$ rpki-client -vvf rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft File: 8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft (raw, json) Hash identifier: XJdOjfHUnFgfyJWJ9gVNTgXhaDRCeI0Cpaz0YXNG3VA= Subject key identifier: E5:E9:A4:4E:1E:84:69:66:E6:CE:5D:73:F2:FA:60:4E:94:1D:1E:62 Authority key identifier: 8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25 Certificate issuer: /CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225 Certificate serial: 19320CF4BFF6A2593546C64685C12D980F2529CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:00:29 +0000 Manifest this update: Tue 02 Jun 2026 16:55:29 +0000 Manifest next update: Wed 03 Jun 2026 19:22:29 +0000 Files and hashes: 1: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: 0ts/w6oKmrt+r0C8EDap/FK5Uc/o23APxLZIMW88Oo4=) 2: 3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa (hash: C1r63J+tGfKPbhbl/dI9G1bDePtMsBvnKWbTmvbk0OA=) 3: 3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa (hash: gMfUFYSPdVxpBBuGIFKR77copbFj1wN/NAnjtAfZ1Zo=) 4: 8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl (hash: 1RbNzwoi/HMfA462YU9/eEItSW9mehPHXzAaG1JHr9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:32:0c:f4:bf:f6:a2:59:35:46:c6:46:85:c1:2d:98:0f:25:29:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225 Validity Not Before: Jun 2 16:55:29 2026 GMT Not After : Jun 3 19:22:29 2026 GMT Subject: CN=E5E9A44E1E846966E6CE5D73F2FA604E941D1E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e6:1a:7f:40:fa:ff:01:c0:43:ed:d4:c2:dc: fc:92:c5:9d:14:f1:cb:0d:04:70:95:c2:91:93:49: 8f:ef:80:2f:8f:b1:c6:35:94:10:b5:e0:57:26:52: 1a:c0:7f:a5:fe:8c:6c:a4:62:23:7b:2d:a1:d2:b7: 0c:c7:3f:84:c4:24:97:3c:77:dd:2f:4a:91:80:84: 4c:2a:1b:27:3d:15:87:6f:c4:1f:0a:7b:98:6a:29: 6b:d1:2b:6a:5f:a0:5e:a9:c1:43:05:50:23:de:41: 18:bf:df:fe:18:e2:c7:db:ca:bb:06:3e:9c:3b:06: 39:e2:51:4b:ee:9d:81:ab:fa:53:33:a6:fd:d4:93: 21:11:2e:dd:4d:c8:90:74:a3:09:fa:55:9b:bb:f0: 05:a6:3e:58:ba:a0:d7:60:db:c5:8d:f4:bf:75:ae: ec:2c:fd:b4:3a:4a:c3:a0:ec:8d:c3:12:37:88:df: c3:f1:e1:92:a7:51:9b:c8:03:62:47:84:a4:a9:cb: 68:02:bb:df:a0:d7:bd:8e:b8:1c:ec:34:41:c7:eb: 23:80:86:8c:e6:7e:f8:87:24:37:0c:17:21:26:f3: bf:25:7b:f9:65:e9:20:9d:42:21:71:98:0f:84:f7: cb:f5:4e:7a:e2:44:02:2a:53:e2:e2:3a:3b:3d:c0: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E9:A4:4E:1E:84:69:66:E6:CE:5D:73:F2:FA:60:4E:94:1D:1E:62 X509v3 Authority Key Identifier: keyid:8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6b:bb:ed:42:a8:c7:fe:ad:ed:04:35:06:38:8b:2a:b9:eb: f3:f7:17:79:84:31:56:b1:a1:4c:0f:5e:a9:bd:62:55:6a:74: 25:d1:c2:5b:2f:60:91:ef:94:54:2a:51:ac:94:43:78:a8:91: ec:89:db:6c:98:f3:ba:01:69:c6:b6:85:7b:81:de:64:39:67: 3f:6e:a6:64:28:de:4d:5f:a9:3d:46:ff:5f:a3:fa:fc:01:ae: 38:ad:e3:db:99:9d:3e:5b:f7:6f:50:3a:37:ca:c6:4c:0a:f7: d6:a2:ac:6a:f6:d0:12:eb:7f:86:3e:fd:0a:84:87:e8:36:8a: 4b:ba:c4:35:e9:f5:a6:66:34:6a:84:d6:99:e9:55:62:13:cd: 69:a8:fe:7e:13:7a:f7:7b:16:b1:f4:47:63:38:8f:af:e7:17: 7c:d5:5e:4c:f4:6d:50:6f:7a:e6:58:7b:44:2a:7e:17:74:a0: fd:99:c5:c0:88:78:9f:dc:a7:81:d7:ad:bd:02:62:b7:2c:4c: d8:1b:34:1d:47:b1:c4:ec:f1:08:a9:78:40:8c:61:6a:21:58: 88:f8:73:19:e0:ce:7b:a8:29:0e:53:b1:1e:27:b0:0f:2d:04: 81:1e:3d:a3:05:e7:b3:99:e4:7a:d8:27:94:12:bc:d6:8a:01: cc:25:38:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTIM9L/2olk1RsZGhcEtmA8lKcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFCRDQ1NThDOUY5NEZGQzY3MEE1MkRCMzlGMEM5QjBC ODM5ODIyNTAeFw0yNjA2MDIxNjU1MjlaFw0yNjA2MDMxOTIyMjlaMDMxMTAvBgNV BAMTKEU1RTlBNDRFMUU4NDY5NjZFNkNFNUQ3M0YyRkE2MDRFOTQxRDFFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe5hp/QPr/AcBD7dTC3PySxZ0U 8csNBHCVwpGTSY/vgC+PscY1lBC14FcmUhrAf6X+jGykYiN7LaHStwzHP4TEJJc8 d90vSpGAhEwqGyc9FYdvxB8Ke5hqKWvRK2pfoF6pwUMFUCPeQRi/3/4Y4sfbyrsG Ppw7BjniUUvunYGr+lMzpv3UkyERLt1NyJB0own6VZu78AWmPli6oNdg28WN9L91 ruws/bQ6SsOg7I3DEjeI38Px4ZKnUZvIA2JHhKSpy2gCu9+g172OuBzsNEHH6yOA hozmfviHJDcMFyEm878le/ll6SCdQiFxmA+E98v1TnriRAIqU+LiOjs9wPH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5emkTh6EaWbmzl1z8vpgTpQdHmIwHwYDVR0j BBgwFoAUir1FWMn5T/xnClLbOfDJsLg5giUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM4N2U4NWQtYjE4NS00MzM0LTgwMWItNDljOGM4YjkxODQ0LzAvOEFCRDQ1NThD OUY5NEZGQzY3MEE1MkRCMzlGMEM5QjBCODM5ODIyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUJENDU1OEM5Rjk0RkZDNjcwQTUyREIzOUYwQzlCMEI4Mzk4 MjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvOEFCRDQ1NThDOUY5NEZGQzY3MEE1MkRCMzlGMEM5 QjBCODM5ODIyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxru+1CqMf+re0ENQY4iyq56/P3F3mEMVax oUwPXqm9YlVqdCXRwlsvYJHvlFQqUayUQ3iokeyJ22yY87oBaca2hXuB3mQ5Zz9u pmQo3k1fqT1G/1+j+vwBrjit49uZnT5b929QOjfKxkwK99airGr20BLrf4Y+/QqE h+g2iku6xDXp9aZmNGqE1pnpVWITzWmo/n4Tevd7FrH0R2M4j6/nF3zVXkz0bVBv euZYe0Qqfhd0oP2ZxcCIeJ/cp4HXrb0CYrcsTNgbNB1HscTs8QipeECMYWohWIj4 cxngznuoKQ5TsR4nsA8tBIEePaMF57OZ5HrYJ5QSvNaKAcwlOIc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:29:48 2026 by rpki-client