$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft File: A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft (raw, json) Hash identifier: SWL94J9rars2vjXVvLRnmBd2uYIfeNtvQg4JmBL9das= Subject key identifier: E1:27:A9:96:D3:3E:A6:07:CF:EF:FD:F6:ED:2E:A1:44:06:27:F1:8E Authority key identifier: A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF Certificate issuer: /CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Certificate serial: 1E6ECACC86C449DB45D4D3D0F9D01E391B9572CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 16:44:48 +0000 Manifest this update: Sat 13 Jun 2026 16:39:48 +0000 Manifest next update: Sun 14 Jun 2026 18:39:48 +0000 Files and hashes: 1: A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl (hash: VqyIgA7kNNAU5MYo0RQ3CLHmyStbbYVS2hFRvQth2XE=) 2: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: /KfC4nr32tMCkBy7+tyxmf0Ms+3hn6LQNee4YzYVhVM=) 3: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: h1TE3m56WQ+gTVyqOOSf1UTeQzb1azE9LGSpzK549vA=) 4: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: pahHbmXTulV++MGHGhEL8jSNz3xJ/1KdhQdlxBhfIw4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 18:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6e:ca:cc:86:c4:49:db:45:d4:d3:d0:f9:d0:1e:39:1b:95:72:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Validity Not Before: Jun 13 16:39:48 2026 GMT Not After : Jun 14 18:39:48 2026 GMT Subject: CN=E127A996D33EA607CFEFFDF6ED2EA1440627F18E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ff:20:80:86:fb:19:70:1a:f9:9c:ad:05:5f: 03:ce:e0:f6:5b:c4:29:ad:19:5e:89:de:41:1c:c0: b2:2e:9a:20:34:cf:62:a8:26:0e:b4:ff:14:a5:5a: a7:59:8a:c3:6b:de:8c:69:a1:5c:86:de:ef:32:62: 64:ee:15:50:67:a5:a4:d0:11:92:32:ba:82:e8:f2: 57:83:35:01:39:16:c5:ff:61:b6:bb:3e:a7:2c:04: 1b:60:1c:bc:8a:b3:37:28:7f:0f:3a:46:42:90:83: 6b:7d:30:a7:36:f7:1c:cb:b7:5d:30:7f:22:5e:6d: 74:0a:a4:ba:24:c1:d3:43:e5:34:21:85:9a:e3:fc: 33:b4:ff:2f:d2:55:62:ef:93:0f:17:98:75:e6:75: aa:f2:91:fc:25:cc:5d:21:6c:2b:60:40:ea:ff:31: c8:d3:e0:52:7c:8d:c4:52:9b:0c:ec:6e:9f:71:3c: a9:a2:05:75:11:09:0a:4d:e7:11:54:c6:36:b8:13: 10:79:58:96:d7:a3:33:ce:54:a1:9f:bb:36:27:74: 6c:cf:ee:97:07:ff:f5:ef:59:c8:3c:df:e0:f6:24: 83:13:1f:13:d5:26:72:01:e7:7d:9c:1e:92:f2:3a: 08:27:da:19:25:95:64:02:5c:1c:f5:86:51:05:05: 48:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:27:A9:96:D3:3E:A6:07:CF:EF:FD:F6:ED:2E:A1:44:06:27:F1:8E X509v3 Authority Key Identifier: keyid:A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a2:36:8c:8e:ee:3c:b2:e8:82:fb:6c:ed:08:79:3b:85:c4: 4c:df:11:1e:51:a8:3f:40:86:68:f2:3e:b1:8e:f7:0f:f5:fd: c3:42:9a:6b:6e:49:f0:af:ce:12:cb:fa:15:fd:49:00:14:a2: 64:94:a2:4a:70:da:c2:c7:14:6f:47:2e:be:f9:11:f4:52:5f: 90:91:57:2c:fa:d4:b6:e8:89:ef:c7:15:c7:2b:8b:52:af:20: 16:eb:05:d9:2a:80:04:e3:d2:82:67:44:88:73:fd:6a:f4:ef: 00:1b:d2:8e:80:0e:92:8c:ce:fc:20:53:36:37:4f:db:18:97: 1b:75:ea:17:29:7e:e4:23:00:1b:89:47:c2:ed:dc:e3:37:42: 0d:f1:96:56:5e:ce:7d:5e:df:ea:da:18:76:70:ae:a5:2e:88: 4d:45:44:75:a3:76:84:36:93:05:74:f6:6e:71:32:a3:05:d8: b5:1b:ab:22:c6:e3:a3:e9:ee:17:2f:25:7e:2d:85:aa:cf:43: 56:5c:3b:31:5e:59:19:02:38:c2:96:3a:80:89:b7:99:cd:5f: e3:74:91:fa:a7:65:fd:a2:13:40:3f:ec:33:ae:7f:59:75:28: 41:89:2d:ff:6d:53:f8:aa:8d:f1:f5:9c:c8:a2:d6:ff:36:12: 89:20:07:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHm7KzIbESdtF1NPQ+dAeORuVcswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFFREYx MUQ0NzhDRjAeFw0yNjA2MTMxNjM5NDhaFw0yNjA2MTQxODM5NDhaMDMxMTAvBgNV BAMTKEUxMjdBOTk2RDMzRUE2MDdDRkVGRkRGNkVEMkVBMTQ0MDYyN0YxOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY/yCAhvsZcBr5nK0FXwPO4PZb xCmtGV6J3kEcwLIumiA0z2KoJg60/xSlWqdZisNr3oxpoVyG3u8yYmTuFVBnpaTQ EZIyuoLo8leDNQE5FsX/Yba7PqcsBBtgHLyKszcofw86RkKQg2t9MKc29xzLt10w fyJebXQKpLokwdND5TQhhZrj/DO0/y/SVWLvkw8XmHXmdarykfwlzF0hbCtgQOr/ McjT4FJ8jcRSmwzsbp9xPKmiBXURCQpN5xFUxja4ExB5WJbXozPOVKGfuzYndGzP 7pcH//XvWcg83+D2JIMTHxPVJnIB532cHpLyOggn2hkllWQCXBz1hlEFBUiLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4SepltM+pgfP7/327S6hRAYn8Y4wHwYDVR0j BBgwFoAUqLQpDbHVABFykYWNrxse3xHUeM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMxZTQ5YWItNTBjYS00YjNlLTgyM2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERC MUQ1MDAxMTcyOTE4NThEQUYxQjFFREYxMUQ0NzhDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI0MjkwREIxRDUwMDExNzI5MTg1OERBRjFCMUVERjExRDQ3 OENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFF REYxMUQ0NzhDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqiNoyO7jyy6IL7bO0IeTuFxEzfER5RqD9A hmjyPrGO9w/1/cNCmmtuSfCvzhLL+hX9SQAUomSUokpw2sLHFG9HLr75EfRSX5CR Vyz61Lboie/HFccri1KvIBbrBdkqgATj0oJnRIhz/Wr07wAb0o6ADpKMzvwgUzY3 T9sYlxt16hcpfuQjABuJR8Lt3OM3Qg3xllZezn1e3+raGHZwrqUuiE1FRHWjdoQ2 kwV09m5xMqMF2LUbqyLG46Pp7hcvJX4tharPQ1ZcOzFeWRkCOMKWOoCJt5nNX+N0 kfqnZf2iE0A/7DOuf1l1KEGJLf9tU/iqjfH1nMii1v82EokgBys= -----END CERTIFICATE-----Generated at Sun Jun 14 12:03:33 2026 by rpki-client