$ rpki-client -vvf rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft File: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft (raw, json) Hash identifier: 7S4x5g9cT4tcTKbUKke1P0l3qfFFdGFqBc1vtuwP1Gw= Subject key identifier: EE:07:76:A6:5D:FD:EF:30:03:85:53:AD:32:26:BC:72:A2:45:73:38 Authority key identifier: 8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C Certificate issuer: /CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Certificate serial: 5C709B1E568BD290C199F950914482B81D6DA607 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:59:36 +0000 Manifest this update: Tue 16 Jun 2026 20:54:36 +0000 Manifest next update: Wed 17 Jun 2026 22:04:36 +0000 Files and hashes: 1: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: feHp+VgvlrJlDWnbvgKdK3q5FY7GJ/3YIOlQqsX2zUs=) 2: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl (hash: 0TeJT2d5RCSOX/tSvlhcByKPEx/XsX8OQcr2YAIy5pk=) 3: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: A0fye72fVewvJEctRltf+2Pc+fB290Pn79WveiWFgaQ=) 4: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 8luvuUZe/inH3n4D6OyQwwD6mGHctkX0bejCwUaYOvA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:70:9b:1e:56:8b:d2:90:c1:99:f9:50:91:44:82:b8:1d:6d:a6:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Validity Not Before: Jun 16 20:54:36 2026 GMT Not After : Jun 17 22:04:36 2026 GMT Subject: CN=EE0776A65DFDEF30038553AD3226BC72A2457338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:9c:63:08:5a:54:b9:fe:4b:40:9a:e4:86: 41:5e:ad:13:6c:59:a8:84:43:61:fc:3a:46:ca:08: 49:ce:9d:49:94:60:b8:20:47:5e:71:e3:97:57:6d: 34:f2:f8:42:13:60:53:3f:dd:93:65:8c:71:9c:1d: 66:ce:03:f1:53:78:b1:89:6d:49:47:a7:ff:89:24: 84:52:12:ab:4c:cc:f1:3d:40:63:25:b6:66:9d:d4: 4f:f9:b8:28:63:c6:b3:f9:2e:14:5b:f6:b1:ae:20: d1:f3:6d:05:df:98:4a:a7:b9:26:93:9b:04:4f:c7: a6:d4:6d:cf:71:e6:90:79:80:c0:c2:54:b2:0b:46: 67:29:6a:17:9c:93:b3:5a:c0:af:ea:05:43:48:cc: ed:1d:3c:22:d0:a0:79:f1:c1:f7:d2:87:ee:5d:27: 65:d3:5a:f5:f7:49:d8:b5:12:a4:68:2b:28:39:34: b3:d9:9a:d5:6e:51:02:1c:e3:47:b6:a1:e7:fe:a7: cd:56:40:9a:91:23:aa:c1:5b:75:ca:5d:4f:0f:b0: c7:77:6e:57:c5:de:98:ed:17:90:ce:cf:96:93:c9: a9:fe:a5:64:c8:78:cb:ee:fa:66:a2:e2:1f:b1:7f: 6f:cf:8c:ab:f7:b9:05:e8:cd:11:a0:dc:49:07:2d: 49:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:07:76:A6:5D:FD:EF:30:03:85:53:AD:32:26:BC:72:A2:45:73:38 X509v3 Authority Key Identifier: keyid:8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:aa:56:05:cb:5a:0f:27:6b:f2:54:5b:83:d3:b7:0b:d4:07: c2:f1:ff:49:50:e2:61:56:c0:b0:7d:08:f9:e4:b4:a9:41:2b: 8f:16:34:67:59:ea:64:45:30:40:98:6a:ce:b0:6a:4b:25:ab: 4d:ce:70:f6:96:79:86:27:59:01:80:9a:a2:55:24:05:30:e8: 70:07:73:41:74:2e:a8:c4:11:83:9c:74:09:89:be:f5:b5:6a: 30:46:c4:82:53:99:f8:5c:2f:23:b8:c1:d7:90:39:6a:a0:f0: 86:26:37:a6:68:60:d7:e7:7b:26:67:98:c5:ed:2c:b2:92:61: 9d:75:3f:ee:35:01:60:a9:a2:21:24:76:55:d6:70:9b:01:31: 7e:67:94:df:2d:1e:c9:eb:8d:ce:b5:9c:92:0e:17:a5:78:85: 87:e0:c9:3c:d3:a5:10:32:8d:33:91:b6:42:56:9d:b7:99:38: 30:0a:60:33:e5:93:dd:be:bb:ad:ad:54:db:45:e3:91:13:a1: 13:87:37:ad:b3:b5:a6:9c:af:2e:9b:f8:40:ed:29:6c:9d:9e: b2:d8:28:f1:c9:79:89:4d:81:96:c8:70:d5:ba:05:50:7f:8f: 0c:f9:e2:b6:c3:9f:65:70:ac:98:00:52:c7:e3:04:cf:12:bc: 66:9f:0b:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHCbHlaL0pDBmflQkUSCuB1tpgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0 MUUyQkUxQzAeFw0yNjA2MTYyMDU0MzZaFw0yNjA2MTcyMjA0MzZaMDMxMTAvBgNV BAMTKEVFMDc3NkE2NURGREVGMzAwMzg1NTNBRDMyMjZCQzcyQTI0NTczMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+x5xjCFpUuf5LQJrkhkFerRNs WaiEQ2H8OkbKCEnOnUmUYLggR15x45dXbTTy+EITYFM/3ZNljHGcHWbOA/FTeLGJ bUlHp/+JJIRSEqtMzPE9QGMltmad1E/5uChjxrP5LhRb9rGuINHzbQXfmEqnuSaT mwRPx6bUbc9x5pB5gMDCVLILRmcpaheck7NawK/qBUNIzO0dPCLQoHnxwffSh+5d J2XTWvX3Sdi1EqRoKyg5NLPZmtVuUQIc40e2oef+p81WQJqRI6rBW3XKXU8PsMd3 blfF3pjtF5DOz5aTyan+pWTIeMvu+mai4h+xf2/PjKv3uQXozRGg3EkHLUkPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7gd2pl397zADhVOtMia8cqJFczgwHwYDVR0j BBgwFoAUiwz4fyNJ/IeH71LjsK2A4UHivhwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlhNDAwODktNjA0MS00NWVkLThlNDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0Yy MzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0MUUyQkUxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjBDRjg3RjIzNDlGQzg3ODdFRjUyRTNCMEFEODBFMTQxRTJC RTFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlhNDAwODktNjA0MS00NWVkLThl NDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgw RTE0MUUyQkUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqqVgXLWg8na/JUW4PTtwvUB8Lx/0lQ4mFW wLB9CPnktKlBK48WNGdZ6mRFMECYas6wakslq03OcPaWeYYnWQGAmqJVJAUw6HAH c0F0LqjEEYOcdAmJvvW1ajBGxIJTmfhcLyO4wdeQOWqg8IYmN6ZoYNfneyZnmMXt LLKSYZ11P+41AWCpoiEkdlXWcJsBMX5nlN8tHsnrjc61nJIOF6V4hYfgyTzTpRAy jTORtkJWnbeZODAKYDPlk92+u62tVNtF45EToROHN62ztaacry6b+EDtKWydnrLY KPHJeYlNgZbIcNW6BVB/jwz54rbDn2VwrJgAUsfjBM8SvGafCwg= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:41 2026 by rpki-client