$ rpki-client -vvf rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft File: C8C1A31E42E799E9EDC0FAB813163052945845AC.mft (raw, json) Hash identifier: QFfUjaR4oYfQBPWXQlAD473Sm+c/nTkHtkIJJ3nTLlk= Subject key identifier: 73:68:3C:24:9E:41:6E:A5:9F:C5:FE:37:82:CE:43:5C:1C:FF:07:58 Authority key identifier: C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC Certificate issuer: /CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Certificate serial: 2C1A587B164CC2E393258FCDA09E37030C419827 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft Manifest number: 14 Signing time: Sat 16 May 2026 17:42:21 +0000 Manifest this update: Sat 16 May 2026 17:37:21 +0000 Manifest next update: Sun 17 May 2026 19:33:21 +0000 Files and hashes: 1: C8C1A31E42E799E9EDC0FAB813163052945845AC.crl (hash: +PEsbsAMquhNnQ/mFk4uRmImYhRfse6uFaEpAfik9Aw=) 2: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: QTf5TvW/sGJCtiqjYOWSFSyqMXy6xLfUyzA5Wf2VFMo=) 3: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: UWH9gD1/4ElZU52MCqktUtjxRojq4daDEIdWkUnok2k=) 4: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: FEgS5ex34lgarvKtqbdAVQc0toy/dLHosJymf/4jCzU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 19:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:1a:58:7b:16:4c:c2:e3:93:25:8f:cd:a0:9e:37:03:0c:41:98:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Validity Not Before: May 16 17:37:21 2026 GMT Not After : May 17 19:33:21 2026 GMT Subject: CN=73683C249E416EA59FC5FE3782CE435C1CFF0758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:76:65:a7:6b:1b:2b:33:1a:bb:93:41:91: 3a:94:a2:75:c5:83:69:40:99:60:c8:d9:56:8b:1d: 02:7e:30:a0:87:51:f0:18:15:76:16:fd:6c:69:54: 46:7d:3d:94:d9:f4:7b:38:19:ca:e7:d1:68:2f:91: 44:14:5d:e5:eb:e4:6a:d2:54:e2:d7:00:69:e9:9a: 55:2f:ae:09:67:40:15:ff:8b:1a:15:62:31:bf:df: df:8d:0c:f9:4e:05:dc:b8:8b:18:1d:69:98:fa:e9: 89:df:d4:b3:e9:2c:33:d9:b3:2f:3d:c7:98:05:f7: 67:18:c6:f8:8e:08:56:ee:41:cd:b2:40:1d:b0:2d: fb:cb:ad:1e:64:f5:13:d5:1d:62:26:f4:fc:d0:48: ce:a1:80:49:39:41:dc:e8:6d:07:d7:e1:9f:21:a8: bb:61:c3:10:d5:7e:f8:34:15:f6:05:f6:d0:04:82: f5:3c:64:f8:c8:07:3d:58:36:38:a1:62:76:37:c8: 6e:91:01:6d:4f:d8:5a:01:c9:fe:c6:1b:6a:ec:3b: a6:8f:15:e2:49:e3:55:2c:7a:96:03:6e:c8:a7:47: f0:e4:53:59:72:c2:b0:22:df:b3:a4:61:1a:44:eb: 9e:cb:c7:67:bc:96:b4:72:c6:1b:fa:d9:8b:30:86: a1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:68:3C:24:9E:41:6E:A5:9F:C5:FE:37:82:CE:43:5C:1C:FF:07:58 X509v3 Authority Key Identifier: keyid:C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:7f:9f:35:71:7a:00:66:5d:b8:40:3f:10:9d:de:d4:c1:65: 76:56:b4:df:23:10:50:7d:28:27:6c:e6:6e:4f:ee:c9:c1:4c: bd:6a:4d:0d:d3:57:2b:c5:ae:e6:0e:e6:2f:a7:52:78:50:38: 4a:69:50:25:5f:bf:13:c9:3e:b5:66:2f:57:d5:8c:7b:10:29: 13:e0:3d:dc:60:2a:61:26:7a:52:ad:f7:72:76:aa:3b:b1:c6: 6c:18:21:da:ac:bb:06:c7:c3:5a:4b:37:14:ee:a2:ae:49:bf: 52:a9:6c:8c:94:76:d7:cb:d7:44:b9:98:75:93:21:cd:fc:31: 6b:a0:55:bb:fb:a2:73:bf:0a:8e:ec:c7:cc:cd:3b:a9:dd:5b: 35:04:4c:2f:0b:24:bc:d1:1f:ab:bb:d0:38:9b:88:ac:d3:c8: 35:78:34:e1:09:36:9f:3e:29:2d:36:ef:88:5a:9b:d9:94:03: ee:c9:c4:7a:93:08:d0:ec:e3:a3:f3:6f:47:76:b3:7d:f7:94: e4:92:87:f5:c8:61:39:1e:5e:9b:6d:e2:93:b8:c3:c4:ad:1d: ef:2b:8a:15:be:5f:9f:46:14:c0:aa:b7:e4:e7:8e:12:39:55: 5a:10:73:b8:46:fc:35:72:43:73:44:87:fb:d0:cd:53:09:31: e2:a0:aa:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBpYexZMwuOTJY/NoJ43AwxBmCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5 NDU4NDVBQzAeFw0yNjA1MTYxNzM3MjFaFw0yNjA1MTcxOTMzMjFaMDMxMTAvBgNV BAMTKDczNjgzQzI0OUU0MTZFQTU5RkM1RkUzNzgyQ0U0MzVDMUNGRjA3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm0nZlp2sbKzMau5NBkTqUonXF g2lAmWDI2VaLHQJ+MKCHUfAYFXYW/WxpVEZ9PZTZ9Hs4Gcrn0WgvkUQUXeXr5GrS VOLXAGnpmlUvrglnQBX/ixoVYjG/39+NDPlOBdy4ixgdaZj66Ynf1LPpLDPZsy89 x5gF92cYxviOCFbuQc2yQB2wLfvLrR5k9RPVHWIm9PzQSM6hgEk5QdzobQfX4Z8h qLthwxDVfvg0FfYF9tAEgvU8ZPjIBz1YNjihYnY3yG6RAW1P2FoByf7GG2rsO6aP FeJJ41UsepYDbsinR/DkU1lywrAi37OkYRpE657Lx2e8lrRyxhv62YswhqGfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc2g8JJ5BbqWfxf43gs5DXBz/B1gwHwYDVR0j BBgwFoAUyMGjHkLnmentwPq4ExYwUpRYRawwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhjOWMyNTItZjdjYS00ZGQ1LTg4ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0 MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5NDU4NDVBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEMxQTMxRTQyRTc5OUU5RURDMEZBQjgxMzE2MzA1Mjk0NTg0 NUFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMw NTI5NDU4NDVBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHN/nzVxegBmXbhAPxCd3tTBZXZWtN8jEFB9 KCds5m5P7snBTL1qTQ3TVyvFruYO5i+nUnhQOEppUCVfvxPJPrVmL1fVjHsQKRPg PdxgKmEmelKt93J2qjuxxmwYIdqsuwbHw1pLNxTuoq5Jv1KpbIyUdtfL10S5mHWT Ic38MWugVbv7onO/Co7sx8zNO6ndWzUETC8LJLzRH6u70DibiKzTyDV4NOEJNp8+ KS0274ham9mUA+7JxHqTCNDs46Pzb0d2s333lOSSh/XIYTkeXptt4pO4w8StHe8r ihW+X59GFMCqt+TnjhI5VVoQc7hG/DVyQ3NEh/vQzVMJMeKgqko= -----END CERTIFICATE-----Generated at Sun May 17 10:56:46 2026 by rpki-client