$ rpki-client -vvf rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft File: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft (raw, json) Hash identifier: 5RhTCJO28S+0UonmYK/l8/q8poqysZNxyq/y5e3v1R4= Subject key identifier: 93:93:28:1D:0F:3A:A9:5E:04:F7:36:B7:64:77:37:C2:6A:15:E0:FD Authority key identifier: 8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E Certificate issuer: /CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Certificate serial: 45E73C6BD808A0E736B498032BA6D1C97FD7CCA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:29:16 +0000 Manifest this update: Tue 02 Jun 2026 11:24:16 +0000 Manifest next update: Wed 03 Jun 2026 11:57:16 +0000 Files and hashes: 1: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl (hash: xfcIETjrzkCngann6J7meYICB+5HAnuX2hhkQgyi1Sg=) 2: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: tUv0W4gMiS1vhejBIsoiDaLo6/xoWf91YpxI7rtj5ao=) 3: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: Y4fdfPd8CGZXfJi8zT1Xs61mqy3uc8h/5nYm+/f9TOQ=) 4: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: VvKS0B4ZLReXOTrvcAhygsCJwutg9GJIYxL7J1Tdiis=) 5: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: j+lgNwhd7sTPpzvBZDbz7MtwJzwdtzVrzUiO5CTg4C0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e7:3c:6b:d8:08:a0:e7:36:b4:98:03:2b:a6:d1:c9:7f:d7:cc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Validity Not Before: Jun 2 11:24:16 2026 GMT Not After : Jun 3 11:57:16 2026 GMT Subject: CN=9393281D0F3AA95E04F736B7647737C26A15E0FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:7a:12:78:85:05:98:1d:e9:7d:c9:d5:30: 75:5b:30:65:2f:80:9e:77:f6:2b:02:25:71:7b:f0: 2f:d1:cf:be:c7:48:90:7c:75:43:90:96:98:ac:bc: 0b:30:50:df:a5:c8:78:37:45:49:31:53:33:b5:58: 5e:ad:ec:53:46:6e:b7:d6:0b:6a:c6:78:37:35:98: 74:e2:c4:79:1b:31:a1:c8:fc:6b:27:b7:79:5c:68: 73:d4:37:0c:54:41:39:1b:ca:56:8a:e6:5a:05:d9: 7d:1c:d0:16:db:c4:8d:25:a6:ec:bd:74:94:05:a7: d6:29:aa:7b:cb:cf:04:e0:14:0e:4c:ca:c1:17:0f: 88:be:db:73:bb:7a:78:69:21:55:af:68:5f:5f:b1: b5:71:b7:56:57:62:63:4d:b4:1c:ed:3b:6d:6b:57: 82:aa:4e:fd:27:ff:eb:f0:98:ae:f1:5e:8f:03:30: 7a:0c:75:c9:95:9d:d5:8e:02:7f:9a:70:13:aa:49: 35:ea:db:a7:e3:3c:a2:b1:8c:d5:2e:a4:f0:70:75: db:8f:96:97:4a:89:23:9f:dd:bc:ff:36:68:d9:72: 75:1e:d1:c0:eb:bf:47:42:ff:55:de:42:04:8e:8d: f2:a7:40:17:6a:30:56:a2:f7:90:e6:1f:26:5c:c5: 42:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:93:28:1D:0F:3A:A9:5E:04:F7:36:B7:64:77:37:C2:6A:15:E0:FD X509v3 Authority Key Identifier: keyid:8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ac:19:30:f4:a7:ff:37:82:01:26:8d:b6:9c:3b:29:28:85: 19:87:d5:20:62:2e:7b:e6:52:23:71:31:3c:ea:31:f0:5c:13: ba:3a:34:7c:cb:9a:f7:41:8b:ee:b4:80:47:13:b8:10:bf:b1: bb:b6:e5:84:eb:44:4a:58:01:62:dc:fc:94:50:e3:6e:40:b5: 67:5d:f0:fa:4c:ac:7e:58:c7:cf:c0:0c:1d:d1:e3:ba:06:c2: 51:35:51:ce:c7:49:4b:0f:ab:c7:d8:41:2c:f4:1d:5c:05:42: 06:1a:63:2f:9c:fe:ec:f8:33:59:f4:ad:96:4e:3e:6d:44:e6: df:62:4a:91:66:46:c4:f1:0d:c6:68:7e:e7:cb:3d:e2:1a:e1: 7e:bd:c7:02:94:da:73:a9:33:62:10:33:45:e7:c4:85:16:58: 43:f1:dd:b5:f8:86:f5:d9:bb:2f:59:e2:86:3f:7a:66:ce:72: 35:4c:49:dc:c5:96:ef:f2:df:ce:c3:a6:7c:d3:7b:fe:62:27: 69:c5:b8:21:5c:eb:60:e2:77:1a:29:39:6d:5d:17:61:50:10: f1:d0:8d:bd:75:09:ae:3d:c4:ec:50:5b:0d:c1:a0:e7:38:ed: f4:13:97:15:31:4a:65:fb:b8:29:51:fc:ab:72:6a:62:00:22: 65:07:dd:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURec8a9gIoOc2tJgDK6bRyX/XzKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEy OUJBMUQ4RTAeFw0yNjA2MDIxMTI0MTZaFw0yNjA2MDMxMTU3MTZaMDMxMTAvBgNV BAMTKDkzOTMyODFEMEYzQUE5NUUwNEY3MzZCNzY0NzczN0MyNkExNUUwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCejnoSeIUFmB3pfcnVMHVbMGUv gJ539isCJXF78C/Rz77HSJB8dUOQlpisvAswUN+lyHg3RUkxUzO1WF6t7FNGbrfW C2rGeDc1mHTixHkbMaHI/Gsnt3lcaHPUNwxUQTkbylaK5loF2X0c0BbbxI0lpuy9 dJQFp9YpqnvLzwTgFA5MysEXD4i+23O7enhpIVWvaF9fsbVxt1ZXYmNNtBztO21r V4KqTv0n/+vwmK7xXo8DMHoMdcmVndWOAn+acBOqSTXq26fjPKKxjNUupPBwdduP lpdKiSOf3bz/NmjZcnUe0cDrv0dC/1XeQgSOjfKnQBdqMFai95DmHyZcxULZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk5MoHQ86qV4E9za3ZHc3wmoV4P0wHwYDVR0j BBgwFoAUjNb8AlX9HtF/2Cz6i2bSSim6HY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZlNjNjZDItZmIzYy00MWIyLWI5NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1 NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEyOUJBMUQ4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q2RkMwMjU1RkQxRUQxN0ZEODJDRkE4QjY2RDI0QTI5QkEx RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQy NEEyOUJBMUQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOsGTD0p/83ggEmjbacOykohRmH1SBiLnvm UiNxMTzqMfBcE7o6NHzLmvdBi+60gEcTuBC/sbu25YTrREpYAWLc/JRQ425AtWdd 8PpMrH5Yx8/ADB3R47oGwlE1Uc7HSUsPq8fYQSz0HVwFQgYaYy+c/uz4M1n0rZZO Pm1E5t9iSpFmRsTxDcZofufLPeIa4X69xwKU2nOpM2IQM0XnxIUWWEPx3bX4hvXZ uy9Z4oY/embOcjVMSdzFlu/y387DpnzTe/5iJ2nFuCFc62DidxopOW1dF2FQEPHQ jb11Ca49xOxQWw3BoOc47fQTlxUxSmX7uClR/KtyamIAImUH3Ws= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:19 2026 by rpki-client