$ rpki-client -vvf rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft File: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft (raw, json) Hash identifier: a9mPEs0hZdCmc6pMiIlJybgerlIW+/vqvV4OzOsQuJ8= Subject key identifier: B6:2A:E7:B6:90:38:7B:69:0C:40:AD:B0:24:CC:6D:37:9D:64:8C:9C Authority key identifier: D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F Certificate issuer: /CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Certificate serial: 7B213C2D3BE5E8E24E0AAC104D0963EAB8A54E13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:56:10 +0000 Manifest this update: Tue 12 May 2026 09:51:10 +0000 Manifest next update: Wed 13 May 2026 13:40:10 +0000 Files and hashes: 1: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: 4zjQiDOO1u6032UYBIQ3bbHO8yvV/zbc51HnTLw1PKM=) 2: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl (hash: jW9MtHo3oZY7NYG/6TaqrZq463CKbxpS9g+vq7hRseg=) 3: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: BSuw1whkNZvJE4R4/j402PtZbyO7u4uvse4a8U9c4JA=) 4: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: aqo6iqJhHng8SceS0GB2zDkvhHekA+jqXPQYRYjWZBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:21:3c:2d:3b:e5:e8:e2:4e:0a:ac:10:4d:09:63:ea:b8:a5:4e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Validity Not Before: May 12 09:51:10 2026 GMT Not After : May 13 13:40:10 2026 GMT Subject: CN=B62AE7B690387B690C40ADB024CC6D379D648C9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:a5:02:67:56:f5:c3:15:86:4c:34:72:26: 5d:15:0d:7f:a7:ad:31:6a:a6:c4:2b:8a:7b:40:cf: 10:f6:8c:22:a5:2b:6b:12:71:d2:8d:01:08:bd:2d: 1d:3d:13:e9:84:d6:08:db:d9:cc:f9:e1:5f:83:d4: d7:45:b4:fd:eb:9e:52:a7:a8:29:b0:0c:3d:f7:b4: b0:6a:62:3d:21:a5:c5:5e:45:89:17:ff:25:50:0b: 94:2a:bd:12:97:ff:42:0d:e3:64:39:87:20:b5:d7: ea:9b:81:ab:69:b4:ef:02:60:b2:0f:54:db:26:cc: 3d:32:ed:7e:0e:cd:a6:08:76:55:db:75:c5:5c:3a: 47:3c:8a:47:bf:73:b8:06:5b:08:13:f6:9b:0e:54: 99:af:f7:d3:de:09:40:fc:a7:96:d4:dd:c6:bc:48: 12:9b:33:b8:38:57:97:cf:e8:c8:19:d3:fb:f7:4b: bd:43:6c:b3:a8:2e:08:56:63:e3:0f:7b:59:cd:68: ae:ab:6f:1d:d5:70:b6:01:02:26:1b:91:14:97:49: 2a:dc:d6:5b:ac:42:d5:b1:d8:52:a6:25:55:1e:a1: 38:36:03:17:e5:b8:fd:a2:46:2b:28:66:4c:a0:66: 33:cf:08:26:27:12:5d:05:ae:18:ff:04:97:2a:e3: 4f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2A:E7:B6:90:38:7B:69:0C:40:AD:B0:24:CC:6D:37:9D:64:8C:9C X509v3 Authority Key Identifier: keyid:D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:cd:f0:07:b5:6c:23:81:58:46:b5:43:0e:f6:94:5d:74:dd: a2:12:20:2b:13:9a:fa:e5:36:9a:b9:c2:69:43:51:b7:9f:dd: c1:fb:3a:33:94:4c:2b:ef:a5:f9:c9:cf:2d:98:68:32:34:08: de:a2:9a:0f:aa:00:2e:c1:c2:49:6d:16:d4:46:e7:bc:d7:53: 7f:83:61:d7:14:3a:5b:44:53:f8:e8:6b:3c:ef:48:8c:07:0d: eb:53:7c:a6:8d:7f:80:f7:3b:ea:d7:b1:63:10:40:d0:63:ae: b1:dc:e0:67:da:b4:70:fe:0a:5c:0e:5e:7f:8e:25:f1:2e:fa: 44:19:09:74:df:ec:4a:99:1f:90:c3:46:63:d6:67:ce:68:3d: 1b:c7:03:72:1c:d5:e0:8f:1c:cb:7d:c9:e0:b4:d5:77:26:f9: 9b:03:20:c2:a6:74:b5:80:40:80:b6:57:1e:b5:a4:b8:99:a9: 8e:25:bb:94:81:24:85:68:95:4c:30:a3:14:fc:d6:61:81:44: 02:1c:61:e3:78:e0:7c:09:22:4d:bf:b5:86:4d:00:b9:58:f8: 8d:c2:50:15:7f:dc:a2:4c:af:24:d9:46:ac:dd:89:68:b3:10: 8c:cc:9b:53:fd:f0:f6:79:4c:f0:53:d6:ec:b1:0a:1e:1c:40: 9b:71:45:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeyE8LTvl6OJOCqwQTQlj6rilThMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0 NkYyOUQ3RjAeFw0yNjA1MTIwOTUxMTBaFw0yNjA1MTMxMzQwMTBaMDMxMTAvBgNV BAMTKEI2MkFFN0I2OTAzODdCNjkwQzQwQURCMDI0Q0M2RDM3OUQ2NDhDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5qUCZ1b1wxWGTDRyJl0VDX+n rTFqpsQrintAzxD2jCKlK2sScdKNAQi9LR09E+mE1gjb2cz54V+D1NdFtP3rnlKn qCmwDD33tLBqYj0hpcVeRYkX/yVQC5QqvRKX/0IN42Q5hyC11+qbgatptO8CYLIP VNsmzD0y7X4OzaYIdlXbdcVcOkc8ike/c7gGWwgT9psOVJmv99PeCUD8p5bU3ca8 SBKbM7g4V5fP6MgZ0/v3S71DbLOoLghWY+MPe1nNaK6rbx3VcLYBAiYbkRSXSSrc 1lusQtWx2FKmJVUeoTg2AxfluP2iRisoZkygZjPPCCYnEl0Frhj/BJcq408/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtirntpA4e2kMQK2wJMxtN51kjJwwHwYDVR0j BBgwFoAU2Mt/i1Zm4H5Xy+/AI8b2A0bynX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM2YWIwNGQtNjhjNy00MjQ5LWIxMDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1 NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0NkYyOUQ3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOENCN0Y4QjU2NjZFMDdFNTdDQkVGQzAyM0M2RjYwMzQ2RjI5 RDdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2 MDM0NkYyOUQ3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHN8Ae1bCOBWEa1Qw72lF103aISICsTmvrl Npq5wmlDUbef3cH7OjOUTCvvpfnJzy2YaDI0CN6img+qAC7BwkltFtRG57zXU3+D YdcUOltEU/joazzvSIwHDetTfKaNf4D3O+rXsWMQQNBjrrHc4GfatHD+ClwOXn+O JfEu+kQZCXTf7EqZH5DDRmPWZ85oPRvHA3Ic1eCPHMt9yeC01Xcm+ZsDIMKmdLWA QIC2Vx61pLiZqY4lu5SBJIVolUwwoxT81mGBRAIcYeN44HwJIk2/tYZNALlY+I3C UBV/3KJMryTZRqzdiWizEIzMm1P98PZ5TPBT1uyxCh4cQJtxRQk= -----END CERTIFICATE-----Generated at Wed May 13 01:36:37 2026 by rpki-client