$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft File: A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft (raw, json) Hash identifier: vYG9Xbt69TvHjXyM6QApjonKkJSMoWfqfJA05XykPnw= Subject key identifier: 67:F4:16:A0:8F:8A:3C:5D:7D:C1:28:C2:56:DE:C6:CE:75:61:0F:14 Authority key identifier: A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10 Certificate issuer: /CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310 Certificate serial: 265790DFFB7BE43A72389554C053C0BB7B0B2131 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:37:43 +0000 Manifest this update: Tue 12 May 2026 20:32:43 +0000 Manifest next update: Wed 13 May 2026 20:53:43 +0000 Files and hashes: 1: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: rj0eAc/Fx3ZnJOzSIDlZ7SEqTTGwaOV3Drw183dIjT4=) 2: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: GuNiUOOoy6zPyANA8gj8CAZ6aJ70gefpTuHjvXAYLoc=) 3: A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl (hash: Fa5LE3Is8AaHSIMDQS1Lz5OrVxoHAdqj0xhgL04McbU=) 4: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: 9Ri7gQA5FImbPHcWZvwCuT4KIhatc00BK6BTGVhP2a0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:57:90:df:fb:7b:e4:3a:72:38:95:54:c0:53:c0:bb:7b:0b:21:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310 Validity Not Before: May 12 20:32:43 2026 GMT Not After : May 13 20:53:43 2026 GMT Subject: CN=67F416A08F8A3C5D7DC128C256DEC6CE75610F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:77:d3:46:6c:2b:6c:03:43:d9:db:d7:1d:52: 11:b0:4c:4a:07:4a:41:61:12:74:c2:a8:11:64:f6: 07:c7:9d:e4:b5:2a:52:30:06:e8:fc:c6:94:23:a9: fc:0b:99:16:47:6f:f3:b0:8f:a8:89:74:7b:e2:7f: 78:87:f8:fc:73:19:20:15:b2:7c:bf:5e:46:37:36: ad:de:6b:f0:a1:a1:d9:7f:79:91:a4:9a:06:17:42: 58:52:fc:c1:78:72:1b:87:a3:8d:d8:8e:c3:9a:82: 77:6e:9f:ff:af:5b:89:7c:9f:f1:49:35:2c:37:1a: 7e:36:b2:f8:99:3c:e3:aa:78:cc:b6:df:43:ee:1e: 70:93:c4:f8:b8:61:3e:dd:67:21:64:3e:32:82:b3: 8a:9e:de:11:bf:cf:88:13:82:af:08:92:53:75:20: b7:17:c1:cd:f3:08:e6:e7:19:1d:44:1c:5a:69:0d: c8:4f:bb:a0:5e:9e:08:7e:e1:86:fc:f7:ee:fb:4c: 82:10:b9:75:b6:94:73:74:06:54:d9:28:20:38:d2: 74:6c:4e:7f:4a:b6:56:d4:b8:f8:3e:a8:63:53:0c: 80:0a:c2:cb:11:3f:29:72:f8:dc:6b:98:3d:b4:66: da:f9:2e:ad:c5:fe:b1:1c:51:81:ea:cc:d7:28:a1: 31:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F4:16:A0:8F:8A:3C:5D:7D:C1:28:C2:56:DE:C6:CE:75:61:0F:14 X509v3 Authority Key Identifier: keyid:A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:1f:41:42:cb:6a:30:0a:ab:14:ac:85:fb:e1:8b:16:e9:a9: 8a:64:7b:e2:8a:63:dd:e6:eb:a3:60:fb:45:2f:67:54:03:ec: e3:7f:70:fe:ec:a1:2b:e7:a7:5c:3c:b9:95:31:e1:77:06:a1: 52:4b:15:63:41:09:da:64:55:e4:b7:4c:4c:9e:69:80:13:6f: 7b:18:57:ba:4a:67:cb:11:26:60:3e:68:47:6d:c2:e9:f5:3b: f1:05:b4:23:05:7c:07:c0:0b:7f:c4:d2:bb:98:e8:ce:c3:41: 6c:55:54:6f:de:1e:be:8c:04:4a:95:49:82:c9:72:4d:3a:db: 95:a3:a6:37:bc:df:ba:29:09:5a:18:47:4d:85:e7:82:a7:5e: 25:c3:57:9c:24:46:9c:a4:1d:5f:49:9e:e9:ef:75:80:8f:60: d3:9f:9e:35:bb:1d:73:9f:1d:e2:6f:e6:9e:47:4b:dd:11:9a: 48:af:25:c1:a7:ef:10:6d:57:8c:d0:cc:fb:70:6d:f6:67:13: 3a:ce:d5:af:5e:3f:8e:1d:db:e4:55:7f:6f:18:5b:7e:5c:01: 39:cc:38:df:98:20:34:77:ca:d5:ad:94:b5:7e:1a:bb:63:23: 31:d0:dc:5c:76:03:3e:d9:a3:87:f7:a6:68:ef:e3:b6:1b:bb: 9b:63:8f:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJleQ3/t75DpyOJVUwFPAu3sLITEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgzMTRFNDNBMUI2RjhBRkRBOEQ5NUU4Nzc5QzY1NDE2 OTExRDMxMDAeFw0yNjA1MTIyMDMyNDNaFw0yNjA1MTMyMDUzNDNaMDMxMTAvBgNV BAMTKDY3RjQxNkEwOEY4QTNDNUQ3REMxMjhDMjU2REVDNkNFNzU2MTBGMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCad9NGbCtsA0PZ29cdUhGwTEoH SkFhEnTCqBFk9gfHneS1KlIwBuj8xpQjqfwLmRZHb/Owj6iJdHvif3iH+PxzGSAV sny/XkY3Nq3ea/Chodl/eZGkmgYXQlhS/MF4chuHo43YjsOagndun/+vW4l8n/FJ NSw3Gn42sviZPOOqeMy230PuHnCTxPi4YT7dZyFkPjKCs4qe3hG/z4gTgq8IklN1 ILcXwc3zCObnGR1EHFppDchPu6Bengh+4Yb89+77TIIQuXW2lHN0BlTZKCA40nRs Tn9KtlbUuPg+qGNTDIAKwssRPyly+NxrmD20Ztr5Lq3F/rEcUYHqzNcooTEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ/QWoI+KPF19wSjCVt7GznVhDxQwHwYDVR0j BBgwFoAUqDFOQ6G2+K/ajZXod5xlQWkR0xAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFhZjE0NGItYjkyZS00ZmZmLWI2NDEtZTQ2ZmRkZThjNmRmLzAvQTgzMTRFNDNB MUI2RjhBRkRBOEQ5NUU4Nzc5QzY1NDE2OTExRDMxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODMxNEU0M0ExQjZGOEFGREE4RDk1RTg3NzlDNjU0MTY5MTFE MzEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvQTgzMTRFNDNBMUI2RjhBRkRBOEQ5NUU4Nzc5QzY1 NDE2OTExRDMxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQfQULLajAKqxSshfvhixbpqYpke+KKY93m 66Ng+0UvZ1QD7ON/cP7soSvnp1w8uZUx4XcGoVJLFWNBCdpkVeS3TEyeaYATb3sY V7pKZ8sRJmA+aEdtwun1O/EFtCMFfAfAC3/E0ruY6M7DQWxVVG/eHr6MBEqVSYLJ ck0625Wjpje837opCVoYR02F54KnXiXDV5wkRpykHV9JnunvdYCPYNOfnjW7HXOf HeJv5p5HS90RmkivJcGn7xBtV4zQzPtwbfZnEzrO1a9eP44d2+RVf28YW35cATnM ON+YIDR3ytWtlLV+GrtjIzHQ3Fx2Az7Zo4f3pmjv47Ybu5tjj/s= -----END CERTIFICATE-----Generated at Tue May 12 22:46:51 2026 by rpki-client