$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft File: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft (raw, json) Hash identifier: FZH/YH1MvWIb+du0UihJs+7YzkfOA95DChGndImVgGU= Subject key identifier: 73:0E:29:20:1A:1A:B4:87:C7:45:12:5F:74:6A:C3:99:FF:0A:A9:9F Authority key identifier: 8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C Certificate issuer: /CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Certificate serial: 4BEF4C72198882A5B5CDB6B2DA3FB9D014CC4901 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:08:13 +0000 Manifest this update: Wed 17 Jun 2026 00:03:13 +0000 Manifest next update: Thu 18 Jun 2026 03:41:13 +0000 Files and hashes: 1: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: kAF9XX+k/l/rK1GEr+bjFHX1YeYovpaBVZcUfCaqwVQ=) 2: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl (hash: cs0RI6PGP4BDF3F6e+1j9JLDLsS8zwMB/bkWCntR/ew=) 3: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: gHaL9xm6upsCMiwuTIzMiljzjIKdP3tM2s5bdfg68uM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ef:4c:72:19:88:82:a5:b5:cd:b6:b2:da:3f:b9:d0:14:cc:49:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Validity Not Before: Jun 17 00:03:13 2026 GMT Not After : Jun 18 03:41:13 2026 GMT Subject: CN=730E29201A1AB487C745125F746AC399FF0AA99F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:48:9f:b7:98:4e:55:8f:02:13:f1:5f:54: 1b:2c:77:8f:2b:00:12:98:1e:31:98:7e:35:a3:84: 58:c8:fe:2f:76:9d:05:96:00:73:4f:39:a9:77:c3: be:7b:f5:24:a3:67:aa:7e:11:d0:9a:56:8a:1f:bd: e9:78:2e:e5:78:85:7c:b4:90:44:4d:77:02:bd:63: 15:40:93:75:3e:24:db:e6:67:f4:0b:cb:7f:73:84: 69:9e:ff:b1:a5:7f:48:94:c7:96:5e:5d:b0:42:24: 28:ae:e5:f2:da:9c:5a:4d:a3:0a:97:a0:b9:54:1f: 8b:89:e5:8e:40:9e:e7:f7:29:c1:97:a5:ab:f9:e5: 13:39:8d:00:9d:12:88:8e:5d:e6:7c:3e:61:ad:23: 2a:02:e8:11:7e:9c:d6:ce:4f:e0:4e:a8:23:02:1c: 43:62:34:61:72:45:eb:c2:75:a9:3d:c4:ab:1a:4c: 27:ed:53:c5:07:bb:db:54:f2:74:47:55:4b:6f:59: 7d:ee:6b:d0:e5:0c:60:a5:c5:e9:a8:ab:05:6f:4b: 33:ec:f0:8a:f0:1f:cf:f6:ff:67:b2:28:42:2c:05: 71:f2:11:bf:b8:74:f6:3a:4b:e8:94:27:68:5d:49: 90:f8:99:bb:c7:68:cf:94:dd:59:61:81:d0:88:f5: ba:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0E:29:20:1A:1A:B4:87:C7:45:12:5F:74:6A:C3:99:FF:0A:A9:9F X509v3 Authority Key Identifier: keyid:8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:95:64:88:4a:b2:a6:e9:3c:00:65:c4:1e:df:58:d3:65:38: 8c:e1:71:85:d4:c8:61:79:ce:e7:05:de:c5:8a:9c:af:99:1a: 84:e5:4a:42:fc:89:3c:25:c8:e0:e6:86:81:cf:2f:0d:2e:e6: 22:24:cd:5e:be:d7:5b:ea:b7:d1:2a:6f:81:d5:98:b8:00:14: 24:99:0e:9a:df:3f:49:2a:87:73:a8:a1:35:ae:dd:89:66:68: 90:3c:29:5d:fa:2e:32:4b:61:84:31:b1:e1:5f:5f:bf:e6:a1: 1f:f9:01:1f:6d:9d:8a:f8:d6:85:19:6f:76:d9:74:7c:e1:3b: 31:f8:f7:80:93:eb:11:90:ee:cb:a6:db:df:e0:48:be:53:89: a5:8e:37:1d:52:9f:1c:b6:fc:05:2f:15:30:42:5d:fc:35:ff: 94:d5:bc:5b:3c:79:f5:14:35:f6:d9:14:ff:5e:92:f2:72:a1: c6:24:7c:78:ff:6a:ec:a7:82:4b:2a:31:db:c1:8b:a8:2f:b4: 5f:ba:3d:7f:4c:5e:10:b8:82:51:32:f6:8a:f4:1c:f2:46:58: d8:ee:2f:5a:83:59:ba:57:c4:ec:e5:25:cc:9c:03:6a:2d:dc: d4:b2:68:c0:06:2a:64:f2:b8:95:a6:41:e2:18:a2:29:23:fa: 0b:2b:34:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+9MchmIgqW1zbay2j+50BTMSQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVC MTRDODk2QzAeFw0yNjA2MTcwMDAzMTNaFw0yNjA2MTgwMzQxMTNaMDMxMTAvBgNV BAMTKDczMEUyOTIwMUExQUI0ODdDNzQ1MTI1Rjc0NkFDMzk5RkYwQUE5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmg0ift5hOVY8CE/FfVBssd48r ABKYHjGYfjWjhFjI/i92nQWWAHNPOal3w7579SSjZ6p+EdCaVoofvel4LuV4hXy0 kERNdwK9YxVAk3U+JNvmZ/QLy39zhGme/7Glf0iUx5ZeXbBCJCiu5fLanFpNowqX oLlUH4uJ5Y5Anuf3KcGXpav55RM5jQCdEoiOXeZ8PmGtIyoC6BF+nNbOT+BOqCMC HENiNGFyRevCdak9xKsaTCftU8UHu9tU8nRHVUtvWX3ua9DlDGClxemoqwVvSzPs 8IrwH8/2/2eyKEIsBXHyEb+4dPY6S+iUJ2hdSZD4mbvHaM+U3VlhgdCI9bqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcw4pIBoatIfHRRJfdGrDmf8KqZ8wHwYDVR0j BBgwFoAUj/qLucCdxMpCyVyBfA/9lbFMiWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ1YWYyMmMtN2UzZS00MGI1LWFjNTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlD MDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVCMTRDODk2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBOEJCOUMwOURDNENBNDJDOTVDODE3QzBGRkQ5NUIxNEM4 OTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZE OTVCMTRDODk2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqVZIhKsqbpPABlxB7fWNNlOIzhcYXUyGF5 zucF3sWKnK+ZGoTlSkL8iTwlyODmhoHPLw0u5iIkzV6+11vqt9Eqb4HVmLgAFCSZ DprfP0kqh3OooTWu3YlmaJA8KV36LjJLYYQxseFfX7/moR/5AR9tnYr41oUZb3bZ dHzhOzH494CT6xGQ7sum29/gSL5TiaWONx1Snxy2/AUvFTBCXfw1/5TVvFs8efUU NfbZFP9ekvJyocYkfHj/auyngksqMdvBi6gvtF+6PX9MXhC4glEy9or0HPJGWNju L1qDWbpXxOzlJcycA2ot3NSyaMAGKmTyuJWmQeIYoikj+gsrNB0= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:41 2026 by rpki-client