$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft File: 8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft (raw, json) Hash identifier: GEVQjvneZ6ZnD0EqkeOckjmelEcwsTq6RjY+fd4R+Nk= Subject key identifier: 84:7B:56:DF:A3:55:90:CF:27:75:F0:02:8F:62:56:EB:F4:39:B5:07 Authority key identifier: 87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2 Certificate issuer: /CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2 Certificate serial: 44F8B6A6E70F5A8E8BC41F5C0283AB6F01139556 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft Manifest number: 08 Signing time: Thu 07 May 2026 13:52:49 +0000 Manifest this update: Thu 07 May 2026 13:47:49 +0000 Manifest next update: Fri 08 May 2026 15:21:49 +0000 Files and hashes: 1: 8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl (hash: +VV94HfsY/mkST5S7ulCdZQqPdikst4hRHL6FzwYfzw=) 2: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: TG9ZchK6MwAHkiaJ/8wY22oJErP/aDt3mOhVppYOUpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 15:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f8:b6:a6:e7:0f:5a:8e:8b:c4:1f:5c:02:83:ab:6f:01:13:95:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2 Validity Not Before: May 7 13:47:49 2026 GMT Not After : May 8 15:21:49 2026 GMT Subject: CN=847B56DFA35590CF2775F0028F6256EBF439B507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:5a:c4:2b:8b:4e:86:b0:72:b3:1e:51:e9: 28:ba:bb:39:80:61:1f:48:2c:d1:8f:d2:ef:42:65: 0f:20:c4:42:19:9e:d6:1f:8a:df:ce:d2:cf:ff:b7: 8a:ab:a7:d9:33:84:25:be:1d:f8:c6:5c:8e:e8:50: 8e:08:b3:e9:0c:ac:04:b9:11:fb:5b:04:cb:4d:1b: df:14:bf:b8:88:46:85:9e:e7:99:bb:82:12:ac:17: ae:3a:f8:8e:43:01:66:5c:1b:1b:bd:56:e0:6a:aa: 19:da:69:59:0e:00:d1:54:81:39:18:0b:d6:f2:d4: a4:63:c0:e1:ba:3a:f1:86:17:6f:ab:8e:65:0a:ae: 04:0e:bf:7e:0e:a2:b2:76:85:08:8b:f8:8c:f5:b1: a5:97:47:15:80:ec:bf:6f:10:b4:a7:a8:37:d8:c0: 34:08:c1:78:36:da:be:cb:85:38:15:30:97:17:84: 95:47:7b:ac:ef:db:2f:34:e2:8a:c5:a0:a9:b0:a5: fa:a5:70:1d:ff:fc:20:b9:84:0e:14:5b:f7:5a:d1: 2e:b3:b4:e6:4d:7a:e5:8b:89:70:64:93:3b:76:10: a8:ab:b2:40:73:4c:75:fb:49:9e:81:a6:7f:07:48: 63:9c:d4:91:e2:01:d2:2e:30:15:bd:fd:37:dd:e9: 8c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7B:56:DF:A3:55:90:CF:27:75:F0:02:8F:62:56:EB:F4:39:B5:07 X509v3 Authority Key Identifier: keyid:87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8a:f3:31:dd:05:30:93:b7:b8:23:05:69:35:07:a4:2f:9f: b7:bd:f4:57:b0:2b:7a:b8:b4:96:18:13:b8:a8:be:53:47:a2: 1e:14:1d:5f:cd:d6:00:70:c4:15:7c:52:ab:5a:1a:bb:b5:a2: 9b:52:ef:97:38:a5:2c:2c:76:53:b1:60:0f:6f:77:21:d1:7e: c1:b6:78:f6:5f:fe:9b:92:18:11:82:e6:b2:59:45:ac:88:c3: be:fd:20:d4:b0:aa:9a:90:e7:38:b8:c6:d7:fc:14:1a:27:60: db:e3:cb:d9:83:2c:98:89:89:45:de:a2:9a:b4:f6:e3:d6:39: e7:2b:e3:da:bc:1c:24:b3:23:38:4c:85:ea:c3:e0:ba:ea:74: 14:2e:25:63:87:12:9e:6f:0b:f5:fa:1e:53:78:98:31:24:c3: 0c:3f:74:f7:c9:57:bf:10:e9:30:60:9c:38:5c:41:08:58:3f: 34:c9:53:bf:8d:0e:dc:fd:d5:9c:c1:bd:be:6d:48:86:0a:16: 7f:38:84:49:21:40:be:84:bb:7c:c9:af:9f:bb:0f:30:67:ec: 2f:dc:13:a8:90:01:18:b2:2e:44:6e:57:d9:14:6c:f9:2f:36: 09:3c:7e:53:93:88:3a:a3:3d:74:4b:ca:35:6e:46:22:15:95: 64:b8:66:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPi2pucPWo6LxB9cAoOrbwETlVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcwM0JCNkYxRUJDN0FFMkZFODBEQ0I5Mjk1QkM4Njgy OTkwQjRCMjAeFw0yNjA1MDcxMzQ3NDlaFw0yNjA1MDgxNTIxNDlaMDMxMTAvBgNV BAMTKDg0N0I1NkRGQTM1NTkwQ0YyNzc1RjAwMjhGNjI1NkVCRjQzOUI1MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvlFrEK4tOhrBysx5R6Si6uzmA YR9ILNGP0u9CZQ8gxEIZntYfit/O0s//t4qrp9kzhCW+HfjGXI7oUI4Is+kMrAS5 EftbBMtNG98Uv7iIRoWe55m7ghKsF646+I5DAWZcGxu9VuBqqhnaaVkOANFUgTkY C9by1KRjwOG6OvGGF2+rjmUKrgQOv34OorJ2hQiL+Iz1saWXRxWA7L9vELSnqDfY wDQIwXg22r7LhTgVMJcXhJVHe6zv2y804orFoKmwpfqlcB3//CC5hA4UW/da0S6z tOZNeuWLiXBkkzt2EKirskBzTHX7SZ6Bpn8HSGOc1JHiAdIuMBW9/Tfd6YyDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhHtW36NVkM8ndfACj2JW6/Q5tQcwHwYDVR0j BBgwFoAUhwO7bx68euL+gNy5KVvIaCmQtLIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQ4N2JlZWQtNjMzMC00ZjMzLTkxMDUtODc3MjJjZGYyZGQwLzAvODcwM0JCNkYx RUJDN0FFMkZFODBEQ0I5Mjk1QkM4NjgyOTkwQjRCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzAzQkI2RjFFQkM3QUUyRkU4MERDQjkyOTVCQzg2ODI5OTBC NEIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvODcwM0JCNkYxRUJDN0FFMkZFODBEQ0I5Mjk1QkM4 NjgyOTkwQjRCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWK8zHdBTCTt7gjBWk1B6Qvn7e99FewK3q4 tJYYE7iovlNHoh4UHV/N1gBwxBV8UqtaGru1optS75c4pSwsdlOxYA9vdyHRfsG2 ePZf/puSGBGC5rJZRayIw779INSwqpqQ5zi4xtf8FBonYNvjy9mDLJiJiUXeopq0 9uPWOecr49q8HCSzIzhMherD4LrqdBQuJWOHEp5vC/X6HlN4mDEkwww/dPfJV78Q 6TBgnDhcQQhYPzTJU7+NDtz91ZzBvb5tSIYKFn84hEkhQL6Eu3zJr5+7DzBn7C/c E6iQARiyLkRuV9kUbPkvNgk8flOTiDqjPXRLyjVuRiIVlWS4ZrY= -----END CERTIFICATE-----Generated at Fri May 8 07:34:30 2026 by rpki-client