$ rpki-client -vvf rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft File: 8B18B819BC010B4A4EC66777543486E34AF52ED4.mft (raw, json) Hash identifier: 2KfAjcndirK3LkKhoVe5akyTKZRes9+HQmj9Lpjo3mQ= Subject key identifier: ED:E2:9B:32:27:06:9E:67:9D:E5:E2:A7:41:C0:81:00:30:4D:45:91 Authority key identifier: 8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4 Certificate issuer: /CN=8B18B819BC010B4A4EC66777543486E34AF52ED4 Certificate serial: 2FD0B5B5AAAD8EF720A517AD5F376939DEF06199 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft Manifest number: 03 Signing time: Sun 03 May 2026 21:07:00 +0000 Manifest this update: Sun 03 May 2026 21:02:00 +0000 Manifest next update: Mon 04 May 2026 21:51:00 +0000 Files and hashes: 1: 8B18B819BC010B4A4EC66777543486E34AF52ED4.crl (hash: UZ9gQcFg89LWfV27rjW8qr4cInx7fa2v8IIKhwSxSz8=) 2: 34332e3234382e3231322e302f32342d3234203d3e203538343734.roa (hash: 5F2W8Z4P5PEheYcmRC6qYhg/elm2GoPMJ5sZG45K31I=) 3: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (hash: djWo0EMecCkqgPGbJNZ3i1Hzh/Gf4zrbm7OL5FtozEI=) 4: 323430343a666230303a3a2f33322d3332203d3e203538343734.roa (hash: h3y36nWPp14vw0klmr63vNHy0YgCfjJ+L67ACCmkzyQ=) 5: 3130332e32382e35392e302f32342d3234203d3e203538343734.roa (hash: xAnrR5oDPaIS2eOvjAIZMGHwwrAtXCAYZrjZS6iBlJs=) 6: 3130332e32382e35362e302f32342d3234203d3e203538343734.roa (hash: 3fEh7FEkFoZkANDbmxn7uUTRJbfDqHdq2EELZjoFJiA=) 7: 34332e3234382e3231352e302f32342d3234203d3e203538343734.roa (hash: COlbyHboqjdr0Rxi+nWQW3DOPTwsTgMlnilTtD4HKm4=) 8: 3130332e32382e35382e302f32342d3234203d3e203538343734.roa (hash: RnWj7aZjC6B4VrPGo8x16jqEQ5V8whLA8BJvLlw1vbg=) 9: 3130332e32382e35372e302f32342d3234203d3e203538343734.roa (hash: zR5IozhEoErSJoyA48okITB8A0oyrUPSif4Fq0MXC9c=) 10: 34332e3234382e3231332e302f32342d3234203d3e203538343734.roa (hash: AyZ67OXVVcRP+SaexkcDHK81T3la7ye6jL1yJZbUj4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 21:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d0:b5:b5:aa:ad:8e:f7:20:a5:17:ad:5f:37:69:39:de:f0:61:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B18B819BC010B4A4EC66777543486E34AF52ED4 Validity Not Before: May 3 21:02:00 2026 GMT Not After : May 4 21:51:00 2026 GMT Subject: CN=EDE29B3227069E679DE5E2A741C08100304D4591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:2d:dc:7f:94:eb:c5:9c:68:30:63:de:05: 40:67:c8:ee:d3:ac:02:9d:7f:27:3a:44:94:f4:fe: 72:67:d3:cb:67:73:1d:f1:81:e5:69:7b:49:eb:88: 05:21:0a:a8:f5:99:7d:16:5a:0d:ea:dd:92:10:69: e2:33:e9:76:f9:2e:ef:fd:97:5c:f9:12:fd:bc:a9: 4e:90:cb:cf:65:72:c2:0a:0c:03:3b:f4:4a:a7:47: 3f:0d:a3:6e:18:db:69:ab:2e:21:b8:70:9a:f8:72: 9d:3b:42:4e:c2:5f:4e:9e:fb:d3:13:ef:79:92:3a: 9d:e5:66:c2:9e:c1:d9:91:6f:76:17:6b:55:c3:dc: 8b:ad:6a:6e:f9:28:cf:37:11:45:51:e7:c7:4b:73: 17:35:49:91:ba:17:1c:1f:e5:39:94:1d:a9:0f:45: db:52:cd:a7:b5:74:c2:90:74:7c:7c:d1:19:11:52: 51:bd:e0:89:03:8a:09:61:16:2b:64:fe:84:d6:2a: bc:cd:92:32:ad:5c:70:2b:98:cc:97:c0:c8:83:07: 37:56:2c:f4:fc:81:e6:b9:ae:37:da:68:3b:9a:b4: 5f:fb:bb:3a:a6:bc:9c:19:84:da:81:2a:93:95:41: dd:18:03:d4:0c:dc:79:5e:b0:47:1b:d0:64:15:f9: 25:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E2:9B:32:27:06:9E:67:9D:E5:E2:A7:41:C0:81:00:30:4D:45:91 X509v3 Authority Key Identifier: keyid:8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ea:6e:0c:f7:81:42:74:9e:ae:e5:48:f2:0e:e5:c2:90:43: 54:21:bd:ca:46:6b:42:63:65:18:01:cf:35:ae:51:cc:07:e7: 15:ad:ef:b3:05:74:24:68:a6:ed:a5:3c:da:33:68:65:2b:86: 72:e2:ae:ba:fa:0d:34:8b:5e:60:25:ff:0c:49:77:c4:14:0b: 47:e9:3f:75:6d:ba:db:46:d4:e0:7c:78:1c:79:ab:d2:a2:b4: 16:8d:90:0e:8a:7f:f5:84:a0:e1:ad:f3:ec:5e:96:7c:57:b0: 73:df:ad:5e:40:ce:e8:f2:ff:f7:c3:2e:fd:69:ea:8e:f3:82: 65:65:b8:66:db:d9:14:65:07:5f:ce:e6:85:46:38:97:6b:2d: 93:c4:5b:79:ee:4c:5d:dd:95:b2:88:c8:5f:d6:88:4e:c5:fd: 95:6c:08:45:8e:96:5d:c0:db:2d:6d:36:5b:31:28:83:30:9f: 9f:36:3e:33:f4:7d:31:01:46:d0:9b:0b:2b:59:02:31:91:7d: 38:7c:f4:6b:8f:44:e2:12:ab:6d:6f:1c:c3:1d:82:20:37:77: 5c:c3:2e:6f:f6:bf:f3:92:91:98:51:8b:6b:9f:b4:58:84:06: eb:74:bc:a6:09:0f:b2:44:4c:e9:49:bd:d9:54:7c:76:4e:6a: 61:d8:c6:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL9C1taqtjvcgpRetXzdpOd7wYZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIxOEI4MTlCQzAxMEI0QTRFQzY2Nzc3NTQzNDg2RTM0 QUY1MkVENDAeFw0yNjA1MDMyMTAyMDBaFw0yNjA1MDQyMTUxMDBaMDMxMTAvBgNV BAMTKEVERTI5QjMyMjcwNjlFNjc5REU1RTJBNzQxQzA4MTAwMzA0RDQ1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnly3cf5TrxZxoMGPeBUBnyO7T rAKdfyc6RJT0/nJn08tncx3xgeVpe0nriAUhCqj1mX0WWg3q3ZIQaeIz6Xb5Lu/9 l1z5Ev28qU6Qy89lcsIKDAM79EqnRz8No24Y22mrLiG4cJr4cp07Qk7CX06e+9MT 73mSOp3lZsKewdmRb3YXa1XD3Iutam75KM83EUVR58dLcxc1SZG6Fxwf5TmUHakP RdtSzae1dMKQdHx80RkRUlG94IkDiglhFitk/oTWKrzNkjKtXHArmMyXwMiDBzdW LPT8gea5rjfaaDuatF/7uzqmvJwZhNqBKpOVQd0YA9QM3HlesEcb0GQV+SWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7eKbMicGnmed5eKnQcCBADBNRZEwHwYDVR0j BBgwFoAUixi4GbwBC0pOxmd3VDSG40r1LtQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMwNTE3N2EtYTUwMC00OTk2LWIzZmYtNzBjMTQ0ZWRmZWNlLzAvOEIxOEI4MTlC QzAxMEI0QTRFQzY2Nzc3NTQzNDg2RTM0QUY1MkVENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjE4QjgxOUJDMDEwQjRBNEVDNjY3Nzc1NDM0ODZFMzRBRjUy RUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMwNTE3N2EtYTUwMC00OTk2LWIz ZmYtNzBjMTQ0ZWRmZWNlLzAvOEIxOEI4MTlCQzAxMEI0QTRFQzY2Nzc3NTQzNDg2 RTM0QUY1MkVENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzqbgz3gUJ0nq7lSPIO5cKQQ1QhvcpGa0Jj ZRgBzzWuUcwH5xWt77MFdCRopu2lPNozaGUrhnLirrr6DTSLXmAl/wxJd8QUC0fp P3VtuttG1OB8eBx5q9KitBaNkA6Kf/WEoOGt8+xelnxXsHPfrV5Azujy//fDLv1p 6o7zgmVluGbb2RRlB1/O5oVGOJdrLZPEW3nuTF3dlbKIyF/WiE7F/ZVsCEWOll3A 2y1tNlsxKIMwn582PjP0fTEBRtCbCytZAjGRfTh89GuPROISq21vHMMdgiA3d1zD Lm/2v/OSkZhRi2uftFiEBut0vKYJD7JETOlJvdlUfHZOamHYxiI= -----END CERTIFICATE-----Generated at Mon May 4 13:59:59 2026 by rpki-client