$ rpki-client -vvf rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft File: 8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft (raw, json) Hash identifier: YtFmy8avMnjZFuDm/5wIUZK15qVM7lj/IfKaez7HYMs= Subject key identifier: 1F:2D:86:D0:8E:53:19:BE:E0:6F:5F:DA:48:0D:18:4C:D0:7B:D7:46 Authority key identifier: 8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25 Certificate issuer: /CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225 Certificate serial: 3092F841528AF533937FEA893928D2E9A8134B16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:01:38 +0000 Manifest this update: Tue 12 May 2026 19:56:38 +0000 Manifest next update: Wed 13 May 2026 22:37:38 +0000 Files and hashes: 1: 3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa (hash: gMfUFYSPdVxpBBuGIFKR77copbFj1wN/NAnjtAfZ1Zo=) 2: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: 0ts/w6oKmrt+r0C8EDap/FK5Uc/o23APxLZIMW88Oo4=) 3: 3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa (hash: C1r63J+tGfKPbhbl/dI9G1bDePtMsBvnKWbTmvbk0OA=) 4: 8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl (hash: m9GWCU2Y8Nfwk+ImRLcZ/1RoHZe+UP5Q33PWZIhDRHs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:92:f8:41:52:8a:f5:33:93:7f:ea:89:39:28:d2:e9:a8:13:4b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225 Validity Not Before: May 12 19:56:38 2026 GMT Not After : May 13 22:37:38 2026 GMT Subject: CN=1F2D86D08E5319BEE06F5FDA480D184CD07BD746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:06:bc:6e:ea:f7:e8:d9:60:36:30:16:1c: e8:f1:7c:4d:49:74:92:c5:08:a0:0c:c8:20:5a:f7: 7d:55:a8:a6:ea:01:ac:43:26:10:db:6e:1f:af:99: 10:d3:b9:49:5a:a3:e2:ab:f3:70:10:e2:7a:be:02: 51:30:cc:1e:46:17:24:5a:e1:1d:71:3a:52:db:8d: 3a:fc:bc:8a:ac:c6:80:b5:3a:04:48:4d:9b:c9:f6: 8e:f1:46:59:1b:f1:a3:99:2c:1a:e6:6a:26:b0:ca: cb:92:79:a0:f1:30:d9:7d:cb:ea:00:3e:07:0c:65: ba:f6:13:cc:65:f9:bc:60:32:48:85:fb:ac:9a:85: 55:05:2d:ca:1f:11:af:03:07:83:5e:72:a9:09:75: 91:62:12:5e:c6:a5:d0:12:25:1c:e0:45:e3:6b:9d: 44:33:c4:89:4f:3a:6c:2f:23:2b:e7:ec:3e:ec:51: 66:6a:0f:27:7d:b4:2a:a9:d6:3f:3a:e0:61:85:b4: 08:72:4f:84:1e:28:e6:e3:b9:c2:4f:43:30:b8:14: 2d:d0:83:c8:e0:df:fd:b2:b9:fd:d9:25:96:59:b1: 76:1c:c1:28:92:58:28:46:16:d0:7d:9a:0b:bd:97: f3:c3:4a:09:05:ed:73:ac:b8:b7:0e:dd:43:6f:b8: 3d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2D:86:D0:8E:53:19:BE:E0:6F:5F:DA:48:0D:18:4C:D0:7B:D7:46 X509v3 Authority Key Identifier: keyid:8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:63:1b:8e:00:f5:0f:10:4d:c8:08:ef:1b:5c:c1:55:80:ea: 0a:cf:b2:69:21:0b:64:17:96:0a:b0:01:ab:84:18:dc:42:b0: 5b:21:71:ac:a6:d9:6c:02:74:d5:f6:8c:71:b0:78:2b:1b:88: 26:3e:7b:77:0a:45:39:b3:6b:b2:81:16:13:12:1f:a1:70:d4: ec:87:95:27:f4:5e:09:3a:ed:44:2e:b7:4c:4c:9b:4c:bb:84: 94:56:5e:d6:0a:7f:2c:74:68:b3:16:72:b0:1f:6e:ac:a6:9e: db:aa:21:12:1f:7b:35:ea:af:37:22:60:59:56:04:19:34:d7: 24:b5:a8:66:e6:24:44:c0:ad:e7:9e:d3:92:01:c5:02:5d:24: bc:18:ec:3f:29:1c:69:65:cb:6a:fb:71:e4:bf:63:c7:e8:7f: 5d:d6:72:7d:10:be:ac:06:5b:1f:0f:42:5d:75:5e:0c:dd:f7: 43:35:b2:be:35:57:04:2c:2b:11:8a:62:6a:6c:53:0c:7d:ed: 75:c7:d9:fc:1b:e5:43:07:27:fe:6f:56:16:d3:64:a7:45:cb: 4a:f2:9b:4b:30:e0:c6:5e:c6:ae:ae:31:60:41:f7:1d:cb:91: f5:f8:fa:55:1f:37:ce:41:7a:9e:6c:3e:41:77:fe:66:f2:af: 2f:a6:3e:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMJL4QVKK9TOTf+qJOSjS6agTSxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFCRDQ1NThDOUY5NEZGQzY3MEE1MkRCMzlGMEM5QjBC ODM5ODIyNTAeFw0yNjA1MTIxOTU2MzhaFw0yNjA1MTMyMjM3MzhaMDMxMTAvBgNV BAMTKDFGMkQ4NkQwOEU1MzE5QkVFMDZGNUZEQTQ4MEQxODRDRDA3QkQ3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMAa8bur36NlgNjAWHOjxfE1J dJLFCKAMyCBa931VqKbqAaxDJhDbbh+vmRDTuUlao+Kr83AQ4nq+AlEwzB5GFyRa 4R1xOlLbjTr8vIqsxoC1OgRITZvJ9o7xRlkb8aOZLBrmaiawysuSeaDxMNl9y+oA PgcMZbr2E8xl+bxgMkiF+6yahVUFLcofEa8DB4NecqkJdZFiEl7GpdASJRzgReNr nUQzxIlPOmwvIyvn7D7sUWZqDyd9tCqp1j864GGFtAhyT4QeKObjucJPQzC4FC3Q g8jg3/2yuf3ZJZZZsXYcwSiSWChGFtB9mgu9l/PDSgkF7XOsuLcO3UNvuD3ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHy2G0I5TGb7gb1/aSA0YTNB710YwHwYDVR0j BBgwFoAUir1FWMn5T/xnClLbOfDJsLg5giUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM4N2U4NWQtYjE4NS00MzM0LTgwMWItNDljOGM4YjkxODQ0LzAvOEFCRDQ1NThD OUY5NEZGQzY3MEE1MkRCMzlGMEM5QjBCODM5ODIyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUJENDU1OEM5Rjk0RkZDNjcwQTUyREIzOUYwQzlCMEI4Mzk4 MjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvOEFCRDQ1NThDOUY5NEZGQzY3MEE1MkRCMzlGMEM5 QjBCODM5ODIyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxjG44A9Q8QTcgI7xtcwVWA6grPsmkhC2QX lgqwAauEGNxCsFshcaym2WwCdNX2jHGweCsbiCY+e3cKRTmza7KBFhMSH6Fw1OyH lSf0Xgk67UQut0xMm0y7hJRWXtYKfyx0aLMWcrAfbqymntuqIRIfezXqrzciYFlW BBk01yS1qGbmJETAreee05IBxQJdJLwY7D8pHGlly2r7ceS/Y8fof13Wcn0QvqwG Wx8PQl11Xgzd90M1sr41VwQsKxGKYmpsUwx97XXH2fwb5UMHJ/5vVhbTZKdFy0ry m0sw4MZexq6uMWBB9x3LkfX4+lUfN85Bep5sPkF3/mbyry+mPrw= -----END CERTIFICATE-----Generated at Wed May 13 01:11:20 2026 by rpki-client