$ rpki-client -vvf rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft File: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft (raw, json) Hash identifier: 1AsaBa3G/Jq8tIihDigH3BxAMIozfoExR3oxwKmZR2I= Subject key identifier: 7D:E7:A3:E6:50:72:02:80:8F:36:B0:74:FA:2D:BB:70:65:56:FE:F8 Authority key identifier: D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A Certificate issuer: /CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Certificate serial: 78A804D1AA5390C2588F3E253C6EE46F0108F604 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:20:14 +0000 Manifest this update: Tue 12 May 2026 19:15:14 +0000 Manifest next update: Wed 13 May 2026 19:35:14 +0000 Files and hashes: 1: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: B7a7PzCNzeD/tq1cXAKoZlfFY/BQzoD5xWVoqKq0SF0=) 2: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: Jx05B7mkwgYoEihHJr1Mblw6Kt55kFXhZ9MUCvCt+Go=) 3: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl (hash: ezpt83H0NCm3DcpC+j0rgk1wzdFxclqHGR0CN2gU3YA=) 4: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: 6VIXf9PufTTIF0jlFfBvIGu6EFZnq37iO9mrrQ1/lbk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a8:04:d1:aa:53:90:c2:58:8f:3e:25:3c:6e:e4:6f:01:08:f6:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Validity Not Before: May 12 19:15:14 2026 GMT Not After : May 13 19:35:14 2026 GMT Subject: CN=7DE7A3E6507202808F36B074FA2DBB706556FEF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b3:45:0e:66:7b:05:c4:20:fd:b7:de:d7:e4: 51:6c:0e:db:eb:4d:0c:ab:89:7a:15:4c:25:89:8b: 25:a0:62:e7:87:f9:2e:f7:87:dd:e4:6c:fd:01:8a: 96:b7:8a:2c:a3:b3:e7:fa:a1:da:35:3a:2d:fc:00: 69:e7:79:7d:45:28:0b:3e:d1:3e:56:85:5c:ce:78: 9d:82:fb:27:1a:34:53:73:50:9d:c0:b5:ca:eb:a3: 59:f0:23:63:c0:43:73:5e:43:54:8c:a9:7a:c7:df: a7:ff:fb:f0:02:db:74:69:44:f2:3e:9b:43:31:c1: 84:75:f6:c3:5a:66:11:cb:68:91:5a:31:2f:bd:db: 76:fe:72:93:04:a5:55:30:c4:8c:a8:ed:b6:2b:11: fa:22:e1:f2:b2:44:42:1d:79:38:cb:d1:9b:c1:fe: 82:13:c5:6d:80:5c:e9:bd:33:e5:c4:1b:00:71:42: 6d:6d:b2:58:bb:c4:55:64:3a:f8:da:53:be:10:1e: c5:dd:6e:f2:42:52:45:d1:c1:e7:e2:81:df:ac:af: b2:c7:f0:77:d4:d8:d7:d5:27:74:f9:5a:3b:6b:ce: 34:35:6b:d6:87:3a:ce:af:fe:3e:2d:7a:ef:c5:fd: 73:71:bc:5a:1e:6e:bb:d2:7d:4d:57:f6:58:2a:3c: d6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E7:A3:E6:50:72:02:80:8F:36:B0:74:FA:2D:BB:70:65:56:FE:F8 X509v3 Authority Key Identifier: keyid:D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:36:5c:3d:b4:30:f6:ac:c9:7e:fd:ab:77:85:e2:67:71:34: 39:ad:7f:87:2d:a3:5a:79:30:f3:b2:4a:91:7b:e6:4c:04:8a: e4:7c:4f:ac:8f:a5:0e:de:0e:11:43:4c:03:11:da:17:c5:ef: 33:c1:ca:11:6f:a1:f3:5f:d2:bf:32:5f:3c:c7:48:e3:3b:c1: a0:2f:1d:9f:62:77:e4:ed:88:78:64:87:91:8e:35:c5:5b:7e: 07:a4:8b:f6:7e:a9:ad:37:b4:cc:a3:ec:43:a8:f3:9c:f8:eb: 14:1d:16:0b:98:35:2f:12:13:a0:e9:19:98:cb:18:39:2d:f7: ad:6b:f4:56:ac:e2:d2:46:b9:2c:bc:5d:79:3c:65:81:60:8e: f0:24:8a:99:7d:f1:8c:a2:c3:06:86:90:40:d6:3c:6c:a1:28: 8e:b2:94:64:42:84:02:a3:ea:09:09:0e:82:79:05:4e:0b:7b: 90:c4:64:0f:e5:4d:96:d4:7b:09:6e:a7:16:ab:36:a2:00:96: f0:44:3a:49:7a:bf:e8:ad:83:e2:fd:05:eb:0f:c0:ab:ac:dc: df:7b:0d:b3:19:a5:61:30:6f:ba:0d:46:db:62:5a:a5:1e:7e: b1:60:e2:63:b2:8f:e8:31:c7:0d:6d:08:4d:9b:2e:b2:a2:87: 00:a3:fa:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKgE0apTkMJYjz4lPG7kbwEI9gQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2 OEJCMDEyQTAeFw0yNjA1MTIxOTE1MTRaFw0yNjA1MTMxOTM1MTRaMDMxMTAvBgNV BAMTKDdERTdBM0U2NTA3MjAyODA4RjM2QjA3NEZBMkRCQjcwNjU1NkZFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrs0UOZnsFxCD9t97X5FFsDtvr TQyriXoVTCWJiyWgYueH+S73h93kbP0Bipa3iiyjs+f6odo1Oi38AGnneX1FKAs+ 0T5WhVzOeJ2C+ycaNFNzUJ3Atcrro1nwI2PAQ3NeQ1SMqXrH36f/+/AC23RpRPI+ m0MxwYR19sNaZhHLaJFaMS+923b+cpMEpVUwxIyo7bYrEfoi4fKyREIdeTjL0ZvB /oITxW2AXOm9M+XEGwBxQm1tsli7xFVkOvjaU74QHsXdbvJCUkXRwefigd+sr7LH 8HfU2NfVJ3T5WjtrzjQ1a9aHOs6v/j4teu/F/XNxvFoebrvSfU1X9lgqPNaFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfeej5lByAoCPNrB0+i27cGVW/vgwHwYDVR0j BBgwFoAU2Kljzlfpmxq+FiqEUtnk02i7ASowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjExY2E2MjAtZGFjZS00YTlmLWI4ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1 N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2OEJCMDEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEE5NjNDRTU3RTk5QjFBQkUxNjJBODQ1MkQ5RTREMzY4QkIw MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjExY2E2MjAtZGFjZS00YTlmLWI4 ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0 RDM2OEJCMDEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALY2XD20MPasyX79q3eF4mdxNDmtf4cto1p5 MPOySpF75kwEiuR8T6yPpQ7eDhFDTAMR2hfF7zPByhFvofNf0r8yXzzHSOM7waAv HZ9id+TtiHhkh5GONcVbfgeki/Z+qa03tMyj7EOo85z46xQdFguYNS8SE6DpGZjL GDkt961r9Fas4tJGuSy8XXk8ZYFgjvAkipl98YyiwwaGkEDWPGyhKI6ylGRChAKj 6gkJDoJ5BU4Le5DEZA/lTZbUewlupxarNqIAlvBEOkl6v+itg+L9BesPwKus3N97 DbMZpWEwb7oNRttiWqUefrFg4mOyj+gxxw1tCE2bLrKihwCj+rE= -----END CERTIFICATE-----Generated at Wed May 13 02:19:46 2026 by rpki-client