$ rpki-client -vvf rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft File: 8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft (raw, json) Hash identifier: U7z0dZeb4rkQJhoV3z8TSXxueEldCpfnrP1H/yhlcX0= Subject key identifier: D4:8B:1A:8C:D9:29:BF:C3:69:65:E0:FF:4D:22:CE:2B:D2:29:3D:99 Authority key identifier: 86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 Certificate issuer: /CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Certificate serial: 2C53C589E8C4A5AA8A2DDB80167340AE2BC16E52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:02:41 +0000 Manifest this update: Wed 17 Jun 2026 03:57:41 +0000 Manifest next update: Thu 18 Jun 2026 06:24:41 +0000 Files and hashes: 1: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: V+R7emBXYGxGYC8TKAJDN/rKFNkkzGGzXMecTJssl6Q=) 2: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AiKeHz2pWrwnk84HIHiggHrF6Y+TQyS0iMZkjpVVcMY=) 3: 8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl (hash: Hte2O/BMBOzfoiNBJK/nU6r74QW0Sm5IXNzXotqMLpk=) 4: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: buNf/KMT3H26jyT7kcH4G4XIVCs19dscJeFhejymKUs=) 5: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: A51y95Y2VvHOxleNisrOn7Mw2CXWlCwKbBD4RKfiRXo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:53:c5:89:e8:c4:a5:aa:8a:2d:db:80:16:73:40:ae:2b:c1:6e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Validity Not Before: Jun 17 03:57:41 2026 GMT Not After : Jun 18 06:24:41 2026 GMT Subject: CN=D48B1A8CD929BFC36965E0FF4D22CE2BD2293D99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fe:77:bc:dc:a8:00:a3:33:67:d4:fb:27:96: ed:6f:e5:e9:5c:ee:19:75:8e:13:e5:1d:2e:69:ee: ea:b1:c8:c6:2a:34:70:c4:d1:58:24:6c:37:d9:2b: 89:18:af:18:f1:09:d0:5d:55:73:24:0f:dd:a4:09: 12:2e:79:6e:02:a9:3b:f3:a6:fb:b8:f6:6e:5b:54: 2e:73:48:27:f6:78:6e:71:7b:68:3e:86:ed:bd:71: 8d:62:0b:c3:e8:25:eb:7e:16:26:d9:21:f4:fe:01: 78:83:51:68:52:be:a6:36:76:a2:45:3c:9d:e7:7d: 6a:25:fd:1f:a4:a3:08:7d:49:b9:99:78:c2:e2:03: ca:e1:45:ce:80:1f:48:f9:c1:fa:56:a1:65:1a:2f: ea:7b:77:18:08:d4:fd:3b:67:74:09:bf:98:87:f0: 86:d0:07:a3:ce:9a:39:1d:a5:24:a2:8e:b8:b6:b5: 82:64:1b:da:13:e8:4b:36:34:a7:72:6d:50:dc:c4: fa:6f:ba:0d:90:62:f5:d0:f1:d5:54:f8:14:8e:96: 97:09:be:be:80:d3:9f:db:cb:15:8a:34:50:f6:f6: 6e:ca:b6:bd:16:99:ec:4c:fc:63:20:eb:21:58:b5: 06:08:65:70:6f:74:57:6c:f8:c4:ff:09:66:c8:6e: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8B:1A:8C:D9:29:BF:C3:69:65:E0:FF:4D:22:CE:2B:D2:29:3D:99 X509v3 Authority Key Identifier: keyid:86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:01:3f:97:f1:1a:8b:21:ea:05:c9:73:23:de:bb:8c:42:7a: 85:e6:22:f6:88:54:d2:98:fc:ef:69:fd:21:06:45:fc:29:48: ae:41:8f:41:6e:56:c1:e4:05:cb:f4:01:0e:68:6e:11:88:38: 3b:ae:0e:f7:72:f1:1f:5f:c6:df:61:aa:e1:eb:b4:dd:50:8e: 21:96:4c:d4:78:a0:92:54:e9:0f:c1:94:7c:88:b8:f3:d4:93: fd:90:88:4e:90:51:7d:37:06:d0:04:15:a5:2d:0d:31:bb:d0: 3a:1f:1d:44:c5:60:e3:8b:fe:51:f2:5c:96:24:bc:10:72:2f: b6:78:46:86:78:1a:23:77:09:19:cb:5e:3a:b0:59:53:00:9d: 1d:9e:24:8e:1c:f6:7c:c7:bb:92:c1:26:84:85:87:64:ca:3a: de:a4:5f:e9:2c:c5:b2:5c:db:2b:0a:e7:26:fc:81:85:89:eb: 98:4c:20:42:1f:31:97:2b:16:d9:3d:c9:5e:6b:fd:d3:b2:d7: 02:a0:ff:87:10:25:3b:94:24:10:cc:ef:79:10:91:ff:c2:75: 6c:98:6c:49:54:ef:8a:7d:99:b7:46:40:97:b1:54:14:ca:04: 2d:86:fc:f0:83:51:fa:02:83:8f:64:97:39:5a:22:7c:f6:7e: db:6e:ca:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULFPFiejEpaqKLduAFnNArivBblIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0NEVGNUNBRkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQw QUQ5QzA3NzAeFw0yNjA2MTcwMzU3NDFaFw0yNjA2MTgwNjI0NDFaMDMxMTAvBgNV BAMTKEQ0OEIxQThDRDkyOUJGQzM2OTY1RTBGRjREMjJDRTJCRDIyOTNEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/ne83KgAozNn1Psnlu1v5elc 7hl1jhPlHS5p7uqxyMYqNHDE0VgkbDfZK4kYrxjxCdBdVXMkD92kCRIueW4CqTvz pvu49m5bVC5zSCf2eG5xe2g+hu29cY1iC8PoJet+FibZIfT+AXiDUWhSvqY2dqJF PJ3nfWol/R+kowh9SbmZeMLiA8rhRc6AH0j5wfpWoWUaL+p7dxgI1P07Z3QJv5iH 8IbQB6POmjkdpSSijri2tYJkG9oT6Es2NKdybVDcxPpvug2QYvXQ8dVU+BSOlpcJ vr6A05/byxWKNFD29m7Ktr0WmexM/GMg6yFYtQYIZXBvdFds+MT/CWbIbtHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1IsajNkpv8NpZeD/TSLOK9IpPZkwHwYDVR0j BBgwFoAUhkTvXK/W/yx1ODO1iNbV5ArZwHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDJjYjBiM2EtNjkyZC00NDJlLTkzMDgtOTAzYzAyZDU3MThmLzAvODY0NEVGNUNB RkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQwQUQ5QzA3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjQ0RUY1Q0FGRDZGRjJDNzUzODMzQjU4OEQ2RDVFNDBBRDlD MDc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvODY0NEVGNUNBRkQ2RkYyQzc1MzgzM0I1ODhENkQ1 RTQwQUQ5QzA3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0BP5fxGosh6gXJcyPeu4xCeoXmIvaIVNKY /O9p/SEGRfwpSK5Bj0FuVsHkBcv0AQ5obhGIODuuDvdy8R9fxt9hquHrtN1QjiGW TNR4oJJU6Q/BlHyIuPPUk/2QiE6QUX03BtAEFaUtDTG70DofHUTFYOOL/lHyXJYk vBByL7Z4RoZ4GiN3CRnLXjqwWVMAnR2eJI4c9nzHu5LBJoSFh2TKOt6kX+ksxbJc 2ysK5yb8gYWJ65hMIEIfMZcrFtk9yV5r/dOy1wKg/4cQJTuUJBDM73kQkf/CdWyY bElU74p9mbdGQJexVBTKBC2G/PCDUfoCg49klzlaInz2fttuyv8= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:23 2026 by rpki-client