$ rpki-client -vvf rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft File: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft (raw, json) Hash identifier: NQ+8BH61L1nqDK8hQh9Dtv4ZzmrMuBYeavCUZMoP4IU= Subject key identifier: 5D:86:B4:6E:2F:4B:2F:97:FA:33:E7:F5:2F:B1:86:AB:FD:1A:CC:EA Authority key identifier: 8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 Certificate issuer: /CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Certificate serial: 59703E076F7A1F1B14890D665FB402F98C50FF79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:25:39 +0000 Manifest this update: Wed 17 Jun 2026 02:20:39 +0000 Manifest next update: Thu 18 Jun 2026 03:17:39 +0000 Files and hashes: 1: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: lli6DgdKqwmEkLtB+BG1rU9nYBqGkyyXfGUHRRk2kyY=) 2: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: YXjtjwoesJUSGw40nC73us7OdL7eSn74JJVfMRae8cI=) 3: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: kq6A8cL9NTZnFPc2HUzKmlVXrKIf6u5lrw0WIGV14uo=) 4: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl (hash: V2tmxa+mcR7pLsCUInnw2fgpspKac1qWWMTQ4GZguVw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:70:3e:07:6f:7a:1f:1b:14:89:0d:66:5f:b4:02:f9:8c:50:ff:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Validity Not Before: Jun 17 02:20:39 2026 GMT Not After : Jun 18 03:17:39 2026 GMT Subject: CN=5D86B46E2F4B2F97FA33E7F52FB186ABFD1ACCEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:45:27:60:f7:12:20:8a:e5:45:1b:ff:1a:0b: 70:11:ae:8b:a9:20:59:03:1f:72:2d:6e:19:60:04: 85:64:6f:ae:f0:c5:75:eb:dc:94:18:e9:44:a3:58: de:44:6a:cf:a8:bc:98:be:f3:8b:0c:d4:ca:8b:9b: 23:21:7b:a3:81:59:be:af:67:e8:7e:df:a8:a2:e6: 29:ea:2d:da:ad:e5:ab:9a:d7:ef:b3:72:83:d3:25: ba:27:4a:e0:1f:87:d3:de:6d:ee:b8:13:4e:40:f9: ab:02:c5:f0:db:cd:a3:cb:b0:b5:8a:1f:86:ee:3c: 55:f0:50:da:61:9e:7a:af:36:83:71:c3:af:e1:4e: 8a:71:7e:83:e8:16:1a:e4:5f:20:b3:f4:05:0e:9f: 88:ff:c7:d8:6a:7a:48:55:df:da:66:20:d5:c3:9c: 58:33:03:c1:de:e3:d5:35:56:30:b2:c3:c4:b0:6c: 45:7c:36:32:39:fa:3a:49:eb:74:4c:43:6e:e8:9b: a6:00:43:fa:fe:ae:af:28:5b:af:48:ae:eb:55:fa: ee:85:ec:14:5f:17:ff:c9:f4:b0:da:f4:34:6e:0b: b7:6f:4b:81:22:e9:15:a7:aa:1d:a7:95:67:d1:b9: d0:f1:a0:b7:c9:1b:e2:35:f3:1c:70:ff:5a:ed:a1: d1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:86:B4:6E:2F:4B:2F:97:FA:33:E7:F5:2F:B1:86:AB:FD:1A:CC:EA X509v3 Authority Key Identifier: keyid:8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c1:98:50:67:e3:db:27:c0:cb:43:56:68:3f:13:57:12:a4: e6:da:93:57:8d:20:c5:c6:e5:2f:1a:d9:37:26:53:0d:37:59: 11:73:e7:85:1c:3a:1d:e7:72:bc:5a:96:af:3a:ae:13:cb:64: b1:fa:c5:5e:24:58:e1:de:26:58:86:24:ca:eb:f4:2a:9e:40: fc:d9:b3:7c:8c:6a:30:52:9f:55:82:7c:4e:e2:6f:fb:97:9e: 41:6f:10:3d:64:78:f6:aa:d3:d0:22:39:74:cb:ba:d8:cf:ca: 34:d8:a7:25:e0:10:1f:f2:a6:90:17:32:a0:b8:b3:9f:6c:c6: a7:60:d5:38:2a:38:2b:30:eb:bc:d5:3d:68:89:b7:6f:26:b1: 8c:7b:84:ae:c8:74:b5:92:cd:ea:e9:3b:2e:13:8f:5d:4a:90: 7d:e2:aa:0c:ba:23:f6:5b:3e:d8:52:be:7c:39:d0:dc:04:9e: 07:aa:54:e5:31:f0:cc:59:08:6f:d0:a0:65:f4:59:a9:1a:e0: 90:47:62:96:d9:b7:39:45:af:ba:46:8b:e6:3b:23:c0:bb:fc: 9f:49:d7:54:98:90:6f:2e:4e:ef:b3:41:93:de:ca:d2:c6:07: 40:6e:81:ca:ea:16:0a:f8:f1:5a:34:3e:1b:48:69:48:b7:df: 78:d9:2e:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWXA+B296HxsUiQ1mX7QC+YxQ/3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhD RjIyNTVEODAeFw0yNjA2MTcwMjIwMzlaFw0yNjA2MTgwMzE3MzlaMDMxMTAvBgNV BAMTKDVEODZCNDZFMkY0QjJGOTdGQTMzRTdGNTJGQjE4NkFCRkQxQUNDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKRSdg9xIgiuVFG/8aC3ARroup IFkDH3ItbhlgBIVkb67wxXXr3JQY6USjWN5Eas+ovJi+84sM1MqLmyMhe6OBWb6v Z+h+36ii5inqLdqt5aua1++zcoPTJbonSuAfh9Pebe64E05A+asCxfDbzaPLsLWK H4buPFXwUNphnnqvNoNxw6/hTopxfoPoFhrkXyCz9AUOn4j/x9hqekhV39pmINXD nFgzA8He49U1VjCyw8SwbEV8NjI5+jpJ63RMQ27om6YAQ/r+rq8oW69IrutV+u6F 7BRfF//J9LDa9DRuC7dvS4Ei6RWnqh2nlWfRudDxoLfJG+I18xxw/1rtodFzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXYa0bi9LL5f6M+f1L7GGq/0azOowHwYDVR0j BBgwFoAUjqjsmRJT8GZfQUnV/kLD+M8iVdgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM5MDg3ODItNDUyMC00NWI0LTk5ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkx MjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhDRjIyNTVEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUE4RUM5OTEyNTNGMDY2NUY0MTQ5RDVGRTQyQzNGOENGMjI1 NUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMz RjhDRjIyNTVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXBmFBn49snwMtDVmg/E1cSpObak1eNIMXG 5S8a2TcmUw03WRFz54UcOh3ncrxalq86rhPLZLH6xV4kWOHeJliGJMrr9CqeQPzZ s3yMajBSn1WCfE7ib/uXnkFvED1kePaq09AiOXTLutjPyjTYpyXgEB/yppAXMqC4 s59sxqdg1TgqOCsw67zVPWiJt28msYx7hK7IdLWSzerpOy4Tj11KkH3iqgy6I/Zb PthSvnw50NwEngeqVOUx8MxZCG/QoGX0Waka4JBHYpbZtzlFr7pGi+Y7I8C7/J9J 11SYkG8uTu+zQZPeytLGB0BugcrqFgr48Vo0PhtIaUi333jZLkE= -----END CERTIFICATE-----Generated at Wed Jun 17 09:44:16 2026 by rpki-client