$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft File: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft (raw, json) Hash identifier: aC+X2ciED7qS2HY0F741+j5ppQ77/JKIiIep8Ldp/z4= Subject key identifier: A3:F8:F0:31:8E:ED:D9:8A:C9:3D:D8:45:30:F3:7E:2C:20:2D:CA:79 Authority key identifier: F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 Certificate issuer: /CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Certificate serial: 01FC02BA5A80C4C71A2A2362CD425BCBB29138E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:27:15 +0000 Manifest this update: Tue 12 May 2026 17:22:15 +0000 Manifest next update: Wed 13 May 2026 20:11:15 +0000 Files and hashes: 1: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl (hash: LPuJX7Y8wP/c+lolo1vc9duD3lsOCtNLnL+8Bnv0kuY=) 2: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ebJX0xmBUCyzAXEckdnMbEf0pSEsLD4g9s9OXuyGYmM=) 3: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: rPbVerJ1hIqpxViNC0hFDNp8HCiflf0mjWJTLUhjlFU=) 4: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: 9E/Ti671GF/WZdUwZ2RH1G2YB9kJfWY4JlzPZetlvoI=) 5: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: VGZWopnP5E+cpki2YrX/ob7V+wdxOvea5qW0A+eDkWM=) 6: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: prj58PGbUwDLvrT9h5jO7nMgDDmjvocJnN5ph+z3PrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fc:02:ba:5a:80:c4:c7:1a:2a:23:62:cd:42:5b:cb:b2:91:38:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Validity Not Before: May 12 17:22:15 2026 GMT Not After : May 13 20:11:15 2026 GMT Subject: CN=A3F8F0318EEDD98AC93DD84530F37E2C202DCA79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:02:db:41:6f:61:ac:c8:77:69:0a:46:bb: 0a:c1:86:5c:71:d8:b3:ed:8c:f1:f7:3c:0e:26:cf: 98:4c:74:62:bb:a2:5e:ec:f9:55:20:bc:7e:95:9b: 3e:3d:82:79:c8:e6:85:ea:ef:73:c9:a5:af:62:3c: 38:35:5d:3b:24:0f:65:1b:8b:46:69:32:4b:a9:81: 18:7b:08:2d:78:0e:a8:be:8f:47:6b:5a:8e:42:39: ca:00:c8:98:f0:6b:96:77:41:d9:3c:70:0e:ac:58: 88:5f:4f:39:f6:ab:42:a6:ef:9c:8f:42:cf:a7:c4: 7a:27:f9:5d:97:d1:e0:cd:51:3f:01:9f:1c:52:ab: 2f:51:c4:12:fb:2e:20:2f:72:57:b7:d5:c6:f8:2f: 94:b7:97:fe:eb:db:34:15:8f:32:4f:c6:e3:b5:8f: 3e:10:7f:58:38:2f:3e:a9:f1:ce:04:43:a8:1b:36: 0c:ae:69:10:38:78:d3:8b:ab:f5:01:8e:90:a5:8a: ea:da:05:98:0f:f5:ea:6f:88:1f:1b:cc:2e:29:fb: 80:6d:68:6f:2c:b5:bc:30:49:25:0f:77:8a:50:13: 77:8e:28:ca:39:b0:02:b9:9f:af:70:92:f6:70:34: df:b6:0f:78:80:4a:dd:39:27:52:5b:eb:e1:5e:98: f5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F8:F0:31:8E:ED:D9:8A:C9:3D:D8:45:30:F3:7E:2C:20:2D:CA:79 X509v3 Authority Key Identifier: keyid:F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8f:7d:ad:94:9b:b6:d2:89:c4:fd:dc:30:96:07:9f:c3:ed: d6:7b:51:91:c0:df:ab:74:6d:8f:5e:d3:2a:49:ad:3d:85:21: 45:b6:b6:3f:98:78:ba:4a:a4:1c:93:74:de:2d:a6:9c:32:10: 07:55:df:20:64:c9:76:b7:60:80:0d:14:11:e0:a5:cd:7c:96: ea:a9:4f:a0:32:16:b3:8e:7a:3f:00:00:c7:58:84:ef:fd:73: a8:d9:62:1c:36:74:68:f0:9c:43:f6:9b:02:df:03:93:fc:ae: 82:f6:0b:67:26:27:03:f4:a6:e5:14:f6:cf:8e:44:69:e6:38: c7:e0:0c:c4:16:7e:52:e3:2d:e9:5e:8a:6d:a3:ba:6e:32:7c: 65:48:9b:a6:cc:23:ec:82:89:74:f0:c1:13:99:f1:0b:b0:31: 82:c8:15:56:fc:22:a1:d3:c4:1e:12:ed:14:37:ca:2a:04:18: b5:59:62:8a:31:45:13:60:07:e4:f3:28:56:1c:d5:4f:9f:b9: bd:21:b9:c7:bf:6b:f6:ef:51:dd:6f:c8:c5:74:b0:45:77:db: ec:75:f0:03:d8:57:60:df:7b:15:90:c2:93:22:93:2b:07:79: e3:04:0a:6e:e0:24:ce:21:68:6e:fd:c2:0f:34:90:87:7b:68: 7c:8b:b8:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAfwCulqAxMcaKiNizUJby7KROOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlC MUVCRDIxNDAeFw0yNjA1MTIxNzIyMTVaFw0yNjA1MTMyMDExMTVaMDMxMTAvBgNV BAMTKEEzRjhGMDMxOEVFREQ5OEFDOTNERDg0NTMwRjM3RTJDMjAyRENBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZALbQW9hrMh3aQpGuwrBhlxx 2LPtjPH3PA4mz5hMdGK7ol7s+VUgvH6Vmz49gnnI5oXq73PJpa9iPDg1XTskD2Ub i0ZpMkupgRh7CC14Dqi+j0drWo5COcoAyJjwa5Z3Qdk8cA6sWIhfTzn2q0Km75yP Qs+nxHon+V2X0eDNUT8BnxxSqy9RxBL7LiAvcle31cb4L5S3l/7r2zQVjzJPxuO1 jz4Qf1g4Lz6p8c4EQ6gbNgyuaRA4eNOLq/UBjpCliuraBZgP9epviB8bzC4p+4Bt aG8stbwwSSUPd4pQE3eOKMo5sAK5n69wkvZwNN+2D3iASt05J1Jb6+FemPUZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo/jwMY7t2YrJPdhFMPN+LCAtynkwHwYDVR0j BBgwFoAU+OnUjRfMOONMv8dLXAf0qbHr0hQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOGQ5MDgtMWI5OS00NTVjLWFjNzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQx N0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlCMUVCRDIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEU5RDQ4RDE3Q0MzOEUzNENCRkM3NEI1QzA3RjRBOUIxRUJE MjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0 QTlCMUVCRDIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOPfa2Um7bSicT93DCWB5/D7dZ7UZHA36t0 bY9e0ypJrT2FIUW2tj+YeLpKpByTdN4tppwyEAdV3yBkyXa3YIANFBHgpc18luqp T6AyFrOOej8AAMdYhO/9c6jZYhw2dGjwnEP2mwLfA5P8roL2C2cmJwP0puUU9s+O RGnmOMfgDMQWflLjLeleim2jum4yfGVIm6bMI+yCiXTwwROZ8QuwMYLIFVb8IqHT xB4S7RQ3yioEGLVZYooxRRNgB+TzKFYc1U+fub0huce/a/bvUd1vyMV0sEV32+x1 8APYV2DfexWQwpMikysHeeMECm7gJM4haG79wg80kId7aHyLuD8= -----END CERTIFICATE-----Generated at Wed May 13 02:12:29 2026 by rpki-client