$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft File: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft (raw, json) Hash identifier: 4awNSOj7frWhv8wtrj5nchwoGrdA32/zZeXYIho5Xp4= Subject key identifier: C1:85:3D:9A:61:6B:50:F9:86:74:C7:41:13:7D:DE:1B:D4:B5:55:87 Authority key identifier: A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC Certificate issuer: /CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC Certificate serial: 30221D28739D798919915C62E26ACE0B8B31C736 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:28:54 +0000 Manifest this update: Tue 12 May 2026 18:23:54 +0000 Manifest next update: Wed 13 May 2026 19:28:54 +0000 Files and hashes: 1: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl (hash: Oc4sOtjVJXbm2B8HLBmCZDq5BzfF+YlNrrKYIZUBb4I=) 2: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: Avv7/9ccLlQ1aIPCfbfxFrVouBultgrgCwZuIM827ow=) 3: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: UJ/To0XTouVSFOn7NWj23fxNZAouQWAqvBpnkIJXRFM=) 4: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: Zeaoa8MH2HdVHd5TglLIUEl41Yo/QcdVaZotZEH8Cts=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:22:1d:28:73:9d:79:89:19:91:5c:62:e2:6a:ce:0b:8b:31:c7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC Validity Not Before: May 12 18:23:54 2026 GMT Not After : May 13 19:28:54 2026 GMT Subject: CN=C1853D9A616B50F98674C741137DDE1BD4B55587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:5d:96:13:b0:6c:9b:9c:6b:77:e6:74:b8: f5:16:6e:ef:8a:68:5e:12:4e:7c:79:57:d1:18:1d: e0:90:00:f9:d3:2b:4f:a3:54:f9:77:9b:64:9f:af: ca:f4:12:64:39:75:4d:72:21:10:cb:a2:a9:57:dc: 30:e4:a7:8e:fd:3f:b5:29:43:10:72:8e:2b:55:67: ad:d4:10:42:a5:0e:e3:ba:21:7c:7b:db:1a:be:4b: 86:6e:ba:7e:ad:c0:e0:a7:1c:bc:03:f7:a2:f3:5a: 71:b9:39:06:a2:bd:d7:63:cb:45:16:6c:c1:c6:89: b5:a0:ea:49:be:1d:00:00:85:66:98:e2:6d:eb:23: fb:49:ee:51:18:0b:5f:0c:89:a3:42:a2:cd:e3:32: be:53:5e:82:81:8f:a5:f5:02:03:13:4f:01:b8:f6: 2d:38:7a:01:8b:b2:7a:d1:9f:f8:03:98:7f:50:2b: c8:82:9e:9d:f7:49:7a:2b:93:dd:c6:a1:63:84:d0: bd:b4:44:61:f7:ee:98:a8:0c:23:91:f7:fc:8f:5b: 1e:d9:e2:39:69:0b:d1:47:59:c2:4d:a9:87:f3:74: d9:87:1c:99:a4:35:75:00:f2:04:1d:da:b3:e9:a1: 28:bb:6f:ae:9f:9a:4e:f0:65:e6:08:8f:6a:c6:19: ca:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:85:3D:9A:61:6B:50:F9:86:74:C7:41:13:7D:DE:1B:D4:B5:55:87 X509v3 Authority Key Identifier: keyid:A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:9d:cd:d4:e0:95:0b:e0:5d:2b:dc:6b:bb:b7:62:14:f7:6d: c8:68:8e:61:7a:9c:73:41:4c:4f:77:d0:61:c5:85:a5:cd:b0: 08:ad:84:d0:79:df:2e:e9:8c:17:14:2a:a2:23:4e:fa:74:e0: bd:e5:67:18:94:b2:14:c9:4b:2c:04:e5:7a:42:cf:37:dd:7d: 52:90:11:be:00:36:84:9a:1f:3b:02:94:49:a4:23:5e:2a:ed: 94:95:2d:4e:f0:f1:55:64:7b:a7:13:57:d7:81:4e:6d:01:34: a5:8b:c7:73:6a:ed:82:1e:5e:5d:84:2c:20:9f:e2:6c:43:e9: ca:33:7a:c9:a4:d9:69:c8:4b:8f:32:3a:bf:f3:16:2c:4d:c1: ae:d4:c1:af:1b:1c:2b:f8:12:27:3e:07:5f:2c:30:59:8e:87: 0c:89:bb:9f:24:94:7d:fe:3a:96:dc:11:a1:73:1d:82:a0:fe: 8c:70:1b:31:f2:90:29:e1:96:f5:d3:b9:1d:f0:89:f6:b7:31: 95:a1:a9:9b:95:01:3d:4a:45:29:07:c0:b4:e7:d8:e6:16:af: 03:f4:23:8b:8c:5c:84:cc:68:3c:9e:69:20:67:84:0f:fd:76: 09:0d:4c:d2:d2:88:df:00:72:87:f4:81:e6:97:d8:df:31:0a: 92:f9:b8:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCIdKHOdeYkZkVxi4mrOC4sxxzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThENjAyMTczODhEQ0VFNjg5N0JEQTVCQzZENTE5MDMx N0NFQzBFQzAeFw0yNjA1MTIxODIzNTRaFw0yNjA1MTMxOTI4NTRaMDMxMTAvBgNV BAMTKEMxODUzRDlBNjE2QjUwRjk4Njc0Qzc0MTEzN0RERTFCRDRCNTU1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCosV2WE7Bsm5xrd+Z0uPUWbu+K aF4STnx5V9EYHeCQAPnTK0+jVPl3m2Sfr8r0EmQ5dU1yIRDLoqlX3DDkp479P7Up QxByjitVZ63UEEKlDuO6IXx72xq+S4Zuun6twOCnHLwD96LzWnG5OQaivddjy0UW bMHGibWg6km+HQAAhWaY4m3rI/tJ7lEYC18MiaNCos3jMr5TXoKBj6X1AgMTTwG4 9i04egGLsnrRn/gDmH9QK8iCnp33SXork93GoWOE0L20RGH37pioDCOR9/yPWx7Z 4jlpC9FHWcJNqYfzdNmHHJmkNXUA8gQd2rPpoSi7b66fmk7wZeYIj2rGGcrXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwYU9mmFrUPmGdMdBE33eG9S1VYcwHwYDVR0j BBgwFoAUqNYCFziNzuaJe9pbxtUZAxfOwOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk1NzdjM2MtNjZjZC00MGE0LWFmYzUtNmM2ZjhiNjY0YTUxLzAvQThENjAyMTcz ODhEQ0VFNjg5N0JEQTVCQzZENTE5MDMxN0NFQzBFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEQ2MDIxNzM4OERDRUU2ODk3QkRBNUJDNkQ1MTkwMzE3Q0VD MEVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQThENjAyMTczODhEQ0VFNjg5N0JEQTVCQzZENTE5 MDMxN0NFQzBFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGdzdTglQvgXSvca7u3YhT3bchojmF6nHNB TE930GHFhaXNsAithNB53y7pjBcUKqIjTvp04L3lZxiUshTJSywE5XpCzzfdfVKQ Eb4ANoSaHzsClEmkI14q7ZSVLU7w8VVke6cTV9eBTm0BNKWLx3Nq7YIeXl2ELCCf 4mxD6cozesmk2WnIS48yOr/zFixNwa7Uwa8bHCv4Eic+B18sMFmOhwyJu58klH3+ OpbcEaFzHYKg/oxwGzHykCnhlvXTuR3wifa3MZWhqZuVAT1KRSkHwLTn2OYWrwP0 I4uMXITMaDyeaSBnhA/9dgkNTNLSiN8Acof0geaX2N8xCpL5uCw= -----END CERTIFICATE-----Generated at Wed May 13 01:45:08 2026 by rpki-client