$ rpki-client -vvf rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft File: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft (raw, json) Hash identifier: fY56wwQjxOt8rb+9hMLufOKrdrAQR0lrAwQQBdqoF70= Subject key identifier: 8F:65:81:65:FA:E9:C5:68:EA:59:81:19:D1:B5:DA:19:B2:FE:60:F1 Authority key identifier: C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 Certificate issuer: /CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Certificate serial: 4322A474488B24CAA27D19028B623A5177705D83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:15:08 +0000 Manifest this update: Tue 02 Jun 2026 08:10:08 +0000 Manifest next update: Wed 03 Jun 2026 11:17:08 +0000 Files and hashes: 1: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: qW0AGce8XtjjXQ3Aq1xPuwzcIhd6zyH7ybAi9hoWtzA=) 2: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: W+SevG4xTFDq1sgkDkONqUQc3ucQK2u8ntiRI2DImrc=) 3: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl (hash: RDT4q1tzow3w/W9S/Ru8emxB0vYNAH8Xf6eDrmZ3/+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:22:a4:74:48:8b:24:ca:a2:7d:19:02:8b:62:3a:51:77:70:5d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Validity Not Before: Jun 2 08:10:08 2026 GMT Not After : Jun 3 11:17:08 2026 GMT Subject: CN=8F658165FAE9C568EA598119D1B5DA19B2FE60F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:70:03:cf:2e:27:85:1c:64:f2:4d:95:27:4a: 79:68:42:72:52:1a:a5:ca:34:54:ca:79:ea:44:f5: e6:d9:0b:e9:3c:d8:0c:ae:69:d8:28:66:63:1e:ef: dd:4b:ea:c2:5c:5b:f9:55:13:c4:9b:e4:99:5e:ae: 89:f9:d2:27:6b:74:ca:13:2d:08:1a:d8:ba:4e:a3: 69:80:a4:d8:c8:95:cb:f6:0e:31:78:43:aa:c8:77: 70:78:68:7e:54:62:22:b5:49:00:6c:62:df:e5:72: ca:da:78:92:13:4e:38:8d:c6:42:c9:ec:f3:1b:38: 83:31:4b:4b:9f:48:50:d3:27:3c:08:8f:1e:f5:80: 61:7e:44:81:da:29:42:34:1b:ca:ae:c7:45:b9:0c: a4:77:2a:07:85:b3:93:8c:fe:29:6b:94:b9:4e:17: 0f:b1:ed:dd:04:3e:0d:11:9b:6a:b1:ba:af:a8:2d: 99:56:a5:14:a8:25:cd:49:4a:39:eb:a5:11:90:86: b3:63:be:96:6e:3a:03:55:a1:bd:92:a4:b5:0c:ce: 1b:b7:b6:c6:7c:5c:35:b3:46:1e:c6:44:64:eb:bd: c1:65:48:b0:dd:e5:7e:dd:a6:e4:19:c5:5f:0d:6b: 60:7b:7e:45:19:17:9d:09:1a:26:5c:8f:2a:79:db: 93:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:65:81:65:FA:E9:C5:68:EA:59:81:19:D1:B5:DA:19:B2:FE:60:F1 X509v3 Authority Key Identifier: keyid:C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e5:52:49:4b:ec:9e:f9:13:b0:ed:aa:7d:d7:a8:86:9c:1a: 13:0d:cf:20:3d:04:c2:66:6c:99:e5:93:dc:46:3a:15:e2:04: 81:bd:c8:9b:65:ac:af:98:2c:d9:9c:ef:d2:02:e6:3d:4d:4d: ec:23:bb:4f:0a:be:39:d4:e1:9b:dd:07:f9:7a:e8:0d:16:0d: 2c:34:f6:cb:e5:90:cb:12:b5:41:3a:3d:98:a8:7b:89:cc:b1: af:47:71:90:00:bb:7e:f5:80:0a:25:0b:e1:7c:bd:2f:41:fe: f3:18:11:f4:a8:46:ba:fd:3a:b1:2b:41:fd:c4:3c:13:4a:00: 2a:1d:9d:06:44:95:67:20:cd:ba:3b:70:86:f3:e5:f5:8d:8a: 02:52:a9:4e:05:9f:d4:80:f3:ae:44:98:37:9b:62:51:f1:03: a9:fb:54:0a:d8:9d:5b:76:5f:1b:dc:62:2b:72:5b:2a:21:6d: 41:82:48:1b:dc:2c:e1:c0:ae:3e:54:98:eb:2f:aa:13:43:43: 0d:59:d4:ec:86:8b:f5:64:59:30:91:05:9b:8a:2e:9d:d4:31: 5e:fe:5c:c1:70:bb:bd:ba:84:77:da:d9:b3:c5:4d:d7:48:26: fd:0d:19:19:ef:ef:b4:ff:10:22:ca:ac:bb:25:65:07:71:f4: 10:da:fb:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyKkdEiLJMqifRkCi2I6UXdwXYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2 QzRFREMzMjAeFw0yNjA2MDIwODEwMDhaFw0yNjA2MDMxMTE3MDhaMDMxMTAvBgNV BAMTKDhGNjU4MTY1RkFFOUM1NjhFQTU5ODExOUQxQjVEQTE5QjJGRTYwRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDucAPPLieFHGTyTZUnSnloQnJS GqXKNFTKeepE9ebZC+k82AyuadgoZmMe791L6sJcW/lVE8Sb5Jleron50idrdMoT LQga2LpOo2mApNjIlcv2DjF4Q6rId3B4aH5UYiK1SQBsYt/lcsraeJITTjiNxkLJ 7PMbOIMxS0ufSFDTJzwIjx71gGF+RIHaKUI0G8qux0W5DKR3KgeFs5OM/ilrlLlO Fw+x7d0EPg0Rm2qxuq+oLZlWpRSoJc1JSjnrpRGQhrNjvpZuOgNVob2SpLUMzhu3 tsZ8XDWzRh7GRGTrvcFlSLDd5X7dpuQZxV8Na2B7fkUZF50JGiZcjyp525N3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj2WBZfrpxWjqWYEZ0bXaGbL+YPEwHwYDVR0j BBgwFoAUyKJ3s97IwPCqTB+lQugZNmxO3DIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIyNmIzZTEtZDdmNi00NjVlLTgzMDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNE RUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2QzRFREMzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEEyNzdCM0RFQzhDMEYwQUE0QzFGQTU0MkU4MTkzNjZDNEVE QzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5 MzY2QzRFREMzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJflUklL7J75E7Dtqn3XqIacGhMNzyA9BMJm bJnlk9xGOhXiBIG9yJtlrK+YLNmc79IC5j1NTewju08KvjnU4ZvdB/l66A0WDSw0 9svlkMsStUE6PZioe4nMsa9HcZAAu371gAolC+F8vS9B/vMYEfSoRrr9OrErQf3E PBNKACodnQZElWcgzbo7cIbz5fWNigJSqU4Fn9SA865EmDebYlHxA6n7VArYnVt2 XxvcYityWyohbUGCSBvcLOHArj5UmOsvqhNDQw1Z1OyGi/VkWTCRBZuKLp3UMV7+ XMFwu726hHfa2bPFTddIJv0NGRnv77T/ECLKrLslZQdx9BDa+/M= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:09 2026 by rpki-client