$ rpki-client -vvf rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft File: 8FB017F8558B134E65670C5E56417CAA2FC460F1.mft (raw, json) Hash identifier: aC/ZPESDPWWi0SpWMkQ2/N/Ch2UaatXxvvc+P76kbtM= Subject key identifier: C2:A4:21:69:2E:37:25:A8:25:59:31:03:1D:C1:CD:80:C1:81:EB:B9 Authority key identifier: 8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 Certificate issuer: /CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Certificate serial: 6916E7F663AFE41A4DF761F6B774A1D7FB56FF80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:53:10 +0000 Manifest this update: Tue 12 May 2026 20:48:10 +0000 Manifest next update: Wed 13 May 2026 21:48:10 +0000 Files and hashes: 1: 8FB017F8558B134E65670C5E56417CAA2FC460F1.crl (hash: xlWCYucIo3Eo9FhtUKf739lGXyrnot0vG5Oc9zvM2EI=) 2: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: toXJPhNtOXf98GJBbdqi9mllMSbcAgrmezktdUtueZ4=) 3: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: DZWl5mWmmx3C6HZfgC0P5GgRxbzQDenyir2DbhS+/vY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:16:e7:f6:63:af:e4:1a:4d:f7:61:f6:b7:74:a1:d7:fb:56:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Validity Not Before: May 12 20:48:10 2026 GMT Not After : May 13 21:48:10 2026 GMT Subject: CN=C2A421692E3725A8255931031DC1CD80C181EBB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:de:48:d5:10:9d:ee:e0:60:b9:ca:24:2e:85: 57:ba:1d:c9:d0:14:8f:63:a4:c0:19:05:3f:2b:d3: 52:9b:e3:3c:3d:e4:6e:a3:f7:17:ce:ae:8f:78:61: 69:15:42:24:93:a7:dc:9e:68:8e:23:fa:29:6a:f0: 74:71:f6:04:e1:be:d9:1c:ff:f4:34:17:49:a2:90: 83:a7:bb:98:82:db:aa:08:29:48:14:a2:de:1a:d1: 48:f0:9d:e9:cb:0d:3a:b6:88:73:c1:f0:c0:fa:9a: 92:79:1c:b9:ac:50:04:bb:96:26:9c:c3:7e:a2:37: 08:9e:7a:5a:5f:e3:58:aa:5e:0c:7d:91:3c:ff:ef: 91:5f:23:05:2f:48:b3:19:7a:10:da:da:25:3e:e3: 0a:a3:7f:09:d8:9c:aa:6a:b0:9a:51:fd:90:89:e0: 2e:2d:6f:a1:cf:f4:eb:3a:06:8f:b2:57:39:ae:51: f5:0e:3e:8a:19:f8:94:d1:55:29:7f:1e:56:02:f3: 76:cc:2b:51:8a:15:7a:cd:3e:61:bb:7f:75:68:ee: 88:6a:0a:3b:07:6f:0e:80:aa:ef:49:6f:8b:27:a2: 0f:77:f6:6f:07:05:0a:f0:15:01:37:4a:28:ce:02: 37:fc:4f:81:e0:93:68:0c:79:a0:6b:ad:a6:eb:90: 46:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A4:21:69:2E:37:25:A8:25:59:31:03:1D:C1:CD:80:C1:81:EB:B9 X509v3 Authority Key Identifier: keyid:8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:bb:19:14:6f:c3:11:11:5e:ed:71:d5:40:db:68:45:9d:59: 96:8f:8b:ea:ab:d2:8f:0d:cc:3b:cc:58:02:ac:15:43:d6:0c: dc:30:16:52:52:45:af:ac:a0:8e:71:a9:38:35:5d:13:ef:cb: 12:a6:cd:80:c6:3e:31:ba:35:7d:9a:87:96:7c:6d:c0:3e:a8: b0:2c:ef:c3:74:96:52:8e:42:05:30:1b:cb:1b:0d:23:ea:31: be:6a:82:74:83:14:65:28:c9:2a:74:e8:a5:46:8d:7f:78:e6: 61:56:43:5a:ae:a5:e4:4e:6f:be:ac:c1:a5:85:46:5d:0e:7f: 10:ba:5a:4c:26:97:04:41:4b:a5:d3:70:40:48:c2:e4:1a:2a: e3:0e:9b:2d:65:73:77:81:cb:5e:03:55:e9:d1:5f:8b:b9:62: e2:4c:86:26:f7:d1:35:9a:ad:2b:0e:e5:61:55:82:5b:c4:35: ee:36:31:41:fc:c7:41:f0:3e:75:8f:92:19:bd:55:c8:2d:78: 81:01:a4:38:b2:00:a7:17:4a:18:fd:81:3d:b7:70:03:73:11: e3:07:31:6a:c5:79:1e:14:6c:a5:c9:e1:75:01:b8:6c:fc:c0: f6:49:21:49:12:e7:91:bf:30:0f:02:8d:13:59:85:ba:9c:23: b6:32:10:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaRbn9mOv5BpN92H2t3Sh1/tW/4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEy RkM0NjBGMTAeFw0yNjA1MTIyMDQ4MTBaFw0yNjA1MTMyMTQ4MTBaMDMxMTAvBgNV BAMTKEMyQTQyMTY5MkUzNzI1QTgyNTU5MzEwMzFEQzFDRDgwQzE4MUVCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX3kjVEJ3u4GC5yiQuhVe6HcnQ FI9jpMAZBT8r01Kb4zw95G6j9xfOro94YWkVQiSTp9yeaI4j+ilq8HRx9gThvtkc //Q0F0mikIOnu5iC26oIKUgUot4a0UjwnenLDTq2iHPB8MD6mpJ5HLmsUAS7liac w36iNwieelpf41iqXgx9kTz/75FfIwUvSLMZehDa2iU+4wqjfwnYnKpqsJpR/ZCJ 4C4tb6HP9Os6Bo+yVzmuUfUOPooZ+JTRVSl/HlYC83bMK1GKFXrNPmG7f3Vo7ohq CjsHbw6Aqu9Jb4snog939m8HBQrwFQE3SijOAjf8T4Hgk2gMeaBrrabrkEarAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwqQhaS43JaglWTEDHcHNgMGB67kwHwYDVR0j BBgwFoAUj7AX+FWLE05lZwxeVkF8qi/EYPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMyOGFhYzMtMDA5NC00MjFmLWEyMDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1 NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEyRkM0NjBGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkIwMTdGODU1OEIxMzRFNjU2NzBDNUU1NjQxN0NBQTJGQzQ2 MEYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdD QUEyRkM0NjBGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALu7GRRvwxERXu1x1UDbaEWdWZaPi+qr0o8N zDvMWAKsFUPWDNwwFlJSRa+soI5xqTg1XRPvyxKmzYDGPjG6NX2ah5Z8bcA+qLAs 78N0llKOQgUwG8sbDSPqMb5qgnSDFGUoySp06KVGjX945mFWQ1qupeROb76swaWF Rl0OfxC6WkwmlwRBS6XTcEBIwuQaKuMOmy1lc3eBy14DVenRX4u5YuJMhib30TWa rSsO5WFVglvENe42MUH8x0HwPnWPkhm9VcgteIEBpDiyAKcXShj9gT23cANzEeMH MWrFeR4UbKXJ4XUBuGz8wPZJIUkS55G/MA8CjRNZhbqcI7YyEFI= -----END CERTIFICATE-----Generated at Wed May 13 01:17:01 2026 by rpki-client