$ rpki-client -vvf rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft File: 873409842DEE948D3DE05C618194C87A259E04BF.mft (raw, json) Hash identifier: TH26ERLmFnrBPfHKjb9j0Gp4U+txIXjP253LvDMzJQo= Subject key identifier: 89:4C:B7:9B:44:79:C4:FF:70:70:46:30:44:36:F5:E8:BC:DC:15:7D Authority key identifier: 87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF Certificate issuer: /CN=873409842DEE948D3DE05C618194C87A259E04BF Certificate serial: 3C5059F983400AB77BD4D08F39FA1F4A76C1A1EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft Manifest number: 14 Signing time: Sat 16 May 2026 10:31:41 +0000 Manifest this update: Sat 16 May 2026 10:26:41 +0000 Manifest next update: Sun 17 May 2026 11:14:41 +0000 Files and hashes: 1: 873409842DEE948D3DE05C618194C87A259E04BF.crl (hash: oi6N9gbTx/+FSSBSE71GUmczMBrfqlnojutjJNxYhxM=) 2: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: M8QTZuDsRpJ1yY06WkCYeFwFPm5+TLSWxZVTx0+FX3U=) 3: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: grkHY3zf57XsShC3GloC/Ysy8CRxkBA2HYvszXntAaM=) 4: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: OzhJdHffqoSTJ5pFjxmQ04VEvXqHaJWqkM8YRHVnaeQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:50:59:f9:83:40:0a:b7:7b:d4:d0:8f:39:fa:1f:4a:76:c1:a1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873409842DEE948D3DE05C618194C87A259E04BF Validity Not Before: May 16 10:26:41 2026 GMT Not After : May 17 11:14:41 2026 GMT Subject: CN=894CB79B4479C4FF707046304436F5E8BCDC157D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:26:1e:17:55:d5:af:d4:46:c9:ac:b3:a1: 0e:7c:da:f8:c1:12:c6:5c:24:f7:fc:94:30:0f:78: d4:f2:9a:c3:bf:72:a2:5c:cf:f5:6f:87:38:39:42: ae:0a:88:4b:3d:53:5a:06:bd:6a:df:47:d2:c6:63: 47:46:47:af:d9:86:23:e2:30:e3:9e:aa:06:18:0e: 40:ce:5d:f7:51:c3:7b:18:b2:3d:33:12:91:fa:ea: cc:ff:99:64:64:c9:fb:9f:2e:8a:76:d7:e8:5a:b0: de:07:02:55:cb:62:af:b2:54:34:12:0d:c8:09:cb: 20:f4:3d:8c:dd:11:9a:ef:5d:e1:ef:f7:06:42:6d: 04:11:6a:aa:7d:8b:3c:ab:29:e5:29:72:fe:5f:ad: 15:24:9a:cc:c7:1d:c1:3b:71:18:3c:af:16:10:c9: 7f:57:63:83:f7:dc:39:60:4d:91:c3:b6:79:ff:84: a4:bf:32:d7:09:9e:18:00:b5:1d:d9:ed:d0:b2:d6: 45:24:3f:aa:21:b5:e7:ec:94:e9:e7:cb:d6:ce:af: 87:7f:48:f7:c2:15:f3:79:83:5b:6d:47:a3:b7:92: 31:20:f5:51:f6:32:41:f4:d5:07:3f:d9:7d:47:5a: 8d:8f:37:50:34:3b:1d:9a:04:b0:4a:1c:4d:09:ee: bf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4C:B7:9B:44:79:C4:FF:70:70:46:30:44:36:F5:E8:BC:DC:15:7D X509v3 Authority Key Identifier: keyid:87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:57:81:4f:63:04:07:83:b1:62:6d:b7:52:b8:c7:a8:40:3c: fc:c1:b4:62:32:2a:86:c2:22:08:01:83:99:cd:8c:48:c6:bd: 29:e8:6f:7e:5a:24:60:c3:66:12:95:5f:e0:d0:e0:e7:50:e5: 52:7a:07:51:d0:f3:b0:12:ce:e6:59:03:ac:e1:1e:ae:a5:94: a8:ab:3a:eb:4d:9f:19:4a:16:e0:f2:ab:fc:ea:b9:8b:75:c9: 0b:21:f3:08:31:6b:c7:0b:61:71:f7:2c:d1:60:ca:07:32:28: b4:06:8f:85:a4:3e:55:e8:0b:46:e9:5b:66:ac:3a:b8:fe:2e: 0f:e7:86:73:be:15:be:64:7b:95:8a:96:01:b6:24:9f:ac:65: 30:94:c5:33:aa:c4:d8:f4:15:3f:f0:b9:50:d3:fc:bd:0e:d5: 20:17:d4:e3:2d:e4:17:82:de:d9:50:80:d5:da:ff:96:0b:f8: 26:10:f2:17:5c:d9:99:3c:a9:39:66:f0:09:46:e4:73:e0:36: 18:ab:00:69:55:ff:a9:19:f3:41:d4:34:24:cd:64:c9:f6:8d: 09:62:b2:66:6e:21:38:f2:6c:d8:32:08:05:d6:d0:a3:2e:70: d1:f6:a0:ab:00:15:f0:98:11:01:30:ab:46:9c:00:63:1b:35: ba:7a:21:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPFBZ+YNACrd71NCPOfofSnbBoe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4N0Ey NTlFMDRCRjAeFw0yNjA1MTYxMDI2NDFaFw0yNjA1MTcxMTE0NDFaMDMxMTAvBgNV BAMTKDg5NENCNzlCNDQ3OUM0RkY3MDcwNDYzMDQ0MzZGNUU4QkNEQzE1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClDCYeF1XVr9RGyayzoQ582vjB EsZcJPf8lDAPeNTymsO/cqJcz/Vvhzg5Qq4KiEs9U1oGvWrfR9LGY0dGR6/ZhiPi MOOeqgYYDkDOXfdRw3sYsj0zEpH66sz/mWRkyfufLop21+hasN4HAlXLYq+yVDQS DcgJyyD0PYzdEZrvXeHv9wZCbQQRaqp9izyrKeUpcv5frRUkmszHHcE7cRg8rxYQ yX9XY4P33DlgTZHDtnn/hKS/MtcJnhgAtR3Z7dCy1kUkP6ohtefslOnny9bOr4d/ SPfCFfN5g1ttR6O3kjEg9VH2MkH01Qc/2X1HWo2PN1A0Ox2aBLBKHE0J7r/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiUy3m0R5xP9wcEYwRDb16LzcFX0wHwYDVR0j BBgwFoAUhzQJhC3ulI094FxhgZTIeiWeBL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRjZjQwNjctYTY5ZC00OTA4LWJlZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQy REVFOTQ4RDNERTA1QzYxODE5NEM4N0EyNTlFMDRCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzM0MDk4NDJERUU5NDhEM0RFMDVDNjE4MTk0Qzg3QTI1OUUw NEJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4 N0EyNTlFMDRCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlXgU9jBAeDsWJtt1K4x6hAPPzBtGIyKobC IggBg5nNjEjGvSnob35aJGDDZhKVX+DQ4OdQ5VJ6B1HQ87ASzuZZA6zhHq6llKir OutNnxlKFuDyq/zquYt1yQsh8wgxa8cLYXH3LNFgygcyKLQGj4WkPlXoC0bpW2as Orj+Lg/nhnO+Fb5ke5WKlgG2JJ+sZTCUxTOqxNj0FT/wuVDT/L0O1SAX1OMt5BeC 3tlQgNXa/5YL+CYQ8hdc2Zk8qTlm8AlG5HPgNhirAGlV/6kZ80HUNCTNZMn2jQli smZuITjybNgyCAXW0KMucNH2oKsAFfCYEQEwq0acAGMbNbp6IXI= -----END CERTIFICATE-----Generated at Sat May 16 20:32:05 2026 by rpki-client