$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft File: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft (raw, json) Hash identifier: N1WozZD/uGb2IB/UvIiA0726g/YlTdP3DUM2j74larw= Subject key identifier: CE:DC:E2:8E:6A:EB:62:C5:A3:8C:F7:83:AA:80:B4:15:F2:92:B4:41 Authority key identifier: 8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 Certificate issuer: /CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Certificate serial: 25D73D4BA8F91F96BE3A918877350429D04786FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:25:25 +0000 Manifest this update: Tue 12 May 2026 19:20:25 +0000 Manifest next update: Wed 13 May 2026 19:33:25 +0000 Files and hashes: 1: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl (hash: MMwih2VgB1euK/UkuNPMrfTboxLOBsbyvRuRNXMjYQM=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: WXHF3ztWLcHGSe6MPgiYVl8CmUEe+OPjuifFRIwvCro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d7:3d:4b:a8:f9:1f:96:be:3a:91:88:77:35:04:29:d0:47:86:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Validity Not Before: May 12 19:20:25 2026 GMT Not After : May 13 19:33:25 2026 GMT Subject: CN=CEDCE28E6AEB62C5A38CF783AA80B415F292B441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:51:40:fb:3f:e7:38:31:1b:7a:42:f7:17: a3:80:a5:64:cf:c6:f0:ca:a0:16:3f:fb:52:05:72: 18:a9:20:80:f8:97:44:88:e1:5f:40:fb:0c:00:c1: 3a:00:53:08:ea:12:23:82:ef:05:1a:ec:3b:5e:d0: 1b:cc:77:27:f9:8e:89:e5:35:a4:6e:b8:54:d6:ea: e4:a3:5a:9f:69:39:12:ce:0c:89:97:5d:b5:0b:c5: 3c:71:09:91:8e:d1:8d:06:26:df:b9:2b:75:1f:4a: c0:97:bc:d2:2c:30:98:56:c4:68:e3:cd:9e:38:b4: 57:7c:c3:68:e0:47:4d:2a:6b:cc:2a:53:c7:0f:c9: f9:a5:29:c3:44:a9:01:fc:1f:01:05:35:6e:05:2b: 3f:f0:62:84:15:4f:5c:44:93:67:d7:86:67:a2:7b: 67:fa:d9:02:f5:ac:68:48:29:07:f5:15:ab:48:07: d9:72:5d:e6:06:c9:a3:28:bd:b4:52:01:16:31:7d: 2b:dc:42:c8:7b:46:f1:2d:50:ac:04:6e:d1:3d:78: d7:cd:1e:fa:61:e6:74:e2:63:81:9e:df:08:84:c2: dd:e8:ff:9c:15:b0:d6:9d:87:f1:55:d1:ca:8b:ef: fe:d9:de:14:31:b5:db:86:8d:52:59:dc:ea:03:a0: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DC:E2:8E:6A:EB:62:C5:A3:8C:F7:83:AA:80:B4:15:F2:92:B4:41 X509v3 Authority Key Identifier: keyid:8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:86:11:34:5b:ff:6c:04:ad:a1:14:b0:8d:aa:1c:3a:ea:9e: 7f:8c:39:44:fe:53:56:bd:bf:e4:09:67:f4:b5:dd:c2:8f:f7: 1e:25:54:de:de:c5:3a:95:98:d8:16:c4:c2:ea:6b:61:d9:c3: 1d:ca:00:1c:f8:60:75:a9:05:61:92:f9:2d:f8:b8:99:99:4a: 56:f5:af:a1:17:19:d7:72:ce:5a:af:d0:75:3b:b0:ab:83:62: 02:13:b6:bd:fd:4c:e0:c4:44:c2:66:1d:db:a8:72:2f:12:3f: 9d:a2:08:98:2c:12:3b:a9:e3:4f:56:2b:81:e1:8d:0e:e4:76: c0:0b:d5:e6:43:45:f8:7c:e6:02:65:72:7a:b9:43:a6:4b:fd: 15:58:dc:e4:fd:35:f5:91:ae:46:b6:f4:18:29:6d:86:e9:e8: de:9d:a4:fb:1f:65:12:8c:19:ad:ad:fc:f9:ae:3d:7c:1f:39: b1:dc:8f:87:09:19:0b:25:c5:8e:ca:6b:82:9f:b0:af:25:34: 2a:f8:ce:cf:91:0a:45:44:cf:36:b2:71:40:73:ab:29:06:36: 4f:77:8a:e3:31:01:f5:44:e9:7b:fb:ad:d4:89:21:9c:40:67: 6a:d2:7d:a3:2d:f4:81:9e:50:0d:e3:07:a7:96:ef:ff:14:80: f2:19:df:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdc9S6j5H5a+OpGIdzUEKdBHhvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2 MURCNzhBNjAeFw0yNjA1MTIxOTIwMjVaFw0yNjA1MTMxOTMzMjVaMDMxMTAvBgNV BAMTKENFRENFMjhFNkFFQjYyQzVBMzhDRjc4M0FBODBCNDE1RjI5MkI0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIVFA+z/nODEbekL3F6OApWTP xvDKoBY/+1IFchipIID4l0SI4V9A+wwAwToAUwjqEiOC7wUa7Dte0BvMdyf5jonl NaRuuFTW6uSjWp9pORLODImXXbULxTxxCZGO0Y0GJt+5K3UfSsCXvNIsMJhWxGjj zZ44tFd8w2jgR00qa8wqU8cPyfmlKcNEqQH8HwEFNW4FKz/wYoQVT1xEk2fXhmei e2f62QL1rGhIKQf1FatIB9lyXeYGyaMovbRSARYxfSvcQsh7RvEtUKwEbtE9eNfN Hvph5nTiY4Ge3wiEwt3o/5wVsNadh/FV0cqL7/7Z3hQxtduGjVJZ3OoDoBQ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUztzijmrrYsWjjPeDqoC0FfKStEEwHwYDVR0j BBgwFoAUiqUttdtx9jjpQSVKawzmg2HbeKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmUxY2JkNzktOGYyNi00YjBlLThiM2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVE QjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2MURCNzhBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUE1MkRCNURCNzFGNjM4RTk0MTI1NEE2QjBDRTY4MzYxREI3 OEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2 ODM2MURCNzhBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICGETRb/2wEraEUsI2qHDrqnn+MOUT+U1a9 v+QJZ/S13cKP9x4lVN7exTqVmNgWxMLqa2HZwx3KABz4YHWpBWGS+S34uJmZSlb1 r6EXGddyzlqv0HU7sKuDYgITtr39TODERMJmHduoci8SP52iCJgsEjup409WK4Hh jQ7kdsAL1eZDRfh85gJlcnq5Q6ZL/RVY3OT9NfWRrka29BgpbYbp6N6dpPsfZRKM Ga2t/PmuPXwfObHcj4cJGQslxY7Ka4KfsK8lNCr4zs+RCkVEzzaycUBzqykGNk93 iuMxAfVE6Xv7rdSJIZxAZ2rSfaMt9IGeUA3jB6eW7/8UgPIZ3/A= -----END CERTIFICATE-----Generated at Tue May 12 22:52:00 2026 by rpki-client