$ rpki-client -vvf rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft File: 8EE74284879D5768C14DFF59F408307443024F52.mft (raw, json) Hash identifier: RLc94kTJj7KJ0IxnkmS2mWwj9Tnw79HV3piIQjlnwoU= Subject key identifier: 5B:E7:50:22:A8:E7:DF:19:67:A4:0F:B9:BC:C0:09:95:C0:61:B0:3E Authority key identifier: 8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52 Certificate issuer: /CN=8EE74284879D5768C14DFF59F408307443024F52 Certificate serial: 18F3FB64B7C7E6A0AE849B8BA0E683D451972294 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 17:46:20 +0000 Manifest this update: Tue 02 Jun 2026 17:41:20 +0000 Manifest next update: Wed 03 Jun 2026 21:07:20 +0000 Files and hashes: 1: 8EE74284879D5768C14DFF59F408307443024F52.crl (hash: +z/UY0xqECeOiMAQ57/zVAsCHV5IiFuf+uq7rt6Kdzc=) 2: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: qVGDGNhc8J+1zH3v5gLnqpqbccQ37nMtlVBvAtU2Qic=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f3:fb:64:b7:c7:e6:a0:ae:84:9b:8b:a0:e6:83:d4:51:97:22:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE74284879D5768C14DFF59F408307443024F52 Validity Not Before: Jun 2 17:41:20 2026 GMT Not After : Jun 3 21:07:20 2026 GMT Subject: CN=5BE75022A8E7DF1967A40FB9BCC00995C061B03E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:bd:bc:82:fb:40:13:a1:8f:2c:48:4f:81: 93:e3:ef:21:a9:74:5c:80:c5:51:83:b9:99:4e:bf: 5a:a1:92:76:43:99:f3:4b:d8:23:07:4e:61:15:22: 97:16:e0:56:bf:07:bc:02:ed:86:5f:a7:e8:7e:f3: f6:30:06:71:22:5e:26:bb:5f:99:e7:1c:8b:9e:b1: 51:7f:3c:25:ea:02:d5:41:3e:20:3a:fa:cb:4d:99: 91:71:2d:d6:b2:90:78:27:0c:78:10:8d:6a:2b:d7: d1:8a:2e:c8:47:89:27:25:20:59:97:e1:a5:58:65: 53:d2:82:0b:50:b0:23:7d:7d:9c:f4:f4:f9:16:6f: 28:6d:99:99:ae:89:d2:c7:5e:75:8c:07:f0:42:87: 1d:91:1c:92:4c:2d:01:8a:b6:48:6e:09:2d:7f:e0: 5d:90:aa:59:4e:b6:94:c0:3c:90:3d:bb:ea:ac:0d: b4:03:bb:b7:22:b2:2f:9a:00:3e:97:4e:85:de:b7: 01:9f:24:50:1d:35:9c:e5:94:a8:96:10:0c:27:af: 07:41:73:fa:cd:a2:ff:0a:bb:f7:2b:a4:4a:b2:43: 10:d0:ae:24:48:8c:e2:e8:f7:08:4a:fb:d1:08:9b: cd:48:5a:53:c8:7b:be:5a:40:94:75:c9:94:18:25: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E7:50:22:A8:E7:DF:19:67:A4:0F:B9:BC:C0:09:95:C0:61:B0:3E X509v3 Authority Key Identifier: keyid:8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e6:82:20:e3:cd:cd:21:a1:94:1c:82:79:da:da:96:66:25: 37:24:8b:ef:b8:4a:5b:ac:94:95:7f:bd:e4:93:5d:58:cb:73: b3:d0:ea:ca:0a:32:45:43:32:63:37:ca:29:ae:e9:14:8d:65: cc:d2:bb:d8:d1:7f:54:3b:b7:50:3b:52:0d:a1:28:8c:63:86: 6c:0c:29:cc:67:fe:52:97:00:2e:02:77:b8:84:a7:fe:96:88: 9a:c7:df:26:69:b0:7b:e0:4c:06:83:f6:81:c7:c0:82:9e:35: 56:af:11:35:f4:e7:7a:88:f6:cc:13:82:f5:a1:b5:af:d6:65: d5:30:eb:96:3e:10:cb:ce:92:25:23:50:b4:4b:32:38:29:72: 92:70:2f:b3:71:4f:b5:cc:af:45:47:ee:40:8d:9b:3f:45:df: 9e:5c:c1:e2:91:f2:b5:7c:27:19:61:e5:b8:37:0f:e3:e3:7c: 21:1a:9b:b3:da:3a:d1:0b:59:6d:ae:32:64:f2:b1:f9:44:1c: 33:b2:f2:48:13:cc:06:9b:97:de:5f:50:28:c0:9a:ad:20:28: 37:d4:90:b1:66:e0:d9:a2:8e:53:d8:14:9e:76:85:09:2e:d2: 60:98:97:2e:3a:74:fa:cf:2f:8b:5f:a2:b2:f9:aa:e7:47:f3: 41:9e:59:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGPP7ZLfH5qCuhJuLoOaD1FGXIpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFNzQyODQ4NzlENTc2OEMxNERGRjU5RjQwODMwNzQ0 MzAyNEY1MjAeFw0yNjA2MDIxNzQxMjBaFw0yNjA2MDMyMTA3MjBaMDMxMTAvBgNV BAMTKDVCRTc1MDIyQThFN0RGMTk2N0E0MEZCOUJDQzAwOTk1QzA2MUIwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClAr28gvtAE6GPLEhPgZPj7yGp dFyAxVGDuZlOv1qhknZDmfNL2CMHTmEVIpcW4Fa/B7wC7YZfp+h+8/YwBnEiXia7 X5nnHIuesVF/PCXqAtVBPiA6+stNmZFxLdaykHgnDHgQjWor19GKLshHiSclIFmX 4aVYZVPSggtQsCN9fZz09PkWbyhtmZmuidLHXnWMB/BChx2RHJJMLQGKtkhuCS1/ 4F2QqllOtpTAPJA9u+qsDbQDu7cisi+aAD6XToXetwGfJFAdNZzllKiWEAwnrwdB c/rNov8Ku/crpEqyQxDQriRIjOLo9whK+9EIm81IWlPIe75aQJR1yZQYJdhHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW+dQIqjn3xlnpA+5vMAJlcBhsD4wHwYDVR0j BBgwFoAUjudChIedV2jBTf9Z9AgwdEMCT1IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMyZTk0NWMtZWQzZC00ODlhLTgzZWQtNTAxNzI3M2Q1YWE1LzAvOEVFNzQyODQ4 NzlENTc2OEMxNERGRjU5RjQwODMwNzQ0MzAyNEY1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUU3NDI4NDg3OUQ1NzY4QzE0REZGNTlGNDA4MzA3NDQzMDI0 RjUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMyZTk0NWMtZWQzZC00ODlhLTgz ZWQtNTAxNzI3M2Q1YWE1LzAvOEVFNzQyODQ4NzlENTc2OEMxNERGRjU5RjQwODMw NzQ0MzAyNEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPmgiDjzc0hoZQcgnna2pZmJTcki++4Slus lJV/veSTXVjLc7PQ6soKMkVDMmM3yimu6RSNZczSu9jRf1Q7t1A7Ug2hKIxjhmwM Kcxn/lKXAC4Cd7iEp/6WiJrH3yZpsHvgTAaD9oHHwIKeNVavETX053qI9swTgvWh ta/WZdUw65Y+EMvOkiUjULRLMjgpcpJwL7NxT7XMr0VH7kCNmz9F355cweKR8rV8 Jxlh5bg3D+PjfCEam7PaOtELWW2uMmTysflEHDOy8kgTzAabl95fUCjAmq0gKDfU kLFm4NmijlPYFJ52hQku0mCYly46dPrPL4tforL5qudH80GeWfo= -----END CERTIFICATE-----Generated at Wed Jun 3 03:50:20 2026 by rpki-client