$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft File: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft (raw, json) Hash identifier: LfZ3gkMy0uzdxkUSHxUkCbIOUjRIaEsquzTivl+a75k= Subject key identifier: CF:CC:F5:67:0F:C1:1E:6C:6D:CA:BF:11:6A:21:D1:AB:EF:21:2D:1F Authority key identifier: 88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 Certificate issuer: /CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Certificate serial: 01FDEB092ED5FDAD72EFAF388665B4A9C15A0605 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft Manifest number: 13 Signing time: Fri 15 May 2026 21:17:09 +0000 Manifest this update: Fri 15 May 2026 21:12:09 +0000 Manifest next update: Sat 16 May 2026 22:48:09 +0000 Files and hashes: 1: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: YJRCBupflF/I8POF8sMQ3AXgFo1nrT6mZHr4XrUFzvU=) 2: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl (hash: od2GgKENbLFAJYkRMdj6DfOZV/6pC2vwS42lBtgL92c=) 3: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 0+nHSjmEBtHrdpW5swBsy/CGgBdToecJRrJ4YRQ1Ieo=) 4: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: l0DIBrvHKOmdXYA8EMn7r3ept4hzvTyfATy5T2AkXgc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 22:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fd:eb:09:2e:d5:fd:ad:72:ef:af:38:86:65:b4:a9:c1:5a:06:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Validity Not Before: May 15 21:12:09 2026 GMT Not After : May 16 22:48:09 2026 GMT Subject: CN=CFCCF5670FC11E6C6DCABF116A21D1ABEF212D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:1e:82:75:2d:42:79:e5:05:c8:da:b3:3d: 5d:11:80:5f:b3:f8:35:d7:11:4d:42:ee:9e:be:4c: a8:c3:38:34:0f:11:b8:bb:65:cb:1e:5d:77:e1:a1: 6c:95:9f:ee:af:ec:de:7e:db:59:af:13:9d:76:ed: d2:e5:cd:78:29:90:b9:9b:0a:52:4d:71:d3:45:09: 7e:ca:44:98:fc:42:16:01:17:68:cc:8d:61:65:41: 95:b5:cc:62:b5:66:47:47:65:cd:45:ab:67:60:58: d1:88:e9:b1:04:fb:44:ae:69:df:af:9e:df:26:24: 52:c4:4a:ba:4e:03:b6:db:1e:08:65:a7:ba:65:5d: 79:e4:b2:32:64:db:d2:45:5d:8b:3d:92:23:3e:a2: 42:e3:6d:44:4a:73:f2:92:31:b0:c6:4f:6b:fb:51: 4a:0b:15:92:15:9a:ec:9d:8d:c6:f4:97:29:f9:73: 21:eb:f5:57:e3:ba:a2:97:c4:5b:c3:59:01:1b:8d: ea:6b:0a:bc:87:9d:5b:b5:79:f2:ca:ae:ff:4a:bf: 6f:41:25:2b:00:49:f8:3d:2c:e9:da:8d:e5:13:4b: 59:62:93:95:50:27:b2:79:64:f0:90:09:3c:6e:67: 9e:2a:8c:8f:a9:ec:b5:4e:ea:2c:1f:de:1e:99:33: 91:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CC:F5:67:0F:C1:1E:6C:6D:CA:BF:11:6A:21:D1:AB:EF:21:2D:1F X509v3 Authority Key Identifier: keyid:88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c1:7c:50:59:9c:64:46:70:5c:8d:9b:38:51:54:d6:71:07: 25:bc:ec:49:c5:8c:0f:c4:42:6d:72:d0:e3:14:51:d6:41:79: 5f:a9:1b:7b:e8:2c:4e:d1:5b:4c:4a:5d:ac:fa:14:0a:5a:29: 08:cc:9b:89:a0:c3:eb:34:6c:b3:41:c4:49:90:22:ed:cb:18: e1:5f:5d:be:59:4e:4c:2a:d2:0e:d1:b3:69:d9:5e:bc:0c:e7: 70:98:1a:1b:a6:62:6f:c5:23:29:1b:a4:a3:ae:dd:65:69:0a: 2c:7f:38:cd:91:45:29:b7:0f:12:46:c5:5d:9d:da:54:e6:3f: 87:11:b0:ee:02:5a:bc:c5:9f:6a:fa:a2:99:7c:c4:e9:cf:4e: 76:e6:8b:66:5d:74:0a:bd:b8:79:09:97:d5:01:76:0c:50:ec: b7:c8:ca:a5:db:45:4e:07:20:ba:b1:01:9c:28:70:44:37:f5: 25:c5:f5:a4:0d:ae:9d:24:be:96:ae:a7:80:29:76:78:33:b6: 50:55:e2:34:e9:66:88:49:ce:71:00:9b:65:5f:e2:28:64:30: 72:f9:68:80:fe:42:c0:da:67:c4:36:2f:82:97:43:cb:37:a6: 8f:27:01:45:b6:1f:54:2e:c7:b2:6b:33:f9:17:b4:83:c1:de: 44:84:d7:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAf3rCS7V/a1y7684hmW0qcFaBgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1 QzRGMjk4NTAeFw0yNjA1MTUyMTEyMDlaFw0yNjA1MTYyMjQ4MDlaMDMxMTAvBgNV BAMTKENGQ0NGNTY3MEZDMTFFNkM2RENBQkYxMTZBMjFEMUFCRUYyMTJEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Hx6CdS1CeeUFyNqzPV0RgF+z +DXXEU1C7p6+TKjDODQPEbi7ZcseXXfhoWyVn+6v7N5+21mvE5127dLlzXgpkLmb ClJNcdNFCX7KRJj8QhYBF2jMjWFlQZW1zGK1ZkdHZc1Fq2dgWNGI6bEE+0Suad+v nt8mJFLESrpOA7bbHghlp7plXXnksjJk29JFXYs9kiM+okLjbURKc/KSMbDGT2v7 UUoLFZIVmuydjcb0lyn5cyHr9VfjuqKXxFvDWQEbjeprCryHnVu1efLKrv9Kv29B JSsASfg9LOnajeUTS1lik5VQJ7J5ZPCQCTxuZ54qjI+p7LVO6iwf3h6ZM5HTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz8z1Zw/BHmxtyr8RaiHRq+8hLR8wHwYDVR0j BBgwFoAUiGPUPCzTbp3ijH5V8YkcwlxPKYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVlOTQwMTQtODdmYS00YmMyLWIxYzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0My Q0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1QzRGMjk4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODYzRDQzQzJDRDM2RTlERTI4QzdFNTVGMTg5MUNDMjVDNEYy OTg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFD QzI1QzRGMjk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPBfFBZnGRGcFyNmzhRVNZxByW87EnFjA/E Qm1y0OMUUdZBeV+pG3voLE7RW0xKXaz6FApaKQjMm4mgw+s0bLNBxEmQIu3LGOFf Xb5ZTkwq0g7Rs2nZXrwM53CYGhumYm/FIykbpKOu3WVpCix/OM2RRSm3DxJGxV2d 2lTmP4cRsO4CWrzFn2r6opl8xOnPTnbmi2ZddAq9uHkJl9UBdgxQ7LfIyqXbRU4H ILqxAZwocEQ39SXF9aQNrp0kvpaup4ApdngztlBV4jTpZohJznEAm2Vf4ihkMHL5 aID+QsDaZ8Q2L4KXQ8s3po8nAUW2H1Qux7JrM/kXtIPB3kSE1/U= -----END CERTIFICATE-----Generated at Sat May 16 15:35:11 2026 by rpki-client