$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft File: 8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft (raw, json) Hash identifier: mvpvFdEzZ6yndWOPrQVa7X16XOVZSCp+ulqZ9Vjvr3k= Subject key identifier: 66:3C:E7:9C:9F:8B:9A:5B:8F:17:7A:8B:8C:CC:F9:E3:27:EE:1B:F1 Authority key identifier: 8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6 Certificate issuer: /CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6 Certificate serial: 7A3636F0F7B1FDA8B93E8EB3C409A4DAC6CAB616 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 20:04:19 +0000 Manifest this update: Tue 02 Jun 2026 19:59:19 +0000 Manifest next update: Wed 03 Jun 2026 21:43:19 +0000 Files and hashes: 1: 3130332e3136352e3134372e302f32342d3234203d3e20313431393236.roa (hash: 4io3eCxu167AtlWBsa6dTLlDoZVSSBjQBvpZbbKn9o4=) 2: 8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl (hash: 1tkqKAd4AH16PF6FVV6MnMpHlrehTVIw3OcjdeONvic=) 3: 3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa (hash: 4plAU79kda3Ea5yOILPSDn9wEB9ioJGFSdINnT7EfAQ=) 4: 3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa (hash: c92Ozjnq7svCLrrjEbFGyASoSulZ/x0HLm65BX9w5Mw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:36:36:f0:f7:b1:fd:a8:b9:3e:8e:b3:c4:09:a4:da:c6:ca:b6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6 Validity Not Before: Jun 2 19:59:19 2026 GMT Not After : Jun 3 21:43:19 2026 GMT Subject: CN=663CE79C9F8B9A5B8F177A8B8CCCF9E327EE1BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a9:59:82:7b:d5:9a:0e:1b:67:61:e5:72:d4: e3:03:90:56:63:c0:15:32:82:17:d2:49:1b:02:73: 7f:80:b4:7c:60:4c:01:22:4d:1c:6f:90:8f:92:bd: 00:90:ca:d8:60:71:f7:ea:fc:30:8d:c1:94:fa:8d: 7d:25:c2:90:eb:a7:9e:3f:1d:07:03:bc:a7:03:85: 77:8d:83:da:66:de:46:6d:6d:63:6c:ee:29:60:f9: 83:21:39:80:f9:cd:47:05:a1:e7:1e:1d:8b:6f:6e: 39:4a:dc:55:ab:8a:c3:31:b3:c3:b0:e2:86:8a:8d: eb:63:a1:ec:ae:c4:0e:f3:02:55:70:cb:b6:41:15: 73:74:6b:5b:cd:e2:c6:3b:57:e1:de:8d:84:be:2b: 2f:7e:e3:eb:13:b3:07:e3:38:ba:0f:16:d9:ca:98: 58:f4:4e:42:cb:ab:c5:02:e6:a8:58:8b:63:6f:aa: 5e:c0:f8:c2:0e:03:5e:02:f6:bb:01:3e:a3:bc:72: 1f:8d:8d:fe:1a:a2:9e:b7:63:a1:47:14:98:4a:50: 67:24:96:00:d9:e9:6b:b9:06:41:e1:d3:28:3c:9f: 45:55:30:42:5c:42:20:96:88:83:56:8a:46:0b:97: 67:b8:a6:6f:d7:83:3a:a7:6a:4c:9e:8f:33:08:f9: e9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3C:E7:9C:9F:8B:9A:5B:8F:17:7A:8B:8C:CC:F9:E3:27:EE:1B:F1 X509v3 Authority Key Identifier: keyid:8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:89:ac:42:f5:67:00:26:f6:80:3b:01:fe:c4:69:13:0a:c1: 69:fa:55:73:e5:66:b8:86:0b:66:3f:a7:25:bb:a7:4e:d5:e7: 73:a8:74:1f:d2:16:d1:5a:7d:f3:4b:47:bb:fd:e8:09:54:dd: 8b:53:a7:cb:cd:1d:71:a6:5f:e5:ae:c7:97:57:4b:b5:77:ed: eb:59:08:a4:ef:64:63:b4:d4:0f:8d:b6:43:48:fd:fd:32:e7: 20:3a:5a:97:9d:9a:ed:80:56:58:7f:37:2f:c6:91:d9:4c:72: 7b:5b:62:2a:f5:1d:02:a6:b7:d4:7a:c9:b1:b6:89:20:05:3e: 61:35:ff:3d:55:40:55:3a:53:72:aa:5f:54:cd:4a:e8:9c:05: ca:81:4d:8f:06:6a:8d:da:d5:a5:5a:67:fe:00:52:00:76:5e: 9d:1b:eb:a4:ca:83:c1:ca:22:ee:10:8d:e0:88:53:d6:5c:e5: ee:51:48:a2:84:29:8f:2b:e7:be:dc:92:fa:26:58:3b:59:ca: bc:a6:a0:6a:e2:91:36:63:38:e5:8f:2b:b4:55:d4:11:f1:22: 8b:0c:6c:27:6a:9a:ef:e7:ee:b5:ae:5f:74:f5:32:5d:ff:86: 24:07:a0:89:01:f2:7a:bb:5e:e5:a4:43:35:a8:89:fb:f4:d4: 63:4c:cc:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejY28Pex/ai5Po6zxAmk2sbKthYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBMjIxRUNDRDkyQzhDQjhERDU5NTAzQjI3MjJDNTdD MzM2N0JGNjAeFw0yNjA2MDIxOTU5MTlaFw0yNjA2MDMyMTQzMTlaMDMxMTAvBgNV BAMTKDY2M0NFNzlDOUY4QjlBNUI4RjE3N0E4QjhDQ0NGOUUzMjdFRTFCRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhqVmCe9WaDhtnYeVy1OMDkFZj wBUyghfSSRsCc3+AtHxgTAEiTRxvkI+SvQCQythgcffq/DCNwZT6jX0lwpDrp54/ HQcDvKcDhXeNg9pm3kZtbWNs7ilg+YMhOYD5zUcFoeceHYtvbjlK3FWrisMxs8Ow 4oaKjetjoeyuxA7zAlVwy7ZBFXN0a1vN4sY7V+HejYS+Ky9+4+sTswfjOLoPFtnK mFj0TkLLq8UC5qhYi2Nvql7A+MIOA14C9rsBPqO8ch+Njf4aop63Y6FHFJhKUGck lgDZ6Wu5BkHh0yg8n0VVMEJcQiCWiINWikYLl2e4pm/XgzqnakyejzMI+elXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZjznnJ+LmluPF3qLjMz54yfuG/EwHwYDVR0j BBgwFoAUi6Ih7M2SyMuN1ZUDsnIsV8M2e/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQ0NDBjODUtMzQ3MS00NDYxLWI1OTAtMTYwMWUxOWY1MzE4LzAvOEJBMjIxRUND RDkyQzhDQjhERDU5NTAzQjI3MjJDNTdDMzM2N0JGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkEyMjFFQ0NEOTJDOENCOERENTk1MDNCMjcyMkM1N0MzMzY3 QkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQ0NDBjODUtMzQ3MS00NDYxLWI1 OTAtMTYwMWUxOWY1MzE4LzAvOEJBMjIxRUNDRDkyQzhDQjhERDU5NTAzQjI3MjJD NTdDMzM2N0JGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6JrEL1ZwAm9oA7Af7EaRMKwWn6VXPlZriG C2Y/pyW7p07V53OodB/SFtFaffNLR7v96AlU3YtTp8vNHXGmX+Wux5dXS7V37etZ CKTvZGO01A+NtkNI/f0y5yA6Wpedmu2AVlh/Ny/GkdlMcntbYir1HQKmt9R6ybG2 iSAFPmE1/z1VQFU6U3KqX1TNSuicBcqBTY8Gao3a1aVaZ/4AUgB2Xp0b66TKg8HK Iu4QjeCIU9Zc5e5RSKKEKY8r577ckvomWDtZyrymoGrikTZjOOWPK7RV1BHxIosM bCdqmu/n7rWuX3T1Ml3/hiQHoIkB8nq7XuWkQzWoifv01GNMzBs= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:55 2026 by rpki-client