$ rpki-client -vvf rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft File: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft (raw, json) Hash identifier: srBLgIuGLAgTR4aG/SCVbg+sW2fI6YRlUs41nHo9avs= Subject key identifier: BD:91:E7:D0:06:B0:32:81:91:9F:23:8B:D5:35:AD:12:31:1E:59:31 Authority key identifier: 08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB Certificate issuer: /CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Certificate serial: 1D3594D632F4243177099D5EEF482EE3527CC795 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:04:42 +0000 Manifest this update: Tue 12 May 2026 14:59:42 +0000 Manifest next update: Wed 13 May 2026 18:16:42 +0000 Files and hashes: 1: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl (hash: jisREBB0eFuIIsfE+gmO5lOiduDMcE43CkCxXEoRkws=) 2: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: Mcg9nbFeFqcbrXtsnWz+m6gsNfmlAcJQ2rPda7V7VVk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:35:94:d6:32:f4:24:31:77:09:9d:5e:ef:48:2e:e3:52:7c:c7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Validity Not Before: May 12 14:59:42 2026 GMT Not After : May 13 18:16:42 2026 GMT Subject: CN=BD91E7D006B03281919F238BD535AD12311E5931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:87:b9:b7:09:52:00:34:df:47:71:a3:6e: 8d:63:15:d1:44:26:20:24:c1:27:94:8c:16:4e:fc: 8f:ad:8e:0d:77:a5:74:28:83:6d:be:69:5d:39:55: 81:9b:df:94:d0:97:68:6e:3c:af:3b:20:35:94:15: 13:d1:8d:1c:81:b3:e6:a3:e4:54:40:62:ea:4a:07: 71:53:1b:45:a0:c0:73:d2:3e:1f:26:7b:19:65:36: 7e:fb:6c:a5:f0:13:7b:f1:88:fa:f1:30:27:2a:ee: fd:4a:b0:5d:f4:06:cb:05:26:4c:59:88:a4:dd:ab: 70:c5:e4:e1:87:21:37:2b:82:15:f1:dd:33:64:8e: 0b:7c:80:27:0f:8c:0b:e3:2c:05:60:0b:94:33:bb: 9c:02:5e:fb:3a:44:2f:65:53:0a:2e:5d:b9:b9:6c: 94:50:94:fb:b0:e1:de:c5:5d:01:48:38:e5:5c:c1: 3f:e6:44:16:d9:67:9f:61:72:1c:41:1e:fc:56:e5: 9c:ab:da:8d:2b:e7:92:24:16:14:c9:0f:d6:83:c8: a5:c6:2c:22:96:e9:8c:59:d4:4c:c7:7d:2f:fa:02: 66:18:6a:e4:9b:32:b6:72:4f:9b:63:33:5b:da:b2: 60:31:5e:15:b0:55:4f:49:b9:53:55:9c:ee:01:9e: 42:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:91:E7:D0:06:B0:32:81:91:9F:23:8B:D5:35:AD:12:31:1E:59:31 X509v3 Authority Key Identifier: keyid:08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:80:0f:54:a1:47:0d:15:7a:99:38:e8:73:bb:14:ae:ff:ab: 69:f6:39:84:61:f6:0f:64:18:ff:a6:a0:28:97:dd:4b:07:6f: 11:d4:d8:e5:ea:88:28:e4:4c:8f:9f:cc:65:55:e8:30:b8:5f: b4:12:16:a7:ba:8e:10:9d:ef:56:be:20:68:50:8f:a1:e7:ab: 46:5d:7f:e7:0a:c5:56:7b:c4:e4:36:41:b8:c1:37:74:4a:3f: 2d:e2:bd:90:b9:46:9d:9b:fd:a2:d9:48:80:8e:07:fd:cb:6a: 65:46:c2:d0:c7:a3:3a:84:a0:73:7d:a5:88:8d:1d:83:e7:c4: d3:5e:41:0f:b7:2f:69:df:bf:52:7c:6e:ae:2d:9e:c8:50:a8: b1:3c:d6:d1:a4:0e:9b:dc:3c:d9:65:3c:e7:a6:5b:2d:b1:b2: c1:0a:7e:78:93:4a:08:12:cc:f1:d8:36:bb:0e:b3:e1:c7:67: 1c:a8:f7:39:b6:62:20:0a:d3:fd:59:75:5c:19:e4:f1:16:47: e4:fb:7a:90:0b:ac:dc:47:b2:d0:c8:9f:9f:68:3e:63:22:ef: 26:ee:76:d7:02:16:4e:5f:18:c0:6c:28:c6:0c:1b:23:59:e0: a3:af:4b:86:f3:a7:91:63:e7:4f:05:c0:45:a8:85:2e:7d:1b: 93:5f:ec:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHTWU1jL0JDF3CZ1e70gu41J8x5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMx OUIzMDBGQjAeFw0yNjA1MTIxNDU5NDJaFw0yNjA1MTMxODE2NDJaMDMxMTAvBgNV BAMTKEJEOTFFN0QwMDZCMDMyODE5MTlGMjM4QkQ1MzVBRDEyMzExRTU5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXaYe5twlSADTfR3Gjbo1jFdFE JiAkwSeUjBZO/I+tjg13pXQog22+aV05VYGb35TQl2huPK87IDWUFRPRjRyBs+aj 5FRAYupKB3FTG0WgwHPSPh8mexllNn77bKXwE3vxiPrxMCcq7v1KsF30BssFJkxZ iKTdq3DF5OGHITcrghXx3TNkjgt8gCcPjAvjLAVgC5Qzu5wCXvs6RC9lUwouXbm5 bJRQlPuw4d7FXQFIOOVcwT/mRBbZZ59hchxBHvxW5Zyr2o0r55IkFhTJD9aDyKXG LCKW6YxZ1EzHfS/6AmYYauSbMrZyT5tjM1vasmAxXhWwVU9JuVNVnO4BnkL9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvZHn0AawMoGRnyOL1TWtEjEeWTEwHwYDVR0j BBgwFoAUCNsctHaQ8fZxmnGgay6v/BmzAPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE3Zjc5YjAtYjllMy00YzNkLWExMTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3 NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMxOUIzMDBGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wOERCMUNCNDc2OTBGMUY2NzE5QTcxQTA2QjJFQUZGQzE5QjMw MEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFG RkMxOUIzMDBGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2AD1ShRw0Vepk46HO7FK7/q2n2OYRh9g9k GP+moCiX3UsHbxHU2OXqiCjkTI+fzGVV6DC4X7QSFqe6jhCd71a+IGhQj6Hnq0Zd f+cKxVZ7xOQ2QbjBN3RKPy3ivZC5Rp2b/aLZSICOB/3LamVGwtDHozqEoHN9pYiN HYPnxNNeQQ+3L2nfv1J8bq4tnshQqLE81tGkDpvcPNllPOemWy2xssEKfniTSggS zPHYNrsOs+HHZxyo9zm2YiAK0/1ZdVwZ5PEWR+T7epALrNxHstDIn59oPmMi7ybu dtcCFk5fGMBsKMYMGyNZ4KOvS4bzp5Fj508FwEWohS59G5Nf7Iw= -----END CERTIFICATE-----Generated at Wed May 13 01:40:54 2026 by rpki-client