$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft File: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft (raw, json) Hash identifier: w6OMMeFfNxe3mBu2N7fa9f5eFV/T93CvBsbplU994fM= Subject key identifier: DE:C0:72:CC:16:BD:7C:1F:3E:3C:87:06:7C:8A:37:A4:2F:82:71:EB Authority key identifier: 8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C Certificate issuer: /CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Certificate serial: 677D2257A7C4CEB791171F0B7675B95B325A6265 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 02:12:28 +0000 Manifest this update: Sat 20 Jun 2026 02:07:28 +0000 Manifest next update: Sun 21 Jun 2026 05:13:28 +0000 Files and hashes: 1: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: gHaL9xm6upsCMiwuTIzMiljzjIKdP3tM2s5bdfg68uM=) 2: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: kAF9XX+k/l/rK1GEr+bjFHX1YeYovpaBVZcUfCaqwVQ=) 3: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl (hash: 03Xzi5KOOuFTm0jP5tCs78fnD9L/GIk9imwMT5tjdu0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 05:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7d:22:57:a7:c4:ce:b7:91:17:1f:0b:76:75:b9:5b:32:5a:62:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Validity Not Before: Jun 20 02:07:28 2026 GMT Not After : Jun 21 05:13:28 2026 GMT Subject: CN=DEC072CC16BD7C1F3E3C87067C8A37A42F8271EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:a1:ac:9e:c0:3c:2f:9f:e1:94:69:e3:a9: 3a:1c:4b:cf:61:fa:a9:bc:2f:ce:55:b5:cc:13:30: e5:f9:1f:a8:af:15:17:1a:9a:f9:14:d1:da:20:32: 4f:58:e3:b0:b9:33:53:82:f1:3f:7f:8a:1f:ad:01: 06:39:46:cd:28:c9:f6:ab:66:d4:07:9e:af:08:a7: ab:af:c1:0e:46:e2:09:fc:e8:87:91:4b:07:7a:f8: 6a:7d:4b:ef:ac:d8:72:c4:d3:d5:1c:34:d9:29:c3: b2:b5:37:2d:7e:3b:4a:42:fa:12:2b:e7:d1:54:2d: 5c:a7:69:db:bd:15:4b:8c:d8:7a:33:be:f3:ef:d4: 93:c2:73:a1:16:5e:6b:72:a3:d0:43:82:16:b1:ca: 55:51:0c:00:b3:a0:28:a3:04:a0:30:b7:54:11:13: 35:be:d2:c0:b2:3d:71:92:80:03:88:4a:58:d6:39: f7:bb:c3:7e:4f:d9:88:05:bf:7d:48:43:69:89:e8: cf:44:2b:c8:e5:86:0f:93:36:ca:52:db:71:a2:a2: e0:19:c2:25:c6:3c:43:3e:eb:41:76:45:c7:e2:2e: 21:b5:eb:80:30:b3:96:b8:cd:38:72:be:be:27:0f: 0c:23:12:0d:49:13:26:5d:7d:f9:8e:d3:ef:85:80: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C0:72:CC:16:BD:7C:1F:3E:3C:87:06:7C:8A:37:A4:2F:82:71:EB X509v3 Authority Key Identifier: keyid:8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:9f:c0:fa:04:af:3b:67:53:a5:03:66:5a:ce:c6:87:9f:aa: b0:07:7b:8a:d0:7b:c3:f1:89:6f:1e:fc:4e:44:5f:00:8b:d3: de:e0:91:28:30:d8:31:7c:9a:73:37:8a:fd:5f:17:a8:c1:25: f7:bb:f6:a1:aa:f2:11:ee:1e:39:14:e2:01:c8:0b:75:3f:6c: a6:77:58:51:48:c5:cb:8e:2d:c6:2d:87:d5:87:f1:3c:e1:35: d7:06:9e:b8:7d:3a:b2:08:75:3c:eb:4c:89:91:4e:cc:cd:d5: 81:15:64:8c:be:8a:d2:01:a5:fe:5a:ed:18:5a:3a:d8:4c:5f: f0:ef:bf:e1:b0:e5:95:f9:9f:fd:b1:41:ee:ef:18:4f:76:a2: c0:ed:c7:db:c2:b8:dc:03:0a:09:10:f2:c9:2a:7d:ce:ad:09: 33:e3:ff:6b:0a:2d:73:8b:a4:df:21:df:b4:92:10:fc:a7:5b: f6:dd:8b:26:70:c1:e2:67:45:86:9b:e9:f6:e5:c0:a8:7b:96: 3b:a9:24:da:ab:76:f9:f9:44:0a:5f:bb:a8:82:b6:3a:22:4f: 30:4b:5e:a3:5f:08:82:3b:29:be:32:8b:71:e6:b3:b2:ed:2a: 5d:9f:f9:0d:4b:5c:4a:27:48:75:87:6d:f0:6d:81:30:da:29: 0b:1e:e2:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ30iV6fEzreRFx8LdnW5WzJaYmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVC MTRDODk2QzAeFw0yNjA2MjAwMjA3MjhaFw0yNjA2MjEwNTEzMjhaMDMxMTAvBgNV BAMTKERFQzA3MkNDMTZCRDdDMUYzRTNDODcwNjdDOEEzN0E0MkY4MjcxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5qKGsnsA8L5/hlGnjqTocS89h +qm8L85VtcwTMOX5H6ivFRcamvkU0dogMk9Y47C5M1OC8T9/ih+tAQY5Rs0oyfar ZtQHnq8Ip6uvwQ5G4gn86IeRSwd6+Gp9S++s2HLE09UcNNkpw7K1Ny1+O0pC+hIr 59FULVynadu9FUuM2HozvvPv1JPCc6EWXmtyo9BDghaxylVRDACzoCijBKAwt1QR EzW+0sCyPXGSgAOISljWOfe7w35P2YgFv31IQ2mJ6M9EK8jlhg+TNspS23GiouAZ wiXGPEM+60F2RcfiLiG164Aws5a4zThyvr4nDwwjEg1JEyZdffmO0++FgDjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3sByzBa9fB8+PIcGfIo3pC+CceswHwYDVR0j BBgwFoAUj/qLucCdxMpCyVyBfA/9lbFMiWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ1YWYyMmMtN2UzZS00MGI1LWFjNTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlD MDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVCMTRDODk2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBOEJCOUMwOURDNENBNDJDOTVDODE3QzBGRkQ5NUIxNEM4 OTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZE OTVCMTRDODk2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+fwPoErztnU6UDZlrOxoefqrAHe4rQe8Px iW8e/E5EXwCL097gkSgw2DF8mnM3iv1fF6jBJfe79qGq8hHuHjkU4gHIC3U/bKZ3 WFFIxcuOLcYth9WH8TzhNdcGnrh9OrIIdTzrTImRTszN1YEVZIy+itIBpf5a7Rha OthMX/Dvv+Gw5ZX5n/2xQe7vGE92osDtx9vCuNwDCgkQ8skqfc6tCTPj/2sKLXOL pN8h37SSEPynW/bdiyZwweJnRYab6fblwKh7ljupJNqrdvn5RApfu6iCtjoiTzBL XqNfCII7Kb4yi3Hms7LtKl2f+Q1LXEonSHWHbfBtgTDaKQse4so= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:07 2026 by rpki-client