$ rpki-client -vvf rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft File: 8FB017F8558B134E65670C5E56417CAA2FC460F1.mft (raw, json) Hash identifier: WqwDQ9zfaBf00EJ+E/7Pw7qUqXVuNYb+ToykFGXtjqo= Subject key identifier: 2B:39:7D:49:7E:B0:91:E3:FC:8C:43:CC:B7:F6:85:F2:C8:AC:47:B0 Authority key identifier: 8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 Certificate issuer: /CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Certificate serial: 7D474228DAFEC3EA0D4E4C9049E6F8516783320D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 21:06:27 +0000 Manifest this update: Fri 19 Jun 2026 21:01:27 +0000 Manifest next update: Sat 20 Jun 2026 22:42:27 +0000 Files and hashes: 1: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: toXJPhNtOXf98GJBbdqi9mllMSbcAgrmezktdUtueZ4=) 2: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: DZWl5mWmmx3C6HZfgC0P5GgRxbzQDenyir2DbhS+/vY=) 3: 8FB017F8558B134E65670C5E56417CAA2FC460F1.crl (hash: X9CKawj1sTJ5oQehQkh4m3IIIifhod7cH8wY55eOW0M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:47:42:28:da:fe:c3:ea:0d:4e:4c:90:49:e6:f8:51:67:83:32:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Validity Not Before: Jun 19 21:01:27 2026 GMT Not After : Jun 20 22:42:27 2026 GMT Subject: CN=2B397D497EB091E3FC8C43CCB7F685F2C8AC47B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:58:01:89:69:02:a1:b6:46:96:b4:90:15:81: 38:3c:8a:dc:86:ff:56:f6:70:88:26:06:8c:c2:8a: 6d:ae:26:87:d0:21:7b:04:93:1d:20:85:22:4c:e8: 97:01:2b:d1:08:1e:63:4e:7a:86:81:84:cf:d8:8d: 87:5a:ae:83:ab:1d:55:b9:0e:86:56:66:49:b0:d0: 05:f6:7f:17:79:31:9a:27:41:24:15:94:05:ae:e2: 7d:1d:6a:1b:00:df:59:ec:56:de:c3:d0:f6:58:1a: c7:ce:68:5c:47:f2:d1:da:dd:50:12:e4:14:88:3b: 91:a1:e1:42:67:35:e0:f7:a4:46:59:3d:12:44:bf: 4d:e8:96:cd:fd:db:70:c0:92:70:40:8e:7b:39:7c: f4:3e:20:d7:58:0b:69:92:8d:24:ea:f6:de:c9:70: 87:6c:55:a9:40:37:1c:c4:08:06:e9:f6:63:37:0e: 34:b1:cf:a2:71:07:19:86:68:d7:a9:7e:68:90:dd: 1e:09:03:8d:a8:df:2f:33:79:7f:f1:d3:2f:fb:2a: a9:a6:23:17:4f:a1:07:9d:05:9a:c2:9b:53:da:6e: 35:ca:ef:0d:bf:49:bb:94:8f:38:05:e4:d0:58:86: 43:66:8c:0d:55:3c:45:0e:2c:d5:00:c4:0b:93:bb: 97:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:39:7D:49:7E:B0:91:E3:FC:8C:43:CC:B7:F6:85:F2:C8:AC:47:B0 X509v3 Authority Key Identifier: keyid:8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:46:28:39:0f:3d:f5:68:18:5d:a0:eb:fc:9e:aa:2c:19:ef: 4e:56:1c:92:83:d2:db:ef:ed:87:23:4d:40:17:33:14:51:6b: a9:1a:9b:f0:fd:f6:7d:fb:1c:76:61:f2:58:34:4c:03:61:ff: b2:a3:71:bc:bd:ff:a1:99:fd:56:b8:3d:18:41:7f:fd:5d:4e: ef:32:7a:e8:01:52:7e:34:69:2a:f5:09:11:8f:65:fb:2d:e2: 55:6b:7e:4a:18:4b:54:bc:ec:64:ab:d7:b2:3a:a4:42:25:26: a3:14:97:b2:2d:89:a6:15:18:10:07:9d:14:b3:39:a4:d4:af: fb:c6:8d:f0:1b:3b:c2:f6:39:43:e6:58:dc:d5:d2:c9:b2:50: 8a:1a:5f:ab:03:d7:2e:72:02:a6:d8:38:e9:f2:dd:00:22:7e: f3:01:8c:8b:28:dc:e4:4e:0a:5f:e3:9a:56:58:49:5c:b3:bc: 7e:66:70:0b:ea:03:1d:0c:bd:43:42:92:43:4e:91:cb:1a:02: 48:0d:9f:81:ad:27:0f:72:bf:42:63:73:ab:3d:f2:3b:02:95: 9d:40:ab:a8:50:01:32:fe:e1:5d:8b:71:4c:26:9f:8c:c5:8b: 40:26:ec:6d:e5:21:ad:59:62:37:80:57:fa:c4:4e:61:65:f5: 52:8f:4a:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfUdCKNr+w+oNTkyQSeb4UWeDMg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEy RkM0NjBGMTAeFw0yNjA2MTkyMTAxMjdaFw0yNjA2MjAyMjQyMjdaMDMxMTAvBgNV BAMTKDJCMzk3RDQ5N0VCMDkxRTNGQzhDNDNDQ0I3RjY4NUYyQzhBQzQ3QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYWAGJaQKhtkaWtJAVgTg8ityG /1b2cIgmBozCim2uJofQIXsEkx0ghSJM6JcBK9EIHmNOeoaBhM/YjYdaroOrHVW5 DoZWZkmw0AX2fxd5MZonQSQVlAWu4n0dahsA31nsVt7D0PZYGsfOaFxH8tHa3VAS 5BSIO5Gh4UJnNeD3pEZZPRJEv03ols3923DAknBAjns5fPQ+INdYC2mSjSTq9t7J cIdsValANxzECAbp9mM3DjSxz6JxBxmGaNepfmiQ3R4JA42o3y8zeX/x0y/7Kqmm IxdPoQedBZrCm1PabjXK7w2/SbuUjzgF5NBYhkNmjA1VPEUOLNUAxAuTu5dbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKzl9SX6wkeP8jEPMt/aF8sisR7AwHwYDVR0j BBgwFoAUj7AX+FWLE05lZwxeVkF8qi/EYPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMyOGFhYzMtMDA5NC00MjFmLWEyMDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1 NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEyRkM0NjBGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkIwMTdGODU1OEIxMzRFNjU2NzBDNUU1NjQxN0NBQTJGQzQ2 MEYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdD QUEyRkM0NjBGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhGKDkPPfVoGF2g6/yeqiwZ705WHJKD0tvv 7YcjTUAXMxRRa6kam/D99n37HHZh8lg0TANh/7Kjcby9/6GZ/Va4PRhBf/1dTu8y eugBUn40aSr1CRGPZfst4lVrfkoYS1S87GSr17I6pEIlJqMUl7ItiaYVGBAHnRSz OaTUr/vGjfAbO8L2OUPmWNzV0smyUIoaX6sD1y5yAqbYOOny3QAifvMBjIso3ORO Cl/jmlZYSVyzvH5mcAvqAx0MvUNCkkNOkcsaAkgNn4GtJw9yv0Jjc6s98jsClZ1A q6hQATL+4V2LcUwmn4zFi0Am7G3lIa1ZYjeAV/rETmFl9VKPShk= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:45 2026 by rpki-client