$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft File: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft (raw, json) Hash identifier: tzcd/sippOTgfdyyjtncBpblSN4Liaiu2YaoRYuKHT4= Subject key identifier: ED:CF:58:F9:0C:DD:2F:66:AD:28:2E:4B:4D:99:1B:34:8B:CD:79:BF Authority key identifier: 8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC Certificate issuer: /CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Certificate serial: 0A24C4618E282A63C8C892107AE526673E71949B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:41:18 +0000 Manifest this update: Tue 02 Jun 2026 21:36:18 +0000 Manifest next update: Wed 03 Jun 2026 22:59:18 +0000 Files and hashes: 1: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: lR/t7u2Id9Tm/5RG+xZK/WwNnzBrvYgkf9KgY4fbdVM=) 2: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: 1A2FPi3qFfpFktBr0BMwE4Qlw/qHnARWJ5AeRKnXK6A=) 3: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: SmTgUdBZ5Gm9MMySo1hy5IKAztpPtBz8UdMvR7+0nS8=) 4: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: UPuTvMckcIYLBYZ54B2+SqyW/0kMWr4eDhHIIPK9IxA=) 5: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl (hash: /UjW1xN8cIW/vDXL2wynzHJIuBAKRXgxmXE6TVtSLh0=) 6: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: ohA41RSForcViKph50xgqT5CqEd5p9C2x10sK3Y5aMA=) 7: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: b/pe4WCQVQeP9RG6dCLewRuXkpf7Roy9CSyh5UkTXss=) 8: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: 4f9KIpK4kwJHh2WI32w5acQI96jbMxoNcHopJHYsb/k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:24:c4:61:8e:28:2a:63:c8:c8:92:10:7a:e5:26:67:3e:71:94:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Validity Not Before: Jun 2 21:36:18 2026 GMT Not After : Jun 3 22:59:18 2026 GMT Subject: CN=EDCF58F90CDD2F66AD282E4B4D991B348BCD79BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:79:6d:26:8d:f6:17:bb:42:3b:48:e7:51: 35:0f:4a:f8:4d:c7:fb:08:d0:0b:eb:a1:f5:84:6f: 6e:a6:4e:38:5a:60:7f:cd:6a:c6:61:e9:09:09:6f: 34:2d:29:1a:5e:59:00:79:b9:89:8e:7f:19:1a:0a: de:e2:47:b5:39:1d:7c:8d:0b:1e:26:b4:52:fe:87: 70:fb:17:d5:1a:5b:61:f0:6d:a5:91:e5:71:6e:f3: ba:40:ac:ce:b5:af:1f:b7:b6:51:99:02:eb:dc:f7: 3b:8c:fb:99:05:2c:57:cb:2a:8f:d2:c7:5a:81:40: 0d:3c:f4:45:46:2f:98:47:11:d0:04:04:b4:03:10: 0a:d8:41:d6:6b:31:f1:bc:0b:e8:fd:13:62:54:0b: 32:2f:17:bc:19:a1:b5:40:0e:9a:d1:d5:88:be:9e: ec:a7:67:62:0e:92:11:61:d1:e2:88:4b:02:96:60: 7b:c0:19:37:33:e9:28:80:d8:37:58:69:ed:c4:69: 5a:f2:f4:ee:c5:37:cc:43:b7:31:de:8c:95:17:90: 4f:2b:84:31:30:67:6b:a6:da:03:56:89:0d:ea:b2: 9c:a3:94:a8:04:5d:90:6a:4b:34:87:51:ff:0d:90: d8:b7:eb:28:a9:0e:6f:e7:f8:cd:73:37:a6:bc:b7: 5e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CF:58:F9:0C:DD:2F:66:AD:28:2E:4B:4D:99:1B:34:8B:CD:79:BF X509v3 Authority Key Identifier: keyid:8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:27:63:e7:1b:12:90:69:1e:82:a0:07:62:c1:c6:e3:a0:e9: 97:5a:49:b4:7b:c4:e2:96:b3:94:9b:b7:d6:96:44:aa:88:01: 78:f1:4e:cd:32:49:a1:18:40:c2:de:98:c9:e2:00:3d:ad:8f: 80:d9:c8:e3:07:2c:b6:5c:14:99:49:36:2c:b1:3e:f6:29:a9: dd:90:a6:21:40:97:ab:30:bb:7e:48:a7:4e:e4:8e:aa:69:68: 94:d4:1e:6c:a7:84:3a:bc:1d:b2:ee:30:7c:26:1d:91:cc:70: 92:6b:34:58:c2:5c:9f:6a:f7:82:50:81:07:d1:5c:44:f8:f5: cc:a3:fe:ff:c3:9a:f9:f3:a9:fa:1f:01:dd:82:4a:fe:e4:66: 1c:ef:47:15:29:b5:50:6b:12:3c:a4:da:09:33:c0:f8:2b:74: 5c:08:44:7d:6c:6b:b7:bc:26:bf:b3:7a:52:2a:28:1c:7b:9c: 63:50:63:0f:c0:ae:80:1f:ad:61:d9:30:4c:23:fc:9b:9c:02: 99:60:6d:d0:f9:07:9b:ea:c0:bd:b8:57:61:33:f4:0a:91:57: cd:9d:df:10:80:83:fb:50:93:a7:55:2c:f9:e9:1e:28:c0:34: e4:fb:53:8d:6d:c1:eb:4a:55:0b:ed:c7:6b:42:d9:2f:4d:25: 76:91:e5:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCiTEYY4oKmPIyJIQeuUmZz5xlJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0 RTNBRTZFQzAeFw0yNjA2MDIyMTM2MThaFw0yNjA2MDMyMjU5MThaMDMxMTAvBgNV BAMTKEVEQ0Y1OEY5MENERDJGNjZBRDI4MkU0QjREOTkxQjM0OEJDRDc5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC683ltJo32F7tCO0jnUTUPSvhN x/sI0AvrofWEb26mTjhaYH/NasZh6QkJbzQtKRpeWQB5uYmOfxkaCt7iR7U5HXyN Cx4mtFL+h3D7F9UaW2HwbaWR5XFu87pArM61rx+3tlGZAuvc9zuM+5kFLFfLKo/S x1qBQA089EVGL5hHEdAEBLQDEArYQdZrMfG8C+j9E2JUCzIvF7wZobVADprR1Yi+ nuynZ2IOkhFh0eKISwKWYHvAGTcz6SiA2DdYae3EaVry9O7FN8xDtzHejJUXkE8r hDEwZ2um2gNWiQ3qspyjlKgEXZBqSzSHUf8NkNi36yipDm/n+M1zN6a8t179AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7c9Y+QzdL2atKC5LTZkbNIvNeb8wHwYDVR0j BBgwFoAUjuNZiH7UeUfnTsw9Etfdh0465uwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTVjN2E0MDQtZWIzZi00Y2YxLTk5ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3 RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0RTNBRTZFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUUzNTk4ODdFRDQ3OTQ3RTc0RUNDM0QxMkQ3REQ4NzRFM0FF NkVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0RE ODc0RTNBRTZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEnY+cbEpBpHoKgB2LBxuOg6ZdaSbR7xOKW s5Sbt9aWRKqIAXjxTs0ySaEYQMLemMniAD2tj4DZyOMHLLZcFJlJNiyxPvYpqd2Q piFAl6swu35Ip07kjqppaJTUHmynhDq8HbLuMHwmHZHMcJJrNFjCXJ9q94JQgQfR XET49cyj/v/DmvnzqfofAd2CSv7kZhzvRxUptVBrEjyk2gkzwPgrdFwIRH1sa7e8 Jr+zelIqKBx7nGNQYw/AroAfrWHZMEwj/JucAplgbdD5B5vqwL24V2Ez9AqRV82d 3xCAg/tQk6dVLPnpHijANOT7U41twetKVQvtx2tC2S9NJXaR5aQ= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:37 2026 by rpki-client