$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft File: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft (raw, json) Hash identifier: ba1s5cP+ETc5K2VoWvG4suEDgFqLL7meHz5kFxLC7Co= Subject key identifier: FE:C7:7E:5B:66:3D:0E:EA:2F:88:36:9F:59:27:B4:88:0C:5A:C1:AC Authority key identifier: 8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 Certificate issuer: /CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Certificate serial: 3F89755A375DAA0492DB01A423A1CED1AA9B0245 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 05:18:28 +0000 Manifest this update: Thu 18 Jun 2026 05:13:28 +0000 Manifest next update: Fri 19 Jun 2026 06:42:28 +0000 Files and hashes: 1: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl (hash: SUaiAiHbZ6xVSpE4d3V3x/FNq2e7oPNjZqWAKSkJNlA=) 2: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: +9zDigXxWl0KHwFSHRJ8vK8jloGtZKIEVRmfMrusxTQ=) 3: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5uR0k9um/4xZDeF/1OtaEeN9gAbE1nIuTIkh38U5XcA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 06:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:89:75:5a:37:5d:aa:04:92:db:01:a4:23:a1:ce:d1:aa:9b:02:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Validity Not Before: Jun 18 05:13:28 2026 GMT Not After : Jun 19 06:42:28 2026 GMT Subject: CN=FEC77E5B663D0EEA2F88369F5927B4880C5AC1AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:60:7e:8f:21:e8:38:2a:73:99:f1:d2:15:c2: f4:52:46:61:48:46:93:05:1d:b9:32:b6:e4:32:d6: d5:79:02:07:cd:b4:63:b0:7f:00:be:dd:64:bd:63: 17:a8:a0:ba:b6:5c:d0:da:aa:4f:f1:58:75:58:3f: 4f:c1:3f:1c:d8:75:80:0e:58:98:f5:14:df:3d:7a: c4:79:fe:2d:5c:87:a4:70:af:e1:41:5c:be:cc:11: e8:87:c6:d4:71:0c:87:e9:17:bc:e4:73:2e:6a:d2: ae:68:a2:38:f0:60:dd:a1:43:b2:74:e8:17:b0:a3: b4:70:50:98:71:5a:cb:4d:36:35:fc:6f:0d:47:e9: 21:28:a4:66:b5:a3:44:14:5c:87:6b:45:bb:fc:ed: f2:09:b8:b9:4f:7b:5b:09:5d:7f:c0:36:a3:94:6b: 0d:71:df:bf:ed:80:dd:dc:92:ef:55:96:3c:25:45: de:0c:99:6c:79:eb:25:11:3b:54:f4:26:88:b3:16: a9:07:43:16:da:a0:d5:c1:3d:5f:8c:fc:9e:21:9e: eb:01:b2:a8:33:c6:b9:ef:2c:20:b6:5a:01:b1:e0: f0:d2:03:ff:60:c8:de:c1:70:ac:62:87:8c:c4:0f: 78:56:7f:05:b2:b5:7a:14:ae:3d:c2:59:bf:3f:f3: 6b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C7:7E:5B:66:3D:0E:EA:2F:88:36:9F:59:27:B4:88:0C:5A:C1:AC X509v3 Authority Key Identifier: keyid:8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e3:15:c6:d6:bb:84:db:14:5c:04:99:51:1e:00:1d:46:06: e9:12:21:9b:aa:7e:64:e3:fa:e7:49:d2:b8:fd:62:8d:28:db: dc:57:44:72:03:e0:0f:b6:f1:72:47:20:6f:25:79:14:59:e1: 1c:83:5e:07:a2:a0:e0:98:9b:28:58:1b:a2:95:f7:6a:6f:65: c1:d7:27:6f:28:15:24:ad:42:35:a0:4f:72:57:6a:ab:a4:03: ff:b9:ef:c3:d5:c3:e4:39:80:fb:e6:5d:90:88:f4:26:b5:c6: 22:0e:65:36:cc:b9:92:f8:06:f0:9d:69:4f:ee:f9:58:41:bd: 42:ac:20:c2:a2:ee:50:a2:36:7b:a9:17:74:bc:75:79:85:09: 7c:2a:e2:c0:be:fc:c5:e4:05:00:30:fa:88:31:e6:49:20:63: 44:f5:b7:1b:1e:5d:12:dd:52:fa:fd:c2:5b:cb:eb:99:85:a4: 3c:2e:07:0e:ed:8c:a0:c8:0b:9a:a7:7f:8d:ee:ad:4a:a7:c5: e3:89:b1:26:4d:e9:41:53:72:f5:64:0e:f3:4a:c1:45:31:1b: 80:4b:b7:14:da:fa:96:53:68:56:f3:c7:32:27:1b:d7:3f:96: a4:1f:98:4e:22:fb:89:f8:a3:7f:b4:7c:74:c4:36:96:a3:5d: c2:58:04:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4l1WjddqgSS2wGkI6HO0aqbAkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1 NjZEMDA2MDAeFw0yNjA2MTgwNTEzMjhaFw0yNjA2MTkwNjQyMjhaMDMxMTAvBgNV BAMTKEZFQzc3RTVCNjYzRDBFRUEyRjg4MzY5RjU5MjdCNDg4MEM1QUMxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjYH6PIeg4KnOZ8dIVwvRSRmFI RpMFHbkytuQy1tV5AgfNtGOwfwC+3WS9YxeooLq2XNDaqk/xWHVYP0/BPxzYdYAO WJj1FN89esR5/i1ch6Rwr+FBXL7MEeiHxtRxDIfpF7zkcy5q0q5oojjwYN2hQ7J0 6Bewo7RwUJhxWstNNjX8bw1H6SEopGa1o0QUXIdrRbv87fIJuLlPe1sJXX/ANqOU aw1x37/tgN3cku9VljwlRd4MmWx56yURO1T0JoizFqkHQxbaoNXBPV+M/J4hnusB sqgzxrnvLCC2WgGx4PDSA/9gyN7BcKxih4zED3hWfwWytXoUrj3CWb8/82vxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/sd+W2Y9DuoviDafWSe0iAxawawwHwYDVR0j BBgwFoAUjx9Sxju4dITUxenYVRrnZ1ZtAGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWE4ZjY5ZjctOTMzMi00Y2Q0LWIzZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYz QkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1NjZEMDA2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjFGNTJDNjNCQjg3NDg0RDRDNUU5RDg1NTFBRTc2NzU2NkQw MDYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3 Njc1NjZEMDA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArjFcbWu4TbFFwEmVEeAB1GBukSIZuqfmTj +udJ0rj9Yo0o29xXRHID4A+28XJHIG8leRRZ4RyDXgeioOCYmyhYG6KV92pvZcHX J28oFSStQjWgT3JXaqukA/+578PVw+Q5gPvmXZCI9Ca1xiIOZTbMuZL4BvCdaU/u +VhBvUKsIMKi7lCiNnupF3S8dXmFCXwq4sC+/MXkBQAw+ogx5kkgY0T1txseXRLd Uvr9wlvL65mFpDwuBw7tjKDIC5qnf43urUqnxeOJsSZN6UFTcvVkDvNKwUUxG4BL txTa+pZTaFbzxzInG9c/lqQfmE4i+4n4o3+0fHTENpajXcJYBKE= -----END CERTIFICATE-----Generated at Thu Jun 18 19:04:11 2026 by rpki-client