$ rpki-client -vvf rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft File: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft (raw, json) Hash identifier: 23/M4+244YKuNO2Lyq40cmPA9lDnGYIVXnKpdWWWKMc= Subject key identifier: B7:68:F0:1E:B0:90:70:55:57:74:AC:2D:CD:DD:B2:F9:6B:16:36:87 Authority key identifier: B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 Certificate issuer: /CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Certificate serial: 72AE34DBA7DF4F04A7290A2973E0EE362BFB8102 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft Manifest number: 05 Signing time: Tue 05 May 2026 09:33:07 +0000 Manifest this update: Tue 05 May 2026 09:28:07 +0000 Manifest next update: Wed 06 May 2026 13:08:07 +0000 Files and hashes: 1: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: 9VWfd5KMgyw5xyqB55UR/HJrZNws4qzcvTj6ecqQ/Qk=) 2: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: g5c7Nq+6t4kiF6CKiothKoqaQ8v25zT/n7Wj9Q/sxEQ=) 3: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl (hash: MCBc7pwZkV1M9BqkSPFEJY7Dxipr28/zdOt8sJR9/YE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ae:34:db:a7:df:4f:04:a7:29:0a:29:73:e0:ee:36:2b:fb:81:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Validity Not Before: May 5 09:28:07 2026 GMT Not After : May 6 13:08:07 2026 GMT Subject: CN=B768F01EB09070555774AC2DCDDDB2F96B163687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:12:9b:e8:f6:19:9f:8e:fe:77:58:e4:56: c8:0a:a9:01:7d:72:b0:50:94:41:ab:96:d6:88:9c: aa:61:b3:68:85:23:25:c4:51:ed:a1:3c:65:db:19: d7:d1:76:15:66:8f:11:c4:6b:30:8a:3c:82:a5:bc: c3:9e:23:92:3a:67:e3:3f:9f:b4:7a:64:d3:ae:16: 5a:84:a7:9d:d0:f0:1b:3e:89:d5:21:ee:fa:7a:0d: 6e:59:b7:fe:61:1c:68:01:03:bd:f9:c6:5e:3f:aa: 56:41:5f:f8:92:0b:47:10:60:96:ca:9d:c9:66:09: 8a:bf:45:00:b0:88:59:23:67:40:af:1c:fa:c7:89: 51:75:06:6f:1c:2b:71:9e:6b:b3:ee:47:c8:dd:5c: 58:b8:7d:9e:3d:38:a7:f0:6e:4a:9b:f1:b4:da:26: 86:5a:1c:fa:eb:86:3c:de:95:89:e6:f1:39:16:af: d1:7a:6b:f7:a0:63:b1:2d:47:52:7d:0c:59:8e:20: 4d:b2:2c:f1:ec:db:ba:c1:90:48:29:db:c1:82:10: 8a:78:4d:72:57:69:9b:77:37:bb:94:ed:3e:bc:f3: 38:60:6d:56:77:b4:8d:37:5e:97:d5:f8:b9:6c:0a: bb:6a:c6:e8:56:1c:33:75:1b:e7:47:f5:8d:df:2c: 4d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:68:F0:1E:B0:90:70:55:57:74:AC:2D:CD:DD:B2:F9:6B:16:36:87 X509v3 Authority Key Identifier: keyid:B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:17:b9:73:02:98:72:ca:b8:50:71:56:cd:ba:62:b1:d6:2c: 59:58:af:e3:fa:3b:bb:34:76:77:32:a4:88:df:08:5e:81:0b: 47:27:08:2f:ec:27:9c:9c:50:bf:d4:cf:f1:29:b6:e3:3a:3e: 01:a8:bf:e9:56:4f:07:79:33:7f:06:1b:c7:ac:82:ca:78:bf: 49:6d:5b:02:49:48:bb:69:86:6f:78:43:21:bf:f0:40:e3:4a: bd:c2:44:1b:83:21:44:5e:55:42:46:75:64:2b:b6:e7:f8:ba: c3:c8:22:c6:b4:72:49:c7:89:d4:fa:02:f5:d6:33:26:11:38: 3f:c3:a5:4a:ca:d3:be:de:50:91:33:2b:d6:6d:47:72:eb:9d: 37:66:34:73:68:cb:01:0d:1a:c1:c4:15:40:75:ba:ab:81:72: cb:42:01:b8:9b:5e:f3:d4:fe:59:65:9d:a6:11:f3:de:bd:3e: 1b:72:fc:b8:f3:93:47:11:26:20:cf:51:dc:6c:9c:d2:f2:4e: 13:14:1a:92:f7:c1:0a:0a:ea:60:83:62:57:52:bf:f5:b8:23: 0b:64:d4:7c:a4:d5:49:75:0c:7e:3a:09:bb:0c:e8:75:09:3b: 41:27:df:a3:65:bc:27:db:36:02:67:85:3f:4f:ec:08:52:b1: 57:69:bc:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcq4026ffTwSnKQopc+DuNiv7gQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzExMUJB QjcwOTQwNjAeFw0yNjA1MDUwOTI4MDdaFw0yNjA1MDYxMzA4MDdaMDMxMTAvBgNV BAMTKEI3NjhGMDFFQjA5MDcwNTU1Nzc0QUMyRENERERCMkY5NkIxNjM2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92xKb6PYZn47+d1jkVsgKqQF9 crBQlEGrltaInKphs2iFIyXEUe2hPGXbGdfRdhVmjxHEazCKPIKlvMOeI5I6Z+M/ n7R6ZNOuFlqEp53Q8Bs+idUh7vp6DW5Zt/5hHGgBA735xl4/qlZBX/iSC0cQYJbK nclmCYq/RQCwiFkjZ0CvHPrHiVF1Bm8cK3Gea7PuR8jdXFi4fZ49OKfwbkqb8bTa JoZaHPrrhjzelYnm8TkWr9F6a/egY7EtR1J9DFmOIE2yLPHs27rBkEgp28GCEIp4 TXJXaZt3N7uU7T688zhgbVZ3tI03XpfV+LlsCrtqxuhWHDN1G+dH9Y3fLE1dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt2jwHrCQcFVXdKwtzd2y+WsWNocwHwYDVR0j BBgwFoAUuBCMf76kK1mksA20otwRG6twlAYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjNzlmYmUtNDc5MC00NmJlLWI5YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZC RUE0MkI1OUE0QjAwREI0QTJEQzExMUJBQjcwOTQwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODEwOEM3RkJFQTQyQjU5QTRCMDBEQjRBMkRDMTExQkFCNzA5 NDA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzEx MUJBQjcwOTQwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAXuXMCmHLKuFBxVs26YrHWLFlYr+P6O7s0 dncypIjfCF6BC0cnCC/sJ5ycUL/Uz/EptuM6PgGov+lWTwd5M38GG8esgsp4v0lt WwJJSLtphm94QyG/8EDjSr3CRBuDIUReVUJGdWQrtuf4usPIIsa0cknHidT6AvXW MyYROD/DpUrK077eUJEzK9ZtR3LrnTdmNHNoywENGsHEFUB1uquBcstCAbibXvPU /lllnaYR8969Phty/Ljzk0cRJiDPUdxsnNLyThMUGpL3wQoK6mCDYldSv/W4Iwtk 1Hyk1Ul1DH46CbsM6HUJO0En36NlvCfbNgJnhT9P7AhSsVdpvE4= -----END CERTIFICATE-----Generated at Tue May 5 14:19:46 2026 by rpki-client