$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft File: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft (raw, json) Hash identifier: OsWJ4eGa40w69IthSN3Zb5kC2rTxwtTSWCKRUf8H6Ug= Subject key identifier: 63:BC:1E:E2:54:51:F1:2A:FB:AC:FD:CA:F7:69:42:96:54:79:F7:7D Authority key identifier: 8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC Certificate issuer: /CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Certificate serial: 0C606BEF1CB07FEA73E0DB9B287C9E32C9CA8F97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:07:06 +0000 Manifest this update: Tue 16 Jun 2026 23:02:06 +0000 Manifest next update: Thu 18 Jun 2026 00:35:06 +0000 Files and hashes: 1: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: 4f9KIpK4kwJHh2WI32w5acQI96jbMxoNcHopJHYsb/k=) 2: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl (hash: OzSiAaG4Y/FbfBVxRbjjVChYAtYHI4BV6B0W+VNLzRk=) 3: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: 1A2FPi3qFfpFktBr0BMwE4Qlw/qHnARWJ5AeRKnXK6A=) 4: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: lR/t7u2Id9Tm/5RG+xZK/WwNnzBrvYgkf9KgY4fbdVM=) 5: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: ohA41RSForcViKph50xgqT5CqEd5p9C2x10sK3Y5aMA=) 6: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: SmTgUdBZ5Gm9MMySo1hy5IKAztpPtBz8UdMvR7+0nS8=) 7: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: b/pe4WCQVQeP9RG6dCLewRuXkpf7Roy9CSyh5UkTXss=) 8: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: UPuTvMckcIYLBYZ54B2+SqyW/0kMWr4eDhHIIPK9IxA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:60:6b:ef:1c:b0:7f:ea:73:e0:db:9b:28:7c:9e:32:c9:ca:8f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Validity Not Before: Jun 16 23:02:06 2026 GMT Not After : Jun 18 00:35:06 2026 GMT Subject: CN=63BC1EE25451F12AFBACFDCAF76942965479F77D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a7:32:06:95:0e:38:68:f2:a9:ee:74:73:fb: fc:be:bb:07:b0:fa:e4:7d:47:94:aa:e3:63:64:ed: 29:52:1e:b4:e4:80:c0:24:ac:e1:16:f9:29:36:e9: f7:a4:61:08:f0:d5:bb:ac:28:5d:c1:88:d2:01:f3: 2c:1f:2a:e4:bb:b1:19:66:2c:80:f9:70:b8:87:69: ce:98:df:e4:20:ed:cf:c5:09:91:02:eb:41:8a:3b: d7:fa:fb:47:b4:d1:cd:78:f0:22:23:27:2b:09:01: 70:f6:75:6a:94:b9:80:d8:bb:13:42:95:e4:84:f3: 80:ed:25:88:25:81:22:28:cb:aa:c4:01:5f:82:b4: 41:c3:eb:18:d3:bb:77:7c:6c:b0:0d:a4:5d:35:91: 5f:a7:21:e6:58:e5:51:5e:80:83:3c:b8:13:75:80: 38:1a:71:6f:a2:e8:6c:ce:6c:06:a1:54:96:69:48: 25:91:28:82:c3:07:6a:b1:9e:46:76:1e:32:ec:dd: b4:47:08:76:62:09:e9:bd:b6:5d:21:63:64:0e:03: e0:c2:7d:f6:51:45:47:87:5f:6e:9c:db:de:e5:b4: 9b:87:78:17:8b:be:b7:61:23:5a:8e:b1:83:d2:d3: 8f:9f:c9:b5:eb:c9:fe:da:22:bd:ad:be:b3:13:77: b9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BC:1E:E2:54:51:F1:2A:FB:AC:FD:CA:F7:69:42:96:54:79:F7:7D X509v3 Authority Key Identifier: keyid:8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c6:41:05:5e:46:9f:33:7b:64:07:a8:93:ca:98:22:33:54: bc:fd:00:75:0d:70:4f:86:60:91:51:17:54:6f:6f:66:65:5e: 4d:27:cc:88:a3:c0:b6:9c:e0:36:33:37:a1:48:94:95:3d:c5: 3e:72:32:82:7f:87:2d:4e:52:29:11:8f:05:ba:03:2f:a3:55: 9c:13:09:0e:0c:bc:a5:4c:02:59:3f:7e:84:5d:28:58:32:ae: e2:02:13:22:a4:46:2a:ef:a3:e0:80:d4:8d:64:d9:84:c7:79: 68:9f:f1:de:ea:26:fb:9a:17:3b:b7:b1:04:45:6c:e6:15:b4: dc:9b:d7:c2:64:e3:e2:2e:e1:36:f0:44:20:ff:7c:73:96:1b: 2e:d3:75:b8:41:44:7a:48:de:42:92:29:13:f7:6b:b9:ed:8c: bd:c8:09:3c:b5:bb:14:b6:8d:e6:b1:0f:84:8e:e4:3a:79:24: 0d:16:ed:37:b3:c6:8c:23:3e:54:69:87:43:06:d4:40:53:a4: 4c:7e:d8:71:53:50:9e:6d:13:40:8b:a3:14:5d:c2:fd:18:19: 17:2a:52:08:a3:72:f4:59:b7:95:60:69:3b:23:92:44:ed:6f: 56:c6:cf:6f:0c:41:56:ec:a4:d4:95:53:3b:2a:8a:7a:b1:d8: 24:a9:a5:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDGBr7xywf+pz4NubKHyeMsnKj5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0 RTNBRTZFQzAeFw0yNjA2MTYyMzAyMDZaFw0yNjA2MTgwMDM1MDZaMDMxMTAvBgNV BAMTKDYzQkMxRUUyNTQ1MUYxMkFGQkFDRkRDQUY3Njk0Mjk2NTQ3OUY3N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcpzIGlQ44aPKp7nRz+/y+uwew +uR9R5Sq42Nk7SlSHrTkgMAkrOEW+Sk26fekYQjw1busKF3BiNIB8ywfKuS7sRlm LID5cLiHac6Y3+Qg7c/FCZEC60GKO9f6+0e00c148CIjJysJAXD2dWqUuYDYuxNC leSE84DtJYglgSIoy6rEAV+CtEHD6xjTu3d8bLANpF01kV+nIeZY5VFegIM8uBN1 gDgacW+i6GzObAahVJZpSCWRKILDB2qxnkZ2HjLs3bRHCHZiCem9tl0hY2QOA+DC ffZRRUeHX26c297ltJuHeBeLvrdhI1qOsYPS04+fybXryf7aIr2tvrMTd7khAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY7we4lRR8Sr7rP3K92lCllR5930wHwYDVR0j BBgwFoAUjuNZiH7UeUfnTsw9Etfdh0465uwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTVjN2E0MDQtZWIzZi00Y2YxLTk5ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3 RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0RTNBRTZFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUUzNTk4ODdFRDQ3OTQ3RTc0RUNDM0QxMkQ3REQ4NzRFM0FF NkVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0RE ODc0RTNBRTZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7GQQVeRp8ze2QHqJPKmCIzVLz9AHUNcE+G YJFRF1Rvb2ZlXk0nzIijwLac4DYzN6FIlJU9xT5yMoJ/hy1OUikRjwW6Ay+jVZwT CQ4MvKVMAlk/foRdKFgyruICEyKkRirvo+CA1I1k2YTHeWif8d7qJvuaFzu3sQRF bOYVtNyb18Jk4+Iu4TbwRCD/fHOWGy7TdbhBRHpI3kKSKRP3a7ntjL3ICTy1uxS2 jeaxD4SO5Dp5JA0W7TezxowjPlRph0MG1EBTpEx+2HFTUJ5tE0CLoxRdwv0YGRcq UgijcvRZt5VgaTsjkkTtb1bGz28MQVbspNSVUzsqinqx2CSppRA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:25 2026 by rpki-client