$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft File: A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft (raw, json) Hash identifier: Qx9TX+ghWMdUKuajPTNOHkiy6n6ljmL0ZLdFgdBCaSE= Subject key identifier: 84:B1:D9:8A:51:56:E8:6C:DF:68:86:E5:A5:E4:14:FA:9A:C6:A1:E7 Authority key identifier: A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF Certificate issuer: /CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Certificate serial: 33C81EE946444FF435690FBECC03435095F2C547 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft Manifest number: 14 Signing time: Sat 16 May 2026 18:18:14 +0000 Manifest this update: Sat 16 May 2026 18:13:14 +0000 Manifest next update: Sun 17 May 2026 18:25:14 +0000 Files and hashes: 1: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: pahHbmXTulV++MGHGhEL8jSNz3xJ/1KdhQdlxBhfIw4=) 2: A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl (hash: qf8zTvugxyNelPVCbDDUEkNrXmMQVH46R8ZzRWX014Q=) 3: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: h1TE3m56WQ+gTVyqOOSf1UTeQzb1azE9LGSpzK549vA=) 4: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: /KfC4nr32tMCkBy7+tyxmf0Ms+3hn6LQNee4YzYVhVM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c8:1e:e9:46:44:4f:f4:35:69:0f:be:cc:03:43:50:95:f2:c5:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Validity Not Before: May 16 18:13:14 2026 GMT Not After : May 17 18:25:14 2026 GMT Subject: CN=84B1D98A5156E86CDF6886E5A5E414FA9AC6A1E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f4:be:2e:52:8d:29:19:66:16:f7:1c:63:02: 3f:06:2f:07:1c:d5:36:7a:a6:9c:6b:21:5b:ab:dc: c9:d4:78:87:2f:a0:4c:77:14:2b:b4:70:91:ab:2c: 46:19:fc:3c:9b:df:a0:d5:d2:95:31:c3:b8:ce:38: 08:c0:5f:ec:fe:84:be:dd:ec:d6:fa:97:a0:21:19: ba:47:86:5f:ba:8f:5e:28:7e:ce:ee:f7:16:b2:22: df:a3:c3:6c:03:58:f2:7a:bd:dc:b7:e6:97:f6:2e: be:5a:5e:bb:a4:56:4c:92:61:de:31:45:6c:4a:e2: f6:80:05:30:bd:4a:7a:d5:2a:0f:8e:a9:a1:2f:36: 49:c3:f8:da:9f:17:a1:6c:d8:63:3a:03:5e:c3:23: 73:e9:9d:d2:d5:69:1b:c0:90:04:7e:75:ce:01:ea: 87:c9:98:78:c6:85:52:6c:3c:fc:43:7a:e4:f6:0e: ef:fd:8d:ad:a1:7c:7a:fe:fc:5b:41:67:63:ad:b5: e8:84:a1:1d:46:57:63:3f:c5:29:c9:e8:c2:a5:eb: 59:21:e7:6c:17:80:3e:37:db:f4:23:20:c3:cc:b6: cd:55:b1:d0:15:fe:58:75:ca:58:0e:46:6b:f8:85: b2:66:f0:1c:b4:ae:99:fc:32:b4:cc:4c:d4:05:40: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B1:D9:8A:51:56:E8:6C:DF:68:86:E5:A5:E4:14:FA:9A:C6:A1:E7 X509v3 Authority Key Identifier: keyid:A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:4c:dd:b3:51:a2:22:98:d2:cb:f2:73:3b:18:d4:36:09:a9: d5:db:67:83:8e:d8:53:bb:34:39:97:89:33:67:bf:3d:8a:1b: 99:b8:19:0b:73:2f:af:50:f1:b3:9c:a8:cc:2d:a3:ce:8d:06: 7e:d1:87:17:e5:13:dc:ad:91:ca:dc:43:b0:70:87:67:a0:f4: 62:67:57:95:3d:ed:ad:47:ed:15:38:81:42:2f:af:ee:32:3f: cc:d0:3c:d6:20:e8:1b:e4:33:5d:85:37:bb:93:4f:f9:22:2d: 9b:6a:78:1a:35:ac:ec:cb:60:22:65:f4:9f:7a:e6:e6:9b:8c: 82:e2:d1:97:52:47:24:33:22:5b:72:07:ea:09:08:74:ca:3b: 0b:6a:cf:1c:b1:df:da:b2:c7:e7:5c:1c:cc:a1:ef:7f:16:dd: 02:ae:48:15:75:83:7a:69:f0:92:32:e5:73:fa:bd:73:9d:92: a7:ef:08:1e:dc:04:8f:f9:2b:85:45:2f:bc:c7:37:e5:0e:4d: a0:44:26:c5:56:51:3d:72:f8:bf:d1:4d:4a:50:86:17:ff:d4: 96:66:04:c4:3b:56:f3:a7:49:c2:e3:29:09:bf:2c:86:8c:b8: de:0f:17:8f:4b:9b:fe:b6:dd:29:82:b3:7a:87:bc:fe:e6:29: ba:78:a0:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8ge6UZET/Q1aQ++zANDUJXyxUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFFREYx MUQ0NzhDRjAeFw0yNjA1MTYxODEzMTRaFw0yNjA1MTcxODI1MTRaMDMxMTAvBgNV BAMTKDg0QjFEOThBNTE1NkU4NkNERjY4ODZFNUE1RTQxNEZBOUFDNkExRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa9L4uUo0pGWYW9xxjAj8GLwcc 1TZ6ppxrIVur3MnUeIcvoEx3FCu0cJGrLEYZ/Dyb36DV0pUxw7jOOAjAX+z+hL7d 7Nb6l6AhGbpHhl+6j14ofs7u9xayIt+jw2wDWPJ6vdy35pf2Lr5aXrukVkySYd4x RWxK4vaABTC9SnrVKg+OqaEvNknD+NqfF6Fs2GM6A17DI3PpndLVaRvAkAR+dc4B 6ofJmHjGhVJsPPxDeuT2Du/9ja2hfHr+/FtBZ2OtteiEoR1GV2M/xSnJ6MKl61kh 52wXgD432/QjIMPMts1VsdAV/lh1ylgORmv4hbJm8By0rpn8MrTMTNQFQFcBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhLHZilFW6GzfaIblpeQU+prGoecwHwYDVR0j BBgwFoAUqLQpDbHVABFykYWNrxse3xHUeM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMxZTQ5YWItNTBjYS00YjNlLTgyM2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERC MUQ1MDAxMTcyOTE4NThEQUYxQjFFREYxMUQ0NzhDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI0MjkwREIxRDUwMDExNzI5MTg1OERBRjFCMUVERjExRDQ3 OENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFF REYxMUQ0NzhDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANM3bNRoiKY0svyczsY1DYJqdXbZ4OO2FO7 NDmXiTNnvz2KG5m4GQtzL69Q8bOcqMwto86NBn7RhxflE9ytkcrcQ7Bwh2eg9GJn V5U97a1H7RU4gUIvr+4yP8zQPNYg6BvkM12FN7uTT/kiLZtqeBo1rOzLYCJl9J96 5uabjILi0ZdSRyQzIltyB+oJCHTKOwtqzxyx39qyx+dcHMyh738W3QKuSBV1g3pp 8JIy5XP6vXOdkqfvCB7cBI/5K4VFL7zHN+UOTaBEJsVWUT1y+L/RTUpQhhf/1JZm BMQ7VvOnScLjKQm/LIaMuN4PF49Lm/623SmCs3qHvP7mKbp4oC0= -----END CERTIFICATE-----Generated at Sun May 17 00:03:36 2026 by rpki-client