$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft File: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft (raw, json) Hash identifier: 95qHgYAK9ydYdUhj2MsQWFpkQTAXzIHs3qwA5vDERFM= Subject key identifier: 7B:3F:A2:D4:6B:48:3E:8C:1F:98:4D:6F:C0:D9:36:D5:EE:06:FA:11 Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F Certificate issuer: /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Certificate serial: 4936F83D21DAC8B94580986A456D336C807CC8E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft Manifest number: 14 Signing time: Sat 16 May 2026 15:08:21 +0000 Manifest this update: Sat 16 May 2026 15:03:21 +0000 Manifest next update: Sun 17 May 2026 17:53:21 +0000 Files and hashes: 1: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: 0WsKsDzY8LPfrJ1pgXZgjbVmTWXixBFTK8YpHb3DNxU=) 2: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl (hash: /OGVbJc2keDKrbGiNS2tZHbTp9opXwWjKfvMxmctOFE=) 3: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: pK3Vu7dEPBnTFAw3IDhWOXFOflNVhPv7/JjAZ1e/ubk=) 4: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: FdEj2/miSrHrif/CfoOvLE1OV+PuSrA43YH+LmHuPRM=) 5: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: CVqG9mh1X9V1ZbC6R/r5UJJ2xSfzA9r4RYW1GFYyElI=) 6: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: ieJoOGDuwtLlA8t0dN5yUaBjAk+rstjVqpks3BBFT2E=) 7: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: icfsfhUwquzTy2StQKBYwmmyOmAVCsssAYK5CyA5iDI=) 8: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: rkn+DI7lNxqSqCTlwACNzV0qOshNnDXKFLIZsdocYhE=) 9: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: JuQ4cvsB/3E/np6OBFHLGq+Nt4mQQ/GxzLV4MrmhfZo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:36:f8:3d:21:da:c8:b9:45:80:98:6a:45:6d:33:6c:80:7c:c8:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Validity Not Before: May 16 15:03:21 2026 GMT Not After : May 17 17:53:21 2026 GMT Subject: CN=7B3FA2D46B483E8C1F984D6FC0D936D5EE06FA11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:40:d2:3b:b1:b3:e3:cf:9f:3d:4d:da:c3:c3: 58:8b:07:0f:4f:e9:86:3d:30:f5:fc:c4:48:60:97: 2c:b3:33:76:72:0c:e4:34:59:64:60:84:57:9c:39: ef:7b:b8:e9:48:6b:bf:9c:68:9c:76:5b:7f:83:5f: 7c:34:2d:63:a2:48:99:75:95:3e:ad:32:5f:35:1a: c2:84:41:bc:c4:ea:17:d0:8b:1b:1b:3c:bd:68:6e: de:51:47:8f:c0:ae:b8:a2:09:4c:fa:7e:73:1a:49: 9a:65:03:df:82:b6:31:07:58:18:da:dc:c1:71:7c: f9:35:96:d7:bd:d4:e7:20:2e:eb:95:4c:4c:e8:07: 7c:af:70:ef:43:b0:50:59:5f:14:1c:97:8d:98:37: 35:f4:8d:a1:bc:2d:df:96:8f:64:60:57:3d:4e:3e: ba:6d:01:6c:df:b5:5f:9e:c1:a3:51:0b:fd:77:68: aa:64:d0:73:4d:b4:7c:45:45:6b:dc:a9:41:c3:3a: 2d:b8:d0:d1:74:8c:de:02:d9:3b:7b:8b:1b:5d:4b: 5c:40:a0:c8:69:7b:0b:d2:86:86:4d:9f:6b:0d:69: a7:05:11:ea:1d:1c:e8:d6:14:19:fe:2c:79:8e:a7: 90:8b:e7:ef:d0:62:41:2d:85:f6:42:41:d8:ea:11: 7f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3F:A2:D4:6B:48:3E:8C:1F:98:4D:6F:C0:D9:36:D5:EE:06:FA:11 X509v3 Authority Key Identifier: keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:12:74:4c:c2:db:6c:80:32:6b:33:88:07:ad:ff:a4:60:63: e0:9e:ea:e4:5c:9d:27:f1:ae:e9:77:c2:91:5d:ab:4d:22:f3: 3d:10:60:53:49:b8:84:4c:03:4f:33:05:ce:bf:9f:85:4a:2e: dc:ed:6b:c9:ed:bb:04:a7:9c:91:ef:8a:6b:67:cf:44:24:61: 4c:23:07:76:2e:41:1e:44:6f:8c:ab:4e:91:c2:73:f4:a0:5d: 3b:22:f6:45:f7:e1:16:0a:39:b0:f4:29:6d:e2:bd:b6:28:24: a4:f0:fd:95:f7:d7:2b:5e:e8:ac:04:01:7d:bc:97:ef:b4:f0: ac:6f:b3:11:33:22:51:8c:1c:8e:54:f1:68:53:28:af:9c:44: 9d:64:81:14:ea:22:f3:0a:cc:10:1e:a3:96:74:f5:be:b7:37: 79:9d:1d:ff:b0:26:da:d0:51:74:b3:49:28:07:88:36:fd:17: 4b:f7:2d:14:d7:ef:7b:fa:6c:d4:55:32:8a:07:3d:50:02:7b: ef:f8:5a:6e:9a:93:4f:92:2f:00:7a:56:23:fa:9f:e0:09:1b: 61:3d:e8:89:ac:83:3c:f7:2f:55:7a:71:63:16:8a:d3:bf:ac: 6c:5a:0f:12:5c:29:66:3d:fa:ba:c6:b7:37:da:2c:d0:ce:15: 4c:51:93:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTb4PSHayLlFgJhqRW0zbIB8yOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUwNDI0 RThDRUM4RjAeFw0yNjA1MTYxNTAzMjFaFw0yNjA1MTcxNzUzMjFaMDMxMTAvBgNV BAMTKDdCM0ZBMkQ0NkI0ODNFOEMxRjk4NEQ2RkMwRDkzNkQ1RUUwNkZBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQNI7sbPjz589TdrDw1iLBw9P 6YY9MPX8xEhglyyzM3ZyDOQ0WWRghFecOe97uOlIa7+caJx2W3+DX3w0LWOiSJl1 lT6tMl81GsKEQbzE6hfQixsbPL1obt5RR4/ArriiCUz6fnMaSZplA9+CtjEHWBja 3MFxfPk1lte91OcgLuuVTEzoB3yvcO9DsFBZXxQcl42YNzX0jaG8Ld+Wj2RgVz1O PrptAWzftV+ewaNRC/13aKpk0HNNtHxFRWvcqUHDOi240NF0jN4C2Tt7ixtdS1xA oMhpewvShoZNn2sNaacFEeodHOjWFBn+LHmOp5CL5+/QYkEthfZCQdjqEX9pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUez+i1GtIPowfmE1vwNk21e4G+hEwHwYDVR0j BBgwFoAUium7IQA+hzls7deJi0pQQk6M7I8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmOGY1NWMtOWUzNS00Y2UyLTg5MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEw MDNFODczOTZDRURENzg5OEI0QTUwNDI0RThDRUM4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUU5QkIyMTAwM0U4NzM5NkNFREQ3ODk4QjRBNTA0MjRFOENF QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUw NDI0RThDRUM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4SdEzC22yAMmsziAet/6RgY+Ce6uRcnSfx rul3wpFdq00i8z0QYFNJuIRMA08zBc6/n4VKLtzta8ntuwSnnJHvimtnz0QkYUwj B3YuQR5Eb4yrTpHCc/SgXTsi9kX34RYKObD0KW3ivbYoJKTw/ZX31yte6KwEAX28 l++08KxvsxEzIlGMHI5U8WhTKK+cRJ1kgRTqIvMKzBAeo5Z09b63N3mdHf+wJtrQ UXSzSSgHiDb9F0v3LRTX73v6bNRVMooHPVACe+/4Wm6ak0+SLwB6ViP6n+AJG2E9 6Imsgzz3L1V6cWMWitO/rGxaDxJcKWY9+rrGtzfaLNDOFUxRkyo= -----END CERTIFICATE-----Generated at Sun May 17 01:10:17 2026 by rpki-client