuaPSBpatCRmSscMNd8=) 3: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: wesRzy414+ZceFD9/gwocQJzbKqVZ+NX+KTjHeWFakA=) 4: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: Bi2PlajLpuJF5Q77N7WIyjkq2NapiUAEv+5ltKF4LBc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:07:2d:27:3e:f1:c9:5a:df:d4:e3:52:6d:90:4c:5c:9c:65:38:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C Validity Not Before: May 12 19:56:33 2026 GMT Not After : May 13 20:46:33 2026 GMT Subject: CN=50DA8958D5FF8010C4C326C4188EA0AF627DA695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d2:24:4f:eb:17:36:44:c2:73:2f:7e:03:51: 5a:da:00:db:7f:a1:d8:dd:a5:1a:79:6e:6c:35:4c: be:ee:14:4f:d1:b2:bc:60:0a:f2:be:9a:82:05:a4: 85:e8:42:d5:2a:b7:e5:e4:63:69:0a:34:9f:4a:fe: 86:33:d7:cc:d3:89:48:00:0d:b4:9b:62:65:46:59: e0:38:f4:1f:1c:2f:ce:c1:5f:c1:16:c8:d5:7d:6f: ff:20:79:d2:44:ab:4e:3e:fe:72:96:28:70:bb:47: 01:15:19:fd:80:f1:36:03:ea:b2:ef:90:97:9b:6a: 0a:7f:1b:db:ea:85:fa:80:c9:c2:de:8d:2e:75:ff: 10:3f:bb:28:01:1b:d3:94:dd:00:08:c4:3b:e7:f5: 47:bc:e1:75:ce:13:0e:1a:84:0e:af:ee:b5:b1:5f: 6e:bc:a9:3c:8b:b7:3b:11:54:8d:98:04:80:e2:43: 27:4d:bb:6a:fb:1e:d1:4a:99:27:20:26:c2:e9:ec: 1c:4a:9e:17:28:53:68:a8:75:ea:0b:e5:f3:9a:7d: be:b5:d1:da:33:4b:9a:b2:20:13:f4:63:aa:8a:4d: cd:da:c8:78:8d:af:88:34:fb:fc:61:01:d8:cc:3c: 20:ad:ce:5d:2a:74:77:6c:89:b9:80:51:ec:32:cb: 3a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DA:89:58:D5:FF:80:10:C4:C3:26:C4:18:8E:A0:AF:62:7D:A6:95 X509v3 Authority Key Identifier: keyid:8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:21:79:89:6e:05:27:c9:15:ba:36:22:4b:8e:b2:68:89:d8: 19:d8:9e:73:60:a9:e5:97:55:3f:69:35:6a:7e:2f:05:f4:d3: 59:db:0e:68:77:9d:34:e5:35:f0:a5:a1:e7:af:1c:6d:7e:47: 12:f0:a1:2d:41:18:82:ec:b3:a6:ae:05:cf:6b:95:63:1a:64: cb:29:43:d7:b0:a3:1a:64:74:32:94:8c:76:55:c2:89:64:59: 09:1e:ec:9d:a3:91:66:d4:34:aa:cd:ac:08:9d:05:0e:ba:e3: 54:b6:d2:42:5e:77:b2:50:0a:fa:36:60:6e:29:a7:13:55:14: 92:73:83:07:06:14:8e:24:63:8d:18:7c:cf:36:f1:ab:c0:2d: 2c:96:a7:24:f9:d9:c0:ae:6e:f7:96:d6:ba:6b:e7:ed:17:d2: 3d:ff:9a:21:66:48:e9:7b:c0:d9:a7:7c:92:22:67:56:ff:88: 85:77:4e:2e:c8:e5:05:9b:81:14:8d:fd:31:1e:ec:33:de:a1: a2:33:bd:30:78:1b:7e:af:37:70:51:1d:44:95:07:c9:8d:28: d2:5c:b7:96:75:a8:38:6e:2b:6d:1c:4f:0b:38:1e:f8:e0:e8: 5a:64:01:00:f0:86:9d:0f:8e:1c:5b:ff:b7:de:fd:d4:33:f3: a7:14:23:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURgctJz7xyVrf1ONSbZBMXJxlOIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQzOUQyMDdBNDlFMkE1QzFEOUZEOEE3QjI3RDM0NDg0 RUYxRTYyQzAeFw0yNjA1MTIxOTU2MzNaFw0yNjA1MTMyMDQ2MzNaMDMxMTAvBgNV BAMTKDUwREE4OTU4RDVGRjgwMTBDNEMzMjZDNDE4OEVBMEFGNjI3REE2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0iRP6xc2RMJzL34DUVraANt/ odjdpRp5bmw1TL7uFE/RsrxgCvK+moIFpIXoQtUqt+XkY2kKNJ9K/oYz18zTiUgA DbSbYmVGWeA49B8cL87BX8EWyNV9b/8gedJEq04+/nKWKHC7RwEVGf2A8TYD6rLv kJebagp/G9vqhfqAycLejS51/xA/uygBG9OU3QAIxDvn9Ue84XXOEw4ahA6v7rWx X268qTyLtzsRVI2YBIDiQydNu2r7HtFKmScgJsLp7BxKnhcoU2iodeoL5fOafb61 0dozS5qyIBP0Y6qKTc3ayHiNr4g0+/xhAdjMPCCtzl0qdHdsibmAUewyyzopAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUNqJWNX/gBDEwybEGI6gr2J9ppUwHwYDVR0j BBgwFoAUjTnSB6SeKlwdn9insn00SE7x5iwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFiNGUxNGQtMDIxZC00MGRjLTkyM2EtYzEyZDFhZjQ0M2I1LzAvOEQzOUQyMDdB NDlFMkE1QzFEOUZEOEE3QjI3RDM0NDg0RUYxRTYyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84RDM5RDIwN0E0OUUyQTVDMUQ5RkQ4QTdCMjdEMzQ0ODRFRjFF NjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvOEQzOUQyMDdBNDlFMkE1QzFEOUZEOEE3QjI3RDM0 NDg0RUYxRTYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMheYluBSfJFbo2IkuOsmiJ2BnYnnNgqeWX VT9pNWp+LwX001nbDmh3nTTlNfCloeevHG1+RxLwoS1BGILss6auBc9rlWMaZMsp Q9ewoxpkdDKUjHZVwolkWQke7J2jkWbUNKrNrAidBQ6641S20kJed7JQCvo2YG4p pxNVFJJzgwcGFI4kY40YfM828avALSyWpyT52cCubveW1rpr5+0X0j3/miFmSOl7 wNmnfJIiZ1b/iIV3Ti7I5QWbgRSN/TEe7DPeoaIzvTB4G36vN3BRHUSVB8mNKNJc t5Z1qDhuK20cTws4Hvjg6FpkAQDwhp0Pjhxb/7fe/dQz86cUIx4= -----END CERTIFICATE-----Generated at Tue May 12 23:20:59 2026 by rpki-client