$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft File: F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft (raw, json) Hash identifier: 2+XqS+sIEVgBujbBWtHWw8DuDd8yWPvwyvl9EMQuQGE= Subject key identifier: CF:F9:9B:34:7A:2F:A3:07:9A:9C:9C:EF:55:38:E6:DB:BA:7C:B8:6B Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Certificate serial: 576825C9E85453278FF2F81DBBEDE861996F90E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 17:25:12 +0000 Manifest this update: Tue 16 Jun 2026 17:20:12 +0000 Manifest next update: Wed 17 Jun 2026 18:04:12 +0000 Files and hashes: 1: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: BS5YihTbZaw+pKOipVulLJrh9jJr2QhVUAXi4IwAkiI=) 2: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: bcUDOpCB0dNiYwZx7hB9TNsT/6Q2Z4ktB8wuICtWZXQ=) 3: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: v5Ut+HnAU8B++keMYhHXiHiE6JJw8p9vB3wAUzitQ/s=) 4: F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl (hash: T+1dpdFCMhjZZCKb4132GeZjIcibHEm509yXCpG8MSk=) 5: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: V8AjpSzdxp8GDyMCHA7YtvW4QSVvG85ynWbgCsAEXEs=) 6: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: iFasMrZpPZhCJqBPOEUsMWSE1IL6XiDkC/rJS8HVQTo=) 7: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: OvSsEeapnu+/oiKYJIcMYudEmuSdyI2NmSImX5jHoH4=) 8: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: bS5P/W+hj7so9J/fGjANaNnPonvylnMwWx29PNvc6E4=) 9: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: esq0SPO+hAIrG7YQPAU2RMpBG0FEhngieVqoN2H1Z00=) 10: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: TN3/E7Y5c/nedOyTgYgff8HK90H5iShgi5mk+WZX5nw=) 11: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: /XQUhdaX/lnH/4pSzymUR8gU8PBZoGnTr2RxGh6dJJI=) 12: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: CnBcLvoSDxEWtZrVDvNMamVH18oi4O/jyEx1Mt/oRO8=) 13: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: Fg6XcYLXwzdBTEEbtVqZPj3EQucOEbeogJk1AzgGxAQ=) 14: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: t5lI2fSBgF1Qk+xi/wexkm174c0g31j+0DtjwN72lnc=) 15: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: hVG5QJJlsbYPr5L1RCfsG/I/X2H5aI8Xq7RBOYv0G3o=) 16: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: apqtipmn5kmXtB7pKv4YlNHER/Ifv3+XPDXaeex3R9k=) 17: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: Q18y495vHxKdcsVM96pc/tUI9Fl6GfmbLs035wir/JU=) 18: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: X24eGimplx9OKKA54SDn3PccRcDMInDYSFbqOhNXsRk=) 19: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: svAi0R5XEu9X4Ys1yfCbCgtQxluGGulsPQVUUn8ta/o=) 20: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: kKPyA87cBNNbll+wZXw03s3L6LbkLTPgrzdBootFsHQ=) 21: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: zrBSW8GC94FsmSWPx82P8/uTVF2HgCkoo/2hN3b+4hM=) 22: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: ZWNoTl3f/QBfpXE45HAww//4eS88vFgydiSHbe0zdhA=) 23: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: ZMKJ6qvXBCnIGQclOHQhPWyyMM8hgD3nw2GXMro25Y4=) 24: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: XYH3WtUdslBTF725L3cOP4xs8XuxcDg3daKQgahU/wE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:68:25:c9:e8:54:53:27:8f:f2:f8:1d:bb:ed:e8:61:99:6f:90:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Validity Not Before: Jun 16 17:20:12 2026 GMT Not After : Jun 17 18:04:12 2026 GMT Subject: CN=CFF99B347A2FA3079A9C9CEF5538E6DBBA7CB86B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:37:c2:88:31:fa:0b:0f:94:f7:8b:46:8a: 12:c6:de:40:cb:c7:66:0a:8c:c6:6b:a8:d9:83:4b: 0e:14:00:66:54:18:b6:fd:00:e4:24:f8:23:d2:d8: 4c:bb:8e:a2:78:94:b1:13:62:17:10:7a:47:30:d6: 55:27:65:ea:37:b3:54:92:b0:e9:0a:5f:2b:97:5e: bc:bb:99:69:30:bb:8e:b7:99:65:02:8b:91:43:b1: 71:42:15:2f:23:84:80:79:2c:e7:fc:8e:23:3d:c9: 0c:ad:54:c7:03:b3:dc:6f:bd:c5:2e:8b:4e:73:07: d0:e9:5a:97:ca:ed:c7:de:53:b8:fa:fd:c3:d1:e9: ed:5d:a6:ed:0f:6c:9c:43:c0:96:da:85:14:72:df: 10:5c:a0:fd:89:bf:2e:6e:63:40:6e:2f:46:a5:dc: 0a:f7:1f:d6:0c:d2:76:58:07:19:d8:8e:2d:48:30: 18:33:f8:84:db:cb:55:4f:74:56:e6:ff:70:d7:93: fa:f8:f7:94:7a:e5:39:19:5f:99:cd:76:45:19:d7: f7:58:f2:27:2b:8b:38:c1:d3:3e:d8:63:f1:51:f9: c5:17:6b:97:d2:24:7a:51:34:55:1c:c1:7e:34:7a: d2:14:74:5b:82:02:ae:cb:86:50:21:3e:20:66:a3: c1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F9:9B:34:7A:2F:A3:07:9A:9C:9C:EF:55:38:E6:DB:BA:7C:B8:6B X509v3 Authority Key Identifier: keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:7f:1f:5c:f1:9a:0d:63:e6:ca:1a:c1:4e:a3:64:c0:50:91: c8:fa:fd:cc:d9:80:13:ab:14:c6:05:64:0e:1e:be:f4:5a:58: 42:72:b0:a5:c6:19:3f:fb:ab:b6:7f:2c:db:8f:ab:6e:9e:4b: bd:e4:78:ed:f3:20:69:76:5a:66:fa:1b:c0:38:00:b3:57:5a: 89:86:91:55:c2:63:0d:28:4e:fd:a6:6a:5d:51:55:36:98:89: 45:6a:6a:a7:51:aa:2b:e6:7d:3f:3d:cf:ff:f6:ce:2e:5f:58: 07:22:71:7d:be:2d:94:84:c6:d2:d9:9b:17:36:2a:1c:71:61: 06:02:61:30:84:12:38:c4:08:f1:91:73:6a:f1:e9:c2:18:96: 4a:2f:8f:29:46:a6:4d:04:5a:28:22:0b:a3:dd:90:93:c8:c1: 2b:9e:e8:49:8a:b6:9a:6a:46:0c:c1:1e:f3:cd:7f:c2:47:be: d2:cf:38:df:3a:7a:99:af:d5:b6:25:ef:b6:00:fc:81:cb:9c: 53:53:ed:6a:e3:22:a0:d4:8a:40:ce:fd:7e:e0:d5:72:b9:dc: 20:bc:9b:11:0f:0d:ab:86:e6:ee:bf:15:23:8b:da:06:31:e0: f5:9f:09:8f:55:54:ea:15:32:ca:d5:56:42:bb:47:18:07:1c: 2a:5b:5b:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2glyehUUyeP8vgdu+3oYZlvkOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMxODA4 NkE4MzJDOTAeFw0yNjA2MTYxNzIwMTJaFw0yNjA2MTcxODA0MTJaMDMxMTAvBgNV BAMTKENGRjk5QjM0N0EyRkEzMDc5QTlDOUNFRjU1MzhFNkRCQkE3Q0I4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5azfCiDH6Cw+U94tGihLG3kDL x2YKjMZrqNmDSw4UAGZUGLb9AOQk+CPS2Ey7jqJ4lLETYhcQekcw1lUnZeo3s1SS sOkKXyuXXry7mWkwu463mWUCi5FDsXFCFS8jhIB5LOf8jiM9yQytVMcDs9xvvcUu i05zB9DpWpfK7cfeU7j6/cPR6e1dpu0PbJxDwJbahRRy3xBcoP2Jvy5uY0BuL0al 3Ar3H9YM0nZYBxnYji1IMBgz+ITby1VPdFbm/3DXk/r495R65TkZX5nNdkUZ1/dY 8icrizjB0z7YY/FR+cUXa5fSJHpRNFUcwX40etIUdFuCAq7LhlAhPiBmo8HjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/mbNHovoweanJzvVTjm27p8uGswHwYDVR0j BBgwFoAU+OtvTpHd1H+o4EgbYNTBgIaoMskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAwZjRmMzctYzdmYi00N2QwLThhODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5 MURERDQ3RkE4RTA0ODFCNjBENEMxODA4NkE4MzJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVCNkY0RTkxRERENDdGQThFMDQ4MUI2MEQ0QzE4MDg2QTgz MkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMx ODA4NkE4MzJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5/H1zxmg1j5soawU6jZMBQkcj6/czZgBOr FMYFZA4evvRaWEJysKXGGT/7q7Z/LNuPq26eS73keO3zIGl2Wmb6G8A4ALNXWomG kVXCYw0oTv2mal1RVTaYiUVqaqdRqivmfT89z//2zi5fWAcicX2+LZSExtLZmxc2 KhxxYQYCYTCEEjjECPGRc2rx6cIYlkovjylGpk0EWigiC6PdkJPIwSue6EmKtppq RgzBHvPNf8JHvtLPON86epmv1bYl77YA/IHLnFNT7WrjIqDUikDO/X7g1XK53CC8 mxEPDauG5u6/FSOL2gYx4PWfCY9VVOoVMsrVVkK7RxgHHCpbWyQ= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:47 2026 by rpki-client