$ rpki-client -vvf rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft File: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft (raw, json) Hash identifier: 4k8JrU6Vzn/JTgYTV8zwD6HR+ygjkovUxxmaTrrDX6c= Subject key identifier: 27:30:9F:CC:02:90:64:E3:CF:89:9D:F4:C4:8B:61:FB:1B:36:EC:EC Authority key identifier: 8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 Certificate issuer: /CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Certificate serial: 6D9B08633C2187DA253ECF0C20B28C0AB6724325 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:38:52 +0000 Manifest this update: Tue 02 Jun 2026 19:33:52 +0000 Manifest next update: Wed 03 Jun 2026 20:26:52 +0000 Files and hashes: 1: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: kq6A8cL9NTZnFPc2HUzKmlVXrKIf6u5lrw0WIGV14uo=) 2: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: YXjtjwoesJUSGw40nC73us7OdL7eSn74JJVfMRae8cI=) 3: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl (hash: R3kjUJQisU8J4+/bTF+cM8l2IWG53sgWQ7NgJAITG9o=) 4: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: lli6DgdKqwmEkLtB+BG1rU9nYBqGkyyXfGUHRRk2kyY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:9b:08:63:3c:21:87:da:25:3e:cf:0c:20:b2:8c:0a:b6:72:43:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Validity Not Before: Jun 2 19:33:52 2026 GMT Not After : Jun 3 20:26:52 2026 GMT Subject: CN=27309FCC029064E3CF899DF4C48B61FB1B36ECEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:84:bc:d1:23:6b:a5:4e:0a:18:87:f5:74:ef: 1a:63:f0:74:b8:b1:0a:1a:11:bd:e0:cd:44:42:6f: c3:fb:d4:02:ca:b9:51:bf:50:4c:cd:f3:b6:b8:a7: e4:e4:8d:87:3a:9f:c2:17:f7:3f:5e:9f:96:d0:11: 60:dc:5c:c7:b1:bf:9b:d8:d6:2e:f2:d5:6d:66:ed: 33:4c:ad:96:48:9e:ce:3a:15:64:d9:fc:13:19:30: c2:88:98:3f:85:22:48:96:28:2a:01:db:a4:1b:1c: 6f:59:9c:3f:ea:7f:84:5a:45:ab:a5:29:3f:2f:12: 5f:2d:78:17:b3:47:5e:c9:5c:0f:83:c6:a2:1f:1f: 02:aa:cb:7b:ad:75:44:d6:70:88:4b:53:b7:cb:db: bd:6d:a3:ee:9d:3f:a5:48:f0:d8:fc:c4:f4:f8:0a: b3:ba:84:77:20:27:39:1c:e5:cd:f4:bd:3a:be:77: 19:df:40:62:54:41:a0:47:f9:cc:76:32:92:b5:05: 7e:e4:6b:80:0a:70:5f:e0:e7:ce:f3:2b:8c:9f:d6: aa:5c:d1:66:d4:18:d9:cb:1b:6c:19:13:3b:d1:7b: d5:8b:ff:b3:61:91:63:fe:5d:7a:bc:61:14:99:d4: 2b:b8:c6:af:cf:7b:2f:01:9a:0e:6e:88:00:13:a0: 84:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:30:9F:CC:02:90:64:E3:CF:89:9D:F4:C4:8B:61:FB:1B:36:EC:EC X509v3 Authority Key Identifier: keyid:8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:35:1b:76:5f:54:53:12:e4:8c:c2:09:8c:d3:47:e7:ff:e5: 28:81:0a:d1:7c:e9:28:4b:07:04:60:59:a5:28:88:39:79:f6: d6:30:c8:eb:ca:5d:30:0a:41:49:91:03:5c:89:5a:23:3e:75: 55:85:b0:7e:a5:f2:da:29:1c:7f:5b:64:60:e7:e8:7e:64:17: dd:f4:8a:10:8d:c9:b0:ba:cd:7a:3f:ec:a2:8c:8d:41:25:8c: 5e:63:61:88:fd:90:ea:b9:ce:c7:f1:a3:d9:93:b8:ac:7b:6c: be:72:9b:01:ca:f5:5b:99:a9:67:80:5e:ad:37:9b:a4:fd:c2: df:27:c9:87:e7:46:93:00:c6:38:ae:5b:53:84:a2:7a:b3:45: 7c:e5:38:e0:df:2c:d7:bd:5e:d7:2c:aa:22:bc:75:e3:e9:a9: 3b:5a:bb:cf:2d:37:27:be:61:2f:16:d9:e2:5b:70:ea:b3:d2: 42:7f:6a:12:51:8a:96:cb:d4:5b:e6:0c:ec:14:71:f5:52:0e: a4:be:c7:94:46:6b:56:0a:cb:41:10:0c:ce:08:c2:b9:65:c7: 60:e0:2b:51:65:8f:30:95:0f:49:70:3e:c0:71:b0:7b:ef:14: 8f:73:94:3b:28:a9:ca:15:2e:dd:ec:1e:7d:91:08:b4:ab:c2: b4:0b:cd:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbZsIYzwhh9olPs8MILKMCrZyQyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhD RjIyNTVEODAeFw0yNjA2MDIxOTMzNTJaFw0yNjA2MDMyMDI2NTJaMDMxMTAvBgNV BAMTKDI3MzA5RkNDMDI5MDY0RTNDRjg5OURGNEM0OEI2MUZCMUIzNkVDRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhLzRI2ulTgoYh/V07xpj8HS4 sQoaEb3gzURCb8P71ALKuVG/UEzN87a4p+TkjYc6n8IX9z9en5bQEWDcXMexv5vY 1i7y1W1m7TNMrZZIns46FWTZ/BMZMMKImD+FIkiWKCoB26QbHG9ZnD/qf4RaRaul KT8vEl8teBezR17JXA+DxqIfHwKqy3utdUTWcIhLU7fL271to+6dP6VI8Nj8xPT4 CrO6hHcgJzkc5c30vTq+dxnfQGJUQaBH+cx2MpK1BX7ka4AKcF/g587zK4yf1qpc 0WbUGNnLG2wZEzvRe9WL/7NhkWP+XXq8YRSZ1Cu4xq/Pey8Bmg5uiAAToIRRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJzCfzAKQZOPPiZ30xIth+xs27OwwHwYDVR0j BBgwFoAUjqjsmRJT8GZfQUnV/kLD+M8iVdgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM5MDg3ODItNDUyMC00NWI0LTk5ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkx MjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhDRjIyNTVEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUE4RUM5OTEyNTNGMDY2NUY0MTQ5RDVGRTQyQzNGOENGMjI1 NUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMz RjhDRjIyNTVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH81G3ZfVFMS5IzCCYzTR+f/5SiBCtF86ShL BwRgWaUoiDl59tYwyOvKXTAKQUmRA1yJWiM+dVWFsH6l8topHH9bZGDn6H5kF930 ihCNybC6zXo/7KKMjUEljF5jYYj9kOq5zsfxo9mTuKx7bL5ymwHK9VuZqWeAXq03 m6T9wt8nyYfnRpMAxjiuW1OEonqzRXzlOODfLNe9XtcsqiK8dePpqTtau88tNye+ YS8W2eJbcOqz0kJ/ahJRipbL1FvmDOwUcfVSDqS+x5RGa1YKy0EQDM4Iwrllx2Dg K1FljzCVD0lwPsBxsHvvFI9zlDsoqcoVLt3sHn2RCLSrwrQLzQo= -----END CERTIFICATE-----Generated at Wed Jun 3 04:05:04 2026 by rpki-client