$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft File: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft (raw, json) Hash identifier: njzoRwG73CuougrE339RIstWXyaj02SWMs9G9MUZ1WM= Subject key identifier: C8:C6:EC:9F:34:F0:EA:02:35:7E:40:45:2E:08:59:0B:D7:35:83:4A Authority key identifier: D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 Certificate issuer: /CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Certificate serial: 22203280EEAF3D2FA85327670CE52BB35234C0D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft Manifest number: 05 Signing time: Tue 05 May 2026 11:01:42 +0000 Manifest this update: Tue 05 May 2026 10:56:42 +0000 Manifest next update: Wed 06 May 2026 13:58:42 +0000 Files and hashes: 1: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: Jbbv7LheQBY4j7uxSO+OAvKD/NoLJjSel5LCZW8mlwI=) 2: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl (hash: 9FoIAPfzI5nvT6O+ANh84/L3+F2m4Z4rN4PHarvYkyA=) 3: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: L6oL2whYFSSKY1+OlvsQBxpegvioTL+JL/PrizaKM4w=) 4: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: dz8GDvSUHBxefCxM449tm0eNclhVLJnu4XpLW3XQ1J8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:20:32:80:ee:af:3d:2f:a8:53:27:67:0c:e5:2b:b3:52:34:c0:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Validity Not Before: May 5 10:56:42 2026 GMT Not After : May 6 13:58:42 2026 GMT Subject: CN=C8C6EC9F34F0EA02357E40452E08590BD735834A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a4:58:37:00:a8:5d:4d:47:bc:a9:e8:15:d4: ad:ad:70:2c:bb:1a:49:01:f5:95:0d:37:ba:90:8d: f3:15:84:7b:17:38:4b:0b:6b:cd:26:50:e1:9d:0f: ec:ad:e3:c2:44:c6:26:8f:ae:f9:f8:28:e1:11:2c: df:bb:ab:65:f3:26:de:e7:da:21:48:98:e3:be:f6: 66:b3:af:2b:f4:c3:dc:b1:74:75:94:0d:89:f6:3a: 85:c0:b6:4a:15:c7:c4:36:02:b7:ce:a9:e9:60:fe: 2b:6a:86:c7:27:74:a4:4b:85:ee:7e:86:5a:55:7c: 4e:bb:04:09:eb:66:28:5e:21:41:e5:7c:45:af:ec: 04:2b:97:ac:ec:ab:cb:6b:48:45:7d:1b:a9:99:13: 67:50:ea:f3:e5:a6:7a:be:03:2f:dc:ff:26:75:47: 2d:7b:6d:97:d2:27:3f:37:fa:ec:97:7f:2f:7b:32: 19:74:08:6d:a8:38:f8:65:75:a9:bc:ce:59:cf:2e: c3:42:87:d4:a7:48:7a:83:de:08:e6:c0:4c:ec:4b: 0e:4d:41:e5:3e:0d:d5:4a:1f:c8:64:be:13:43:bc: 5b:08:d9:76:d2:2d:a2:40:1f:aa:3b:64:5f:aa:5a: 17:19:f3:b6:10:5e:f3:38:89:cf:3a:00:44:86:56: f9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C6:EC:9F:34:F0:EA:02:35:7E:40:45:2E:08:59:0B:D7:35:83:4A X509v3 Authority Key Identifier: keyid:D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d0:29:a9:44:d1:0e:b5:22:94:91:d7:9d:5f:a4:17:d9:d9: 02:59:f7:9c:d0:40:a9:5e:2e:d6:a0:0e:02:b3:31:9a:7e:56: d0:a8:a1:87:0c:48:3b:ab:75:bc:93:64:b9:ff:8e:dd:bf:b5: 1c:48:6b:c6:39:4b:32:9d:37:b2:f0:cd:08:e6:51:c3:df:db: a4:a9:8b:c0:2b:8e:68:25:04:42:99:54:af:79:da:d1:1c:8c: c2:44:a2:33:7c:20:39:b4:98:a9:8f:1f:6c:9d:87:04:31:a5: c3:c2:13:b2:11:66:5c:9f:49:b8:11:f8:3c:b1:74:63:ef:e2: 24:b0:89:2f:86:38:77:df:78:2f:41:8b:85:a9:07:6b:ff:a7: 8b:47:98:b1:41:14:67:1d:c8:28:02:ad:de:48:ce:fa:76:f4: 03:04:39:66:50:31:7b:51:da:b1:6a:d8:46:db:ed:d0:60:61: 62:c0:77:5a:d2:59:9c:88:23:0f:42:b6:5e:3b:2b:50:c1:c8: 3b:c6:84:53:08:d5:07:d6:6b:09:60:50:2f:8e:e1:9b:15:f4: ef:01:54:db:bb:eb:7d:93:43:8e:d3:e8:a6:eb:3d:08:d3:94: 5f:da:b1:35:dc:a1:12:3a:2a:03:06:15:9e:d1:b2:9a:9a:cd: 77:9a:da:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIiAygO6vPS+oUydnDOUrs1I0wNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBC REYzRkQ4OTAeFw0yNjA1MDUxMDU2NDJaFw0yNjA1MDYxMzU4NDJaMDMxMTAvBgNV BAMTKEM4QzZFQzlGMzRGMEVBMDIzNTdFNDA0NTJFMDg1OTBCRDczNTgzNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKpFg3AKhdTUe8qegV1K2tcCy7 GkkB9ZUNN7qQjfMVhHsXOEsLa80mUOGdD+yt48JExiaPrvn4KOERLN+7q2XzJt7n 2iFImOO+9mazryv0w9yxdHWUDYn2OoXAtkoVx8Q2ArfOqelg/itqhscndKRLhe5+ hlpVfE67BAnrZiheIUHlfEWv7AQrl6zsq8trSEV9G6mZE2dQ6vPlpnq+Ay/c/yZ1 Ry17bZfSJz83+uyXfy97Mhl0CG2oOPhldam8zlnPLsNCh9SnSHqD3gjmwEzsSw5N QeU+DdVKH8hkvhNDvFsI2XbSLaJAH6o7ZF+qWhcZ87YQXvM4ic86AESGVvk5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyMbsnzTw6gI1fkBFLghZC9c1g0owHwYDVR0j BBgwFoAU0oJVBnmOSO5Pa9C3yKS5gL3z/YkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGMxZTgwZDQtNmViZS00OTJjLWEwYzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3 OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBCREYzRkQ4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjgyNTUwNjc5OEU0OEVFNEY2QkQwQjdDOEE0Qjk4MEJERjNG RDg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5 ODBCREYzRkQ4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfQKalE0Q61IpSR151fpBfZ2QJZ95zQQKle LtagDgKzMZp+VtCooYcMSDurdbyTZLn/jt2/tRxIa8Y5SzKdN7LwzQjmUcPf26Sp i8ArjmglBEKZVK952tEcjMJEojN8IDm0mKmPH2ydhwQxpcPCE7IRZlyfSbgR+Dyx dGPv4iSwiS+GOHffeC9Bi4WpB2v/p4tHmLFBFGcdyCgCrd5Izvp29AMEOWZQMXtR 2rFq2Ebb7dBgYWLAd1rSWZyIIw9Ctl47K1DByDvGhFMI1QfWawlgUC+O4ZsV9O8B VNu7632TQ47T6KbrPQjTlF/asTXcoRI6KgMGFZ7RspqazXea2gQ= -----END CERTIFICATE-----Generated at Tue May 5 14:20:13 2026 by rpki-client