$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft File: 8D7E0574648D2E037D2147F409FC002E56E42A23.mft (raw, json) Hash identifier: 7TWms7IWchJ0AzfbIPF4BlFbbRn7SbBXqOVd1rRpDgY= Subject key identifier: 1D:70:D9:05:18:71:C0:3C:D4:ED:0B:69:86:D2:6B:E2:9C:E6:F4:AE Authority key identifier: 8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 Certificate issuer: /CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Certificate serial: 04F2F068006D9D5865AC4C3923F78186B13507EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft Manifest number: 14 Signing time: Sat 16 May 2026 13:10:04 +0000 Manifest this update: Sat 16 May 2026 13:05:04 +0000 Manifest next update: Sun 17 May 2026 15:36:04 +0000 Files and hashes: 1: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: Wh9jPiaMLmpVJg4WJmhSTDv7ObmHyLTAXzkGZmow5b0=) 2: 8D7E0574648D2E037D2147F409FC002E56E42A23.crl (hash: wL6tNZZy9FeNwtR9TJLsYDg03OoPgGm/cxYYhvapFjs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f2:f0:68:00:6d:9d:58:65:ac:4c:39:23:f7:81:86:b1:35:07:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Validity Not Before: May 16 13:05:04 2026 GMT Not After : May 17 15:36:04 2026 GMT Subject: CN=1D70D9051871C03CD4ED0B6986D26BE29CE6F4AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:48:fa:8d:63:77:ae:ae:51:14:f2:92:71: d5:9b:c2:15:d1:f2:2a:f6:15:94:fc:a6:37:a3:27: 10:68:9d:e0:73:f2:e2:f2:2b:4d:76:93:1a:b1:4b: d6:30:32:47:65:28:7c:ed:de:65:7c:00:2d:86:09: e2:c6:e8:d5:25:d9:d0:58:1c:04:7e:fb:d6:9e:0f: d1:46:5e:0f:cd:ff:c6:51:71:67:e5:6d:a5:4f:e5: b9:be:73:26:d7:c2:de:73:26:36:7b:a2:2c:56:55: ed:7c:29:ac:57:5b:2f:d6:ea:34:eb:c0:bf:3e:c2: ad:41:8c:7d:83:c5:4b:c3:a2:1a:e6:f6:72:aa:5e: 7c:b6:f7:c3:3b:c6:59:3f:be:80:c4:09:11:0b:3a: 50:12:ba:57:a8:7c:fd:dd:81:aa:56:4b:dc:e7:de: a4:ba:d9:c7:fe:45:65:f3:01:fb:ae:85:a6:df:9d: 89:17:9f:a6:50:de:be:c8:d2:93:1b:08:f9:71:58: a1:31:2a:15:1c:d5:e7:e3:7c:c1:73:6c:56:88:cb: c7:c1:d1:77:b2:83:72:29:19:ab:50:78:d8:e5:e2: 26:ad:02:76:74:80:53:ba:71:8a:9b:60:9a:61:0e: e9:bb:af:f0:a7:65:52:c7:98:01:6e:fe:a7:ad:66: d9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:70:D9:05:18:71:C0:3C:D4:ED:0B:69:86:D2:6B:E2:9C:E6:F4:AE X509v3 Authority Key Identifier: keyid:8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:6b:de:6a:62:3e:d8:bf:b0:b0:a2:3e:0c:18:47:ad:f6:f2: 8c:7b:10:9c:26:02:3c:6d:3b:4c:d5:01:62:70:a5:ab:5b:fa: 06:bc:8f:f3:d0:14:0e:ac:4b:ac:f5:2c:b2:c6:df:c5:56:a1: 4e:01:ad:bd:ff:86:93:7e:44:a6:19:5c:f5:ca:45:2b:6a:e9: 0e:fa:90:25:4c:b9:81:5a:eb:b4:46:bf:4b:b2:87:6e:14:af: 5e:62:24:82:c8:a8:86:05:4a:5c:c6:22:59:55:ae:54:38:a3: 75:d3:48:c5:06:f2:08:84:3e:03:9c:40:d9:06:54:d8:d7:89: 8f:1f:ec:8f:ef:9b:00:34:90:0e:5e:08:67:0e:0f:5c:88:72: 33:f8:5f:15:91:47:50:8e:b8:10:ce:f5:9c:1d:e6:88:e2:50: d1:5b:f0:20:65:6c:c5:c8:b9:85:7f:54:32:d1:e4:59:da:a7: ba:06:40:7a:d7:8a:71:a4:15:8a:5d:b3:4c:d0:4d:1b:09:d7: 3d:02:a6:3f:3c:79:39:4c:ea:8f:ab:c1:ca:ac:34:d1:73:32: 78:a8:f8:9c:6f:ec:7d:ee:3b:e9:45:fb:74:ca:7e:ac:7d:9f: 7c:93:59:f9:ac:90:57:a5:91:e8:5d:63:09:9a:7d:58:e8:d9: 51:80:09:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBPLwaABtnVhlrEw5I/eBhrE1B+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1 NkU0MkEyMzAeFw0yNjA1MTYxMzA1MDRaFw0yNjA1MTcxNTM2MDRaMDMxMTAvBgNV BAMTKDFENzBEOTA1MTg3MUMwM0NENEVEMEI2OTg2RDI2QkUyOUNFNkY0QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kUj6jWN3rq5RFPKScdWbwhXR 8ir2FZT8pjejJxBoneBz8uLyK012kxqxS9YwMkdlKHzt3mV8AC2GCeLG6NUl2dBY HAR++9aeD9FGXg/N/8ZRcWflbaVP5bm+cybXwt5zJjZ7oixWVe18KaxXWy/W6jTr wL8+wq1BjH2DxUvDohrm9nKqXny298M7xlk/voDECRELOlASuleofP3dgapWS9zn 3qS62cf+RWXzAfuuhabfnYkXn6ZQ3r7I0pMbCPlxWKExKhUc1efjfMFzbFaIy8fB 0Xeyg3IpGatQeNjl4iatAnZ0gFO6cYqbYJphDum7r/CnZVLHmAFu/qetZtn7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHXDZBRhxwDzU7QtphtJr4pzm9K4wHwYDVR0j BBgwFoAUjX4FdGSNLgN9IUf0CfwALlbkKiMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2 NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1NkU0MkEyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDdFMDU3NDY0OEQyRTAzN0QyMTQ3RjQwOUZDMDAyRTU2RTQy QTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAw MkU1NkU0MkEyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChr3mpiPti/sLCiPgwYR6328ox7EJwmAjxt O0zVAWJwpatb+ga8j/PQFA6sS6z1LLLG38VWoU4Brb3/hpN+RKYZXPXKRStq6Q76 kCVMuYFa67RGv0uyh24Ur15iJILIqIYFSlzGIllVrlQ4o3XTSMUG8giEPgOcQNkG VNjXiY8f7I/vmwA0kA5eCGcOD1yIcjP4XxWRR1COuBDO9Zwd5ojiUNFb8CBlbMXI uYV/VDLR5Fnap7oGQHrXinGkFYpds0zQTRsJ1z0Cpj88eTlM6o+rwcqsNNFzMnio +Jxv7H3uO+lF+3TKfqx9n3yTWfmskFelkehdYwmafVjo2VGACfQ= -----END CERTIFICATE-----Generated at Sat May 16 16:41:16 2026 by rpki-client