$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft File: 8BE5D6878B464D9FA654023C63F4762E67599164.mft (raw, json) Hash identifier: GaD/JYF8SSMaTqmL2ZdSv4AeaG+5yt4Utc+UKfGE4Gs= Subject key identifier: F8:78:73:B2:2A:DB:61:81:AE:B3:AB:D9:03:67:27:36:4F:7B:F9:EE Authority key identifier: 8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64 Certificate issuer: /CN=8BE5D6878B464D9FA654023C63F4762E67599164 Certificate serial: 02412247A21ABFE5FAA0E723253F7B7B7868B6C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:57:07 +0000 Manifest this update: Sat 20 Jun 2026 01:52:07 +0000 Manifest next update: Sun 21 Jun 2026 03:20:07 +0000 Files and hashes: 1: 8BE5D6878B464D9FA654023C63F4762E67599164.crl (hash: DCGm8xJk2+8xt7JZvz4sW5TwjtA5CDgLYQnM4qm2iuQ=) 2: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: j1q7Tjwd0n3nZPl8Mige83XpdVNq8A8OBRmyY8xB6w0=) 3: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: gsCaOX96MCEfxecmW7euDwqW3eYjaAOY81K1Ab8R/sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:41:22:47:a2:1a:bf:e5:fa:a0:e7:23:25:3f:7b:7b:78:68:b6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE5D6878B464D9FA654023C63F4762E67599164 Validity Not Before: Jun 20 01:52:07 2026 GMT Not After : Jun 21 03:20:07 2026 GMT Subject: CN=F87873B22ADB6181AEB3ABD9036727364F7BF9EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:0d:a6:5e:f2:44:19:6e:49:54:99:9e:43: ae:2f:03:30:e1:50:ba:28:a0:90:f3:15:00:d4:ca: 6f:6f:bc:1d:bc:26:82:bf:01:f4:99:67:a5:92:8d: 0f:dd:d4:dc:0b:10:d4:02:a5:e6:ff:e4:9d:be:ff: 8f:5f:54:ce:ee:05:c3:d1:e5:1a:03:a2:64:a8:14: 69:bb:f6:27:ba:8b:8a:cb:e0:c2:55:db:aa:f0:e8: 80:71:62:e1:b0:5e:22:8e:22:20:38:72:8a:59:59: e3:b4:66:8e:31:1b:36:63:c4:2a:25:cf:73:04:58: c7:f3:14:58:49:50:4b:76:8f:74:9a:1d:91:7b:4d: 69:cd:8c:42:b5:f5:7e:a7:ba:cc:a6:5a:1c:d6:b8: d0:93:75:dd:6c:88:91:8b:a9:94:e6:77:f2:ed:9c: 73:9b:64:77:76:6f:a7:27:0b:2e:7b:a3:4a:41:9c: e2:f7:6e:bb:18:2a:d4:d8:16:9e:80:5e:4b:3a:18: ed:d9:27:67:8c:aa:57:c6:de:cf:14:06:7c:b4:63: b8:54:cd:c4:63:7c:ea:92:b6:25:da:c2:b1:1f:71: 82:cc:d6:86:29:87:f4:d7:32:d2:fc:1a:d8:f5:67: 85:93:6d:f5:2a:a3:5c:f0:56:a3:03:d1:a8:10:c1: 8f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:78:73:B2:2A:DB:61:81:AE:B3:AB:D9:03:67:27:36:4F:7B:F9:EE X509v3 Authority Key Identifier: keyid:8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:75:98:b9:53:c7:be:9f:ad:b0:aa:8d:7e:92:72:58:29:14: a1:05:78:78:ce:22:28:82:fe:dd:27:66:cd:f0:6d:86:76:17: 1e:6b:60:31:d7:11:f8:51:d5:ac:2d:d9:34:05:47:a7:34:81: ae:f6:fe:7d:2b:0f:a7:a1:b1:56:66:a7:fa:5d:0b:17:2d:af: 17:e3:57:18:f9:c9:c0:1a:2c:4b:58:bc:16:f1:b0:4e:8b:d2: 79:95:44:73:03:8a:2c:a7:cf:9c:9e:b0:20:79:be:f6:d0:2a: 8b:76:02:fe:47:e1:41:6a:d5:f6:3c:49:c3:cf:fd:4a:f0:45: 10:29:f6:fa:0b:52:d1:80:23:3d:49:61:6f:3b:40:6c:c8:71: d9:d9:5f:7f:d2:8c:0e:5d:4d:f5:1e:c6:02:ea:02:cf:22:c4: b3:bd:fc:72:8d:2d:a4:77:d5:9f:21:c8:70:b5:c5:91:5b:18: 1a:95:8e:c7:c8:0f:8a:48:e2:75:27:16:b5:c8:dd:17:74:f5: 4d:dd:71:c1:5b:3c:11:48:f1:1f:83:26:39:5c:67:f6:65:d7: 64:f1:45:63:8a:0c:58:c7:9b:58:e3:5e:b3:17:c2:5f:d8:96: f0:14:15:18:c9:5a:88:a2:b5:72:07:e0:8e:31:2d:ea:35:87: 22:1d:bc:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAkEiR6Iav+X6oOcjJT97e3hotsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNUQ2ODc4QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2MkU2 NzU5OTE2NDAeFw0yNjA2MjAwMTUyMDdaFw0yNjA2MjEwMzIwMDdaMDMxMTAvBgNV BAMTKEY4Nzg3M0IyMkFEQjYxODFBRUIzQUJEOTAzNjcyNzM2NEY3QkY5RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHUg2mXvJEGW5JVJmeQ64vAzDh ULoooJDzFQDUym9vvB28JoK/AfSZZ6WSjQ/d1NwLENQCpeb/5J2+/49fVM7uBcPR 5RoDomSoFGm79ie6i4rL4MJV26rw6IBxYuGwXiKOIiA4copZWeO0Zo4xGzZjxCol z3MEWMfzFFhJUEt2j3SaHZF7TWnNjEK19X6nusymWhzWuNCTdd1siJGLqZTmd/Lt nHObZHd2b6cnCy57o0pBnOL3brsYKtTYFp6AXks6GO3ZJ2eMqlfG3s8UBny0Y7hU zcRjfOqStiXawrEfcYLM1oYph/TXMtL8Gtj1Z4WTbfUqo1zwVqMD0agQwY/hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+HhzsirbYYGus6vZA2cnNk97+e4wHwYDVR0j BBgwFoAUi+XWh4tGTZ+mVAI8Y/R2LmdZkWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I3ZWY1MTUtODU2NC00MWU4LTlkMjAtMmQzM2Q0NWNjYmQ2LzAvOEJFNUQ2ODc4 QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2MkU2NzU5OTE2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkU1RDY4NzhCNDY0RDlGQTY1NDAyM0M2M0Y0NzYyRTY3NTk5 MTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvOEJFNUQ2ODc4QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2 MkU2NzU5OTE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ1mLlTx76frbCqjX6SclgpFKEFeHjOIiiC /t0nZs3wbYZ2Fx5rYDHXEfhR1awt2TQFR6c0ga72/n0rD6ehsVZmp/pdCxctrxfj Vxj5ycAaLEtYvBbxsE6L0nmVRHMDiiynz5yesCB5vvbQKot2Av5H4UFq1fY8ScPP /UrwRRAp9voLUtGAIz1JYW87QGzIcdnZX3/SjA5dTfUexgLqAs8ixLO9/HKNLaR3 1Z8hyHC1xZFbGBqVjsfID4pI4nUnFrXI3Rd09U3dccFbPBFI8R+DJjlcZ/Zl12Tx RWOKDFjHm1jjXrMXwl/YlvAUFRjJWoiitXIH4I4xLeo1hyIdvIM= -----END CERTIFICATE-----Generated at Sat Jun 20 15:41:59 2026 by rpki-client