$ rpki-client -vvf rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft File: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft (raw, json) Hash identifier: 31O7OQ1o8GzbsuwqnREbNnFqJ9ZpdgttjknXzmcSBlY= Subject key identifier: 3A:17:AE:DB:EF:7D:C4:17:56:9B:4D:41:13:01:73:D0:AD:06:C2:54 Authority key identifier: B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 Certificate issuer: /CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Certificate serial: 2F476E032AAD1B51EBFA00F9D1EE0C4D088CC796 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:44:18 +0000 Manifest this update: Tue 12 May 2026 18:39:18 +0000 Manifest next update: Wed 13 May 2026 19:26:18 +0000 Files and hashes: 1: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl (hash: 82hff6S/3LYZX/iXB7QXvUyQzbI17GqqXuJdSGY78QA=) 2: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: 9VWfd5KMgyw5xyqB55UR/HJrZNws4qzcvTj6ecqQ/Qk=) 3: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: g5c7Nq+6t4kiF6CKiothKoqaQ8v25zT/n7Wj9Q/sxEQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:47:6e:03:2a:ad:1b:51:eb:fa:00:f9:d1:ee:0c:4d:08:8c:c7:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Validity Not Before: May 12 18:39:18 2026 GMT Not After : May 13 19:26:18 2026 GMT Subject: CN=3A17AEDBEF7DC417569B4D41130173D0AD06C254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:76:3d:53:a9:24:81:e7:99:65:4d:b1:0f: ad:3e:31:4b:11:b4:5d:9f:8d:11:b0:ee:22:45:c5: 8d:fd:ca:e1:83:22:b4:62:6b:80:c2:ab:30:3d:23: ce:6e:9d:4a:e2:f6:8d:2a:d3:79:7c:c4:fb:85:4f: 8b:29:59:42:17:31:f5:d0:d5:2f:75:fe:fe:22:d1: f5:cc:c7:5e:09:4a:06:26:7a:d4:59:c5:1e:59:a0: 6e:a3:e3:2a:c7:21:bf:45:4a:9d:0d:cd:e7:3f:f7: 60:d6:15:20:78:79:de:37:70:69:36:24:e8:ad:4d: 95:82:b3:5d:7d:e3:d0:78:39:c9:ff:8d:20:11:e8: a5:6e:2a:49:57:e8:e5:f5:24:ea:99:c5:e3:3a:25: e8:df:84:c9:c4:27:3e:98:64:df:5c:36:78:8d:47: 31:cb:d9:67:fc:43:2b:ce:e9:9e:0f:e2:72:15:4d: 77:04:58:27:15:56:4b:40:4e:54:d3:c9:f7:96:40: de:3f:9f:43:2c:6b:34:01:85:d1:5c:76:6c:bc:fa: 75:90:39:fb:c5:53:6c:d0:d6:ed:e9:c3:61:bf:8b: 9d:60:39:d1:71:89:7a:9b:a3:ba:af:ec:47:2b:ca: 7c:1e:96:9e:a7:9b:fa:08:a0:92:5f:2c:a4:0e:ed: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:17:AE:DB:EF:7D:C4:17:56:9B:4D:41:13:01:73:D0:AD:06:C2:54 X509v3 Authority Key Identifier: keyid:B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ff:13:5c:d2:dd:b8:95:8f:f1:66:eb:be:1e:bc:cb:d7:04: 38:88:51:16:da:d8:66:52:29:35:cd:1c:fc:5c:d0:71:fa:84: fd:5e:78:34:2a:8b:b6:4a:1b:4f:e3:89:6b:3a:3f:01:3c:8c: 46:63:25:4e:7a:95:9f:e4:5a:94:20:d7:e4:14:ca:d0:de:e1: 97:cd:5d:a7:b2:2d:93:c4:3a:55:c1:4a:c8:00:19:4e:4d:76: 7a:52:a3:42:a9:b8:32:c4:32:87:7f:13:37:15:57:60:eb:95: 68:92:24:17:e5:9b:e8:aa:97:f6:a9:0d:9b:8d:81:11:20:ee: 46:15:a8:0f:b9:77:4c:12:c1:36:b7:de:89:27:05:5a:6f:5c: 1c:18:01:6d:9f:7d:60:20:09:d4:d4:31:c6:b7:77:e4:34:ba: f4:2b:9e:c2:d5:4d:55:64:61:6c:60:6c:6f:09:35:e8:91:f5: 60:80:12:35:85:61:e1:3c:70:b6:48:4c:b9:90:1c:74:f7:87: 0c:66:dc:52:4e:7c:64:de:56:66:da:db:c8:26:41:ad:a2:c7: 95:e9:3a:64:c5:3d:52:21:19:7f:b0:7d:4f:d1:31:0d:54:4c: ca:3a:50:57:73:ca:da:d4:bd:2e:dc:e5:48:53:27:04:36:8f: f3:33:50:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0duAyqtG1Hr+gD50e4MTQiMx5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzExMUJB QjcwOTQwNjAeFw0yNjA1MTIxODM5MThaFw0yNjA1MTMxOTI2MThaMDMxMTAvBgNV BAMTKDNBMTdBRURCRUY3REM0MTc1NjlCNEQ0MTEzMDE3M0QwQUQwNkMyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnlnY9U6kkgeeZZU2xD60+MUsR tF2fjRGw7iJFxY39yuGDIrRia4DCqzA9I85unUri9o0q03l8xPuFT4spWUIXMfXQ 1S91/v4i0fXMx14JSgYmetRZxR5ZoG6j4yrHIb9FSp0Nzec/92DWFSB4ed43cGk2 JOitTZWCs11949B4Ocn/jSAR6KVuKklX6OX1JOqZxeM6JejfhMnEJz6YZN9cNniN RzHL2Wf8QyvO6Z4P4nIVTXcEWCcVVktATlTTyfeWQN4/n0MsazQBhdFcdmy8+nWQ OfvFU2zQ1u3pw2G/i51gOdFxiXqbo7qv7Ecrynwelp6nm/oIoJJfLKQO7bDFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOheu2+99xBdWm01BEwFz0K0GwlQwHwYDVR0j BBgwFoAUuBCMf76kK1mksA20otwRG6twlAYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjNzlmYmUtNDc5MC00NmJlLWI5YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZC RUE0MkI1OUE0QjAwREI0QTJEQzExMUJBQjcwOTQwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODEwOEM3RkJFQTQyQjU5QTRCMDBEQjRBMkRDMTExQkFCNzA5 NDA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzEx MUJBQjcwOTQwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABH/E1zS3biVj/Fm674evMvXBDiIURba2GZS KTXNHPxc0HH6hP1eeDQqi7ZKG0/jiWs6PwE8jEZjJU56lZ/kWpQg1+QUytDe4ZfN XaeyLZPEOlXBSsgAGU5NdnpSo0KpuDLEMod/EzcVV2DrlWiSJBflm+iql/apDZuN gREg7kYVqA+5d0wSwTa33oknBVpvXBwYAW2ffWAgCdTUMca3d+Q0uvQrnsLVTVVk YWxgbG8JNeiR9WCAEjWFYeE8cLZITLmQHHT3hwxm3FJOfGTeVmba28gmQa2ix5Xp OmTFPVIhGX+wfU/RMQ1UTMo6UFdzytrUvS7c5UhTJwQ2j/MzUI0= -----END CERTIFICATE-----Generated at Wed May 13 01:11:06 2026 by rpki-client