$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft File: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft (raw, json) Hash identifier: +1ivIBu1RJ74g82maO4Rio7Gt3u8j+IXsvGEn1ijT4k= Subject key identifier: EF:5B:91:57:F1:E4:C5:81:3E:46:4E:01:57:A8:EB:3B:F2:0C:8C:B0 Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F Certificate issuer: /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Certificate serial: 7D4CCE25A7C9A110083C1F2EFCAC433D601007EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:58:19 +0000 Manifest this update: Tue 12 May 2026 20:53:19 +0000 Manifest next update: Wed 13 May 2026 21:42:19 +0000 Files and hashes: 1: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: CVqG9mh1X9V1ZbC6R/r5UJJ2xSfzA9r4RYW1GFYyElI=) 2: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: JuQ4cvsB/3E/np6OBFHLGq+Nt4mQQ/GxzLV4MrmhfZo=) 3: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl (hash: dONbnOxZxbMi8nBzYpII7KszEHHWO8GSFzA3R0bL724=) 4: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: ieJoOGDuwtLlA8t0dN5yUaBjAk+rstjVqpks3BBFT2E=) 5: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: 0WsKsDzY8LPfrJ1pgXZgjbVmTWXixBFTK8YpHb3DNxU=) 6: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: pK3Vu7dEPBnTFAw3IDhWOXFOflNVhPv7/JjAZ1e/ubk=) 7: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: FdEj2/miSrHrif/CfoOvLE1OV+PuSrA43YH+LmHuPRM=) 8: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: rkn+DI7lNxqSqCTlwACNzV0qOshNnDXKFLIZsdocYhE=) 9: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: icfsfhUwquzTy2StQKBYwmmyOmAVCsssAYK5CyA5iDI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4c:ce:25:a7:c9:a1:10:08:3c:1f:2e:fc:ac:43:3d:60:10:07:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Validity Not Before: May 12 20:53:19 2026 GMT Not After : May 13 21:42:19 2026 GMT Subject: CN=EF5B9157F1E4C5813E464E0157A8EB3BF20C8CB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:20:ee:b1:5f:ae:f4:f8:46:6e:79:a4:5b: cd:0c:46:58:ba:10:21:25:a9:c1:b2:fe:1d:4e:fe: ef:89:b4:3b:eb:8f:d7:c5:4f:86:b9:6a:da:ca:f3: 92:07:07:7f:31:c5:6b:c2:d8:fb:de:c4:d6:72:8a: 71:2e:7a:8e:c6:f0:51:fb:39:50:60:83:2f:78:26: 0f:3e:fd:1c:91:c4:79:85:c2:5b:c8:bd:01:66:03: ee:65:9d:2c:d6:51:3b:3e:a6:a2:79:bd:a4:25:02: 64:7d:61:7c:8f:42:aa:94:5d:ca:c3:ec:17:db:da: b6:d5:10:d4:e4:29:30:54:6f:13:20:e9:aa:ab:a0: 1d:0d:51:b6:ec:21:02:42:b5:13:2f:80:6c:8b:7d: 3b:e1:c0:a2:04:80:a4:86:f9:5f:e6:3d:d1:0e:e9: 9c:5d:fc:6f:36:1f:db:c3:90:8c:89:56:88:3d:b2: 2a:2d:e3:5a:c2:6d:e3:12:0c:aa:ef:c3:1d:4b:a9: 08:f9:83:40:d9:28:a5:7d:1b:f4:2f:62:ba:6c:3c: 0f:a0:d0:c0:f9:25:2b:d1:3c:20:e8:fd:aa:10:e1: 0f:6e:4f:5a:01:08:71:55:f2:aa:12:3e:fb:31:cc: 52:71:51:ec:a6:64:18:4e:06:69:79:21:b6:ef:87: 1c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5B:91:57:F1:E4:C5:81:3E:46:4E:01:57:A8:EB:3B:F2:0C:8C:B0 X509v3 Authority Key Identifier: keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:bc:c9:d6:bd:bc:55:77:73:c9:7e:9b:30:18:63:6f:18:bf: 46:61:81:8b:ee:c0:f5:03:ba:2f:57:d5:40:b5:db:da:31:19: fc:02:9c:47:9f:6a:7b:94:ab:75:3a:51:73:29:90:d3:91:d5: 7d:fe:12:06:7c:95:ed:3a:46:c9:c3:dc:11:61:dd:d3:a8:37: c3:56:ec:2c:73:ee:9f:55:93:99:bd:df:1f:62:d0:1b:84:eb: 96:73:87:5f:d0:56:8a:bc:8e:6b:c1:8e:5b:3a:4d:59:70:94: 5f:2c:a6:d7:fb:13:0f:50:22:96:04:24:81:b7:59:5f:f6:b3: f7:32:21:24:b7:03:d5:a3:02:51:9a:a9:54:d5:e2:bc:4d:2d: 2b:42:cc:d1:52:29:59:f2:e2:61:6b:e6:7d:99:2e:b3:59:78: b6:0a:59:43:60:c6:35:0e:dc:d5:e5:c1:95:b6:e3:40:2a:f0: 38:6c:b9:6b:89:cc:59:35:e3:0d:85:7d:32:35:ce:7a:ea:73: 7c:90:02:2d:38:8b:cf:1b:d6:09:09:05:9b:d0:fa:82:db:53: e5:2e:87:2e:18:b4:5f:0e:9f:b8:82:bb:b0:b7:8d:69:b5:16: a2:fc:2f:37:db:61:f6:65:c3:9c:d3:b8:85:cf:a6:73:65:a4: 03:64:ca:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfUzOJafJoRAIPB8u/KxDPWAQB+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUwNDI0 RThDRUM4RjAeFw0yNjA1MTIyMDUzMTlaFw0yNjA1MTMyMTQyMTlaMDMxMTAvBgNV BAMTKEVGNUI5MTU3RjFFNEM1ODEzRTQ2NEUwMTU3QThFQjNCRjIwQzhDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQSDusV+u9PhGbnmkW80MRli6 ECElqcGy/h1O/u+JtDvrj9fFT4a5atrK85IHB38xxWvC2PvexNZyinEueo7G8FH7 OVBggy94Jg8+/RyRxHmFwlvIvQFmA+5lnSzWUTs+pqJ5vaQlAmR9YXyPQqqUXcrD 7Bfb2rbVENTkKTBUbxMg6aqroB0NUbbsIQJCtRMvgGyLfTvhwKIEgKSG+V/mPdEO 6Zxd/G82H9vDkIyJVog9siot41rCbeMSDKrvwx1LqQj5g0DZKKV9G/QvYrpsPA+g 0MD5JSvRPCDo/aoQ4Q9uT1oBCHFV8qoSPvsxzFJxUeymZBhOBml5Ibbvhxz7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU71uRV/HkxYE+Rk4BV6jrO/IMjLAwHwYDVR0j BBgwFoAUium7IQA+hzls7deJi0pQQk6M7I8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmOGY1NWMtOWUzNS00Y2UyLTg5MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEw MDNFODczOTZDRURENzg5OEI0QTUwNDI0RThDRUM4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUU5QkIyMTAwM0U4NzM5NkNFREQ3ODk4QjRBNTA0MjRFOENF QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUw NDI0RThDRUM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHe8yda9vFV3c8l+mzAYY28Yv0ZhgYvuwPUD ui9X1UC129oxGfwCnEefanuUq3U6UXMpkNOR1X3+EgZ8le06RsnD3BFh3dOoN8NW 7Cxz7p9Vk5m93x9i0BuE65Zzh1/QVoq8jmvBjls6TVlwlF8sptf7Ew9QIpYEJIG3 WV/2s/cyISS3A9WjAlGaqVTV4rxNLStCzNFSKVny4mFr5n2ZLrNZeLYKWUNgxjUO 3NXlwZW240Aq8DhsuWuJzFk14w2FfTI1znrqc3yQAi04i88b1gkJBZvQ+oLbU+Uu hy4YtF8On7iCu7C3jWm1FqL8LzfbYfZlw5zTuIXPpnNlpANkymY= -----END CERTIFICATE-----Generated at Wed May 13 04:51:55 2026 by rpki-client