$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft File: CDAD8AE64850B7306026A1B46FF84D08284104C9.mft (raw, json) Hash identifier: qBioa6WIho/eE4ZTzIRoEylyxg47JLF/Cm9w7hP4wtM= Subject key identifier: 30:58:B7:CD:29:E0:CD:2D:DE:8A:F5:43:5C:7C:FE:89:F4:48:AC:5C Authority key identifier: CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 Certificate issuer: /CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Certificate serial: 643EAC4C96FC9CDEB8DEE4D36C1F06179284671E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft Manifest number: 08 Signing time: Thu 07 May 2026 17:20:48 +0000 Manifest this update: Thu 07 May 2026 17:15:48 +0000 Manifest next update: Fri 08 May 2026 18:06:48 +0000 Files and hashes: 1: CDAD8AE64850B7306026A1B46FF84D08284104C9.crl (hash: HLbpRismgrbVl3EQQ7NqaOFke7ObjstbaZjm1ETKpYA=) 2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: Rie1EWmYCW5AS7gherk1HJqeE5vY8I4Pjrh2HLZJQzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 18:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3e:ac:4c:96:fc:9c:de:b8:de:e4:d3:6c:1f:06:17:92:84:67:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Validity Not Before: May 7 17:15:48 2026 GMT Not After : May 8 18:06:48 2026 GMT Subject: CN=3058B7CD29E0CD2DDE8AF5435C7CFE89F448AC5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:62:ff:c1:4c:75:bc:5f:67:b8:c8:88:fc: b4:07:9c:f5:a9:da:ed:51:be:22:62:d4:ad:d3:07: c6:06:51:42:38:b4:87:32:f1:c0:11:bd:3b:9f:21: 42:c0:26:5e:6c:36:d6:bf:30:f0:1e:da:bb:72:08: ae:8d:d0:1c:e7:27:bc:44:ba:07:83:38:39:da:04: d8:74:f3:12:4b:8f:fd:7e:93:e7:65:5b:ce:ad:5f: da:e9:e5:af:31:55:f0:48:45:db:d5:63:74:fb:9f: a3:c5:00:69:1b:d4:0a:1e:a5:88:97:21:e6:c8:2f: 4b:96:49:78:fa:c8:fb:16:c5:44:e9:f1:82:a5:3a: 1d:5f:c7:72:2d:63:ee:e0:7a:3c:d6:7f:59:0b:8b: c4:36:00:c6:41:7e:e5:45:08:f7:dc:c0:39:00:35: 37:49:27:7a:21:02:17:88:4b:c2:2f:50:11:6a:42: cf:96:ef:21:32:be:f6:14:de:29:aa:21:5e:6a:01: 30:0c:ba:f9:64:e9:ff:ca:aa:26:84:2f:2e:f3:d7: 1c:29:51:09:d3:ae:6c:e4:3c:50:6c:f2:f7:01:33: c3:b8:89:31:5c:3e:df:eb:44:24:8c:f0:83:5a:f2: 27:49:60:aa:45:bd:4d:58:ac:5f:bb:57:60:fe:4f: cc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:58:B7:CD:29:E0:CD:2D:DE:8A:F5:43:5C:7C:FE:89:F4:48:AC:5C X509v3 Authority Key Identifier: keyid:CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8b:64:26:f7:c7:73:b1:d6:3d:ff:2b:47:e2:7f:ad:f2:35: 13:58:c3:6f:f5:c9:59:a3:ae:f8:b2:7c:e2:0c:7f:c6:24:22: c5:fc:8b:64:5e:2b:e1:6d:09:ff:f2:3b:74:1f:6f:36:ed:90: 43:b2:5b:21:db:bd:5c:ba:93:8a:3b:18:0c:1a:0c:7d:2c:d8: 54:24:a8:1a:ef:67:a2:ab:fb:e6:3b:30:6e:77:2e:e9:0d:ac: 9c:f9:9c:41:24:91:53:83:06:a3:48:86:a2:54:44:ae:3d:6a: 46:16:d1:69:f1:eb:8d:45:95:f9:b9:e2:10:b6:de:e9:66:84: 5d:71:9e:1d:25:4f:95:23:a0:5c:45:6d:2a:e1:c6:a4:d3:c6: ed:e1:96:10:6f:56:af:e0:ea:f6:ad:12:2f:a2:a4:cc:91:4b: 83:2a:b6:04:fa:a9:95:4e:53:1c:2f:2b:24:b9:64:b6:ff:23: 99:32:87:1d:2f:cf:f2:df:09:f1:89:80:6d:c6:f2:f6:72:09: 65:9f:8b:c1:aa:e4:96:97:88:59:b2:6e:93:74:fe:ed:d0:98: e7:a5:3f:a6:5d:0b:76:bf:06:0f:dc:30:7e:32:3d:74:b9:6c: 3a:50:2b:96:1f:40:3c:4f:b0:04:ef:8d:c2:e3:f3:83:63:55: 24:92:ca:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZD6sTJb8nN643uTTbB8GF5KEZx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBRDhBRTY0ODUwQjczMDYwMjZBMUI0NkZGODREMDgy ODQxMDRDOTAeFw0yNjA1MDcxNzE1NDhaFw0yNjA1MDgxODA2NDhaMDMxMTAvBgNV BAMTKDMwNThCN0NEMjlFMENEMkRERThBRjU0MzVDN0NGRTg5RjQ0OEFDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmGL/wUx1vF9nuMiI/LQHnPWp 2u1RviJi1K3TB8YGUUI4tIcy8cARvTufIULAJl5sNta/MPAe2rtyCK6N0BznJ7xE ugeDODnaBNh08xJLj/1+k+dlW86tX9rp5a8xVfBIRdvVY3T7n6PFAGkb1AoepYiX IebIL0uWSXj6yPsWxUTp8YKlOh1fx3ItY+7gejzWf1kLi8Q2AMZBfuVFCPfcwDkA NTdJJ3ohAheIS8IvUBFqQs+W7yEyvvYU3imqIV5qATAMuvlk6f/KqiaELy7z1xwp UQnTrmzkPFBs8vcBM8O4iTFcPt/rRCSM8INa8idJYKpFvU1YrF+7V2D+T8xTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMFi3zSngzS3eivVDXHz+ifRIrFwwHwYDVR0j BBgwFoAUza2K5khQtzBgJqG0b/hNCChBBMkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI4YzU0M2MtZGUxZi00ZWY0LTkyYjEtNjg1NTZmZjEzMWEzLzAvQ0RBRDhBRTY0 ODUwQjczMDYwMjZBMUI0NkZGODREMDgyODQxMDRDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREFEOEFFNjQ4NTBCNzMwNjAyNkExQjQ2RkY4NEQwODI4NDEw NEM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvQ0RBRDhBRTY0ODUwQjczMDYwMjZBMUI0NkZGODRE MDgyODQxMDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmLZCb3x3Ox1j3/K0fif63yNRNYw2/1yVmj rviyfOIMf8YkIsX8i2ReK+FtCf/yO3QfbzbtkEOyWyHbvVy6k4o7GAwaDH0s2FQk qBrvZ6Kr++Y7MG53LukNrJz5nEEkkVODBqNIhqJURK49akYW0Wnx641Flfm54hC2 3ulmhF1xnh0lT5UjoFxFbSrhxqTTxu3hlhBvVq/g6vatEi+ipMyRS4MqtgT6qZVO UxwvKyS5ZLb/I5kyhx0vz/LfCfGJgG3G8vZyCWWfi8Gq5JaXiFmybpN0/u3QmOel P6ZdC3a/Bg/cMH4yPXS5bDpQK5YfQDxPsATvjcLj84NjVSSSykM= -----END CERTIFICATE-----Generated at Fri May 8 07:30:04 2026 by rpki-client