$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft File: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft (raw, json) Hash identifier: AEO1zhdxb971oW69b5hkOvW5fE/gRp8iS0S7ojtU6wQ= Subject key identifier: BB:0D:65:67:AE:EB:52:56:16:0A:54:48:98:87:1C:E6:36:60:BE:3D Authority key identifier: 08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB Certificate issuer: /CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB Certificate serial: 015C2968C21FA45617BFD61FE208659E26526221 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:22:13 +0000 Manifest this update: Tue 12 May 2026 06:17:13 +0000 Manifest next update: Wed 13 May 2026 08:15:13 +0000 Files and hashes: 1: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl (hash: Q4DKPxbBfNwvwxegh6yrJ5A1fXR4p0f98TfXJkzatuk=) 2: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: jUIsiSJsjPDf0Krk/AfybK3xD1mWMXMOgk6ke4wG6/A=) 3: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: tmjFjqEkGuahidtuLOdd3vjYKqdvzowGWZPOwb/+IMI=) 4: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: M2ft8YBsrZNHxT1qFC2d2ksNAchdYmEdnx+ruXyh3Bc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5c:29:68:c2:1f:a4:56:17:bf:d6:1f:e2:08:65:9e:26:52:62:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB Validity Not Before: May 12 06:17:13 2026 GMT Not After : May 13 08:15:13 2026 GMT Subject: CN=BB0D6567AEEB5256160A544898871CE63660BE3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:a1:d6:fb:c9:f5:f6:ab:92:67:f5:47:6c: cc:05:f1:ab:10:f6:22:02:ab:99:37:19:09:17:17: 9f:fe:e1:8c:0a:5e:92:7f:a0:5b:65:23:33:93:c1: d4:8e:74:be:10:26:ac:5a:ee:71:f9:68:ee:ad:1b: 27:a7:0d:14:c9:05:aa:8c:87:de:f1:57:f5:4c:57: 3a:d3:be:11:92:d1:a7:ae:24:b1:81:ed:f8:c0:cd: 33:59:17:99:63:99:46:71:54:1e:8d:8b:d8:0a:8d: 31:e0:15:42:51:ef:c7:f6:0f:03:fa:2b:e0:fa:40: 41:66:37:09:49:52:b3:7b:66:c7:dc:e7:9d:8d:ff: 80:8c:dc:27:7f:40:88:88:e0:79:21:cf:f1:8b:62: 5c:e2:e8:4d:77:2a:35:f6:ee:07:b3:3f:73:8c:48: ee:45:52:9b:d8:40:13:8e:18:e0:0d:86:10:20:d6: 6e:a9:ae:f2:41:ac:8b:69:93:e0:14:0b:31:5a:29: 1e:27:96:8b:b1:fa:0e:87:62:8b:bb:7e:93:5f:8f: 2e:93:a2:bc:38:70:a6:c5:73:d6:c8:42:a8:28:1f: b3:e7:b1:78:4e:85:96:21:ab:a0:6b:46:07:ed:36: af:d9:a5:5a:98:63:0a:9a:fc:45:11:8b:b6:fd:1f: aa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0D:65:67:AE:EB:52:56:16:0A:54:48:98:87:1C:E6:36:60:BE:3D X509v3 Authority Key Identifier: keyid:08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:8e:6a:7a:47:a3:7f:12:01:2f:42:ae:bb:e8:68:f9:d2:f6: 81:5d:cf:18:36:fa:a1:02:ed:21:58:dd:71:67:d8:33:8c:16: 6f:c9:64:af:11:78:24:d2:53:41:3a:86:65:bb:97:69:15:26: 2b:0a:1f:10:36:9b:a5:13:22:7f:18:bc:e2:7b:29:9d:b9:aa: 64:65:d3:6c:59:98:1b:b3:da:67:ab:d5:58:ed:f1:09:a8:c9: ae:43:06:12:db:6f:0c:c0:8d:5d:ff:fa:07:0c:c1:5b:de:04: d9:75:2b:f8:9e:91:39:bd:00:f9:76:48:ec:ff:de:fb:d2:a9: 21:ec:85:5f:08:03:cd:44:6f:bf:ee:f2:b3:a7:df:7f:91:eb: e4:71:00:5a:9d:27:f5:24:12:a1:12:ba:a5:9c:e6:e2:70:02: 9b:c2:e9:df:82:30:f1:d9:3e:45:17:ac:10:ca:82:d8:36:be: 72:fb:fd:e7:5f:83:7f:80:2b:1a:17:28:f6:99:18:eb:c9:ad: d1:d4:4c:e0:3b:dd:72:67:be:55:f3:b1:8d:17:d5:a2:96:28: ec:88:2a:40:74:2b:c9:ba:38:81:fe:64:09:54:af:d7:66:61: 67:87:0c:c4:13:e5:bb:4d:74:5b:fb:e5:68:a1:5f:72:9c:89: d0:29:5c:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVwpaMIfpFYXv9Yf4ghlniZSYiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgxNTFGRDYyRkExOEM5RUMyRjVCOURCNUQ0QTAzMTFE RjUwOTBCQjAeFw0yNjA1MTIwNjE3MTNaFw0yNjA1MTMwODE1MTNaMDMxMTAvBgNV BAMTKEJCMEQ2NTY3QUVFQjUyNTYxNjBBNTQ0ODk4ODcxQ0U2MzY2MEJFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2naHW+8n19quSZ/VHbMwF8asQ 9iICq5k3GQkXF5/+4YwKXpJ/oFtlIzOTwdSOdL4QJqxa7nH5aO6tGyenDRTJBaqM h97xV/VMVzrTvhGS0aeuJLGB7fjAzTNZF5ljmUZxVB6Ni9gKjTHgFUJR78f2DwP6 K+D6QEFmNwlJUrN7Zsfc552N/4CM3Cd/QIiI4Hkhz/GLYlzi6E13KjX27gezP3OM SO5FUpvYQBOOGOANhhAg1m6prvJBrItpk+AUCzFaKR4nloux+g6HYou7fpNfjy6T orw4cKbFc9bIQqgoH7PnsXhOhZYhq6BrRgftNq/ZpVqYYwqa/EURi7b9H6rhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuw1lZ67rUlYWClRImIcc5jZgvj0wHwYDVR0j BBgwFoAUCBUf1i+hjJ7C9bnbXUoDEd9QkLswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkZDI1MTktMzA3OC00N2QzLTllODYtNDhmZDNiZGU3NmM4LzAvMDgxNTFGRDYy RkExOEM5RUMyRjVCOURCNUQ0QTAzMTFERjUwOTBCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wODE1MUZENjJGQTE4QzlFQzJGNUI5REI1RDRBMDMxMURGNTA5 MEJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvMDgxNTFGRDYyRkExOEM5RUMyRjVCOURCNUQ0QTAz MTFERjUwOTBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWOanpHo38SAS9CrrvoaPnS9oFdzxg2+qEC 7SFY3XFn2DOMFm/JZK8ReCTSU0E6hmW7l2kVJisKHxA2m6UTIn8YvOJ7KZ25qmRl 02xZmBuz2mer1Vjt8Qmoya5DBhLbbwzAjV3/+gcMwVveBNl1K/iekTm9APl2SOz/ 3vvSqSHshV8IA81Eb7/u8rOn33+R6+RxAFqdJ/UkEqESuqWc5uJwApvC6d+CMPHZ PkUXrBDKgtg2vnL7/edfg3+AKxoXKPaZGOvJrdHUTOA73XJnvlXzsY0X1aKWKOyI KkB0K8m6OIH+ZAlUr9dmYWeHDMQT5btNdFv75WihX3KcidApXN0= -----END CERTIFICATE-----Generated at Tue May 12 22:47:08 2026 by rpki-client