$ rpki-client -vvf rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft File: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft (raw, json) Hash identifier: B9AhKDMp96gnJ2skIuo91vz1oxw0UW3SKCKrbGl7p80= Subject key identifier: F0:B3:82:D4:7C:78:87:4C:B1:05:04:A6:E0:B0:E0:A0:83:04:AE:D9 Authority key identifier: 8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 Certificate issuer: /CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Certificate serial: 334852EC2D017C04E741E90DF376781755EA028E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:34:15 +0000 Manifest this update: Tue 16 Jun 2026 16:29:15 +0000 Manifest next update: Wed 17 Jun 2026 20:04:15 +0000 Files and hashes: 1: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: HeHfGZB/GAp4q9T9TRaLUnaN9SyHYBb/bDC0hRan7Ak=) 2: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: 71PyqcaPYwvm2e6i8fnxEnvNfxXMokDQ1xxLp0rozYA=) 3: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl (hash: lyU7a+Cr234W7OfkVvYX55RCbW9nSI27vBXMo1BR32I=) 4: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: PZbtbKk588SOuMSDyRHv/Fg/EjC+9RQB0ZQtHocb618=) 5: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: NdF7z4Axz0mBE/lC0pc0IGrEEOoXFiCSmtcjnukP0y4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:48:52:ec:2d:01:7c:04:e7:41:e9:0d:f3:76:78:17:55:ea:02:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Validity Not Before: Jun 16 16:29:15 2026 GMT Not After : Jun 17 20:04:15 2026 GMT Subject: CN=F0B382D47C78874CB10504A6E0B0E0A08304AED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:73:e2:99:eb:f1:db:26:e0:de:1e:39:96:92: ca:c7:24:7c:c8:a3:4b:ea:80:46:3c:9a:69:71:3e: 78:3a:27:78:2e:c8:a1:94:46:7d:37:8c:cb:1b:e9: 44:72:1e:13:40:b2:d5:42:76:f0:aa:a7:32:0c:16: 05:ee:ae:fd:ee:72:67:fa:b4:d4:1b:e4:06:8e:cc: 12:b6:ed:4b:12:cf:9d:5b:d2:11:21:b3:e6:40:1d: 29:87:52:0f:3d:80:4e:87:c9:ce:df:22:b1:55:02: 84:12:3e:0c:74:de:4e:e9:f5:9f:e8:e1:ac:ba:f7: ad:2e:a8:5b:df:ec:8e:b6:6c:f3:ad:2f:6d:6e:96: 49:6d:b6:c1:6b:e6:6a:8d:90:42:82:6b:b0:ff:b0: 91:86:1b:43:1e:8e:93:2e:75:ee:75:c8:74:d7:0f: ec:0e:bc:c3:a6:67:05:3d:4f:76:a4:f0:fa:c9:84: af:19:60:ee:02:75:e3:06:4a:dc:28:f4:c6:c1:ac: 75:ee:7f:fd:29:c5:e4:33:6c:e8:69:d0:98:fe:d7: 40:bb:68:2d:60:5d:7a:8a:fc:ce:88:8d:36:d3:58: f9:83:28:ac:d6:8d:bf:d0:0c:98:ca:9f:72:af:f6: c8:75:34:5a:81:94:60:3b:91:0d:f6:af:e9:67:ee: 26:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B3:82:D4:7C:78:87:4C:B1:05:04:A6:E0:B0:E0:A0:83:04:AE:D9 X509v3 Authority Key Identifier: keyid:8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f4:5c:a9:2d:82:af:82:0c:9d:d5:ed:e8:32:e7:c8:59:55: d8:99:a6:09:a9:85:78:15:4f:d5:02:37:50:2b:69:e5:0a:34: 95:7a:63:a7:f1:ba:f5:26:2c:fd:13:24:13:1e:11:7d:9d:08: 68:5c:4d:b3:19:1e:5b:ba:9f:c1:ca:75:13:92:52:47:06:01: 28:c2:79:a2:4c:5b:bf:d3:85:f6:67:fc:bb:22:63:ab:d9:69: 85:53:df:8e:c6:8f:e3:eb:3b:9f:f4:f3:67:76:f5:67:49:07: 4e:bd:5c:65:b1:c3:38:e9:bc:e3:70:23:90:67:79:71:f9:b7: ed:a6:ad:17:47:06:7f:10:eb:c9:45:d0:16:2e:2f:40:3a:dc: 22:ba:e9:02:f6:5f:4c:1a:85:a4:19:f4:d2:b8:31:dd:06:5e: 03:9b:c2:e6:76:10:43:7d:9f:9c:27:f7:0e:1e:78:46:c0:19: cf:ec:d4:f0:5f:5c:fe:92:28:38:41:fa:e6:db:8d:78:74:f0: 8d:39:c7:76:56:c5:89:39:8a:6b:07:e2:e4:1e:9b:11:5e:fd: 7d:18:46:fa:80:42:1d:25:5d:82:23:a5:ac:a5:dd:ee:79:03: 40:d3:4e:10:84:f0:3c:68:9b:f9:bc:e8:f8:39:f9:a5:a1:e5: e7:76:8f:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM0hS7C0BfATnQekN83Z4F1XqAo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFQzFFMDNCOEU1MkY2NkEwNzEzREVCMTQyMTdDODdG OUVBMTdBNzAeFw0yNjA2MTYxNjI5MTVaFw0yNjA2MTcyMDA0MTVaMDMxMTAvBgNV BAMTKEYwQjM4MkQ0N0M3ODg3NENCMTA1MDRBNkUwQjBFMEEwODMwNEFFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyc+KZ6/HbJuDeHjmWksrHJHzI o0vqgEY8mmlxPng6J3guyKGURn03jMsb6URyHhNAstVCdvCqpzIMFgXurv3ucmf6 tNQb5AaOzBK27UsSz51b0hEhs+ZAHSmHUg89gE6Hyc7fIrFVAoQSPgx03k7p9Z/o 4ay6960uqFvf7I62bPOtL21ulklttsFr5mqNkEKCa7D/sJGGG0MejpMude51yHTX D+wOvMOmZwU9T3ak8PrJhK8ZYO4CdeMGStwo9MbBrHXuf/0pxeQzbOhp0Jj+10C7 aC1gXXqK/M6IjTbTWPmDKKzWjb/QDJjKn3Kv9sh1NFqBlGA7kQ32r+ln7iZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8LOC1Hx4h0yxBQSm4LDgoIMErtkwHwYDVR0j BBgwFoAUjuweA7jlL2agcT3rFCF8h/nqF6cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMyNTA2NjItM2VlZi00YWE5LTllZGUtNTYyOWQ1YjZlYTk1LzAvOEVFQzFFMDNC OEU1MkY2NkEwNzEzREVCMTQyMTdDODdGOUVBMTdBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUVDMUUwM0I4RTUyRjY2QTA3MTNERUIxNDIxN0M4N0Y5RUEx N0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvOEVFQzFFMDNCOEU1MkY2NkEwNzEzREVCMTQyMTdD ODdGOUVBMTdBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn0XKktgq+CDJ3V7egy58hZVdiZpgmphXgV T9UCN1AraeUKNJV6Y6fxuvUmLP0TJBMeEX2dCGhcTbMZHlu6n8HKdROSUkcGASjC eaJMW7/ThfZn/LsiY6vZaYVT347Gj+PrO5/082d29WdJB069XGWxwzjpvONwI5Bn eXH5t+2mrRdHBn8Q68lF0BYuL0A63CK66QL2X0wahaQZ9NK4Md0GXgObwuZ2EEN9 n5wn9w4eeEbAGc/s1PBfXP6SKDhB+ubbjXh08I05x3ZWxYk5imsH4uQemxFe/X0Y RvqAQh0lXYIjpayl3e55A0DTThCE8Dxom/m86Pg5+aWh5ed2jyo= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:39 2026 by rpki-client