$ rpki-client -vvf rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft File: 8FB017F8558B134E65670C5E56417CAA2FC460F1.mft (raw, json) Hash identifier: nkzsVHpTf77ICy5gIzzxIGGL+ywfV8luQTyj1MgKnXw= Subject key identifier: 78:5E:B4:19:5A:1A:DA:D5:D1:A9:99:0B:E8:01:2F:25:95:A8:B4:E2 Authority key identifier: 8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 Certificate issuer: /CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Certificate serial: 733F5F14AFB8068DB070074B32A13BC0A1CBAB14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:30:15 +0000 Manifest this update: Tue 16 Jun 2026 21:25:15 +0000 Manifest next update: Thu 18 Jun 2026 00:24:15 +0000 Files and hashes: 1: 8FB017F8558B134E65670C5E56417CAA2FC460F1.crl (hash: i8wr20ZvSZTDcMO+Ff7YqC0eb6aK7VcDIAoM9lrx2ek=) 2: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: DZWl5mWmmx3C6HZfgC0P5GgRxbzQDenyir2DbhS+/vY=) 3: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: toXJPhNtOXf98GJBbdqi9mllMSbcAgrmezktdUtueZ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3f:5f:14:af:b8:06:8d:b0:70:07:4b:32:a1:3b:c0:a1:cb:ab:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Validity Not Before: Jun 16 21:25:15 2026 GMT Not After : Jun 18 00:24:15 2026 GMT Subject: CN=785EB4195A1ADAD5D1A9990BE8012F2595A8B4E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ed:2f:d1:d8:37:72:e3:a0:93:75:a9:3a:e9: d3:ed:aa:39:2f:f8:3d:26:3e:be:d0:4b:38:ee:e8: 03:c9:6a:8b:f6:79:07:0b:74:6e:a7:12:00:5b:7f: 04:5e:5f:9c:51:23:15:8f:ad:dd:21:34:93:73:99: c9:f4:31:a8:4e:2d:ff:e5:21:ef:c8:43:a8:9a:b1: ae:a0:e0:55:a8:4b:db:07:09:dd:aa:4f:1f:04:81: 7b:d9:d6:c3:e4:46:24:e2:62:08:13:46:42:fb:99: 5f:4c:d1:f3:c1:89:9e:34:3a:c2:75:fa:fa:c1:db: f8:e2:f0:0c:b5:8e:13:f0:40:81:4b:ab:05:72:e9: 4a:52:9d:6e:84:af:35:ec:5e:71:9a:88:04:f1:ec: 34:cb:77:f8:79:cd:b3:56:79:16:76:b7:6f:9d:af: 5f:7f:29:26:85:1c:d8:b5:17:96:9f:6e:59:4e:ba: 9b:41:76:ad:ca:9e:47:39:1d:5f:44:94:6b:b1:e0: 07:b9:0c:63:62:6e:a0:c7:f3:4c:ff:13:b0:19:94: b2:01:ab:44:b0:2c:ac:11:54:fb:01:d2:89:47:df: 32:00:80:50:47:01:d4:ab:4b:1d:d2:76:7f:5a:78: 6f:be:db:78:d8:a3:5a:82:92:48:b3:d2:98:17:a7: 29:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5E:B4:19:5A:1A:DA:D5:D1:A9:99:0B:E8:01:2F:25:95:A8:B4:E2 X509v3 Authority Key Identifier: keyid:8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f7:6d:33:5e:6a:a4:44:89:e3:c2:f4:bb:26:e2:75:e1:e1: 7e:5c:1a:8f:ba:ef:f6:8e:e6:81:f8:1b:57:30:a0:95:ad:69: b7:b6:81:e0:64:8d:19:ef:da:a9:d7:9a:ea:2b:97:92:04:b4: 11:4f:d8:04:84:26:4c:88:27:5c:ba:77:7b:75:1c:f6:62:a3: 65:19:fd:98:4e:13:60:12:fb:99:10:3e:3f:45:87:5a:e4:db: 32:81:64:e1:e4:d6:da:0d:e1:35:77:f5:f5:ca:f8:5d:93:ea: c1:d5:6e:72:b2:85:ff:26:85:20:48:99:f7:80:ed:61:27:0e: 27:4e:cc:6f:31:6c:b7:be:05:1b:7a:de:5d:b0:79:09:82:37: db:44:10:72:68:53:27:a3:85:73:1a:a6:2a:06:f5:2e:78:b8: ec:0b:60:5f:09:0a:58:16:3f:bc:5a:85:70:2f:21:d6:18:e0: 01:71:39:be:e8:99:84:b6:be:63:e9:66:f8:ff:8f:7a:d3:a0: 36:1a:da:ec:d9:55:6b:ac:bc:53:1a:b6:4c:f6:13:2f:9b:18: c4:ef:33:65:55:0e:a3:0e:a6:50:19:a4:8f:9a:00:cf:92:b6: bb:33:65:0a:b5:97:92:3d:29:dc:6e:6f:4c:2c:57:46:e6:73: 02:77:b0:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcz9fFK+4Bo2wcAdLMqE7wKHLqxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEy RkM0NjBGMTAeFw0yNjA2MTYyMTI1MTVaFw0yNjA2MTgwMDI0MTVaMDMxMTAvBgNV BAMTKDc4NUVCNDE5NUExQURBRDVEMUE5OTkwQkU4MDEyRjI1OTVBOEI0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7S/R2Ddy46CTdak66dPtqjkv +D0mPr7QSzju6APJaov2eQcLdG6nEgBbfwReX5xRIxWPrd0hNJNzmcn0MahOLf/l Ie/IQ6iasa6g4FWoS9sHCd2qTx8EgXvZ1sPkRiTiYggTRkL7mV9M0fPBiZ40OsJ1 +vrB2/ji8Ay1jhPwQIFLqwVy6UpSnW6ErzXsXnGaiATx7DTLd/h5zbNWeRZ2t2+d r19/KSaFHNi1F5afbllOuptBdq3Knkc5HV9ElGux4Ae5DGNibqDH80z/E7AZlLIB q0SwLKwRVPsB0olH3zIAgFBHAdSrSx3Sdn9aeG++23jYo1qCkkiz0pgXpylzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeF60GVoa2tXRqZkL6AEvJZWotOIwHwYDVR0j BBgwFoAUj7AX+FWLE05lZwxeVkF8qi/EYPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMyOGFhYzMtMDA5NC00MjFmLWEyMDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1 NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEyRkM0NjBGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkIwMTdGODU1OEIxMzRFNjU2NzBDNUU1NjQxN0NBQTJGQzQ2 MEYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdD QUEyRkM0NjBGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABX3bTNeaqREiePC9Lsm4nXh4X5cGo+67/aO 5oH4G1cwoJWtabe2geBkjRnv2qnXmuorl5IEtBFP2ASEJkyIJ1y6d3t1HPZio2UZ /ZhOE2AS+5kQPj9Fh1rk2zKBZOHk1toN4TV39fXK+F2T6sHVbnKyhf8mhSBImfeA 7WEnDidOzG8xbLe+BRt63l2weQmCN9tEEHJoUyejhXMapioG9S54uOwLYF8JClgW P7xahXAvIdYY4AFxOb7omYS2vmPpZvj/j3rToDYa2uzZVWusvFMatkz2Ey+bGMTv M2VVDqMOplAZpI+aAM+StrszZQq1l5I9Kdxub0wsV0bmcwJ3sIA= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:41 2026 by rpki-client