$ rpki-client -vvf rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft File: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft (raw, json) Hash identifier: IkZL4jHvf2tO1h3N1e+d/dKPl02rZrDIugwDepYXFTA= Subject key identifier: 96:93:1C:F0:C5:AB:A4:ED:E5:C7:C1:36:E4:33:76:E0:DF:8E:08:A0 Authority key identifier: 8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D Certificate issuer: /CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Certificate serial: 58D0108E470B5075E3F8BA58202D797451D33200 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 15:43:19 +0000 Manifest this update: Tue 16 Jun 2026 15:38:19 +0000 Manifest next update: Wed 17 Jun 2026 16:10:19 +0000 Files and hashes: 1: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: Iad4oKdG+cP+QGtzN+0DsTs9ponKGFoBE7JkBGARiyQ=) 2: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl (hash: gMrKBlhVcij+3SoNIDptDL6pxM/5Dr9khLXXw4bySkY=) 3: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: xeD49NnJaETxYZ89zZqsZvQW0lQqtHHDYp/1/JjzAG8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d0:10:8e:47:0b:50:75:e3:f8:ba:58:20:2d:79:74:51:d3:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Validity Not Before: Jun 16 15:38:19 2026 GMT Not After : Jun 17 16:10:19 2026 GMT Subject: CN=96931CF0C5ABA4EDE5C7C136E43376E0DF8E08A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2a:e5:9b:77:30:53:e9:70:a7:0e:65:96:98: 8f:65:91:eb:4d:c0:8b:8e:0a:4d:cc:b1:45:95:be: 88:d4:ff:a2:2f:8a:d1:f2:cb:a3:eb:38:d5:ec:29: 84:7a:f3:6f:b1:1f:49:bd:79:57:66:96:d7:72:c7: c3:d6:50:c3:d6:6a:fb:99:bf:2b:7b:91:c3:b1:fa: d9:b7:ee:f7:14:56:f4:82:78:df:cd:14:66:3a:3e: 91:28:be:37:f2:96:0d:dd:fd:a4:97:2d:79:0f:7b: 3f:bb:6c:92:90:c3:68:60:05:33:67:c7:99:ee:1d: 84:19:ed:7d:c1:f5:84:1c:c1:21:29:67:cd:8d:75: bd:6c:3e:50:7d:e1:e9:9e:f2:6c:88:fc:c0:01:fe: b1:39:ee:46:a5:55:de:85:4b:1c:9e:d2:bd:6d:77: 79:3d:36:2d:a6:01:db:a7:7a:95:1a:db:ad:36:3b: 85:d1:b8:a4:76:5f:57:c6:cc:56:70:09:08:73:bb: c7:35:79:75:ab:27:dd:04:be:36:b2:1b:29:29:93: 49:d7:b1:1f:0f:6c:9b:27:74:e6:7e:69:dc:b0:bd: dd:d6:73:69:70:b1:01:ca:11:38:06:56:0e:20:37: f5:5c:d3:00:69:4b:d1:da:e7:9e:21:bc:6d:dc:40: 9b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:93:1C:F0:C5:AB:A4:ED:E5:C7:C1:36:E4:33:76:E0:DF:8E:08:A0 X509v3 Authority Key Identifier: keyid:8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:dd:04:e5:b4:cc:54:39:4e:9b:c2:fa:24:08:9d:a9:ee:fc: b6:64:5b:8d:46:c7:c9:ff:ee:18:c9:33:51:85:f0:fb:cd:cf: ad:4c:63:cc:cd:d9:6b:b5:f6:c4:7f:25:cf:34:6c:65:4a:bd: 1e:10:4b:72:97:6a:74:b0:a2:13:de:0c:7d:ea:da:76:12:f7: 71:1d:8d:b7:7c:41:58:7b:ff:aa:48:26:80:ab:16:1c:03:46: 15:f1:9f:0d:98:e5:40:d0:23:94:57:e0:a2:71:de:6e:20:7a: c6:96:fc:a4:87:49:2c:10:32:2e:22:ae:ce:c6:53:80:86:93: 26:3a:eb:54:2b:2d:85:cd:20:3d:14:d9:60:8b:ff:be:c3:20: f2:4f:02:44:d8:db:49:59:3b:0c:b0:9d:a1:bb:0a:8c:a9:54: 50:87:d7:4b:b1:3f:ea:9b:f3:08:68:8f:91:52:8c:e8:5c:7d: d3:6b:0e:03:6e:77:cf:48:2c:14:f5:ed:be:c5:1e:85:6c:ec: c7:b2:e3:fb:f2:23:f4:8c:39:d0:44:1c:f2:3b:48:56:13:36: 2d:44:10:10:26:0f:69:7d:de:17:b6:3e:fd:a3:4e:ac:dd:64: 06:45:20:ce:38:a8:d5:e2:81:47:c5:27:3b:af:34:26:40:0c: f3:c4:6e:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNAQjkcLUHXj+LpYIC15dFHTMgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3MTcx RUEzRDk2RDAeFw0yNjA2MTYxNTM4MTlaFw0yNjA2MTcxNjEwMTlaMDMxMTAvBgNV BAMTKDk2OTMxQ0YwQzVBQkE0RURFNUM3QzEzNkU0MzM3NkUwREY4RTA4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgKuWbdzBT6XCnDmWWmI9lketN wIuOCk3MsUWVvojU/6IvitHyy6PrONXsKYR682+xH0m9eVdmltdyx8PWUMPWavuZ vyt7kcOx+tm37vcUVvSCeN/NFGY6PpEovjfylg3d/aSXLXkPez+7bJKQw2hgBTNn x5nuHYQZ7X3B9YQcwSEpZ82Ndb1sPlB94eme8myI/MAB/rE57kalVd6FSxye0r1t d3k9Ni2mAdunepUa2602O4XRuKR2X1fGzFZwCQhzu8c1eXWrJ90EvjayGykpk0nX sR8PbJsndOZ+adywvd3Wc2lwsQHKETgGVg4gN/Vc0wBpS9Ha554hvG3cQJvRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlpMc8MWrpO3lx8E25DN24N+OCKAwHwYDVR0j BBgwFoAUjNhuNOGiG+hzt63MjSrnFx6j2W0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njg0NjY4ODktYzFlZi00NDEwLWFkOWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRF MUEyMUJFODczQjdBRENDOEQyQUU3MTcxRUEzRDk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q4NkUzNEUxQTIxQkU4NzNCN0FEQ0M4RDJBRTcxNzFFQTNE OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3 MTcxRUEzRDk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzdBOW0zFQ5TpvC+iQInanu/LZkW41Gx8n/ 7hjJM1GF8PvNz61MY8zN2Wu19sR/Jc80bGVKvR4QS3KXanSwohPeDH3q2nYS93Ed jbd8QVh7/6pIJoCrFhwDRhXxnw2Y5UDQI5RX4KJx3m4gesaW/KSHSSwQMi4irs7G U4CGkyY661QrLYXNID0U2WCL/77DIPJPAkTY20lZOwywnaG7CoypVFCH10uxP+qb 8whoj5FSjOhcfdNrDgNud89ILBT17b7FHoVs7Mey4/vyI/SMOdBEHPI7SFYTNi1E EBAmD2l93he2Pv2jTqzdZAZFIM44qNXigUfFJzuvNCZADPPEbkU= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:25 2026 by rpki-client