$ rpki-client -vvf rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft File: 8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft (raw, json) Hash identifier: gog8FlNEnWFKnevYXasBBitVB8ThHnJXVpY93+XFlJ8= Subject key identifier: 44:DD:03:52:1A:59:13:CF:30:CE:9D:1C:27:30:A9:D5:B2:E3:E2:29 Authority key identifier: 87:05:B5:B7:FD:97:EB:20:89:2E:8D:B5:A7:F7:BD:23:BE:82:68:CC Certificate issuer: /CN=8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC Certificate serial: 3CA3D6B2A04BA8EF7E8EE75F95B72C9B57ECF138 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:45:44 +0000 Manifest this update: Wed 03 Jun 2026 00:40:44 +0000 Manifest next update: Thu 04 Jun 2026 03:47:44 +0000 Files and hashes: 1: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: ILEPt3NLdu2PTg7IxG5hw5UfVvO4+tHzRcaeRjRDOH8=) 2: 8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl (hash: 5qHGela1LkS4Z1UX6iYuOVYkcWquvRepTBANKRmAXSs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 03:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a3:d6:b2:a0:4b:a8:ef:7e:8e:e7:5f:95:b7:2c:9b:57:ec:f1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC Validity Not Before: Jun 3 00:40:44 2026 GMT Not After : Jun 4 03:47:44 2026 GMT Subject: CN=44DD03521A5913CF30CE9D1C2730A9D5B2E3E229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:2b:6a:6b:cf:28:0f:43:b5:06:80:e3:23: 97:a1:f7:00:fb:51:9a:22:40:f7:07:bf:37:66:a1: a5:3a:52:fb:5f:e4:2c:be:aa:11:d9:29:ec:27:d7: 84:28:97:b0:3a:c5:25:ce:3f:0f:3a:8e:55:8e:82: 38:ad:1d:97:49:af:ff:0b:d8:ff:af:31:b8:78:49: 32:ff:06:bb:ee:52:ec:ff:34:55:04:ce:6e:3b:96: b4:22:5a:f4:a3:e9:92:d1:3a:e8:28:32:34:bf:49: 27:dc:62:3a:28:f5:02:f9:70:dc:71:5b:7a:0a:7a: c7:c6:8f:b5:3b:5a:13:00:5d:c2:a6:8d:97:50:5b: 51:71:33:d6:35:e2:13:d9:50:d4:da:07:06:43:6c: 6e:1e:6d:6d:19:87:9c:85:42:db:5c:bf:03:b2:07: 76:51:cf:9b:d2:b9:82:6d:f3:dc:0c:bc:72:03:49: 92:50:00:28:9e:8d:2c:0d:c1:7c:1d:75:f5:c2:17: 87:ee:4b:33:f9:80:ba:79:ca:90:31:7c:a8:d8:ff: e2:78:18:0a:c1:28:c5:27:45:ff:fb:d4:42:18:a8: 57:e6:2e:0a:7a:91:2d:c1:d5:61:7c:a4:78:69:3d: e6:c7:05:08:9e:d5:b9:91:ec:45:34:25:62:6f:68: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DD:03:52:1A:59:13:CF:30:CE:9D:1C:27:30:A9:D5:B2:E3:E2:29 X509v3 Authority Key Identifier: keyid:87:05:B5:B7:FD:97:EB:20:89:2E:8D:B5:A7:F7:BD:23:BE:82:68:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8b:2b:69:17:9c:cc:d8:36:4e:7c:2c:29:c0:2d:90:f2:fc: 0a:6e:82:0b:fa:2e:3c:1d:c9:a6:ae:8d:0a:32:29:c1:29:f0: 6d:d0:9a:a1:55:a3:0a:32:09:1c:76:37:bd:6b:b7:ad:b7:ed: 72:20:54:61:66:61:48:d9:97:9a:3e:0e:34:48:86:bf:c1:ba: de:71:19:2b:1d:dd:85:e1:73:0e:f4:1b:fd:3b:ba:d0:b5:3e: 1f:6a:70:04:30:ba:61:7c:21:de:85:c1:eb:33:1f:3d:12:dd: 13:f1:42:6b:fd:42:d9:1d:ad:3b:fc:09:dd:b8:ae:fd:89:06: 3c:c6:28:cd:38:12:66:1d:e7:c0:87:d6:57:ea:ea:1e:d4:9a: c3:8d:59:de:23:c4:fe:e9:68:29:cb:0e:d4:11:51:ce:24:1f: 68:67:f1:bc:37:68:53:ff:b1:4f:fa:83:14:b8:3c:0a:a6:80: 35:cd:94:5f:91:f1:9b:8b:6f:6e:ca:46:95:81:57:20:93:f2: 2b:11:26:5a:81:13:bf:88:94:18:ba:ec:9e:02:83:26:2c:ba: 12:21:c9:ac:08:57:c1:5b:04:83:5a:07:65:38:ea:ea:42:c5: a1:69:cd:6f:e5:e0:6b:13:46:1e:ba:f0:4e:ea:a7:1a:b7:94: ec:dc:44:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKPWsqBLqO9+judflbcsm1fs8TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcwNUI1QjdGRDk3RUIyMDg5MkU4REI1QTdGN0JEMjNC RTgyNjhDQzAeFw0yNjA2MDMwMDQwNDRaFw0yNjA2MDQwMzQ3NDRaMDMxMTAvBgNV BAMTKDQ0REQwMzUyMUE1OTEzQ0YzMENFOUQxQzI3MzBBOUQ1QjJFM0UyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+Ctqa88oD0O1BoDjI5eh9wD7 UZoiQPcHvzdmoaU6Uvtf5Cy+qhHZKewn14Qol7A6xSXOPw86jlWOgjitHZdJr/8L 2P+vMbh4STL/BrvuUuz/NFUEzm47lrQiWvSj6ZLROugoMjS/SSfcYjoo9QL5cNxx W3oKesfGj7U7WhMAXcKmjZdQW1FxM9Y14hPZUNTaBwZDbG4ebW0Zh5yFQttcvwOy B3ZRz5vSuYJt89wMvHIDSZJQACiejSwNwXwddfXCF4fuSzP5gLp5ypAxfKjY/+J4 GArBKMUnRf/71EIYqFfmLgp6kS3B1WF8pHhpPebHBQie1bmR7EU0JWJvaPZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURN0DUhpZE88wzp0cJzCp1bLj4ikwHwYDVR0j BBgwFoAUhwW1t/2X6yCJLo21p/e9I76CaMwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWI3NGVjZTYtODgwYy00Y2VmLWFkZDItNzc3MTllYmVkZWM5LzAvODcwNUI1QjdG RDk3RUIyMDg5MkU4REI1QTdGN0JEMjNCRTgyNjhDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzA1QjVCN0ZEOTdFQjIwODkyRThEQjVBN0Y3QkQyM0JFODI2 OENDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvODcwNUI1QjdGRDk3RUIyMDg5MkU4REI1QTdGN0JE MjNCRTgyNjhDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCLK2kXnMzYNk58LCnALZDy/Apuggv6Ljwd yaaujQoyKcEp8G3QmqFVowoyCRx2N71rt6237XIgVGFmYUjZl5o+DjRIhr/But5x GSsd3YXhcw70G/07utC1Ph9qcAQwumF8Id6FweszHz0S3RPxQmv9QtkdrTv8Cd24 rv2JBjzGKM04EmYd58CH1lfq6h7UmsONWd4jxP7paCnLDtQRUc4kH2hn8bw3aFP/ sU/6gxS4PAqmgDXNlF+R8ZuLb27KRpWBVyCT8isRJlqBE7+IlBi67J4CgyYsuhIh yawIV8FbBINaB2U46upCxaFpzW/l4GsTRh668E7qpxq3lOzcRBg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:26:05 2026 by rpki-client