$ rpki-client -vvf rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft File: 8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft (raw, json) Hash identifier: nTMcDcPsrkg4/UVgnwXGhm5SMiKdtgNV3ra3Q3ikDSc= Subject key identifier: B6:56:E0:DB:DA:23:D4:44:8F:45:51:43:E9:B5:6A:81:D7:9F:8B:F4 Authority key identifier: 8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D Certificate issuer: /CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D Certificate serial: 20C26657EBA760C89999739904F0FFEBD6CB42A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:36:54 +0000 Manifest this update: Tue 02 Jun 2026 09:31:54 +0000 Manifest next update: Wed 03 Jun 2026 10:47:54 +0000 Files and hashes: 1: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: NY8uhqteE/p2Oynj2juQDQqNJOeFUT9zptMVOdrA1BE=) 2: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: 7H5ayDey2sF8s3x7vuViq2lu5YPxfK0ha8SKey7N61Q=) 3: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: LvhMo9Ji9pG6mVQPdJp//+4N2gdaqqVMar2Fp2RKr1Q=) 4: 8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl (hash: eP9npLWU7vaO4YiJ1qz3NbGyrUt1jIW08If3GK3uI1g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c2:66:57:eb:a7:60:c8:99:99:73:99:04:f0:ff:eb:d6:cb:42:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D Validity Not Before: Jun 2 09:31:54 2026 GMT Not After : Jun 3 10:47:54 2026 GMT Subject: CN=B656E0DBDA23D4448F455143E9B56A81D79F8BF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:7e:b2:4a:c6:a7:bf:87:70:71:01:02:86: 68:19:2a:ed:a2:1f:ca:a2:23:c4:81:8d:71:8e:85: 69:b2:9b:66:89:01:ef:c0:40:7e:41:2a:7d:da:11: 50:42:fd:da:51:4e:2b:b6:3b:c6:72:14:4f:42:fe: 5e:38:3a:ed:85:c2:97:6c:58:06:00:b0:e9:e3:3b: e7:c7:c6:77:28:5a:0b:9c:b5:66:51:29:b7:82:8d: 09:f9:4e:88:8e:54:62:de:6b:c1:7f:11:31:10:af: e4:df:28:da:da:f0:60:1e:d4:4f:df:46:e2:49:a9: 91:11:50:6d:cf:16:cd:cf:49:ec:5c:f4:e2:af:09: 10:03:7c:0e:55:87:04:63:2e:cc:cf:86:dd:6f:30: 76:35:5f:3a:17:e6:90:6b:c6:0f:b5:09:76:d8:58: 72:22:61:88:3b:44:6d:13:78:55:43:3e:d9:34:f2: 04:10:fb:a3:ac:aa:04:ae:a3:07:5f:e6:c0:f5:96: da:6e:4a:6c:46:22:cf:d3:12:a3:35:4b:eb:e4:46: 1e:61:37:cf:c5:d2:94:10:df:b1:bf:da:02:e5:5b: 2a:fd:9d:2a:69:c2:e3:aa:a6:91:9b:b7:a1:5d:b1: 5a:dd:51:ff:95:c9:13:b6:13:b3:79:57:a5:2f:4a: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:56:E0:DB:DA:23:D4:44:8F:45:51:43:E9:B5:6A:81:D7:9F:8B:F4 X509v3 Authority Key Identifier: keyid:8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2a:d3:e5:f1:b0:ad:61:e3:23:7b:48:c8:46:b0:a1:d4:db: a7:81:9a:32:fb:9a:e4:58:cd:72:6a:b1:45:0b:9c:dd:7e:99: fd:93:81:85:b4:2a:c3:5d:df:6d:da:ad:75:71:c7:c4:77:74: c5:aa:a0:6a:c3:00:c8:7e:0a:5d:43:a4:80:22:b4:cf:d5:93: f4:bb:b5:5d:17:f5:53:b0:1c:77:2e:bd:65:6c:31:ff:ac:36: 39:42:0e:3c:c7:cd:5d:1f:53:b5:2a:af:85:58:76:e9:32:d6: 0d:98:ba:01:5f:09:0a:9c:b0:d7:e9:be:5f:81:9c:ce:e2:42: 14:57:58:ed:66:2c:8e:e9:0b:47:46:44:5a:e5:81:c3:6f:36: 6c:20:49:af:53:2a:1d:2a:39:cb:50:77:e1:0e:fa:76:4c:3f: 33:0a:cc:f3:9d:54:65:79:cb:56:ed:57:4e:7e:1a:91:84:1b: 83:9f:6a:3a:38:77:4d:0d:2f:62:c8:1e:f5:13:74:6f:32:3b: 84:6c:09:79:3c:60:df:ac:ef:91:1b:37:b0:b6:1a:26:84:19: e2:6c:27:b8:f7:3a:e5:8b:82:49:86:32:60:38:0c:7b:cc:0b: 51:dc:f6:d4:48:29:92:4e:58:01:9c:7d:82:66:9a:5c:7b:89: 9e:28:01:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMJmV+unYMiZmXOZBPD/69bLQqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjY4NDY1Q0UzQkY1RUIwREYzNjEzRkVCREQzQzI3 NkY1QkIyRDAeFw0yNjA2MDIwOTMxNTRaFw0yNjA2MDMxMDQ3NTRaMDMxMTAvBgNV BAMTKEI2NTZFMERCREEyM0Q0NDQ4RjQ1NTE0M0U5QjU2QTgxRDc5RjhCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu1X6ySsanv4dwcQEChmgZKu2i H8qiI8SBjXGOhWmym2aJAe/AQH5BKn3aEVBC/dpRTiu2O8ZyFE9C/l44Ou2Fwpds WAYAsOnjO+fHxncoWguctWZRKbeCjQn5ToiOVGLea8F/ETEQr+TfKNra8GAe1E/f RuJJqZERUG3PFs3PSexc9OKvCRADfA5VhwRjLszPht1vMHY1XzoX5pBrxg+1CXbY WHIiYYg7RG0TeFVDPtk08gQQ+6OsqgSuowdf5sD1ltpuSmxGIs/TEqM1S+vkRh5h N8/F0pQQ37G/2gLlWyr9nSppwuOqppGbt6FdsVrdUf+VyRO2E7N5V6UvShBpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtlbg29oj1ESPRVFD6bVqgdefi/QwHwYDVR0j BBgwFoAUi+JoRlzjv16w3zYT/r3Twnb1uy0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZmZDlhNTgtYTkwNi00MDI5LTkyZTItYWRjYjU2YWUxOGJkLzAvOEJFMjY4NDY1 Q0UzQkY1RUIwREYzNjEzRkVCREQzQzI3NkY1QkIyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkUyNjg0NjVDRTNCRjVFQjBERjM2MTNGRUJERDNDMjc2RjVC QjJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmZDlhNTgtYTkwNi00MDI5LTky ZTItYWRjYjU2YWUxOGJkLzAvOEJFMjY4NDY1Q0UzQkY1RUIwREYzNjEzRkVCREQz QzI3NkY1QkIyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcq0+XxsK1h4yN7SMhGsKHU26eBmjL7muRY zXJqsUULnN1+mf2TgYW0KsNd323arXVxx8R3dMWqoGrDAMh+Cl1DpIAitM/Vk/S7 tV0X9VOwHHcuvWVsMf+sNjlCDjzHzV0fU7Uqr4VYduky1g2YugFfCQqcsNfpvl+B nM7iQhRXWO1mLI7pC0dGRFrlgcNvNmwgSa9TKh0qOctQd+EO+nZMPzMKzPOdVGV5 y1btV05+GpGEG4Ofajo4d00NL2LIHvUTdG8yO4RsCXk8YN+s75EbN7C2GiaEGeJs J7j3OuWLgkmGMmA4DHvMC1Hc9tRIKZJOWAGcfYJmmlx7iZ4oAUw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:06 2026 by rpki-client