$ rpki-client -vvf rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft File: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft (raw, json) Hash identifier: zR0lFRBGXRKOSr6JD70KI3s2TjAumgt8itkDewk/2IE= Subject key identifier: AA:DC:6A:CE:AA:43:EA:B0:D1:D4:ED:33:72:23:3C:B7:3A:88:D1:99 Authority key identifier: 8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C Certificate issuer: /CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Certificate serial: 4EC47E4413683AEB70966DCD1A61C69DD9E8CD2F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft Manifest number: 2C Signing time: Wed 03 Jun 2026 01:52:02 +0000 Manifest this update: Wed 03 Jun 2026 01:47:02 +0000 Manifest next update: Thu 04 Jun 2026 02:45:02 +0000 Files and hashes: 1: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 8luvuUZe/inH3n4D6OyQwwD6mGHctkX0bejCwUaYOvA=) 2: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: feHp+VgvlrJlDWnbvgKdK3q5FY7GJ/3YIOlQqsX2zUs=) 3: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: A0fye72fVewvJEctRltf+2Pc+fB290Pn79WveiWFgaQ=) 4: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl (hash: clpcOW8XdUSJ9TSBJPVVuH7wqJSS+YVOPckwi/fejUo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c4:7e:44:13:68:3a:eb:70:96:6d:cd:1a:61:c6:9d:d9:e8:cd:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Validity Not Before: Jun 3 01:47:02 2026 GMT Not After : Jun 4 02:45:02 2026 GMT Subject: CN=AADC6ACEAA43EAB0D1D4ED3372233CB73A88D199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:db:4c:57:c1:78:d0:51:69:5e:8e:72:f6:a0: 1c:58:55:b8:a6:5c:49:4f:f7:6c:cc:a6:9a:58:56: f5:63:7e:99:5f:20:46:41:a2:fd:d4:dc:0c:f0:48: 26:e0:9f:74:30:6f:05:4c:e4:a9:73:e9:65:8f:3e: 9b:86:59:ee:0f:d8:64:e0:61:7f:7d:3a:b7:75:b8: c4:7d:a3:c8:db:f8:ce:33:14:e1:64:e4:44:d8:69: 98:96:7e:9b:d8:0b:c0:0a:d6:6a:aa:55:53:5f:7e: 51:9c:1b:af:d1:8e:d3:1d:18:c6:f3:3e:cd:6c:67: 44:ef:7c:98:92:29:f1:61:e3:8e:7f:3e:7b:82:f1: 99:b1:60:29:f3:01:09:b8:34:04:24:a3:9a:b0:05: 72:c9:4a:98:12:88:01:b1:45:aa:8d:c6:30:09:b6: 0f:50:6d:f1:0d:b0:6f:8c:c4:47:73:85:3b:5d:0c: b2:13:86:08:6e:ad:9b:c8:ea:8f:19:60:5b:cd:66: 09:08:11:c6:5f:7d:f3:64:c6:21:93:8e:85:ef:3d: ea:14:6a:d3:6c:1c:ed:f1:41:4d:75:e4:78:19:33: 81:64:be:2e:45:ef:db:43:32:53:40:be:45:5c:df: 30:99:44:3c:0d:b0:a4:8b:50:df:76:3f:a9:ec:c3: 18:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DC:6A:CE:AA:43:EA:B0:D1:D4:ED:33:72:23:3C:B7:3A:88:D1:99 X509v3 Authority Key Identifier: keyid:8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:2b:e2:ec:a5:58:d4:2d:1e:0c:37:df:2f:12:d2:20:bf:8d: 2d:38:d2:20:3a:ee:a1:49:f1:b3:45:b7:89:85:b1:d4:4f:ad: d2:8d:8d:53:82:25:2d:86:11:52:2a:44:c5:09:43:63:16:51: a5:fa:a9:df:dc:31:75:53:02:fd:ed:dd:7d:93:33:18:61:ec: a7:33:7d:44:9a:51:67:00:25:10:34:22:d8:3b:4c:82:25:82: 1b:89:1f:2a:e3:79:8b:8c:58:13:1c:3b:c1:9c:30:fb:c3:0d: 92:eb:86:4f:a2:42:a2:35:af:a9:36:99:cd:8c:55:10:ef:56: ae:94:69:22:9e:f6:09:47:a0:e9:e8:85:51:a7:c2:86:e5:b0: 6a:e2:ec:e7:52:af:e1:ef:07:31:3b:6f:04:46:c9:38:a7:2a: d1:b9:7f:66:7d:b9:11:8d:fa:51:a5:5f:26:36:9e:2b:01:fb: a6:d9:19:30:ab:c4:ba:48:91:e8:50:db:be:8f:1c:f3:50:b1: d0:3b:41:d9:26:74:e7:f5:1b:9b:26:6a:82:d4:fc:59:01:21: 08:4f:09:74:af:7d:56:d7:15:e8:6a:02:7a:c1:3d:0d:d2:44: 35:ec:a6:2a:24:bf:57:ab:66:8f:ff:2d:05:0c:0f:f8:51:ef: ae:62:71:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTsR+RBNoOutwlm3NGmHGndnozS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0 MUUyQkUxQzAeFw0yNjA2MDMwMTQ3MDJaFw0yNjA2MDQwMjQ1MDJaMDMxMTAvBgNV BAMTKEFBREM2QUNFQUE0M0VBQjBEMUQ0RUQzMzcyMjMzQ0I3M0E4OEQxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk20xXwXjQUWlejnL2oBxYVbim XElP92zMpppYVvVjfplfIEZBov3U3AzwSCbgn3QwbwVM5Klz6WWPPpuGWe4P2GTg YX99Ord1uMR9o8jb+M4zFOFk5ETYaZiWfpvYC8AK1mqqVVNfflGcG6/RjtMdGMbz Ps1sZ0TvfJiSKfFh445/PnuC8ZmxYCnzAQm4NAQko5qwBXLJSpgSiAGxRaqNxjAJ tg9QbfENsG+MxEdzhTtdDLIThghurZvI6o8ZYFvNZgkIEcZfffNkxiGTjoXvPeoU atNsHO3xQU115HgZM4Fkvi5F79tDMlNAvkVc3zCZRDwNsKSLUN92P6nswxhXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqtxqzqpD6rDR1O0zciM8tzqI0ZkwHwYDVR0j BBgwFoAUiwz4fyNJ/IeH71LjsK2A4UHivhwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlhNDAwODktNjA0MS00NWVkLThlNDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0Yy MzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0MUUyQkUxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjBDRjg3RjIzNDlGQzg3ODdFRjUyRTNCMEFEODBFMTQxRTJC RTFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlhNDAwODktNjA0MS00NWVkLThl NDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgw RTE0MUUyQkUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgr4uylWNQtHgw33y8S0iC/jS040iA67qFJ 8bNFt4mFsdRPrdKNjVOCJS2GEVIqRMUJQ2MWUaX6qd/cMXVTAv3t3X2TMxhh7Kcz fUSaUWcAJRA0Itg7TIIlghuJHyrjeYuMWBMcO8GcMPvDDZLrhk+iQqI1r6k2mc2M VRDvVq6UaSKe9glHoOnohVGnwoblsGri7OdSr+HvBzE7bwRGyTinKtG5f2Z9uRGN +lGlXyY2nisB+6bZGTCrxLpIkehQ276PHPNQsdA7QdkmdOf1G5smaoLU/FkBIQhP CXSvfVbXFehqAnrBPQ3SRDXspiokv1erZo//LQUMD/hR765icVM= -----END CERTIFICATE-----Generated at Wed Jun 3 03:50:26 2026 by rpki-client