$ rpki-client -vvf rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft File: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft (raw, json) Hash identifier: AJcUjYjpT4OijdsIPm/w2Ne+yf0ZrNUIBEGuRUjr/ho= Subject key identifier: C1:F5:28:5B:D5:95:AE:1F:DC:29:76:7C:5B:59:84:2B:0F:5D:B4:5C Authority key identifier: 8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 Certificate issuer: /CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Certificate serial: E1051799882EC43D631A6E5574BE96758B3BE0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 14:33:23 +0000 Manifest this update: Fri 19 Jun 2026 14:28:23 +0000 Manifest next update: Sat 20 Jun 2026 14:57:23 +0000 Files and hashes: 1: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: PZbtbKk588SOuMSDyRHv/Fg/EjC+9RQB0ZQtHocb618=) 2: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: HeHfGZB/GAp4q9T9TRaLUnaN9SyHYBb/bDC0hRan7Ak=) 3: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl (hash: jv2s8X1tMUbLBNZMQVebb9oaSUgM2py9rdwt2QgKpng=) 4: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: 71PyqcaPYwvm2e6i8fnxEnvNfxXMokDQ1xxLp0rozYA=) 5: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: NdF7z4Axz0mBE/lC0pc0IGrEEOoXFiCSmtcjnukP0y4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 14:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e1:05:17:99:88:2e:c4:3d:63:1a:6e:55:74:be:96:75:8b:3b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Validity Not Before: Jun 19 14:28:23 2026 GMT Not After : Jun 20 14:57:23 2026 GMT Subject: CN=C1F5285BD595AE1FDC29767C5B59842B0F5DB45C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:52:f0:c0:0c:c0:cc:58:5e:38:27:b2:c5: a4:9b:1a:d6:b0:9e:20:0e:26:59:9d:37:c7:38:41: 25:64:95:58:e3:da:9a:3e:15:57:08:90:38:32:d4: 45:2a:95:6b:03:71:26:4b:c1:ff:97:73:c8:ea:c0: fa:1d:04:07:fe:0b:7d:c6:93:fd:94:01:c7:b0:58: eb:71:15:ca:71:db:76:63:cf:b2:e6:d6:06:c7:83: 2c:b2:58:19:4c:67:c9:21:ac:5a:f8:b7:45:25:04: 9f:ee:c3:73:ed:1b:38:e1:1a:53:62:6c:99:f4:93: ed:ca:cf:6b:23:21:ef:7d:c4:58:13:93:93:aa:5d: 6c:7d:62:75:fa:07:f9:fe:6f:67:58:02:c4:2a:62: 9c:7f:3d:bb:fc:69:ad:7e:f3:ce:d9:ad:cc:bd:8f: 58:0d:1a:e7:4d:2a:53:a2:d0:13:15:15:0f:9a:10: 61:79:66:90:a0:9a:f7:20:50:8c:85:ab:df:fb:ae: 5d:a4:8f:97:5a:7f:62:9e:7f:5a:a4:f1:d2:3f:58: 79:b5:9c:7d:e5:23:c8:8b:76:db:ec:e2:98:3b:ad: 2b:b7:ff:af:5c:23:cc:d3:e6:20:f1:1a:a3:34:e0: df:78:d7:aa:ff:e2:c9:0f:f6:0f:55:84:bd:07:c7: 09:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F5:28:5B:D5:95:AE:1F:DC:29:76:7C:5B:59:84:2B:0F:5D:B4:5C X509v3 Authority Key Identifier: keyid:8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:53:b4:70:53:e9:12:02:a8:89:e4:cc:a9:a5:c7:3d:00:7e: a0:d9:91:58:07:90:3f:e2:4c:37:49:dd:c4:dc:c9:71:d3:0d: 5f:93:00:21:46:34:c3:c1:6a:ed:4c:85:34:89:cb:ab:66:e0: 73:b3:52:d7:c6:cd:43:ba:63:95:07:98:d3:1e:8c:42:39:4f: ee:f0:72:a4:c5:25:a6:98:15:31:85:af:09:36:f0:ab:db:b2: 59:64:d0:fc:37:b5:59:46:9e:d9:48:dd:32:ad:aa:3c:9e:01: 61:d6:6a:68:2c:75:fd:ce:66:0e:78:15:20:60:f8:7d:8b:ca: 91:d6:61:02:da:1d:fd:33:d4:cf:b6:dd:90:1d:2b:f6:ba:64: 8c:41:89:c0:fb:69:be:e6:12:08:27:74:fb:e9:dc:ad:4e:7d: 81:61:5e:ef:c7:fb:5c:90:4f:b0:2f:11:ba:f1:bf:af:db:fd: 12:7e:09:a2:e9:d8:e9:59:53:ea:80:39:62:a3:84:75:cf:c1: ad:82:69:1f:82:30:51:cc:da:af:00:d2:ca:18:fc:cd:e3:f5: 08:ef:11:d6:87:ff:2a:bd:5b:0e:6f:c4:fa:f2:c2:b8:36:c4: 45:31:f1:9f:91:9b:c8:ed:96:96:fa:eb:f1:74:8f:26:23:3b: 18:da:7e:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOEFF5mILsQ9YxpuVXS+lnWLO+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFQzFFMDNCOEU1MkY2NkEwNzEzREVCMTQyMTdDODdG OUVBMTdBNzAeFw0yNjA2MTkxNDI4MjNaFw0yNjA2MjAxNDU3MjNaMDMxMTAvBgNV BAMTKEMxRjUyODVCRDU5NUFFMUZEQzI5NzY3QzVCNTk4NDJCMEY1REI0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAP1LwwAzAzFheOCeyxaSbGtaw niAOJlmdN8c4QSVklVjj2po+FVcIkDgy1EUqlWsDcSZLwf+Xc8jqwPodBAf+C33G k/2UAcewWOtxFcpx23Zjz7Lm1gbHgyyyWBlMZ8khrFr4t0UlBJ/uw3PtGzjhGlNi bJn0k+3Kz2sjIe99xFgTk5OqXWx9YnX6B/n+b2dYAsQqYpx/Pbv8aa1+887Zrcy9 j1gNGudNKlOi0BMVFQ+aEGF5ZpCgmvcgUIyFq9/7rl2kj5daf2Kef1qk8dI/WHm1 nH3lI8iLdtvs4pg7rSu3/69cI8zT5iDxGqM04N9416r/4skP9g9VhL0HxwkBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwfUoW9WVrh/cKXZ8W1mEKw9dtFwwHwYDVR0j BBgwFoAUjuweA7jlL2agcT3rFCF8h/nqF6cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMyNTA2NjItM2VlZi00YWE5LTllZGUtNTYyOWQ1YjZlYTk1LzAvOEVFQzFFMDNC OEU1MkY2NkEwNzEzREVCMTQyMTdDODdGOUVBMTdBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUVDMUUwM0I4RTUyRjY2QTA3MTNERUIxNDIxN0M4N0Y5RUEx N0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvOEVFQzFFMDNCOEU1MkY2NkEwNzEzREVCMTQyMTdD ODdGOUVBMTdBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9TtHBT6RICqInkzKmlxz0AfqDZkVgHkD/i TDdJ3cTcyXHTDV+TACFGNMPBau1MhTSJy6tm4HOzUtfGzUO6Y5UHmNMejEI5T+7w cqTFJaaYFTGFrwk28Kvbsllk0Pw3tVlGntlI3TKtqjyeAWHWamgsdf3OZg54FSBg +H2LypHWYQLaHf0z1M+23ZAdK/a6ZIxBicD7ab7mEggndPvp3K1OfYFhXu/H+1yQ T7AvEbrxv6/b/RJ+CaLp2OlZU+qAOWKjhHXPwa2CaR+CMFHM2q8A0soY/M3j9Qjv EdaH/yq9Ww5vxPrywrg2xEUx8Z+Rm8jtlpb66/F0jyYjOxjaftM= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:06 2026 by rpki-client