$ rpki-client -vvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft File: 8FFAA6656CAEB189705F03C7B4148624E4A80597.mft (raw, json) Hash identifier: NjLPXQqtiqtp7lgiKPFFEEbFu/GkGSEIhIorAHRMguQ= Subject key identifier: 60:35:C4:60:6E:95:BE:3A:E9:38:94:3C:17:D5:A3:AB:D2:39:B0:72 Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 Certificate issuer: /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Certificate serial: 5DE2BC4A305A9512DBEED002BE8B7C573238C66E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:40:42 +0000 Manifest this update: Tue 02 Jun 2026 12:35:42 +0000 Manifest next update: Wed 03 Jun 2026 16:07:42 +0000 Files and hashes: 1: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 5tE3feCM9vyNUB/qpwvXZKU/4/GsAVh0LYhHMntcLoo=) 2: 8FFAA6656CAEB189705F03C7B4148624E4A80597.crl (hash: iskt6AgPWMbNKCG8n9jdHW6NvK3fAulaBuxptgORhtE=) 3: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: QgX53d3ZPmwqUeHqTZtdjccW/DQcVacKXuBLz3xuE+Q=) 4: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: 9g/ng/5n6hJoQNhHnUHUl6+xhhnGERFtgslQ205VyPU=) 5: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: j7IknYgKj7dl1bu8AJ/aQ/eLpW5VQAB5YDLHEEVUQxU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 16:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e2:bc:4a:30:5a:95:12:db:ee:d0:02:be:8b:7c:57:32:38:c6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Validity Not Before: Jun 2 12:35:42 2026 GMT Not After : Jun 3 16:07:42 2026 GMT Subject: CN=6035C4606E95BE3AE938943C17D5A3ABD239B072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2c:3d:9d:d5:71:3d:fb:34:a1:02:12:47:d8: 78:79:df:64:49:a4:e8:43:1c:d0:a2:0c:8b:c5:4f: 9e:91:10:9c:a5:d9:a0:9c:a9:d6:1f:ac:6c:fe:03: a6:50:b4:ef:34:17:30:71:23:e5:6d:f3:40:c2:a4: 9f:73:69:98:19:a8:fd:c0:8e:2b:98:83:6e:db:71: 82:fb:34:da:63:5d:04:e4:e7:ee:dc:98:4c:e5:77: d7:39:6f:90:d1:fa:98:e0:ae:43:c8:7e:68:ea:d5: c5:17:ad:e7:02:2b:2e:87:ba:5c:25:70:21:f7:72: 23:97:e9:ff:1a:df:3d:87:43:b4:84:b1:eb:6c:04: 94:14:23:d5:56:ba:3f:3b:07:8b:f3:3d:cc:f0:10: 9f:5d:75:92:22:90:01:8f:d4:99:ba:d3:79:8c:20: a1:37:b5:9f:c6:62:16:84:c1:6f:b1:e8:4e:d4:b7: 5d:16:18:5a:a4:43:29:50:a4:6d:96:6a:01:2f:ec: 16:ca:0a:be:e8:69:6c:cb:1c:bd:84:c2:dc:be:26: f9:b2:e2:de:14:ff:87:09:d1:02:78:89:1a:3d:43: fd:2b:5c:c5:fb:c7:26:14:cd:fa:39:15:d6:18:70: b5:f8:41:30:bb:cd:37:a3:b0:6f:5e:45:8e:db:39: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:35:C4:60:6E:95:BE:3A:E9:38:94:3C:17:D5:A3:AB:D2:39:B0:72 X509v3 Authority Key Identifier: keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ab:a4:fd:45:62:46:e1:54:c7:fa:c8:97:8e:d0:02:a9:25: 8e:72:df:1f:e6:fb:51:1c:10:e5:0f:3a:0f:a8:5b:90:ca:55: 30:4f:87:e3:e1:b4:e6:d0:a0:88:e3:ef:41:1a:65:8b:3a:48: c4:d4:42:d3:aa:e9:75:49:67:7a:cf:e9:09:90:ed:f7:27:ce: ae:f2:d6:ed:50:cf:c2:52:89:01:36:5b:66:18:c0:de:c0:30: a6:dc:c3:8b:be:b0:e0:86:4c:13:34:f1:52:39:3a:f4:6d:7d: 52:b2:f6:8b:8e:6f:8b:ae:30:c1:c2:44:b6:05:86:1c:ac:a2: 7e:87:08:b2:3f:62:51:3a:2d:1b:95:a3:0a:45:a8:f3:5c:de: 31:ac:e4:be:a0:11:8e:d1:4e:ca:00:a9:e4:a5:19:64:be:c2: f4:f2:51:bf:6f:ea:e1:be:ef:a9:80:8b:4b:a3:39:da:0d:42: d9:a7:40:09:8e:a8:f5:f3:89:b9:da:e0:5a:24:b6:61:c2:cb: e1:6d:1e:3c:54:d5:41:cb:ff:86:0b:79:e1:c8:f9:d6:cb:6d: 1e:ae:c2:5e:79:34:18:ce:5e:1c:a7:a4:e7:a5:f8:09:e2:f4: 64:ce:cf:d2:02:c9:ad:25:db:6f:c4:df:50:c5:a4:95:5c:a0: a7:da:68:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXeK8SjBalRLb7tACvot8VzI4xm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRF NEE4MDU5NzAeFw0yNjA2MDIxMjM1NDJaFw0yNjA2MDMxNjA3NDJaMDMxMTAvBgNV BAMTKDYwMzVDNDYwNkU5NUJFM0FFOTM4OTQzQzE3RDVBM0FCRDIzOUIwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlLD2d1XE9+zShAhJH2Hh532RJ pOhDHNCiDIvFT56REJyl2aCcqdYfrGz+A6ZQtO80FzBxI+Vt80DCpJ9zaZgZqP3A jiuYg27bcYL7NNpjXQTk5+7cmEzld9c5b5DR+pjgrkPIfmjq1cUXrecCKy6Hulwl cCH3ciOX6f8a3z2HQ7SEsetsBJQUI9VWuj87B4vzPczwEJ9ddZIikAGP1Jm603mM IKE3tZ/GYhaEwW+x6E7Ut10WGFqkQylQpG2WagEv7BbKCr7oaWzLHL2Ewty+Jvmy 4t4U/4cJ0QJ4iRo9Q/0rXMX7xyYUzfo5FdYYcLX4QTC7zTejsG9eRY7bOdRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYDXEYG6VvjrpOJQ8F9Wjq9I5sHIwHwYDVR0j BBgwFoAUj/qmZWyusYlwXwPHtBSGJOSoBZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI4ODBkZWUtN2FhMi00YmU0LWJmMzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2 Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRFNEE4MDU5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBQTY2NTZDQUVCMTg5NzA1RjAzQzdCNDE0ODYyNEU0QTgw NTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2 MjRFNEE4MDU5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmrpP1FYkbhVMf6yJeO0AKpJY5y3x/m+1Ec EOUPOg+oW5DKVTBPh+PhtObQoIjj70EaZYs6SMTUQtOq6XVJZ3rP6QmQ7fcnzq7y 1u1Qz8JSiQE2W2YYwN7AMKbcw4u+sOCGTBM08VI5OvRtfVKy9ouOb4uuMMHCRLYF hhyson6HCLI/YlE6LRuVowpFqPNc3jGs5L6gEY7RTsoAqeSlGWS+wvTyUb9v6uG+ 76mAi0ujOdoNQtmnQAmOqPXzibna4FoktmHCy+FtHjxU1UHL/4YLeeHI+dbLbR6u wl55NBjOXhynpOel+Ani9GTOz9ICya0l22/E31DFpJVcoKfaaDw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:31 2026 by rpki-client