$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft File: 8638D28E3BD2280125963C7B30C34A226398A39F.mft (raw, json) Hash identifier: DhoKpwUHSrEeaC+Ft/QFakEkDp47ZtISKRMYD0M5Ipo= Subject key identifier: 87:8E:C4:33:CB:BA:5D:26:C9:DB:E1:96:57:7B:84:85:0C:7A:6A:0E Authority key identifier: 86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F Certificate issuer: /CN=8638D28E3BD2280125963C7B30C34A226398A39F Certificate serial: 1289DC7C3B4924C45533F1DA632600E135A7F41C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:17:01 +0000 Manifest this update: Tue 12 May 2026 20:12:01 +0000 Manifest next update: Wed 13 May 2026 22:44:01 +0000 Files and hashes: 1: 8638D28E3BD2280125963C7B30C34A226398A39F.crl (hash: soDtoF60c/BEx369wn8RhSCOV6Unib6tvc1+sFWPibY=) 2: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 9/PIsC2XMlKZxB7OIm0Zr26jWW2WY5JodvXs3A+orYA=) 3: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: K8RuD4iVWNDoq5/nKnK+l+BvrNOPQLNp6COtNPtCMfY=) 4: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: 7CUUFxXBF00bkdoTMxFKQ2ao9fNDKa33JZ3nwQoI/v0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:89:dc:7c:3b:49:24:c4:55:33:f1:da:63:26:00:e1:35:a7:f4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8638D28E3BD2280125963C7B30C34A226398A39F Validity Not Before: May 12 20:12:01 2026 GMT Not After : May 13 22:44:01 2026 GMT Subject: CN=878EC433CBBA5D26C9DBE196577B84850C7A6A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:67:f2:ae:35:4d:94:a4:6b:64:d6:e1:d1: 03:d6:b9:31:0a:e2:31:1d:a9:16:a1:55:59:ad:93: 3f:a9:24:11:0b:41:38:0e:05:6f:ba:c6:10:63:d2: f5:cf:da:0d:fb:82:e7:d0:e7:b1:3b:5a:6a:a8:8d: 05:a8:23:cb:70:4e:e5:db:5c:81:11:57:a4:47:d3: 39:ab:d7:4a:41:3a:f3:78:b5:aa:63:d3:d4:7b:02: 24:1f:6d:e4:99:1a:b6:73:c1:5d:35:3f:ba:29:91: d8:13:68:37:90:3a:9a:1f:05:57:3e:ca:0c:2b:3b: 02:16:5f:b4:f7:f0:51:c1:9b:58:d6:fb:e8:34:73: 25:c9:9a:5c:d8:b2:76:ba:47:12:e9:63:3d:f1:9c: 0d:a8:07:5a:2f:e3:21:ab:37:57:92:de:08:82:24: 24:d0:ba:09:e2:05:87:64:4a:ad:91:5a:a1:fa:03: a9:2e:98:95:87:8a:2d:7f:f4:29:3f:5d:d5:3c:b7: 0f:4b:b7:bc:85:36:27:ed:71:fb:cd:dc:95:79:a5: f3:e8:3c:1b:34:b3:cd:c4:34:1c:78:7e:e8:e2:94: da:be:21:90:1a:76:e2:09:52:d9:b4:7f:79:1d:3c: a2:61:b4:84:5e:9a:1a:66:e6:ae:4f:a1:af:f0:04: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8E:C4:33:CB:BA:5D:26:C9:DB:E1:96:57:7B:84:85:0C:7A:6A:0E X509v3 Authority Key Identifier: keyid:86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:06:e9:0c:2e:8d:44:0f:26:4c:73:60:8d:78:7d:0d:d8:69: 27:0d:f8:27:42:11:29:c3:9c:bb:3f:54:0d:c4:d5:30:d7:77: d5:2c:a8:4d:0b:bb:fe:dc:39:c2:b7:dc:ee:fc:74:d9:89:56: e0:17:8c:b3:4d:17:16:ea:1d:49:5e:f0:de:ff:cf:cb:5c:42: 28:69:96:ce:3b:d7:1e:33:e4:ae:43:3d:0a:a8:5c:61:36:38: 2b:47:4a:0e:1a:f4:64:b5:1e:03:32:d0:8a:62:91:b5:37:a9: 66:da:07:9a:3a:84:f6:06:d8:7c:17:f0:a8:a3:9a:e6:be:9b: 11:c1:09:9d:4d:25:05:28:69:50:b7:3f:d6:9f:55:e9:77:ea: c8:10:7a:68:7e:ad:82:dd:ac:7e:e1:7b:2e:da:e8:22:69:dd: f4:ca:55:f4:4d:40:94:91:58:7b:af:1f:e3:0a:31:81:5f:74: 55:6f:08:3c:7b:27:1d:64:50:9f:4d:48:53:98:7a:37:85:35: 86:2b:c9:85:01:41:09:25:0e:49:92:c0:ef:d8:22:34:8c:3a: 1d:c2:9d:53:93:aa:11:d6:6d:64:7c:fc:77:6b:0c:8e:bd:c9: 97:3e:d8:a8:5d:e7:ba:a9:5a:36:f4:0b:47:db:c3:18:2b:cc: d9:ee:2e:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEoncfDtJJMRVM/HaYyYA4TWn9BwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2 Mzk4QTM5RjAeFw0yNjA1MTIyMDEyMDFaFw0yNjA1MTMyMjQ0MDFaMDMxMTAvBgNV BAMTKDg3OEVDNDMzQ0JCQTVEMjZDOURCRTE5NjU3N0I4NDg1MEM3QTZBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJMmfyrjVNlKRrZNbh0QPWuTEK 4jEdqRahVVmtkz+pJBELQTgOBW+6xhBj0vXP2g37gufQ57E7WmqojQWoI8twTuXb XIERV6RH0zmr10pBOvN4tapj09R7AiQfbeSZGrZzwV01P7opkdgTaDeQOpofBVc+ ygwrOwIWX7T38FHBm1jW++g0cyXJmlzYsna6RxLpYz3xnA2oB1ov4yGrN1eS3giC JCTQugniBYdkSq2RWqH6A6kumJWHii1/9Ck/XdU8tw9Lt7yFNiftcfvN3JV5pfPo PBs0s83ENBx4fujilNq+IZAaduIJUtm0f3kdPKJhtIRemhpm5q5Poa/wBN0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh47EM8u6XSbJ2+GWV3uEhQx6ag4wHwYDVR0j BBgwFoAUhjjSjjvSKAElljx7MMNKImOYo58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdmZjAxZDAtMjZmOS00YjIwLWEzMTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUz QkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2Mzk4QTM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjM4RDI4RTNCRDIyODAxMjU5NjNDN0IzMEMzNEEyMjYzOThB MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRB MjI2Mzk4QTM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUG6QwujUQPJkxzYI14fQ3YaScN+CdCESnD nLs/VA3E1TDXd9UsqE0Lu/7cOcK33O78dNmJVuAXjLNNFxbqHUle8N7/z8tcQihp ls471x4z5K5DPQqoXGE2OCtHSg4a9GS1HgMy0IpikbU3qWbaB5o6hPYG2HwX8Kij mua+mxHBCZ1NJQUoaVC3P9afVel36sgQemh+rYLdrH7hey7a6CJp3fTKVfRNQJSR WHuvH+MKMYFfdFVvCDx7Jx1kUJ9NSFOYejeFNYYryYUBQQklDkmSwO/YIjSMOh3C nVOTqhHWbWR8/HdrDI69yZc+2Khd57qpWjb0C0fbwxgrzNnuLu8= -----END CERTIFICATE-----Generated at Wed May 13 07:14:50 2026 by rpki-client