$ rpki-client -vvf rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft File: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft (raw, json) Hash identifier: H/rxdZqLQ8qibkj2NA2R3LGBJV6pENSdclnGG2ZeLBM= Subject key identifier: 08:08:8F:46:1D:81:08:C0:7D:6C:54:60:8B:41:AD:FD:05:3B:F6:8D Authority key identifier: D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 Certificate issuer: /CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Certificate serial: 07785B169E274B4F5BC2A0F146A892ED237D7FD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft Manifest number: 08 Signing time: Thu 07 May 2026 18:42:41 +0000 Manifest this update: Thu 07 May 2026 18:37:41 +0000 Manifest next update: Fri 08 May 2026 22:21:41 +0000 Files and hashes: 1: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl (hash: dHT12nZRZAZWfezSXQdbjdzExfADB+A4uCLSVkTCxx4=) 2: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: 7YRFkgWqBTb6xXfqMpSxUz7NK51JToKbqOBLvR25NTc=) 3: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: EtsVHdeAuCEUKToYyc1AboiXRpshf+Ge4ld5y69utbM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 22:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:78:5b:16:9e:27:4b:4f:5b:c2:a0:f1:46:a8:92:ed:23:7d:7f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Validity Not Before: May 7 18:37:41 2026 GMT Not After : May 8 22:21:41 2026 GMT Subject: CN=08088F461D8108C07D6C54608B41ADFD053BF68D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:60:4e:7a:e2:4d:8a:1e:01:25:4f:8b:b3:70: 79:de:d6:ec:d2:68:26:f4:61:56:19:96:27:90:29: 61:76:57:5e:bd:8c:aa:a6:5a:15:83:9c:ad:bc:ef: f9:ee:7d:d3:bb:cf:bd:cc:91:47:22:db:8c:89:44: 4d:f9:2e:8f:91:da:00:55:ee:4d:97:90:b9:0f:95: fa:aa:ec:bd:2c:31:21:d5:c8:20:51:ab:6a:e4:57: 77:bc:33:23:0e:3d:a1:a5:d1:d1:f1:76:e0:4a:1a: aa:58:5e:78:b6:27:5c:f4:01:87:90:bc:3e:a3:ba: 54:f1:e3:1d:dc:0f:e4:b2:11:82:34:74:81:f4:12: 39:64:54:18:9c:07:18:f4:f5:e7:f3:6f:87:eb:31: aa:4f:f9:99:f4:d8:de:7e:48:7d:ee:15:b3:e2:d2: e4:7d:a2:30:b4:99:99:67:1c:93:1c:c7:60:17:c0: d7:98:c4:a0:16:37:8f:c1:ef:4f:89:d9:b0:74:d7: 42:de:2f:a9:62:24:79:3b:bf:bc:b8:a9:9a:8c:8e: af:fa:6a:1b:85:6f:28:78:45:43:bc:75:40:09:0c: 1f:16:23:b9:56:bc:6d:da:d0:af:1b:37:3a:10:1b: bc:66:f9:5a:a8:d7:51:5f:b8:33:23:25:b0:87:0e: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:08:8F:46:1D:81:08:C0:7D:6C:54:60:8B:41:AD:FD:05:3B:F6:8D X509v3 Authority Key Identifier: keyid:D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:a0:8c:11:a0:ec:60:bd:ea:d0:64:f1:27:31:8e:5b:6d:64: 31:f8:9a:9b:d6:2d:50:d0:35:0c:b8:77:1f:78:d7:1d:33:4f: b6:64:95:ed:05:a3:83:a7:9b:e8:c5:3d:96:5b:d2:c9:33:f7: 44:b7:e6:bb:72:bc:a2:62:98:cd:07:56:12:ee:97:82:89:d4: 6f:b6:ee:60:35:42:71:19:85:3f:71:66:d8:64:18:8d:35:33: fd:a7:60:a4:53:36:0e:c2:80:ba:ef:d9:39:f4:24:2d:88:65: fd:8f:11:69:99:9a:a7:b2:00:e3:7a:80:48:1f:4e:c0:4c:68: 8e:31:8f:27:a4:30:16:bc:5f:32:d5:99:35:40:de:00:d1:2c: 99:ac:c7:55:5f:71:99:db:b6:3b:30:aa:cb:ac:09:5c:04:92: 2c:90:44:d1:e7:15:e0:e0:1d:7c:85:ce:0b:3d:1b:ef:93:fb: 4b:60:05:de:81:28:cb:79:65:a8:d9:bc:07:cc:28:7e:48:25: b4:44:27:39:8a:80:3e:a0:4f:14:74:6b:b3:32:82:a9:83:4c: 96:5c:71:f7:27:39:08:b7:c3:ed:ac:36:83:0d:cc:86:ba:20: 4e:1d:64:e0:55:ac:14:ca:60:ea:56:ae:8a:f4:6a:7b:bd:1a: 3f:18:9b:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB3hbFp4nS09bwqDxRqiS7SN9f9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUz NkRDNDQ3MzAeFw0yNjA1MDcxODM3NDFaFw0yNjA1MDgyMjIxNDFaMDMxMTAvBgNV BAMTKDA4MDg4RjQ2MUQ4MTA4QzA3RDZDNTQ2MDhCNDFBREZEMDUzQkY2OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOYE564k2KHgElT4uzcHne1uzS aCb0YVYZlieQKWF2V169jKqmWhWDnK287/nufdO7z73MkUci24yJRE35Lo+R2gBV 7k2XkLkPlfqq7L0sMSHVyCBRq2rkV3e8MyMOPaGl0dHxduBKGqpYXni2J1z0AYeQ vD6julTx4x3cD+SyEYI0dIH0EjlkVBicBxj09efzb4frMapP+Zn02N5+SH3uFbPi 0uR9ojC0mZlnHJMcx2AXwNeYxKAWN4/B70+J2bB010LeL6liJHk7v7y4qZqMjq/6 ahuFbyh4RUO8dUAJDB8WI7lWvG3a0K8bNzoQG7xm+Vqo11FfuDMjJbCHDkHrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCAiPRh2BCMB9bFRgi0Gt/QU79o0wHwYDVR0j BBgwFoAU0+wyfVZpvAsPsqQkVhfkTjbcRHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTIzMDczOTAtNmVmMy00NDc2LWE2YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1 NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUzNkRDNDQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0VDMzI3RDU2NjlCQzBCMEZCMkE0MjQ1NjE3RTQ0RTM2REM0 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0 NEUzNkRDNDQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2gjBGg7GC96tBk8ScxjlttZDH4mpvWLVDQ NQy4dx941x0zT7Zkle0Fo4Onm+jFPZZb0skz90S35rtyvKJimM0HVhLul4KJ1G+2 7mA1QnEZhT9xZthkGI01M/2nYKRTNg7CgLrv2Tn0JC2IZf2PEWmZmqeyAON6gEgf TsBMaI4xjyekMBa8XzLVmTVA3gDRLJmsx1VfcZnbtjswqsusCVwEkiyQRNHnFeDg HXyFzgs9G++T+0tgBd6BKMt5ZajZvAfMKH5IJbREJzmKgD6gTxR0a7MygqmDTJZc cfcnOQi3w+2sNoMNzIa6IE4dZOBVrBTKYOpWror0anu9Gj8Ym60= -----END CERTIFICATE-----Generated at Fri May 8 07:30:12 2026 by rpki-client