$ rpki-client -vvf rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft File: 8A88C62D67BF9B5D27095014663D7564A99145C4.mft (raw, json) Hash identifier: nvfkGYSMzDZfK0IKshUEbl5f7hK3zdOdlcdpVeLeYNE= Subject key identifier: 2A:B9:15:55:6D:B9:D9:B8:8A:4A:F7:44:AB:A9:C6:85:8D:1F:0F:ED Authority key identifier: 8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4 Certificate issuer: /CN=8A88C62D67BF9B5D27095014663D7564A99145C4 Certificate serial: 06505125D35C7C9FA51A468EB9ED0D9D6FC17982 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft Manifest number: 2C Signing time: Tue 02 Jun 2026 22:38:17 +0000 Manifest this update: Tue 02 Jun 2026 22:33:17 +0000 Manifest next update: Wed 03 Jun 2026 23:39:17 +0000 Files and hashes: 1: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: F053eE0i+9sM4Zlpf0wasuwbYczZ4FiYljBeIYhXU8s=) 2: 8A88C62D67BF9B5D27095014663D7564A99145C4.crl (hash: CL+QTDOMa+lXj9G7uJQXUsJ6PYTZhHyMD0sW3OQtxoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:50:51:25:d3:5c:7c:9f:a5:1a:46:8e:b9:ed:0d:9d:6f:c1:79:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A88C62D67BF9B5D27095014663D7564A99145C4 Validity Not Before: Jun 2 22:33:17 2026 GMT Not After : Jun 3 23:39:17 2026 GMT Subject: CN=2AB915556DB9D9B88A4AF744ABA9C6858D1F0FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:9a:2c:2a:2b:f5:b4:f9:31:e0:aa:e6:fe: 28:7a:ae:4a:64:72:19:9e:3c:ce:48:73:c2:c5:0c: 40:d5:8f:66:f1:b9:d5:45:2b:55:41:70:34:a0:f0: 38:3d:13:f3:93:e4:73:1d:5a:ee:22:10:e3:82:27: 5a:9c:3d:94:00:48:77:ef:53:5a:60:74:18:61:a8: c2:8c:51:ed:77:ea:79:13:f4:cb:cd:41:f6:9e:bc: 40:d5:a7:38:67:48:45:61:09:0c:d7:60:ce:a7:ed: 13:35:d0:9a:a9:88:8a:f2:87:9f:ee:9b:b9:64:44: f8:0f:9b:62:4d:7f:79:f2:48:e2:05:bb:cd:ce:e2: fe:e2:99:a5:80:95:46:f5:54:ba:4f:49:8d:a6:4b: 86:0e:33:11:f1:51:a2:ed:87:89:b8:31:ca:60:f0: 97:34:77:0c:9b:4a:c5:c5:7b:5e:56:1d:95:07:f1: c3:63:99:c1:f4:19:24:a8:ee:5f:66:27:c7:b5:a4: 74:6a:e1:1a:c2:8d:74:f2:35:5d:7c:53:11:4b:b7: d0:51:b6:d3:9f:98:e9:6f:d7:98:e9:da:c6:6b:83: e9:1c:c3:3e:10:79:72:76:8a:f9:ea:92:2a:07:a5: ca:2f:2e:96:cc:13:c9:26:e7:0f:08:ee:48:55:07: c1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B9:15:55:6D:B9:D9:B8:8A:4A:F7:44:AB:A9:C6:85:8D:1F:0F:ED X509v3 Authority Key Identifier: keyid:8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0d:e0:0e:4e:ac:ea:7e:be:cf:da:78:32:8e:9b:c8:e2:98: 90:04:41:02:4c:51:1d:9e:ad:4f:84:88:ef:2e:08:71:f3:10: 8f:fb:bc:99:77:87:ee:aa:f9:fa:9b:36:38:2b:53:26:12:43: 30:bb:58:a7:c7:f2:79:81:0d:e1:f7:1c:dd:3e:dd:4f:f3:23: 93:bf:b6:dd:04:18:d3:3c:27:1b:95:16:5a:3b:bc:71:8c:a4: 94:4c:a5:81:45:56:90:2e:d4:49:b8:27:a3:23:1c:21:c8:5f: dc:96:6e:c7:92:61:3a:99:fd:f6:ac:07:4b:95:11:e6:f0:a2: fc:29:83:c6:d5:cc:33:3d:f3:d3:21:f4:a5:f2:03:2a:06:1b: 91:9a:36:30:5c:58:13:cf:67:ff:a3:d8:37:e0:87:8e:36:0e: b3:73:57:b4:0a:c1:b4:17:20:a7:59:d7:aa:93:ce:ed:4b:64: 40:f5:aa:c6:1e:97:5b:bc:94:43:d8:8c:11:cd:5f:8d:51:00: 0d:fb:3a:7a:e1:5d:da:2e:b2:9f:d2:88:98:3f:d0:24:9a:b4: d9:bd:63:57:b7:da:34:0d:75:50:f8:2d:27:69:55:98:66:29: e3:e8:d7:0f:3b:17:a7:20:bc:0f:a7:4b:78:20:8b:c9:79:f3: c9:d7:49:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBlBRJdNcfJ+lGkaOue0NnW/BeYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OEM2MkQ2N0JGOUI1RDI3MDk1MDE0NjYzRDc1NjRB OTkxNDVDNDAeFw0yNjA2MDIyMjMzMTdaFw0yNjA2MDMyMzM5MTdaMDMxMTAvBgNV BAMTKDJBQjkxNTU1NkRCOUQ5Qjg4QTRBRjc0NEFCQTlDNjg1OEQxRjBGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGfZosKiv1tPkx4Krm/ih6rkpk chmePM5Ic8LFDEDVj2bxudVFK1VBcDSg8Dg9E/OT5HMdWu4iEOOCJ1qcPZQASHfv U1pgdBhhqMKMUe136nkT9MvNQfaevEDVpzhnSEVhCQzXYM6n7RM10JqpiIryh5/u m7lkRPgPm2JNf3nySOIFu83O4v7imaWAlUb1VLpPSY2mS4YOMxHxUaLth4m4Mcpg 8Jc0dwybSsXFe15WHZUH8cNjmcH0GSSo7l9mJ8e1pHRq4RrCjXTyNV18UxFLt9BR ttOfmOlv15jp2sZrg+kcwz4QeXJ2ivnqkioHpcovLpbME8km5w8I7khVB8E3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKrkVVW252biKSvdEq6nGhY0fD+0wHwYDVR0j BBgwFoAUiojGLWe/m10nCVAUZj11ZKmRRcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY0YzMxNTUtYzhmZi00MjA3LWEyZGMtNTFlMDA1NTMwYjUyLzAvOEE4OEM2MkQ2 N0JGOUI1RDI3MDk1MDE0NjYzRDc1NjRBOTkxNDVDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QTg4QzYyRDY3QkY5QjVEMjcwOTUwMTQ2NjNENzU2NEE5OTE0 NUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY0YzMxNTUtYzhmZi00MjA3LWEy ZGMtNTFlMDA1NTMwYjUyLzAvOEE4OEM2MkQ2N0JGOUI1RDI3MDk1MDE0NjYzRDc1 NjRBOTkxNDVDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoN4A5OrOp+vs/aeDKOm8jimJAEQQJMUR2e rU+EiO8uCHHzEI/7vJl3h+6q+fqbNjgrUyYSQzC7WKfH8nmBDeH3HN0+3U/zI5O/ tt0EGNM8JxuVFlo7vHGMpJRMpYFFVpAu1Em4J6MjHCHIX9yWbseSYTqZ/fasB0uV Eebwovwpg8bVzDM989Mh9KXyAyoGG5GaNjBcWBPPZ/+j2Dfgh442DrNzV7QKwbQX IKdZ16qTzu1LZED1qsYel1u8lEPYjBHNX41RAA37OnrhXdousp/SiJg/0CSatNm9 Y1e32jQNdVD4LSdpVZhmKePo1w87F6cgvA+nS3ggi8l588nXSRg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:43 2026 by rpki-client