$ rpki-client -vvf rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft File: 8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft (raw, json) Hash identifier: rRY02rahR7rTO37pbdhZaK0Ujjp1ilGS+WfluSg/ydA= Subject key identifier: A2:EF:6F:EA:B8:A0:B7:90:63:A7:25:C4:AD:40:CE:E2:AC:09:03:5F Authority key identifier: 8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D Certificate issuer: /CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D Certificate serial: C7FE0F22C29042FD1B79A1D61A0A717258329E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:02:04 +0000 Manifest this update: Tue 16 Jun 2026 18:57:04 +0000 Manifest next update: Wed 17 Jun 2026 20:24:04 +0000 Files and hashes: 1: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: 7H5ayDey2sF8s3x7vuViq2lu5YPxfK0ha8SKey7N61Q=) 2: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: NY8uhqteE/p2Oynj2juQDQqNJOeFUT9zptMVOdrA1BE=) 3: 8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl (hash: KMQjR6HESrOLQ2/9x84e7+ZkQWOSZG52I/+zixNa748=) 4: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: LvhMo9Ji9pG6mVQPdJp//+4N2gdaqqVMar2Fp2RKr1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c7:fe:0f:22:c2:90:42:fd:1b:79:a1:d6:1a:0a:71:72:58:32:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D Validity Not Before: Jun 16 18:57:04 2026 GMT Not After : Jun 17 20:24:04 2026 GMT Subject: CN=A2EF6FEAB8A0B79063A725C4AD40CEE2AC09035F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:f9:43:c1:c6:9b:5a:20:fc:01:45:70:61: db:72:07:e0:0f:ab:f0:4d:ea:42:19:9c:5d:92:99: fd:69:28:69:ae:f4:3e:2d:99:6e:ea:da:c7:ca:cd: 60:ae:26:9d:a4:d4:40:72:cd:21:d7:0e:eb:3c:43: a3:17:3e:dc:7d:a4:ea:53:df:24:82:54:d7:ba:dd: 8a:f0:14:fb:9e:71:10:05:e7:90:31:63:d6:7e:58: c1:4c:12:d2:5b:88:cc:b2:e8:51:40:e9:03:e7:53: 4a:85:22:d0:b5:16:89:d4:41:c3:38:14:74:77:47: f3:d6:c2:e6:a3:bc:37:57:31:8f:f4:9a:2e:d9:b9: 74:f5:e2:89:0c:36:b9:2a:76:2d:9b:15:cb:c4:e4: e9:80:1d:ab:8e:5f:00:0f:68:2f:5c:e9:4b:0f:35: c8:c2:1e:dd:63:99:7c:79:a3:c3:70:b5:56:57:cc: 1c:3c:78:c3:1f:5f:6c:67:da:2e:5b:79:c8:66:5f: 32:5c:37:c3:1f:f3:29:f3:00:d1:2f:eb:06:f0:de: 16:46:4a:e7:47:a7:83:e1:53:c6:81:ca:56:7b:e9: 73:cb:58:08:a9:97:88:a7:90:7b:f1:87:68:cb:2a: 40:36:c1:e8:c2:90:4f:79:6c:2a:3c:99:2f:5f:a1: 72:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EF:6F:EA:B8:A0:B7:90:63:A7:25:C4:AD:40:CE:E2:AC:09:03:5F X509v3 Authority Key Identifier: keyid:8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:05:2d:af:31:4e:cb:87:4c:96:e6:64:27:3d:e9:44:df:65: 79:3a:32:6a:2a:79:93:6c:cb:45:49:72:77:7a:f9:93:ef:79: 47:76:ac:d0:66:23:1f:5b:25:6c:ad:e4:67:c7:98:dc:a2:9f: de:e5:26:98:fe:0f:79:ca:55:bd:1c:74:a1:2d:e2:c5:5b:17: d3:dd:af:50:01:79:7e:7c:35:d1:a3:c8:b8:39:07:1c:f2:2e: f9:81:07:8d:78:c4:84:9b:69:67:aa:69:ed:a6:23:9c:ef:86: 5e:e1:5d:ff:83:a5:4e:81:17:83:3a:df:bf:74:23:7f:d7:c9: 70:0f:54:49:0b:de:6c:45:9f:4f:f7:29:be:bb:84:ee:8a:54: cd:73:56:cc:2f:5a:81:70:cd:e1:63:e8:d3:0b:b7:eb:9e:f4: b8:0b:83:18:e6:ad:93:00:94:ba:80:ac:c6:bc:97:13:92:e6: 16:26:51:9e:50:7b:ef:66:13:64:b2:b4:f7:6a:de:b9:ae:54: 6e:73:19:aa:90:4c:10:7e:74:51:79:65:97:ac:f0:24:ac:24: 36:35:cf:13:8c:1d:0b:5a:f8:24:ec:87:d5:07:9f:fe:9b:e2: 79:0a:60:72:fb:9d:5d:fc:b9:c7:db:93:ca:9f:61:2d:0a:cd: 15:c2:64:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMf+DyLCkEL9G3mh1hoKcXJYMp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjY4NDY1Q0UzQkY1RUIwREYzNjEzRkVCREQzQzI3 NkY1QkIyRDAeFw0yNjA2MTYxODU3MDRaFw0yNjA2MTcyMDI0MDRaMDMxMTAvBgNV BAMTKEEyRUY2RkVBQjhBMEI3OTA2M0E3MjVDNEFENDBDRUUyQUMwOTAzNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd7/lDwcabWiD8AUVwYdtyB+AP q/BN6kIZnF2Smf1pKGmu9D4tmW7q2sfKzWCuJp2k1EByzSHXDus8Q6MXPtx9pOpT 3ySCVNe63YrwFPuecRAF55AxY9Z+WMFMEtJbiMyy6FFA6QPnU0qFItC1FonUQcM4 FHR3R/PWwuajvDdXMY/0mi7ZuXT14okMNrkqdi2bFcvE5OmAHauOXwAPaC9c6UsP NcjCHt1jmXx5o8NwtVZXzBw8eMMfX2xn2i5bechmXzJcN8Mf8ynzANEv6wbw3hZG SudHp4PhU8aBylZ76XPLWAipl4inkHvxh2jLKkA2wejCkE95bCo8mS9foXJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUou9v6rigt5BjpyXErUDO4qwJA18wHwYDVR0j BBgwFoAUi+JoRlzjv16w3zYT/r3Twnb1uy0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZmZDlhNTgtYTkwNi00MDI5LTkyZTItYWRjYjU2YWUxOGJkLzAvOEJFMjY4NDY1 Q0UzQkY1RUIwREYzNjEzRkVCREQzQzI3NkY1QkIyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkUyNjg0NjVDRTNCRjVFQjBERjM2MTNGRUJERDNDMjc2RjVC QjJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmZDlhNTgtYTkwNi00MDI5LTky ZTItYWRjYjU2YWUxOGJkLzAvOEJFMjY4NDY1Q0UzQkY1RUIwREYzNjEzRkVCREQz QzI3NkY1QkIyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQFLa8xTsuHTJbmZCc96UTfZXk6MmoqeZNs y0VJcnd6+ZPveUd2rNBmIx9bJWyt5GfHmNyin97lJpj+D3nKVb0cdKEt4sVbF9Pd r1ABeX58NdGjyLg5BxzyLvmBB414xISbaWeqae2mI5zvhl7hXf+DpU6BF4M63790 I3/XyXAPVEkL3mxFn0/3Kb67hO6KVM1zVswvWoFwzeFj6NMLt+ue9LgLgxjmrZMA lLqArMa8lxOS5hYmUZ5Qe+9mE2SytPdq3rmuVG5zGaqQTBB+dFF5ZZes8CSsJDY1 zxOMHQta+CTsh9UHn/6b4nkKYHL7nV38ucfbk8qfYS0KzRXCZLk= -----END CERTIFICATE-----Generated at Wed Jun 17 12:40:14 2026 by rpki-client