$ rpki-client -vvf rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft File: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft (raw, json) Hash identifier: YLDQitdP2cZgjWMs1d/O+oPrhq22LwUH5eX9T++e9BQ= Subject key identifier: DC:73:B2:1A:7C:A7:2F:05:1D:B1:97:F7:CB:3A:B1:60:4B:37:C2:29 Authority key identifier: 8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D Certificate issuer: /CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Certificate serial: 2D56ACC2CF042AB2E99F3FB72FE8E03679F9AFD3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 10:28:06 +0000 Manifest this update: Tue 02 Jun 2026 10:23:06 +0000 Manifest next update: Wed 03 Jun 2026 11:01:06 +0000 Files and hashes: 1: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: Iad4oKdG+cP+QGtzN+0DsTs9ponKGFoBE7JkBGARiyQ=) 2: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: xeD49NnJaETxYZ89zZqsZvQW0lQqtHHDYp/1/JjzAG8=) 3: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl (hash: 0q+VKR6Z+PimSYokcd1gIxEYMuZMS7NnemqkYUtBZmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:56:ac:c2:cf:04:2a:b2:e9:9f:3f:b7:2f:e8:e0:36:79:f9:af:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Validity Not Before: Jun 2 10:23:06 2026 GMT Not After : Jun 3 11:01:06 2026 GMT Subject: CN=DC73B21A7CA72F051DB197F7CB3AB1604B37C229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:30:2d:c2:eb:7c:04:c9:e0:96:80:2a:32:a5: d5:0e:47:79:a3:4e:d5:9b:2e:96:99:7f:b9:41:6f: d2:93:f1:55:3e:fa:9c:94:b2:f7:16:86:f5:c6:90: f0:35:4d:ca:22:40:98:ee:d3:8c:7a:2d:d6:ff:25: 0f:9b:5d:a1:12:8a:b1:49:c9:4b:59:bc:a4:07:4e: af:62:ad:cc:b9:4e:53:97:4a:47:d3:e0:bc:5c:34: 15:75:95:78:9f:21:af:fb:37:d5:d0:2d:56:5a:d4: 5b:6a:39:c4:77:b9:02:87:4b:cb:f8:e3:50:e9:ef: 37:62:c1:5a:a1:6d:39:d6:03:78:f8:ed:54:b7:f6: 29:c0:02:7b:e4:b5:ab:a4:20:a1:ef:94:f2:b7:fd: 7a:96:87:96:b4:ac:81:46:96:28:ae:6f:e9:4a:3c: 1e:86:44:98:78:f9:ae:c8:86:9d:a1:8b:1e:65:1c: ef:ab:c7:89:4e:00:33:a8:5d:d5:75:15:84:43:14: c7:23:3a:48:58:bd:f4:16:c0:76:14:d3:24:df:d7: a9:2c:11:c7:44:ed:3f:c5:ec:1d:81:be:59:7b:b9: 37:59:fa:20:5f:d2:76:ec:f2:25:24:c3:63:5e:7b: ef:fa:bb:b2:87:e5:d8:9f:74:e9:92:11:d3:6f:ec: e5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:73:B2:1A:7C:A7:2F:05:1D:B1:97:F7:CB:3A:B1:60:4B:37:C2:29 X509v3 Authority Key Identifier: keyid:8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e2:3a:6b:64:ca:61:7e:3d:33:c8:33:3e:25:a2:9a:fd:57: 27:2a:66:35:bf:98:cc:a8:3c:62:53:3c:dd:97:f9:2d:7e:f3: 0f:15:41:75:fc:85:ec:bf:e9:8d:50:47:50:9c:13:35:bf:aa: 5b:be:6a:18:53:28:7d:73:0b:46:df:68:53:3d:85:78:a9:96: 2a:e6:45:3b:bb:3b:63:b4:d0:42:f6:e9:63:a8:78:c0:d8:d5: b9:2a:55:fa:c6:79:60:8d:7e:4e:47:e9:1b:7d:4a:c5:9f:cd: 91:39:73:a9:0a:1f:bf:7b:f9:c7:e9:94:eb:5f:65:9c:9f:b6: 76:89:83:b8:57:b8:90:9c:2d:14:e1:42:a9:18:ea:48:03:8c: 26:a6:ca:ef:cf:fc:b2:25:5d:85:c1:34:e1:b0:b5:62:10:63: a8:33:6f:fe:80:09:46:5e:50:a6:13:90:23:4c:ec:1d:2f:4a: d2:8f:9b:d5:45:fe:85:58:c7:7d:f1:c7:11:15:1b:78:45:57: aa:ac:38:77:0e:16:a7:1a:03:2c:8c:da:a7:af:9a:57:64:da: 34:76:35:26:c6:86:c5:1a:08:ff:1b:69:d8:1a:3c:a0:78:d7: 8e:36:f0:29:d7:6c:a7:40:b0:d1:04:76:04:7c:ba:df:51:78: 2e:1e:5c:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVasws8EKrLpnz+3L+jgNnn5r9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3MTcx RUEzRDk2RDAeFw0yNjA2MDIxMDIzMDZaFw0yNjA2MDMxMTAxMDZaMDMxMTAvBgNV BAMTKERDNzNCMjFBN0NBNzJGMDUxREIxOTdGN0NCM0FCMTYwNEIzN0MyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMC3C63wEyeCWgCoypdUOR3mj TtWbLpaZf7lBb9KT8VU++pyUsvcWhvXGkPA1TcoiQJju04x6Ldb/JQ+bXaESirFJ yUtZvKQHTq9ircy5TlOXSkfT4LxcNBV1lXifIa/7N9XQLVZa1FtqOcR3uQKHS8v4 41Dp7zdiwVqhbTnWA3j47VS39inAAnvktaukIKHvlPK3/XqWh5a0rIFGliiub+lK PB6GRJh4+a7Ihp2hix5lHO+rx4lOADOoXdV1FYRDFMcjOkhYvfQWwHYU0yTf16ks EcdE7T/F7B2Bvll7uTdZ+iBf0nbs8iUkw2Nee+/6u7KH5difdOmSEdNv7OXvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3HOyGnynLwUdsZf3yzqxYEs3wikwHwYDVR0j BBgwFoAUjNhuNOGiG+hzt63MjSrnFx6j2W0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njg0NjY4ODktYzFlZi00NDEwLWFkOWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRF MUEyMUJFODczQjdBRENDOEQyQUU3MTcxRUEzRDk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q4NkUzNEUxQTIxQkU4NzNCN0FEQ0M4RDJBRTcxNzFFQTNE OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3 MTcxRUEzRDk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFriOmtkymF+PTPIMz4lopr9VycqZjW/mMyo PGJTPN2X+S1+8w8VQXX8hey/6Y1QR1CcEzW/qlu+ahhTKH1zC0bfaFM9hXiplirm RTu7O2O00EL26WOoeMDY1bkqVfrGeWCNfk5H6Rt9SsWfzZE5c6kKH797+cfplOtf ZZyftnaJg7hXuJCcLRThQqkY6kgDjCamyu/P/LIlXYXBNOGwtWIQY6gzb/6ACUZe UKYTkCNM7B0vStKPm9VF/oVYx33xxxEVG3hFV6qsOHcOFqcaAyyM2qevmldk2jR2 NSbGhsUaCP8badgaPKB414428CnXbKdAsNEEdgR8ut9ReC4eXHY= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:10 2026 by rpki-client