$ rpki-client -vvf rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft File: 8CDF206FDB99524CD59E5141686928A6FF94305F.mft (raw, json) Hash identifier: iscti09bMvr1IodquFOnjPaVFpGhGBh6pAtIfcyIRwI= Subject key identifier: 7C:E5:88:2E:55:02:F1:C4:5D:D7:D8:24:9A:CB:E0:15:4C:15:AE:0B Authority key identifier: 8C:DF:20:6F:DB:99:52:4C:D5:9E:51:41:68:69:28:A6:FF:94:30:5F Certificate issuer: /CN=8CDF206FDB99524CD59E5141686928A6FF94305F Certificate serial: 73DA35159BC881CC21D3452FABB04A235E40D5E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:49:03 +0000 Manifest this update: Tue 02 Jun 2026 19:44:03 +0000 Manifest next update: Wed 03 Jun 2026 22:39:03 +0000 Files and hashes: 1: 3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (hash: AtW3qZZhBOBkSL0i4aoVF1GR5f7KIfCN2XApbUwdv2U=) 2: 8CDF206FDB99524CD59E5141686928A6FF94305F.crl (hash: Wk0jsvYYTiM3ZuGZCwoeQ8txBug9DPiDpDl96wlSalY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.crl rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:da:35:15:9b:c8:81:cc:21:d3:45:2f:ab:b0:4a:23:5e:40:d5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF206FDB99524CD59E5141686928A6FF94305F Validity Not Before: Jun 2 19:44:03 2026 GMT Not After : Jun 3 22:39:03 2026 GMT Subject: CN=7CE5882E5502F1C45DD7D8249ACBE0154C15AE0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:b7:12:09:40:6d:9b:51:90:0a:33:6b:27: 11:d1:db:ff:d6:7e:62:16:ee:83:be:9b:de:2a:98: ba:45:ae:02:a0:22:dd:99:f6:b4:61:ca:03:36:ee: a4:84:2b:2c:a3:9c:5f:cc:c5:25:02:9e:8f:7d:61: 67:6c:1d:f4:fb:6b:8f:d7:c1:17:31:f5:c8:a6:41: 29:06:4d:9f:ba:78:02:72:20:96:93:dd:a5:74:b8: 93:e4:0e:47:11:09:5f:20:5d:f8:3e:9b:fa:24:00: 02:b3:3f:d9:37:1f:b0:37:aa:37:63:06:1e:38:ec: 58:45:5a:d3:a3:2d:7d:30:f8:60:c6:75:22:aa:ea: 22:8e:85:de:47:e9:1a:21:30:98:73:48:0f:07:26: dd:01:c2:55:dc:0d:a0:22:57:11:a3:fa:20:91:e4: f7:f5:98:c0:9a:53:f2:7b:b2:8a:52:ae:e3:9d:d5: 36:2c:ee:a3:58:13:40:95:e1:0e:25:f8:99:2c:ff: fd:d5:49:e0:85:d8:d2:82:a5:65:d5:d9:8c:6a:fd: 9c:28:4d:ea:95:91:22:08:63:cd:64:e3:ce:3e:f2: 6c:61:92:5e:a8:e9:31:77:a5:45:40:97:0c:df:f0: 53:c4:2e:72:ff:00:b1:c0:8d:99:01:37:eb:b0:35: 3c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E5:88:2E:55:02:F1:C4:5D:D7:D8:24:9A:CB:E0:15:4C:15:AE:0B X509v3 Authority Key Identifier: keyid:8C:DF:20:6F:DB:99:52:4C:D5:9E:51:41:68:69:28:A6:FF:94:30:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:62:c0:fa:a3:1d:b9:f0:71:d0:da:ed:12:78:46:be:1d:60: 5c:43:fa:2b:99:8e:8c:b9:71:18:73:58:54:a4:5f:f5:f7:12: 60:3f:10:8f:91:c6:5b:38:ec:b9:e2:bc:aa:96:2e:a7:4a:a0: 8f:86:0a:93:05:b7:7c:89:37:2b:eb:e6:dc:4c:b0:3f:cd:6f: 4d:f9:7c:82:65:6c:2d:0f:a4:09:c7:7f:ac:c1:10:e5:0e:b6: c9:89:ae:35:b8:12:69:6f:d6:29:07:05:52:58:23:03:f3:94: 43:97:ee:94:e1:5a:b4:3b:e5:b0:f1:1c:87:67:d4:28:d9:6d: 2e:b5:6e:59:bc:63:26:1e:98:22:fa:d7:af:86:47:f5:86:3d: d4:0d:02:b5:50:b6:29:86:ff:29:f4:a1:2f:c2:49:6f:57:55: 81:9e:ca:1c:7b:70:d8:be:44:5e:6c:86:d9:45:d5:41:c5:cb: 05:6b:0f:c6:e3:67:9a:1e:82:ba:3a:5e:0c:f2:e7:1c:be:24: ec:02:c7:b9:be:8e:83:b9:c8:8d:ba:9a:a3:0a:67:77:d9:4c: f6:c7:59:0d:63:bc:39:87:d2:bb:5c:16:97:56:f9:8d:88:f3: ad:ae:ac:a6:b3:cd:1c:b2:c7:47:99:f2:8b:13:e8:dd:9e:2f: 0b:c2:90:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9o1FZvIgcwh00Uvq7BKI15A1eUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjIwNkZEQjk5NTI0Q0Q1OUU1MTQxNjg2OTI4QTZG Rjk0MzA1RjAeFw0yNjA2MDIxOTQ0MDNaFw0yNjA2MDMyMjM5MDNaMDMxMTAvBgNV BAMTKDdDRTU4ODJFNTUwMkYxQzQ1REQ3RDgyNDlBQ0JFMDE1NEMxNUFFMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCywLcSCUBtm1GQCjNrJxHR2//W fmIW7oO+m94qmLpFrgKgIt2Z9rRhygM27qSEKyyjnF/MxSUCno99YWdsHfT7a4/X wRcx9cimQSkGTZ+6eAJyIJaT3aV0uJPkDkcRCV8gXfg+m/okAAKzP9k3H7A3qjdj Bh447FhFWtOjLX0w+GDGdSKq6iKOhd5H6RohMJhzSA8HJt0BwlXcDaAiVxGj+iCR 5Pf1mMCaU/J7sopSruOd1TYs7qNYE0CV4Q4l+Jks//3VSeCF2NKCpWXV2Yxq/Zwo TeqVkSIIY81k484+8mxhkl6o6TF3pUVAlwzf8FPELnL/ALHAjZkBN+uwNTzvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfOWILlUC8cRd19gkmsvgFUwVrgswHwYDVR0j BBgwFoAUjN8gb9uZUkzVnlFBaGkopv+UMF8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjMzOTc4ZjgtYWVhYi00MjdhLWJkNzUtMmNkZjFkOWViNTE3LzAvOENERjIwNkZE Qjk5NTI0Q0Q1OUU1MTQxNjg2OTI4QTZGRjk0MzA1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0RGMjA2RkRCOTk1MjRDRDU5RTUxNDE2ODY5MjhBNkZGOTQz MDVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjMzOTc4ZjgtYWVhYi00MjdhLWJk NzUtMmNkZjFkOWViNTE3LzAvOENERjIwNkZEQjk5NTI0Q0Q1OUU1MTQxNjg2OTI4 QTZGRjk0MzA1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFiwPqjHbnwcdDa7RJ4Rr4dYFxD+iuZjoy5 cRhzWFSkX/X3EmA/EI+Rxls47LnivKqWLqdKoI+GCpMFt3yJNyvr5txMsD/Nb035 fIJlbC0PpAnHf6zBEOUOtsmJrjW4Emlv1ikHBVJYIwPzlEOX7pThWrQ75bDxHIdn 1CjZbS61blm8YyYemCL616+GR/WGPdQNArVQtimG/yn0oS/CSW9XVYGeyhx7cNi+ RF5shtlF1UHFywVrD8bjZ5oegro6Xgzy5xy+JOwCx7m+joO5yI26mqMKZ3fZTPbH WQ1jvDmH0rtcFpdW+Y2I862urKazzRyyx0eZ8osT6N2eLwvCkHA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:16 2026 by rpki-client