$ rpki-client -vvf rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft File: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft (raw, json) Hash identifier: IjbSv77iAjch3THXSUfUDK1zCzVjeSOS9yAuPezVvUI= Subject key identifier: B4:B6:CF:A7:96:81:AF:14:42:7E:CF:01:A8:91:5F:07:D6:41:F7:F0 Authority key identifier: 8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E Certificate issuer: /CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Certificate serial: 26DA7A8DF39EA0DD4D0BD4AB93045643028E8701 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:13:41 +0000 Manifest this update: Tue 16 Jun 2026 20:08:41 +0000 Manifest next update: Wed 17 Jun 2026 21:54:41 +0000 Files and hashes: 1: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: Y4fdfPd8CGZXfJi8zT1Xs61mqy3uc8h/5nYm+/f9TOQ=) 2: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl (hash: YnR4ZQIEu16DKOLZ0OMDWZV8utN9Y/sidaiXInq97PI=) 3: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: j+lgNwhd7sTPpzvBZDbz7MtwJzwdtzVrzUiO5CTg4C0=) 4: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: VvKS0B4ZLReXOTrvcAhygsCJwutg9GJIYxL7J1Tdiis=) 5: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: tUv0W4gMiS1vhejBIsoiDaLo6/xoWf91YpxI7rtj5ao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:da:7a:8d:f3:9e:a0:dd:4d:0b:d4:ab:93:04:56:43:02:8e:87:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Validity Not Before: Jun 16 20:08:41 2026 GMT Not After : Jun 17 21:54:41 2026 GMT Subject: CN=B4B6CFA79681AF14427ECF01A8915F07D641F7F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d6:65:1f:26:a0:66:c0:fe:07:2b:e3:a6:92: cf:7f:79:93:4e:b8:80:9f:43:1d:15:bf:c3:33:ba: 32:d9:c6:54:03:25:5a:65:4e:a8:8c:f4:08:03:73: ed:b0:3f:a1:58:7d:e8:21:34:c1:2f:91:cc:2a:74: 94:c9:9c:92:de:94:81:3f:38:02:2a:76:6e:b0:88: 54:ee:e8:7c:3a:05:85:7f:97:4c:ce:11:5e:66:42: fa:4d:4d:a2:fb:67:36:a2:72:9f:51:a0:3d:7f:01: 57:56:6a:66:39:ba:65:7e:a0:a9:70:1b:eb:ba:58: 0d:2a:e1:a7:63:a1:1e:5a:5b:7a:32:47:76:24:49: c4:4b:7b:78:1c:39:73:22:18:bf:40:06:9f:32:2d: 54:90:81:ba:9a:17:5b:5e:7c:a0:52:0d:a4:4c:75: 8c:dc:11:95:89:08:25:dc:43:35:e2:f1:70:67:a1: 6d:b5:bc:da:70:87:42:d3:ce:bf:87:67:d0:99:a6: 0f:54:c5:38:7c:6d:4a:cb:d3:95:3e:98:c1:35:c7: 3c:0c:aa:e7:04:02:21:e0:cd:b3:4c:e6:e8:82:0a: b8:0c:9e:08:66:15:cd:18:4f:e0:3a:12:a1:1e:33: a3:54:86:3e:4e:5e:77:0c:35:48:8b:74:8c:3f:cf: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B6:CF:A7:96:81:AF:14:42:7E:CF:01:A8:91:5F:07:D6:41:F7:F0 X509v3 Authority Key Identifier: keyid:8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f0:24:6b:80:5e:25:82:ad:83:e5:41:88:a8:e8:94:9e:81: fb:3c:eb:2c:a9:65:47:ef:14:82:56:45:b5:26:66:ef:9f:27: 83:ee:f8:06:78:12:31:e0:f2:b0:29:61:1d:43:0b:f0:8e:a5: 91:a3:20:84:c5:68:42:62:39:10:eb:ad:1d:b7:82:e6:22:23: 61:05:94:b3:96:3a:e2:00:96:c9:f8:27:6e:a4:c6:2d:a2:1c: fa:4f:4a:67:8d:d2:8e:b2:2d:70:69:14:e0:65:d3:df:c1:80: 8d:f7:81:47:55:ab:25:19:ab:ce:ec:3d:49:fd:9d:7a:c2:3d: f4:48:60:91:38:e2:b0:02:8b:52:0e:87:fc:59:ac:58:8b:6d: 6d:98:fe:d6:f2:41:25:30:8e:f0:79:c4:a9:42:40:b6:af:cf: 19:3f:4e:f1:1f:f4:72:64:75:13:86:06:53:eb:53:a9:db:6d: e3:bf:0b:a1:31:93:67:e9:a0:29:71:cf:1f:c4:21:3a:df:11: 8c:ec:48:26:a6:1c:92:53:14:ba:66:2b:40:e2:11:7e:8f:de: 05:ca:e0:30:08:7e:f5:e8:93:9d:55:be:94:3f:a9:8f:73:69: da:e3:79:af:e6:55:1c:0b:2b:26:a0:47:9a:b4:8e:ae:8c:f7: b8:d7:b1:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJtp6jfOeoN1NC9SrkwRWQwKOhwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEy OUJBMUQ4RTAeFw0yNjA2MTYyMDA4NDFaFw0yNjA2MTcyMTU0NDFaMDMxMTAvBgNV BAMTKEI0QjZDRkE3OTY4MUFGMTQ0MjdFQ0YwMUE4OTE1RjA3RDY0MUY3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp1mUfJqBmwP4HK+Omks9/eZNO uICfQx0Vv8MzujLZxlQDJVplTqiM9AgDc+2wP6FYfeghNMEvkcwqdJTJnJLelIE/ OAIqdm6wiFTu6Hw6BYV/l0zOEV5mQvpNTaL7Zzaicp9RoD1/AVdWamY5umV+oKlw G+u6WA0q4adjoR5aW3oyR3YkScRLe3gcOXMiGL9ABp8yLVSQgbqaF1tefKBSDaRM dYzcEZWJCCXcQzXi8XBnoW21vNpwh0LTzr+HZ9CZpg9UxTh8bUrL05U+mME1xzwM qucEAiHgzbNM5uiCCrgMnghmFc0YT+A6EqEeM6NUhj5OXncMNUiLdIw/z7tzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtLbPp5aBrxRCfs8BqJFfB9ZB9/AwHwYDVR0j BBgwFoAUjNb8AlX9HtF/2Cz6i2bSSim6HY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZlNjNjZDItZmIzYy00MWIyLWI5NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1 NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEyOUJBMUQ4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q2RkMwMjU1RkQxRUQxN0ZEODJDRkE4QjY2RDI0QTI5QkEx RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQy NEEyOUJBMUQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbwJGuAXiWCrYPlQYio6JSegfs86yypZUfv FIJWRbUmZu+fJ4Pu+AZ4EjHg8rApYR1DC/COpZGjIITFaEJiORDrrR23guYiI2EF lLOWOuIAlsn4J26kxi2iHPpPSmeN0o6yLXBpFOBl09/BgI33gUdVqyUZq87sPUn9 nXrCPfRIYJE44rACi1IOh/xZrFiLbW2Y/tbyQSUwjvB5xKlCQLavzxk/TvEf9HJk dROGBlPrU6nbbeO/C6Exk2fpoClxzx/EITrfEYzsSCamHJJTFLpmK0DiEX6P3gXK 4DAIfvXok51VvpQ/qY9zadrjea/mVRwLKyagR5q0jq6M97jXsWg= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:28 2026 by rpki-client