$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft File: 8D7E0574648D2E037D2147F409FC002E56E42A23.mft (raw, json) Hash identifier: lrF83VSeDQKYUAql054dEBMiQVEpzR5Ms8wFmNzhj7g= Subject key identifier: 1A:B0:DC:75:7F:43:8F:0E:77:44:73:AD:D3:1A:50:16:E7:1F:A9:9F Authority key identifier: 8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 Certificate issuer: /CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Certificate serial: 3C75AC5625BA86610A06A8695FD65ACEA48CA2C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:32:28 +0000 Manifest this update: Tue 12 May 2026 20:27:28 +0000 Manifest next update: Wed 13 May 2026 23:46:28 +0000 Files and hashes: 1: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: Wh9jPiaMLmpVJg4WJmhSTDv7ObmHyLTAXzkGZmow5b0=) 2: 8D7E0574648D2E037D2147F409FC002E56E42A23.crl (hash: 3WY/iRJenRDX6lL2Yx0JmBijij0R4UGHtcTOttUS93E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:75:ac:56:25:ba:86:61:0a:06:a8:69:5f:d6:5a:ce:a4:8c:a2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Validity Not Before: May 12 20:27:28 2026 GMT Not After : May 13 23:46:28 2026 GMT Subject: CN=1AB0DC757F438F0E774473ADD31A5016E71FA99F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:bd:02:44:73:a7:cd:84:62:3b:3a:39:00: 80:f9:d0:f1:31:ad:19:9b:3a:76:c9:2a:e1:31:67: fd:bb:1e:bb:cf:a4:f7:a0:08:6f:71:6e:d7:a8:87: be:79:57:bf:57:a0:9a:ed:00:4e:f2:e5:c1:e5:94: fc:bb:cb:cd:76:65:7e:8e:58:ed:ce:db:42:2a:04: 7b:e0:68:a7:ff:27:f5:c9:30:8a:e5:e7:04:ad:d4: 7b:26:a4:ed:53:61:8d:5e:85:f6:03:4b:03:78:48: 28:4c:c0:9a:a5:2e:92:34:ca:3c:18:64:a2:0a:c0: 44:5f:52:41:a5:81:81:32:e3:9e:44:47:d7:1e:ce: fc:d5:99:8a:11:88:ff:53:dd:d2:c4:3d:b6:19:55: ae:4e:fa:98:ed:3f:aa:0e:4b:9a:a2:9a:71:57:d0: 37:67:79:96:52:be:4a:60:8d:ee:6e:5c:39:e2:ee: a0:e2:59:a6:86:8a:c4:1c:20:68:9b:7f:1b:63:66: 07:49:13:15:a3:b7:06:f3:ad:76:94:92:89:ec:9b: 72:e5:04:9a:9f:97:3a:a4:c6:74:4d:96:c1:8c:01: 70:0d:68:94:59:10:b7:ce:29:3f:b5:53:75:5e:f8: ea:45:33:b2:e4:59:a6:bb:fa:4e:51:64:9d:b8:2e: 24:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B0:DC:75:7F:43:8F:0E:77:44:73:AD:D3:1A:50:16:E7:1F:A9:9F X509v3 Authority Key Identifier: keyid:8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d8:f6:5a:cf:60:83:0c:57:c5:db:d8:f2:01:22:4e:21:78: 8f:33:ee:e7:2c:65:4f:44:f7:ff:7c:fa:92:6a:e3:69:b6:77: a2:ba:ff:1a:6c:bb:d6:99:86:f0:b4:4d:fd:43:68:56:54:ad: 44:95:bd:19:85:2e:e1:33:c6:7c:10:f8:2e:9e:9b:43:5a:11: 0b:02:01:1c:16:91:88:51:e7:54:03:46:3e:37:0f:d8:75:cb: 3e:c5:bb:a9:4c:8b:b9:a1:29:55:51:ef:be:9c:0e:92:ed:bb: 0a:82:b7:d4:9b:9c:f7:ad:3f:8a:3e:d6:13:f8:bd:43:b9:75: 21:6e:51:26:9e:3c:f4:78:15:26:ee:6f:d0:3f:a3:e4:4c:dc: c5:65:19:a9:ec:0c:b6:5d:43:a0:0e:e4:cb:4a:b6:c1:f8:d1: 8f:92:00:08:0f:63:38:71:52:d8:f0:b3:13:bc:40:03:b3:f8: 71:30:8a:4e:dd:91:a1:ce:a3:a7:29:0a:c2:51:40:1e:41:25: 2e:54:29:f9:74:35:d5:18:a2:04:9f:ab:c6:86:a9:11:64:43: 0c:25:be:02:9b:e6:46:18:39:5c:d1:f3:e3:8d:6b:8f:51:f3: 23:6c:ad:95:ed:a0:d0:bd:0b:d6:e3:96:db:1f:a0:05:1e:6c: 31:d3:7d:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPHWsViW6hmEKBqhpX9ZazqSMosUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1 NkU0MkEyMzAeFw0yNjA1MTIyMDI3MjhaFw0yNjA1MTMyMzQ2MjhaMDMxMTAvBgNV BAMTKDFBQjBEQzc1N0Y0MzhGMEU3NzQ0NzNBREQzMUE1MDE2RTcxRkE5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2N70CRHOnzYRiOzo5AID50PEx rRmbOnbJKuExZ/27HrvPpPegCG9xbteoh755V79XoJrtAE7y5cHllPy7y812ZX6O WO3O20IqBHvgaKf/J/XJMIrl5wSt1HsmpO1TYY1ehfYDSwN4SChMwJqlLpI0yjwY ZKIKwERfUkGlgYEy455ER9cezvzVmYoRiP9T3dLEPbYZVa5O+pjtP6oOS5qimnFX 0DdneZZSvkpgje5uXDni7qDiWaaGisQcIGibfxtjZgdJExWjtwbzrXaUkonsm3Ll BJqflzqkxnRNlsGMAXANaJRZELfOKT+1U3Ve+OpFM7LkWaa7+k5RZJ24LiRzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGrDcdX9Djw53RHOt0xpQFucfqZ8wHwYDVR0j BBgwFoAUjX4FdGSNLgN9IUf0CfwALlbkKiMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2 NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1NkU0MkEyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDdFMDU3NDY0OEQyRTAzN0QyMTQ3RjQwOUZDMDAyRTU2RTQy QTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAw MkU1NkU0MkEyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDY9lrPYIMMV8Xb2PIBIk4heI8z7ucsZU9E 9/98+pJq42m2d6K6/xpsu9aZhvC0Tf1DaFZUrUSVvRmFLuEzxnwQ+C6em0NaEQsC ARwWkYhR51QDRj43D9h1yz7Fu6lMi7mhKVVR776cDpLtuwqCt9SbnPetP4o+1hP4 vUO5dSFuUSaePPR4FSbub9A/o+RM3MVlGansDLZdQ6AO5MtKtsH40Y+SAAgPYzhx UtjwsxO8QAOz+HEwik7dkaHOo6cpCsJRQB5BJS5UKfl0NdUYogSfq8aGqRFkQwwl vgKb5kYYOVzR8+ONa49R8yNsrZXtoNC9C9bjltsfoAUebDHTfQQ= -----END CERTIFICATE-----Generated at Wed May 13 06:48:39 2026 by rpki-client