$ rpki-client -vvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft File: 8FFAA6656CAEB189705F03C7B4148624E4A80597.mft (raw, json) Hash identifier: qo1BqfCWfcl8FQvWjWepE3Bk5c9jzTMLsiXgjQ6pvu0= Subject key identifier: DC:BE:5C:3A:87:41:40:2C:03:E7:EB:9A:ED:7D:9E:B3:45:37:05:2A Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 Certificate issuer: /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Certificate serial: 31CCF0953872A501116211D227180246B268F1C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:04:17 +0000 Manifest this update: Wed 17 Jun 2026 00:59:17 +0000 Manifest next update: Thu 18 Jun 2026 01:30:17 +0000 Files and hashes: 1: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: QgX53d3ZPmwqUeHqTZtdjccW/DQcVacKXuBLz3xuE+Q=) 2: 8FFAA6656CAEB189705F03C7B4148624E4A80597.crl (hash: IuFbbf5KIUC0KkKbib1Iis1ljabbDRwimAZ99dpdLAo=) 3: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: 9g/ng/5n6hJoQNhHnUHUl6+xhhnGERFtgslQ205VyPU=) 4: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: j7IknYgKj7dl1bu8AJ/aQ/eLpW5VQAB5YDLHEEVUQxU=) 5: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 5tE3feCM9vyNUB/qpwvXZKU/4/GsAVh0LYhHMntcLoo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:cc:f0:95:38:72:a5:01:11:62:11:d2:27:18:02:46:b2:68:f1:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Validity Not Before: Jun 17 00:59:17 2026 GMT Not After : Jun 18 01:30:17 2026 GMT Subject: CN=DCBE5C3A8741402C03E7EB9AED7D9EB34537052A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:2e:ef:d1:b5:2b:77:d7:6f:7b:39:be:2a: ca:cf:b0:35:71:a8:f4:0f:f2:74:3a:16:78:a7:37: bd:84:95:06:17:d1:e2:2e:8c:a4:b8:28:10:6d:ac: e8:84:97:a2:06:05:fc:1f:9a:68:f2:06:82:69:9e: 6a:b3:09:10:c5:23:2f:c9:6a:bd:0b:e8:1b:32:91: 6b:d4:9b:0d:74:af:de:32:20:5f:42:1d:8c:22:8b: 69:28:03:dd:c2:07:01:a1:17:32:38:d2:b6:f0:a6: df:34:e8:98:d6:1a:a2:ed:a2:4c:8c:7d:52:9a:2f: 6a:34:3a:1b:97:59:30:6c:67:19:95:03:3c:a2:52: 8b:8f:48:5b:ac:78:9c:10:e0:fb:1d:65:bd:87:fe: 13:c5:3f:1e:00:d9:52:0f:6f:7e:72:ab:96:fa:de: df:65:09:81:c0:87:18:c1:f7:11:a5:18:28:ed:31: db:4a:d5:87:e9:9c:11:0a:5c:c3:6d:eb:c7:de:25: d0:0c:cb:87:e5:53:e4:37:98:be:d7:9e:da:b6:6c: 6c:b5:d6:72:d7:ac:ef:e1:7a:18:60:3f:4c:5c:d3: 67:d6:e2:31:8b:b5:fe:ab:43:a1:cb:58:e7:64:93: 2e:2c:60:7e:31:87:93:68:51:06:18:51:0b:13:00: 4f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BE:5C:3A:87:41:40:2C:03:E7:EB:9A:ED:7D:9E:B3:45:37:05:2A X509v3 Authority Key Identifier: keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fa:1f:5a:2b:f1:75:75:c2:e0:ad:69:88:32:3b:6f:3f:9c: 29:62:82:d6:65:bb:67:3e:46:1c:4b:1e:73:04:d3:05:05:b8: 52:4a:92:25:6c:dd:d8:db:29:10:99:71:15:d4:3a:28:10:85: 48:3e:e3:16:85:e7:0d:1a:d5:3b:6c:e7:5c:8c:c9:e3:62:6c: 08:cc:75:7f:c4:b7:a9:7d:8c:e5:77:7c:c3:1a:aa:f5:f5:fa: e4:bc:0a:1a:45:ae:9f:86:fb:a4:30:65:7d:29:3d:7a:0d:c5: eb:71:78:98:c9:ff:90:d5:83:54:84:2b:01:d2:f0:1e:33:8f: 93:7c:ae:1b:48:4e:0f:bd:75:b8:84:be:13:c0:ff:ed:d6:39: 1f:f5:6a:ef:cb:5c:aa:cb:b9:4b:c0:20:a9:30:96:d0:58:49: 2e:9f:ea:62:ee:6f:6a:42:58:dd:ab:e4:b6:3e:18:d4:40:82: bb:07:7d:4e:5b:1b:0a:84:54:eb:9e:cf:38:9f:bc:67:91:dc: 42:8d:c3:95:09:37:93:8e:97:c3:ed:0f:57:a8:44:83:fb:96: 02:b4:e7:7f:49:3a:0d:ab:60:64:ca:45:ae:20:a3:f8:e1:ef: ba:40:75:e9:95:43:dc:ef:1d:58:c5:e3:28:f6:73:b7:09:98: ad:03:a3:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMczwlThypQERYhHSJxgCRrJo8ckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRF NEE4MDU5NzAeFw0yNjA2MTcwMDU5MTdaFw0yNjA2MTgwMTMwMTdaMDMxMTAvBgNV BAMTKERDQkU1QzNBODc0MTQwMkMwM0U3RUI5QUVEN0Q5RUIzNDUzNzA1MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMiy7v0bUrd9dvezm+KsrPsDVx qPQP8nQ6FninN72ElQYX0eIujKS4KBBtrOiEl6IGBfwfmmjyBoJpnmqzCRDFIy/J ar0L6BsykWvUmw10r94yIF9CHYwii2koA93CBwGhFzI40rbwpt806JjWGqLtokyM fVKaL2o0OhuXWTBsZxmVAzyiUouPSFuseJwQ4PsdZb2H/hPFPx4A2VIPb35yq5b6 3t9lCYHAhxjB9xGlGCjtMdtK1YfpnBEKXMNt68feJdAMy4flU+Q3mL7Xntq2bGy1 1nLXrO/hehhgP0xc02fW4jGLtf6rQ6HLWOdkky4sYH4xh5NoUQYYUQsTAE8LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3L5cOodBQCwD5+ua7X2es0U3BSowHwYDVR0j BBgwFoAUj/qmZWyusYlwXwPHtBSGJOSoBZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI4ODBkZWUtN2FhMi00YmU0LWJmMzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2 Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRFNEE4MDU5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBQTY2NTZDQUVCMTg5NzA1RjAzQzdCNDE0ODYyNEU0QTgw NTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2 MjRFNEE4MDU5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACT6H1or8XV1wuCtaYgyO28/nCligtZlu2c+ RhxLHnME0wUFuFJKkiVs3djbKRCZcRXUOigQhUg+4xaF5w0a1Tts51yMyeNibAjM dX/Et6l9jOV3fMMaqvX1+uS8ChpFrp+G+6QwZX0pPXoNxetxeJjJ/5DVg1SEKwHS 8B4zj5N8rhtITg+9dbiEvhPA/+3WOR/1au/LXKrLuUvAIKkwltBYSS6f6mLub2pC WN2r5LY+GNRAgrsHfU5bGwqEVOuezzifvGeR3EKNw5UJN5OOl8PtD1eoRIP7lgK0 539JOg2rYGTKRa4go/jh77pAdemVQ9zvHVjF4yj2c7cJmK0Do9g= -----END CERTIFICATE-----Generated at Wed Jun 17 11:49:13 2026 by rpki-client