$ rpki-client -vvf rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft File: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft (raw, json) Hash identifier: RoPbyTuMs0esw/+UJbzNNulhuWxS089e5LHXHMxTx1g= Subject key identifier: 9C:4E:C1:70:28:1E:36:49:05:7B:D0:BA:4A:98:E8:C7:61:8D:E6:FD Authority key identifier: 8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 Certificate issuer: /CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Certificate serial: 49BA30F602B532B0AC69212BEB1CB15B04CFAE3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:00:28 +0000 Manifest this update: Tue 02 Jun 2026 16:55:28 +0000 Manifest next update: Wed 03 Jun 2026 18:00:28 +0000 Files and hashes: 1: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: NR10Bfbwh6SYopHFVcr7fLYC1ZrjLqSPhi8hfWEGSfc=) 2: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl (hash: 8/sDqcvVyNs9o85mONcqytPd9Z4Itkrh31aSN3pj2B4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ba:30:f6:02:b5:32:b0:ac:69:21:2b:eb:1c:b1:5b:04:cf:ae:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Validity Not Before: Jun 2 16:55:28 2026 GMT Not After : Jun 3 18:00:28 2026 GMT Subject: CN=9C4EC170281E3649057BD0BA4A98E8C7618DE6FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3e:eb:ad:c0:cc:38:7b:83:89:1b:77:d4:82: 48:5f:dd:36:e6:aa:12:7b:10:fb:ee:2d:da:f5:ce: cb:5b:e3:4e:ed:bc:b1:cf:0e:c0:81:d5:f4:fd:d1: 6d:b5:aa:fe:ed:a7:8b:78:3e:33:52:cd:41:16:cb: 51:18:8d:5e:3d:f8:7e:5e:cd:f7:4a:9c:04:7f:be: 4a:1f:2e:54:44:f7:d1:50:58:a7:a3:c7:fb:ce:7c: 3f:9b:d3:f6:e1:30:b4:01:c9:58:d9:81:5b:3b:9f: 6b:ea:9e:2b:f8:fa:e0:9c:17:9c:94:6d:fa:81:71: be:bf:81:f0:35:f1:9c:0d:15:72:7d:9b:0d:39:d2: e7:a8:54:15:0f:27:50:32:01:2a:9a:e9:11:c1:49: a0:0f:35:57:0d:a2:77:9e:f5:32:40:d2:01:95:96: 69:d7:a0:64:c6:ad:a5:71:e4:85:80:e2:c7:27:eb: 14:c3:0d:9f:09:8f:1e:d4:1f:c1:ba:f2:29:5c:05: b7:d9:50:c0:bd:aa:aa:39:c3:dc:66:e9:01:ce:b0: 03:2a:91:5c:cf:1f:b9:4a:c7:70:b7:56:c6:15:86: 2c:0d:d2:e6:42:cf:cb:63:f0:2b:68:51:93:86:65: 7d:15:92:f7:03:73:5f:78:1a:54:29:68:c3:c0:f5: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4E:C1:70:28:1E:36:49:05:7B:D0:BA:4A:98:E8:C7:61:8D:E6:FD X509v3 Authority Key Identifier: keyid:8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:e3:7f:75:42:1c:eb:09:21:a0:2f:2c:1a:9d:7e:0d:8f:c5: 96:d5:0b:02:2e:c8:04:48:5f:6e:af:2e:f6:00:9e:35:3a:7f: 1a:b9:f4:f7:63:e8:6d:37:ed:f9:62:40:7a:74:96:2c:5d:77: fb:c8:8f:e3:39:1f:27:fd:16:e3:c4:95:2f:0e:ad:38:ac:ae: a8:64:6d:c9:cb:7b:14:a0:84:62:74:2f:2c:20:96:f8:da:e6: c4:1e:f1:55:1a:22:e1:6c:f1:5f:01:b7:1a:91:58:5a:9c:9b: fa:99:b2:82:41:7f:de:d8:dd:0d:65:67:fa:1c:0a:98:11:e1: 15:f5:4e:72:f8:9e:32:44:de:e4:35:37:b3:4c:c5:9a:4e:6c: 6f:fe:98:82:46:f9:ce:c1:d6:f0:a1:3e:7e:a8:76:41:8e:ab: 53:58:5b:75:a9:da:ef:0b:d8:3b:63:03:aa:d6:9f:9b:14:b4: 2c:08:d0:a7:7c:81:5b:05:8b:14:80:27:cb:b0:cb:9b:17:c0: 4f:d0:b7:a4:db:96:cb:f6:d9:3a:71:75:8f:b6:93:96:a0:97: 24:52:1c:17:8e:8e:92:d7:14:76:fd:cd:c6:7c:e0:d3:ce:77: 4a:e7:6f:88:12:6c:38:a3:88:61:b5:0b:33:14:c4:e8:b9:cf: bb:9c:45:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSbow9gK1MrCsaSEr6xyxWwTPrjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5 QjFCNDU3MzAeFw0yNjA2MDIxNjU1MjhaFw0yNjA2MDMxODAwMjhaMDMxMTAvBgNV BAMTKDlDNEVDMTcwMjgxRTM2NDkwNTdCRDBCQTRBOThFOEM3NjE4REU2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaPuutwMw4e4OJG3fUgkhf3Tbm qhJ7EPvuLdr1zstb407tvLHPDsCB1fT90W21qv7tp4t4PjNSzUEWy1EYjV49+H5e zfdKnAR/vkofLlRE99FQWKejx/vOfD+b0/bhMLQByVjZgVs7n2vqniv4+uCcF5yU bfqBcb6/gfA18ZwNFXJ9mw050ueoVBUPJ1AyASqa6RHBSaAPNVcNonee9TJA0gGV lmnXoGTGraVx5IWA4scn6xTDDZ8Jjx7UH8G68ilcBbfZUMC9qqo5w9xm6QHOsAMq kVzPH7lKx3C3VsYVhiwN0uZCz8tj8CtoUZOGZX0VkvcDc194GlQpaMPA9fCXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnE7BcCgeNkkFe9C6Spjox2GN5v0wHwYDVR0j BBgwFoAUjRqU6g+f1RSOCcrgowe9yZsbRXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2MjExMWQtMGExMy00NDA3LWFmMzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEw RjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5QjFCNDU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDFBOTRFQTBGOUZENTE0OEUwOUNBRTBBMzA3QkRDOTlCMUI0 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JE Qzk5QjFCNDU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXjf3VCHOsJIaAvLBqdfg2PxZbVCwIuyARI X26vLvYAnjU6fxq59Pdj6G037fliQHp0lixdd/vIj+M5Hyf9FuPElS8OrTisrqhk bcnLexSghGJ0Lywglvja5sQe8VUaIuFs8V8BtxqRWFqcm/qZsoJBf97Y3Q1lZ/oc CpgR4RX1TnL4njJE3uQ1N7NMxZpObG/+mIJG+c7B1vChPn6odkGOq1NYW3Wp2u8L 2DtjA6rWn5sUtCwI0Kd8gVsFixSAJ8uwy5sXwE/Qt6Tblsv22TpxdY+2k5aglyRS HBeOjpLXFHb9zcZ84NPOd0rnb4gSbDijiGG1CzMUxOi5z7ucRRU= -----END CERTIFICATE-----Generated at Wed Jun 3 03:54:02 2026 by rpki-client