$ rpki-client -vvf rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft File: 8DD710534DF68AAB08361EE28306B8FDEE71D144.mft (raw, json) Hash identifier: NA3hJgqFoskOdaG7r4G6VnCANmyTBIObT4lo7+tOtx8= Subject key identifier: 39:F2:91:5A:1F:5A:A1:54:15:BB:A7:39:7C:42:8C:8C:20:CC:DF:C0 Authority key identifier: 8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 Certificate issuer: /CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Certificate serial: 0686E7015965D47C74894168D27948E4EA5FAB0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:04:46 +0000 Manifest this update: Tue 12 May 2026 18:59:46 +0000 Manifest next update: Wed 13 May 2026 20:32:46 +0000 Files and hashes: 1: 8DD710534DF68AAB08361EE28306B8FDEE71D144.crl (hash: uZumTq2VvS+ed9Q6gG14jdLX3bSfLCKJlYLXtELM9fw=) 2: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: OzarGbzrKygn581G2dCLdzA7C4q7lKqki8T+O4VVozc=) 3: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: mt9y4ArG2gRgvhKLs+xygsf6wYJsNzK3vkSOg2Yasms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:86:e7:01:59:65:d4:7c:74:89:41:68:d2:79:48:e4:ea:5f:ab:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Validity Not Before: May 12 18:59:46 2026 GMT Not After : May 13 20:32:46 2026 GMT Subject: CN=39F2915A1F5AA15415BBA7397C428C8C20CCDFC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:15:3d:32:90:b1:96:cc:cc:92:e3:b0:74:44: aa:83:46:a2:6e:41:e2:98:df:bd:d2:08:53:9d:e6: d8:73:aa:3e:55:b3:c4:fb:94:5f:92:d6:fe:f9:c4: 6d:7d:4b:1f:24:79:ba:20:76:82:b6:e2:f9:a9:87: c0:63:d7:12:96:7e:c5:77:07:3d:f1:f6:b5:60:a7: de:f8:95:c3:86:cc:3f:51:b6:7e:9a:85:6d:0b:d6: 9c:22:ce:58:fb:c4:49:85:96:1e:fd:4f:16:f7:af: da:f1:31:8f:a6:e9:7d:79:11:c6:93:07:81:65:28: 0c:e9:e6:78:05:f8:60:09:5a:7f:d9:b9:84:f6:dc: d7:52:7b:2c:44:f8:ea:ba:5f:f4:ef:bc:79:3d:7a: 92:2a:ef:74:11:f0:67:60:e0:6f:3a:11:3b:28:59: 37:4f:d0:bd:04:52:88:e9:40:d0:5c:c8:3d:a3:78: 0d:6a:56:d1:63:db:ea:e3:95:b1:ed:de:6e:41:7d: d1:8e:02:70:a7:9c:ab:47:c0:06:54:8b:5d:c1:13: c2:0f:37:c7:08:0d:1b:b5:93:9f:87:9e:44:de:69: 23:41:6e:0e:fd:cb:7b:8d:41:e7:f6:bf:ab:e5:de: 22:f4:6f:26:fa:ca:7d:a6:79:af:7d:f1:24:87:01: 25:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F2:91:5A:1F:5A:A1:54:15:BB:A7:39:7C:42:8C:8C:20:CC:DF:C0 X509v3 Authority Key Identifier: keyid:8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5f:76:90:8f:64:e8:c0:82:7c:7f:a5:a0:5e:62:f9:30:4e: 2d:f0:89:95:1a:83:80:36:90:e2:e1:21:ad:d3:f7:d0:f4:2c: 66:25:58:77:50:2e:e7:e5:f8:7e:ec:cc:d3:bf:c2:e0:4c:25: a6:7b:54:b1:46:d3:6e:c6:20:9a:e2:1d:8c:c3:d8:82:d8:5d: 81:40:10:0a:f7:68:d6:81:c8:29:58:d8:e9:8b:e1:7d:7c:86: 65:92:5d:77:a1:a6:21:db:23:4e:c8:9c:e5:84:a6:9d:d3:06: e0:9e:ad:e5:21:21:35:f6:b0:78:d2:d1:ce:32:e0:f9:2c:fa: 6d:fc:e0:3c:17:51:46:bf:d0:13:7f:2a:bc:b6:96:bf:32:14: f4:9f:53:1d:67:54:46:0a:57:dd:26:f3:b2:a8:14:1b:6a:7a: de:c6:ab:70:a5:0b:f3:37:a3:bb:a4:45:81:22:9a:aa:1f:49: cd:fd:87:a7:44:07:cf:8e:28:fe:4b:91:08:a1:e4:70:5f:04: 6e:20:f8:7e:fe:35:28:5c:ab:01:38:49:49:04:5b:a2:f1:b5: b4:f0:bc:29:69:60:6e:fc:38:d8:a1:9c:0a:3d:ad:fe:d4:f3: f5:75:bb:10:7c:af:1b:a6:2c:40:1a:29:5a:9e:43:c2:26:6f: 09:94:ae:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBobnAVll1Hx0iUFo0nlI5OpfqwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4RkRF RTcxRDE0NDAeFw0yNjA1MTIxODU5NDZaFw0yNjA1MTMyMDMyNDZaMDMxMTAvBgNV BAMTKDM5RjI5MTVBMUY1QUExNTQxNUJCQTczOTdDNDI4QzhDMjBDQ0RGQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaFT0ykLGWzMyS47B0RKqDRqJu QeKY373SCFOd5thzqj5Vs8T7lF+S1v75xG19Sx8kebogdoK24vmph8Bj1xKWfsV3 Bz3x9rVgp974lcOGzD9Rtn6ahW0L1pwizlj7xEmFlh79Txb3r9rxMY+m6X15EcaT B4FlKAzp5ngF+GAJWn/ZuYT23NdSeyxE+Oq6X/TvvHk9epIq73QR8Gdg4G86ETso WTdP0L0EUojpQNBcyD2jeA1qVtFj2+rjlbHt3m5BfdGOAnCnnKtHwAZUi13BE8IP N8cIDRu1k5+HnkTeaSNBbg79y3uNQef2v6vl3iL0byb6yn2mea998SSHASULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOfKRWh9aoVQVu6c5fEKMjCDM38AwHwYDVR0j BBgwFoAUjdcQU032iqsINh7igwa4/e5x0UQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjcyNGU0NWItMjU0Yi00ZmViLWJmOGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0 REY2OEFBQjA4MzYxRUUyODMwNkI4RkRFRTcxRDE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84REQ3MTA1MzRERjY4QUFCMDgzNjFFRTI4MzA2QjhGREVFNzFE MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4 RkRFRTcxRDE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1fdpCPZOjAgnx/paBeYvkwTi3wiZUag4A2 kOLhIa3T99D0LGYlWHdQLufl+H7szNO/wuBMJaZ7VLFG027GIJriHYzD2ILYXYFA EAr3aNaByClY2OmL4X18hmWSXXehpiHbI07InOWEpp3TBuCereUhITX2sHjS0c4y 4Pks+m384DwXUUa/0BN/Kry2lr8yFPSfUx1nVEYKV90m87KoFBtqet7Gq3ClC/M3 o7ukRYEimqofSc39h6dEB8+OKP5LkQih5HBfBG4g+H7+NShcqwE4SUkEW6LxtbTw vClpYG78ONihnAo9rf7U8/V1uxB8rxumLEAaKVqeQ8ImbwmUrnA= -----END CERTIFICATE-----Generated at Tue May 12 23:27:47 2026 by rpki-client