$ rpki-client -vvf rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft File: C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft (raw, json) Hash identifier: 4mg18tSoPfFiZytIcK1ibLich6zg+srz5r6NwgpkqZQ= Subject key identifier: D3:DA:40:98:C7:05:79:C6:15:5E:67:F0:8B:B4:03:A2:98:24:FB:08 Authority key identifier: C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B Certificate issuer: /CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B Certificate serial: 0E1687A91C833A623BC1C00E63A9621C360A36BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft Manifest number: 14 Signing time: Sat 16 May 2026 21:21:40 +0000 Manifest this update: Sat 16 May 2026 21:16:40 +0000 Manifest next update: Sun 17 May 2026 22:45:40 +0000 Files and hashes: 1: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: yHStdJOfwpXotUrFqNRyBFcevnLpf2rHuaCz1qS9rN0=) 2: C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl (hash: AsuPo+17pA4z9VYeGrDvho3qg5dfxva6JNO/Xqj/sXw=) 3: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: T5iXYEZsEylyp3JdGzhmtU2Kjr1HhNQabu6sAc+svIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:16:87:a9:1c:83:3a:62:3b:c1:c0:0e:63:a9:62:1c:36:0a:36:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B Validity Not Before: May 16 21:16:40 2026 GMT Not After : May 17 22:45:40 2026 GMT Subject: CN=D3DA4098C70579C6155E67F08BB403A29824FB08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:37:aa:ed:b3:e2:44:bf:e4:68:ad:59:dd:ba: 59:ac:f6:c7:96:e3:27:05:00:74:1f:ab:c8:d4:2e: a0:b7:89:9f:9e:35:1c:7c:78:f4:e4:eb:93:14:3e: c0:b4:e8:26:0b:00:58:40:f3:98:50:0b:62:cf:43: ca:3e:04:b3:9d:b9:9a:72:1f:04:7a:fb:ff:ab:66: d0:1a:1d:66:44:5c:77:46:31:af:0d:00:38:06:50: 57:4d:06:45:49:20:e9:c9:27:2d:44:6e:34:e8:5b: 31:77:13:d0:a0:09:b3:cd:a7:ac:47:1a:1f:22:24: 53:73:2c:7b:3b:66:a6:37:fd:36:2f:a6:7a:81:91: 03:b6:7b:a7:ba:f6:e2:ef:95:45:12:76:20:92:e7: 2e:6d:66:df:bf:05:a5:43:49:32:b8:d3:32:18:ce: 62:ea:c3:47:22:30:aa:c7:e0:c1:5d:16:99:55:bb: 96:31:09:47:f2:ce:95:22:2b:e7:65:61:89:de:d2: 88:95:94:8d:57:22:05:4e:48:f6:21:0d:91:02:00: f6:df:85:31:3b:b4:72:86:58:50:29:9d:76:33:64: 49:f4:17:fd:b2:ce:ad:2c:25:d1:f5:26:ea:11:d3: 3d:f9:16:1c:93:61:12:5d:30:90:b4:c2:cd:70:a3: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DA:40:98:C7:05:79:C6:15:5E:67:F0:8B:B4:03:A2:98:24:FB:08 X509v3 Authority Key Identifier: keyid:C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:29:d8:4a:97:80:08:c8:16:4f:93:2b:45:b0:70:8c:ea:e3: 36:46:d7:35:64:de:cf:60:7c:eb:81:14:3d:84:f2:b7:46:d2: d4:59:ad:3b:b0:0e:33:a4:1a:fe:04:c2:c9:b0:3a:16:a0:5b: e5:e9:63:fd:77:f6:05:4d:13:d8:b0:3a:9d:2b:9d:79:95:a2: f0:64:d8:c6:e6:d7:82:89:37:a2:ad:3d:27:02:07:a1:ec:7f: b3:82:49:fb:b2:08:0b:65:a4:c8:4a:61:37:31:5d:1a:b1:2c: b1:86:62:bc:1a:3e:9f:89:9a:45:8a:89:54:7b:a4:c7:db:19: a8:9e:5e:37:67:ab:72:13:90:19:48:94:30:20:cd:01:e8:26: 6d:f9:69:51:b3:5f:0c:70:5b:ab:3e:15:5b:5f:20:ad:9a:0f: 28:b1:b5:49:ee:28:91:2a:c1:05:97:78:f0:a4:ee:ab:a3:95: ef:cc:ee:d1:7a:07:7e:b6:f8:39:84:94:27:50:b4:2e:dd:96: f1:07:75:61:18:a4:d1:95:38:02:9d:ee:37:0f:f1:8e:c5:6b: a6:f9:d6:a9:c7:fe:31:d1:3a:68:ac:39:ac:53:e3:0c:33:8e: 67:02:56:0e:df:d5:e1:d6:a5:4e:1d:2b:e7:69:73:d6:0e:f2: e9:b2:14:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhaHqRyDOmI7wcAOY6liHDYKNr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhEMjRBREY1Qzc0MzJFNUUzQzFENTk4ODc3NDEwN0E3 MTdGODI3QjAeFw0yNjA1MTYyMTE2NDBaFw0yNjA1MTcyMjQ1NDBaMDMxMTAvBgNV BAMTKEQzREE0MDk4QzcwNTc5QzYxNTVFNjdGMDhCQjQwM0EyOTgyNEZCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsN6rts+JEv+RorVndulms9seW 4ycFAHQfq8jULqC3iZ+eNRx8ePTk65MUPsC06CYLAFhA85hQC2LPQ8o+BLOduZpy HwR6+/+rZtAaHWZEXHdGMa8NADgGUFdNBkVJIOnJJy1EbjToWzF3E9CgCbPNp6xH Gh8iJFNzLHs7ZqY3/TYvpnqBkQO2e6e69uLvlUUSdiCS5y5tZt+/BaVDSTK40zIY zmLqw0ciMKrH4MFdFplVu5YxCUfyzpUiK+dlYYne0oiVlI1XIgVOSPYhDZECAPbf hTE7tHKGWFApnXYzZEn0F/2yzq0sJdH1JuoR0z35FhyTYRJdMJC0ws1wo9pXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU09pAmMcFecYVXmfwi7QDopgk+wgwHwYDVR0j BBgwFoAUyNJK31x0MuXjwdWYh3QQenF/gnswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhZDA5ZjMtMDAyMy00NDQ1LTg0MTYtNWNiZGUxM2ZkZDQwLzAvQzhEMjRBREY1 Qzc0MzJFNUUzQzFENTk4ODc3NDEwN0E3MTdGODI3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEQyNEFERjVDNzQzMkU1RTNDMUQ1OTg4Nzc0MTA3QTcxN0Y4 MjdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvQzhEMjRBREY1Qzc0MzJFNUUzQzFENTk4ODc3NDEw N0E3MTdGODI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwp2EqXgAjIFk+TK0WwcIzq4zZG1zVk3s9g fOuBFD2E8rdG0tRZrTuwDjOkGv4EwsmwOhagW+XpY/139gVNE9iwOp0rnXmVovBk 2Mbm14KJN6KtPScCB6Hsf7OCSfuyCAtlpMhKYTcxXRqxLLGGYrwaPp+JmkWKiVR7 pMfbGaieXjdnq3ITkBlIlDAgzQHoJm35aVGzXwxwW6s+FVtfIK2aDyixtUnuKJEq wQWXePCk7qujle/M7tF6B362+DmElCdQtC7dlvEHdWEYpNGVOAKd7jcP8Y7Fa6b5 1qnH/jHROmisOaxT4wwzjmcCVg7f1eHWpU4dK+dpc9YO8umyFEo= -----END CERTIFICATE-----Generated at Sun May 17 00:52:10 2026 by rpki-client