$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft File: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft (raw, json) Hash identifier: bQUG5nnmSJvi8ruSJ8bFN+C9/pKUJDc+ZdwyI4EObNg= Subject key identifier: BD:0D:D0:80:FA:AB:82:F6:80:59:12:7E:EC:F9:91:CF:CB:C3:C7:90 Authority key identifier: 64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 Certificate issuer: /CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Certificate serial: 6C42A688E0AF63DF8FE6C01E434FBA1625B8FC33 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft Manifest number: 08 Signing time: Thu 07 May 2026 16:59:59 +0000 Manifest this update: Thu 07 May 2026 16:54:59 +0000 Manifest next update: Fri 08 May 2026 17:51:59 +0000 Files and hashes: 1: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: lTZ01/fJUOFqaJRWKnNIALG7LB1k+HJpJA/DEXbiNSg=) 2: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl (hash: Ad3OxdiPaC00C3xsLkF2ba/iN7z+AN2VpgnoZYUnPlw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 17:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:42:a6:88:e0:af:63:df:8f:e6:c0:1e:43:4f:ba:16:25:b8:fc:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Validity Not Before: May 7 16:54:59 2026 GMT Not After : May 8 17:51:59 2026 GMT Subject: CN=BD0DD080FAAB82F68059127EECF991CFCBC3C790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:50:d3:29:ae:15:d1:8f:11:4f:f0:a4:c3: d4:29:b2:bd:26:19:5b:fc:29:7d:02:2a:68:7e:6a: 9a:0d:bf:af:e0:a8:cf:b0:15:ec:2f:55:7a:61:0d: ec:33:03:1d:17:c5:f5:f1:31:e6:98:d3:c7:b7:d2: 92:be:d8:d9:e2:e6:9a:9c:57:c9:de:a7:9a:07:cd: c6:29:54:85:27:cd:6d:47:e3:58:9b:fc:ab:9a:76: 9d:af:50:f4:d1:d0:83:2f:2e:bb:18:3e:4f:2c:72: 77:e4:8c:7e:9b:39:ed:61:43:2e:43:55:e3:c0:38: 70:9c:92:95:96:a4:f2:e0:67:26:dd:83:b9:41:f2: bb:e4:54:68:19:15:20:b4:cd:bb:a3:e0:29:48:0b: 2d:7d:84:a6:f4:fc:b7:dd:6e:94:99:94:a3:73:7c: a2:38:dd:03:c6:18:bf:23:83:20:12:3b:3a:1f:67: 89:23:ec:ed:5e:e4:8b:e0:24:07:4e:40:b5:ac:4b: 48:f2:1f:8d:a5:d0:69:70:44:e1:a5:2e:28:fe:97: 08:9f:25:72:96:7f:c7:a7:27:19:79:1c:82:65:1a: 5e:56:75:54:10:ab:eb:12:01:a8:39:8a:21:76:a4: 18:93:d9:ae:74:e0:9c:c2:f7:93:f7:ac:76:7e:70: 98:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0D:D0:80:FA:AB:82:F6:80:59:12:7E:EC:F9:91:CF:CB:C3:C7:90 X509v3 Authority Key Identifier: keyid:64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5c:f2:f4:9e:af:7e:87:68:8f:1e:51:49:f5:b2:12:4c:1d: 62:ff:6f:39:b8:ae:c2:e8:88:8e:b2:01:c8:fd:b0:24:e0:00: ca:6d:be:77:7e:8e:ca:b2:3b:4b:80:cf:45:88:79:0e:a7:33: 15:d4:1e:a1:e7:d5:0b:4e:61:5a:51:6b:bf:d8:36:c6:6c:32: d6:cd:c4:41:c4:d4:1a:15:fc:5f:ac:c1:fd:09:47:4b:e1:f2: f4:f4:35:a2:4a:90:98:41:9e:b9:64:cc:fc:4a:7d:e3:e6:f7: 48:4e:86:9d:02:5d:f6:a0:60:f5:2f:7b:cd:70:09:87:b1:44: 51:5a:bd:31:10:ce:fb:dd:fa:78:23:51:b8:8a:35:c1:a0:a1: 43:e3:73:44:7e:3e:31:c4:2a:4d:2e:29:d5:3f:1a:50:04:0b: ce:0a:94:0e:b2:e0:91:6b:7d:d0:e4:24:10:ea:60:f8:63:ee: 93:4a:23:e8:8e:90:95:58:65:48:cd:d4:5a:10:12:7d:3a:f8: 38:4c:21:24:cd:bd:8a:39:00:1a:ad:50:8c:44:b9:8b:b9:11: 1f:d0:27:8b:20:4b:4f:a9:03:4e:2d:44:20:99:af:9f:f7:4b: 4a:b0:c6:46:0f:e1:53:80:89:99:97:e9:ac:d2:69:8f:90:09: 6d:19:ba:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEKmiOCvY9+P5sAeQ0+6FiW4/DMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1 RUU3NUY0NjAeFw0yNjA1MDcxNjU0NTlaFw0yNjA1MDgxNzUxNTlaMDMxMTAvBgNV BAMTKEJEMEREMDgwRkFBQjgyRjY4MDU5MTI3RUVDRjk5MUNGQ0JDM0M3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmVDTKa4V0Y8RT/Ckw9Qpsr0m GVv8KX0CKmh+apoNv6/gqM+wFewvVXphDewzAx0XxfXxMeaY08e30pK+2Nni5pqc V8nep5oHzcYpVIUnzW1H41ib/Kuadp2vUPTR0IMvLrsYPk8scnfkjH6bOe1hQy5D VePAOHCckpWWpPLgZybdg7lB8rvkVGgZFSC0zbuj4ClICy19hKb0/LfdbpSZlKNz fKI43QPGGL8jgyASOzofZ4kj7O1e5IvgJAdOQLWsS0jyH42l0GlwROGlLij+lwif JXKWf8enJxl5HIJlGl5WdVQQq+sSAag5iiF2pBiT2a504JzC95P3rHZ+cJidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvQ3QgPqrgvaAWRJ+7PmRz8vDx5AwHwYDVR0j BBgwFoAUZE6r3fd6q6fp+LL6OCrFXl7nX0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY3OWE0MDItZGU1Yi00OWU1LWE2ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERG NzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1RUU3NUY0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDRFQUJEREY3N0FBQkE3RTlGOEIyRkEzODJBQzU1RTVFRTc1 RjQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY3OWE0MDItZGU1Yi00OWU1LWE2 ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1 NUU1RUU3NUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRc8vSer36HaI8eUUn1shJMHWL/bzm4rsLo iI6yAcj9sCTgAMptvnd+jsqyO0uAz0WIeQ6nMxXUHqHn1QtOYVpRa7/YNsZsMtbN xEHE1BoV/F+swf0JR0vh8vT0NaJKkJhBnrlkzPxKfePm90hOhp0CXfagYPUve81w CYexRFFavTEQzvvd+ngjUbiKNcGgoUPjc0R+PjHEKk0uKdU/GlAEC84KlA6y4JFr fdDkJBDqYPhj7pNKI+iOkJVYZUjN1FoQEn06+DhMISTNvYo5ABqtUIxEuYu5ER/Q J4sgS0+pA04tRCCZr5/3S0qwxkYP4VOAiZmX6azSaY+QCW0Zug0= -----END CERTIFICATE-----Generated at Fri May 8 07:27:26 2026 by rpki-client