$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft File: B8A1A7850FE4606645CDB993613F0326921CB0E7.mft (raw, json) Hash identifier: F8OB5JRtBYXvRdk8tZd+/V7zbofmmiRzS6m3PK9bOdA= Subject key identifier: E0:47:AC:D1:EF:5B:3B:65:90:4D:AD:69:A4:4E:0B:63:18:7A:18:38 Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7 Certificate issuer: /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7 Certificate serial: 549A77CE95E239FDCD8684B83AF799D1BA376260 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:19:02 +0000 Manifest this update: Tue 02 Jun 2026 11:14:02 +0000 Manifest next update: Wed 03 Jun 2026 14:35:02 +0000 Files and hashes: 1: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: uVgnnU99/HNYyepOYAKO/nZDDx5ugki74GZP91MH9r4=) 2: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: SiBmCSNab1clT6/WlGKKBm87r7qICCyQWuy3c9GEFKc=) 3: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: IL+cf5Jp1UTXtxNmsZx0/FmjnEqHri/lduufwa4pgNw=) 4: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: zaokcuHNDzcmimcaKDVhoGvkO70knqdLhKxQi56iB3c=) 5: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: Z1LJzpos2TJA/rbCpeFoVSV3AuCvaZXzL6M2aKFZMOk=) 6: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: OL7tge3S2rADVt1ySDrlxO2bvMqBatfPuoG5qc2eXPc=) 7: B8A1A7850FE4606645CDB993613F0326921CB0E7.crl (hash: /UOO9XfRVQq3csZuB62MKi/uMH+zIvhrumFS4uEkNrg=) 8: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: UhpUzSIid4nElP2BrBkQKHrGQ01clvXoVE30CFaDI7E=) 9: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: yPQoyk2IWcVDeL52Wegfblo5RoA0TlgF1Qqwyri7gis=) 10: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: JkqcF39siQEpLVJW2gQ2ytUcN1jCjiFbN20NnLblPt0=) 11: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: TpopNA8dhMYp5nMtSS2yNBcol8TPklO5YRMrK3mUgQk=) 12: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: TmgfY35J3ejv4aaplxSsjZ2AmeTrspanURzc+GyKlb0=) 13: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: +GuHf2Sf8fgzz63MUl6JUjs+OpYd+b5d1QqlS8U/zLw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 14:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9a:77:ce:95:e2:39:fd:cd:86:84:b8:3a:f7:99:d1:ba:37:62:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7 Validity Not Before: Jun 2 11:14:02 2026 GMT Not After : Jun 3 14:35:02 2026 GMT Subject: CN=E047ACD1EF5B3B65904DAD69A44E0B63187A1838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a5:c6:ef:b6:d7:5d:05:55:06:48:e3:b0:63: 97:67:57:8d:06:8c:77:4d:8a:b7:97:fe:cf:fd:52: c6:ff:21:bb:f1:69:e9:bf:5b:d7:a6:aa:67:1a:9f: 29:69:a7:fa:44:7b:5d:d2:be:bf:d7:80:86:26:4a: bb:f0:44:e3:0e:74:4c:cc:35:75:f7:da:73:e0:a4: 5c:aa:94:0d:60:9a:23:fa:32:83:e0:87:e3:65:df: 61:2e:96:1c:2c:38:2d:57:cb:02:df:74:00:59:8c: 25:7b:4a:fc:44:2a:ca:70:61:43:08:93:34:e1:a4: 96:fe:1f:a1:ef:1f:20:d4:76:e7:3e:b9:67:75:9c: 0e:12:0e:3a:73:98:9e:45:2c:50:5f:ee:da:f5:01: 3f:d9:f6:81:19:a2:17:d6:74:13:01:cf:f8:ec:4c: 45:40:28:17:a1:9c:bc:2c:d6:81:e2:65:f2:eb:59: 2f:d0:55:50:71:6c:cc:cb:fb:b4:da:be:31:74:75: e4:a0:0d:7a:80:ce:9a:7c:11:a6:e4:bf:38:43:9b: e5:ac:e2:4f:34:f4:52:11:3a:0d:34:68:9b:13:6c: d9:6f:ee:5c:cd:1c:28:d1:f1:57:72:8a:90:cd:af: 17:8a:e6:30:07:22:ff:37:f6:1c:a9:ef:dc:59:18: 17:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:47:AC:D1:EF:5B:3B:65:90:4D:AD:69:A4:4E:0B:63:18:7A:18:38 X509v3 Authority Key Identifier: keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:08:21:36:62:f3:0b:52:32:0b:d3:bd:84:c9:2c:1b:c6:29: 5a:9d:48:36:c1:59:48:1a:eb:31:b6:22:7c:52:78:0a:ef:5b: ed:4b:b9:68:84:06:a6:b6:76:ce:f7:87:5b:5a:dc:fa:c7:3b: 93:6b:07:c7:b2:4a:cc:eb:cc:d0:f0:db:cd:32:fb:a2:85:d6: 42:66:4f:ac:89:92:64:86:ea:94:c2:9d:17:d4:64:d0:a4:83: 4c:2d:87:e6:77:39:f1:c8:e3:6b:16:fc:3c:45:0b:33:59:a9: 06:0e:b5:e6:81:bc:89:1e:33:f0:fd:94:53:af:d5:79:3b:c0: 55:a9:bb:86:50:85:b3:e6:47:b7:5c:07:9e:2b:85:3a:cd:0d: 6f:46:4d:aa:c3:65:f7:34:7f:68:ec:13:1b:80:1a:da:69:7a: ce:51:b6:dc:19:7d:8d:e5:20:b3:44:07:5c:1f:90:f9:88:72: e9:31:23:87:a0:37:da:55:1c:77:e2:ec:ff:06:f8:45:0a:3f: 33:5e:43:b1:57:be:8c:79:18:5e:c9:ff:6d:f2:31:60:a3:ce: ca:1a:61:61:30:91:ac:1f:16:c1:bc:a9:56:45:48:98:2b:6e: 75:92:e8:4e:88:dd:3d:74:ba:ca:a7:ca:11:2e:79:9b:40:11: e7:08:77:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJp3zpXiOf3NhoS4OveZ0bo3YmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBMUE3ODUwRkU0NjA2NjQ1Q0RCOTkzNjEzRjAzMjY5 MjFDQjBFNzAeFw0yNjA2MDIxMTE0MDJaFw0yNjA2MDMxNDM1MDJaMDMxMTAvBgNV BAMTKEUwNDdBQ0QxRUY1QjNCNjU5MDREQUQ2OUE0NEUwQjYzMTg3QTE4MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfpcbvttddBVUGSOOwY5dnV40G jHdNireX/s/9Usb/Ibvxaem/W9emqmcanylpp/pEe13Svr/XgIYmSrvwROMOdEzM NXX32nPgpFyqlA1gmiP6MoPgh+Nl32EulhwsOC1XywLfdABZjCV7SvxEKspwYUMI kzThpJb+H6HvHyDUduc+uWd1nA4SDjpzmJ5FLFBf7tr1AT/Z9oEZohfWdBMBz/js TEVAKBehnLws1oHiZfLrWS/QVVBxbMzL+7TavjF0deSgDXqAzpp8EabkvzhDm+Ws 4k809FIROg00aJsTbNlv7lzNHCjR8VdyipDNrxeK5jAHIv839hyp79xZGBcTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Ees0e9bO2WQTa1ppE4LYxh6GDgwHwYDVR0j BBgwFoAUuKGnhQ/kYGZFzbmTYT8DJpIcsOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI0ZTE5NWUtMTJkZS00YzNjLTkzZTUtNTIyZWU1NDAxOGQ2LzAvQjhBMUE3ODUw RkU0NjA2NjQ1Q0RCOTkzNjEzRjAzMjY5MjFDQjBFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COEExQTc4NTBGRTQ2MDY2NDVDREI5OTM2MTNGMDMyNjkyMUNC MEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI0ZTE5NWUtMTJkZS00YzNjLTkz ZTUtNTIyZWU1NDAxOGQ2LzAvQjhBMUE3ODUwRkU0NjA2NjQ1Q0RCOTkzNjEzRjAz MjY5MjFDQjBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIIITZi8wtSMgvTvYTJLBvGKVqdSDbBWUga 6zG2InxSeArvW+1LuWiEBqa2ds73h1ta3PrHO5NrB8eySszrzNDw280y+6KF1kJm T6yJkmSG6pTCnRfUZNCkg0wth+Z3OfHI42sW/DxFCzNZqQYOteaBvIkeM/D9lFOv 1Xk7wFWpu4ZQhbPmR7dcB54rhTrNDW9GTarDZfc0f2jsExuAGtppes5RttwZfY3l ILNEB1wfkPmIcukxI4egN9pVHHfi7P8G+EUKPzNeQ7FXvox5GF7J/23yMWCjzsoa YWEwkawfFsG8qVZFSJgrbnWS6E6I3T10usqnyhEueZtAEecId4Y= -----END CERTIFICATE-----Generated at Wed Jun 3 03:50:20 2026 by rpki-client