$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft File: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft (raw, json) Hash identifier: Hfm4cJDncZ/IA3le3nUy6XOVfD8g3tNOT3Cf90H3HAE= Subject key identifier: A6:90:7C:F0:B9:93:F5:A3:9D:97:3E:64:44:F4:AC:27:39:6A:1A:AC Authority key identifier: 8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92 Certificate issuer: /CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92 Certificate serial: 2FA26C22B943EC25DEE6C5A51E841F2C75C5F07B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft Manifest number: 08 Signing time: Thu 07 May 2026 16:08:07 +0000 Manifest this update: Thu 07 May 2026 16:03:07 +0000 Manifest next update: Fri 08 May 2026 17:42:07 +0000 Files and hashes: 1: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl (hash: QmhepqOOGGPpV7pgE1VBLMwgDIQVG8AoGbhrYLZ5PnE=) 2: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: LMawcFvlyGAFjmzGIPIL0Pb1GIlo75+QClOxIhDqopY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 17:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a2:6c:22:b9:43:ec:25:de:e6:c5:a5:1e:84:1f:2c:75:c5:f0:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92 Validity Not Before: May 7 16:03:07 2026 GMT Not After : May 8 17:42:07 2026 GMT Subject: CN=A6907CF0B993F5A39D973E6444F4AC27396A1AAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:a2:94:9e:db:b7:81:61:65:f5:06:3e:18: af:47:e2:a5:d7:c9:a6:fb:b8:bf:dc:10:43:5a:ce: 21:ab:bb:b8:b5:b5:9f:97:4b:8d:ff:11:68:73:69: 3b:86:72:ee:a9:8b:54:5c:34:a6:17:58:c8:ff:69: b5:2f:63:70:09:cc:c7:e0:38:fd:6c:62:df:5a:6f: c5:97:23:a7:91:c1:4d:b2:84:89:5c:59:55:43:4a: 2b:ab:ca:99:25:04:a1:07:73:6e:f0:6c:53:9f:6d: 3b:e1:fc:fe:63:ed:01:37:11:f5:1c:d8:73:2c:a8: 54:b5:60:ea:69:8b:10:3c:d8:bb:6e:fc:4c:68:5f: 4f:04:7e:65:73:6d:07:1f:26:ac:79:7d:ce:27:8d: 48:d5:ff:d8:af:35:8f:2b:5c:2c:e8:90:00:f7:80: f4:ea:05:6a:bd:ff:80:3c:3a:6f:2e:16:44:5a:5a: dd:ae:41:81:5a:6b:bc:45:ca:f1:9c:f9:e7:fe:9c: 8a:14:02:92:89:6f:f3:d2:e7:e2:8c:31:5d:ea:1c: a5:8d:e0:d5:c0:5f:45:5f:d3:f1:06:3b:6a:a8:f3: 52:c7:61:ba:a2:ed:73:f2:43:52:87:70:7f:e8:7f: a8:6d:9a:83:16:7a:5b:22:62:e5:03:ac:5a:48:50: 8a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:90:7C:F0:B9:93:F5:A3:9D:97:3E:64:44:F4:AC:27:39:6A:1A:AC X509v3 Authority Key Identifier: keyid:8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b6:49:2f:af:ba:dc:d9:ea:a8:a1:c4:42:e1:a7:37:c9:24: e4:32:b1:25:0b:26:66:68:f8:14:7d:87:dd:48:ca:05:28:78: f5:b9:bf:c9:91:6c:21:e3:eb:5f:37:36:2c:d2:21:16:dd:9d: b9:55:c6:2f:2e:22:34:85:0a:99:39:9f:94:3c:08:af:dc:5c: 7b:fd:0c:a0:68:12:c6:02:c8:74:1e:48:aa:61:ab:b4:72:31: 1f:85:b7:9a:9b:e6:60:5b:66:9d:ac:9c:1d:49:54:2f:7a:68: 28:7d:cf:d5:bc:fc:0f:6c:37:e9:fd:08:a0:b4:55:f6:e8:3d: fc:8a:36:96:1e:1b:5c:1e:d7:48:76:a3:7c:df:25:ea:66:10: 6b:8b:50:fe:f1:cc:25:cc:ef:e5:f2:c5:73:21:4a:49:a3:42: 81:ba:6a:30:9f:61:bf:13:24:13:30:4c:13:06:0e:4b:44:1c: f0:a8:9d:8b:ab:5f:c2:39:aa:eb:aa:f5:29:7d:f5:71:71:e3: 0b:ca:f5:66:ea:d5:5a:ea:d0:3d:90:41:f2:05:cc:3d:ff:fd: f3:e0:50:3b:47:37:03:f0:bd:53:e7:4e:4a:a1:35:2b:50:15: 2b:d3:2e:db:09:56:bf:92:b6:fb:4b:cd:ee:21:0f:da:d2:42: 4a:5d:c7:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL6JsIrlD7CXe5sWlHoQfLHXF8HswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4QjE1NUU4MzM1QzAyODU0OUQyQkY2QjU0QzI1RTRB NzhCOEM5MjAeFw0yNjA1MDcxNjAzMDdaFw0yNjA1MDgxNzQyMDdaMDMxMTAvBgNV BAMTKEE2OTA3Q0YwQjk5M0Y1QTM5RDk3M0U2NDQ0RjRBQzI3Mzk2QTFBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFeaKUntu3gWFl9QY+GK9H4qXX yab7uL/cEENaziGru7i1tZ+XS43/EWhzaTuGcu6pi1RcNKYXWMj/abUvY3AJzMfg OP1sYt9ab8WXI6eRwU2yhIlcWVVDSiurypklBKEHc27wbFOfbTvh/P5j7QE3EfUc 2HMsqFS1YOppixA82Ltu/ExoX08EfmVzbQcfJqx5fc4njUjV/9ivNY8rXCzokAD3 gPTqBWq9/4A8Om8uFkRaWt2uQYFaa7xFyvGc+ef+nIoUApKJb/PS5+KMMV3qHKWN 4NXAX0Vf0/EGO2qo81LHYbqi7XPyQ1KHcH/of6htmoMWelsiYuUDrFpIUIpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUppB88LmT9aOdlz5kRPSsJzlqGqwwHwYDVR0j BBgwFoAUiosVXoM1wChUnSv2tUwl5KeLjJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA1MjBiNTQtM2JhNy00NjMxLWFmMGItNTU5ODRiMGJhN2YyLzAvOEE4QjE1NUU4 MzM1QzAyODU0OUQyQkY2QjU0QzI1RTRBNzhCOEM5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QThCMTU1RTgzMzVDMDI4NTQ5RDJCRjZCNTRDMjVFNEE3OEI4 QzkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOEE4QjE1NUU4MzM1QzAyODU0OUQyQkY2QjU0QzI1 RTRBNzhCOEM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ62SS+vutzZ6qihxELhpzfJJOQysSULJmZo +BR9h91IygUoePW5v8mRbCHj6183NizSIRbdnblVxi8uIjSFCpk5n5Q8CK/cXHv9 DKBoEsYCyHQeSKphq7RyMR+Ft5qb5mBbZp2snB1JVC96aCh9z9W8/A9sN+n9CKC0 VfboPfyKNpYeG1we10h2o3zfJepmEGuLUP7xzCXM7+XyxXMhSkmjQoG6ajCfYb8T JBMwTBMGDktEHPConYurX8I5quuq9Sl99XFx4wvK9Wbq1Vrq0D2QQfIFzD3//fPg UDtHNwPwvVPnTkqhNStQFSvTLtsJVr+StvtLze4hD9rSQkpdx+k= -----END CERTIFICATE-----Generated at Fri May 8 07:30:45 2026 by rpki-client