$ rpki-client -vvf rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft File: 8828D395B775E6267ED1C496B6DA870C9DA36235.mft (raw, json) Hash identifier: 9p4ciGs71echkF3Z7SzURyhW5DK5oAZA8oJv7+ELQAc= Subject key identifier: DE:7D:8C:64:A8:41:2E:C2:42:F8:51:58:DF:26:3E:56:E0:B2:0C:C7 Authority key identifier: 88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 Certificate issuer: /CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Certificate serial: 5D4D98B9AC0C87445C0C8560F9C9C5FF192E400D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 17:55:48 +0000 Manifest this update: Tue 16 Jun 2026 17:50:48 +0000 Manifest next update: Wed 17 Jun 2026 20:51:48 +0000 Files and hashes: 1: 8828D395B775E6267ED1C496B6DA870C9DA36235.crl (hash: doblC2TtuYvBW5L277Q/Ci1gEDlWFjK5kQofn6qOk/8=) 2: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: KKSmfUNkqalCLO37YcNIo/DR91Odj11Ccmn9dQDHPBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4d:98:b9:ac:0c:87:44:5c:0c:85:60:f9:c9:c5:ff:19:2e:40:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Validity Not Before: Jun 16 17:50:48 2026 GMT Not After : Jun 17 20:51:48 2026 GMT Subject: CN=DE7D8C64A8412EC242F85158DF263E56E0B20CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:a0:06:fc:00:aa:6a:bb:bd:24:b4:84:7c: e8:d4:7b:a8:8d:67:3e:94:31:0f:16:f8:3f:f3:45: 59:29:ef:57:b4:96:fa:58:f2:62:1f:19:c6:8c:28: 80:60:a8:c2:d4:de:14:65:6f:95:46:25:82:b9:b3: 58:34:81:ec:26:7a:a0:cd:ce:fb:a1:d8:d1:dc:6f: 21:9c:21:04:72:5f:74:70:a5:94:ed:df:93:c6:26: 04:d6:42:47:bb:d6:89:e7:b1:d4:e6:aa:d1:5d:63: dc:35:f0:b0:bd:f8:1d:d6:df:32:ee:91:5f:2b:72: 7f:e0:83:61:bd:e3:56:d9:de:c2:7a:4f:b7:92:d7: 22:a9:77:aa:9b:1f:6d:6c:cf:ee:3f:36:26:64:b6: a6:05:06:0a:db:84:60:0b:99:e8:d5:13:8c:c9:34: 16:8d:c5:b7:0b:d1:ce:cb:d7:c7:93:dd:ea:46:ca: d5:38:a9:08:4b:12:b2:c9:83:4a:95:d3:f2:1c:49: af:bb:94:47:7b:65:78:22:47:5a:dd:05:05:78:50: e3:4d:24:0f:08:38:93:39:f7:b6:bf:f6:80:68:43: 83:fc:a7:f1:36:2d:77:20:5b:9e:51:34:c2:29:9a: 7a:20:da:1b:c6:3b:ac:30:db:3c:b0:ed:73:14:66: d7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7D:8C:64:A8:41:2E:C2:42:F8:51:58:DF:26:3E:56:E0:B2:0C:C7 X509v3 Authority Key Identifier: keyid:88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ef:b0:f7:0f:82:97:55:78:25:8f:21:08:8a:c0:71:33:c2: f3:7c:63:f3:38:2e:d0:c8:c4:79:14:cc:ce:a3:9c:6f:5a:b6: c7:46:c7:8e:21:83:1e:e7:85:19:dc:65:ff:48:04:c3:77:6f: 79:0f:15:67:99:1f:01:74:3a:7c:52:1a:95:56:59:ef:1b:f7: 75:06:ab:19:ae:fe:77:9b:21:ab:ed:e1:21:7d:cd:de:ef:d0: c3:2b:0c:e6:b5:15:fe:cc:23:a0:42:72:63:1b:bc:ec:39:43: dc:e6:d3:3d:59:0e:d6:f6:94:ec:da:19:21:ae:e5:29:b7:b6: 60:4d:09:f9:90:58:74:a6:ea:3f:3b:9d:a8:dc:11:0c:55:29: 21:2f:eb:c4:44:29:2c:61:8d:5d:77:2b:4c:17:f1:94:85:0b: 24:f0:cb:63:ac:71:cc:7c:67:fd:06:b7:16:4e:ae:91:c1:e4: 1a:43:64:e5:9a:9b:09:10:d2:b6:a8:b6:a8:1a:5d:1e:78:d9: 34:60:3c:95:2b:36:e0:c6:30:f2:28:d2:ac:61:8e:d0:32:0d: 24:ba:0e:6e:6d:c1:c3:7b:35:26:25:89:6c:a5:66:bc:62:39: 77:2c:82:af:01:0e:cd:45:06:60:6d:27:1e:f5:e5:5f:be:a5: 2e:c1:2f:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXU2YuawMh0RcDIVg+cnF/xkuQA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyOEQzOTVCNzc1RTYyNjdFRDFDNDk2QjZEQTg3MEM5 REEzNjIzNTAeFw0yNjA2MTYxNzUwNDhaFw0yNjA2MTcyMDUxNDhaMDMxMTAvBgNV BAMTKERFN0Q4QzY0QTg0MTJFQzI0MkY4NTE1OERGMjYzRTU2RTBCMjBDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9KAG/ACqaru9JLSEfOjUe6iN Zz6UMQ8W+D/zRVkp71e0lvpY8mIfGcaMKIBgqMLU3hRlb5VGJYK5s1g0gewmeqDN zvuh2NHcbyGcIQRyX3RwpZTt35PGJgTWQke71onnsdTmqtFdY9w18LC9+B3W3zLu kV8rcn/gg2G941bZ3sJ6T7eS1yKpd6qbH21sz+4/NiZktqYFBgrbhGALmejVE4zJ NBaNxbcL0c7L18eT3epGytU4qQhLErLJg0qV0/IcSa+7lEd7ZXgiR1rdBQV4UONN JA8IOJM597a/9oBoQ4P8p/E2LXcgW55RNMIpmnog2hvGO6ww2zyw7XMUZtcHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3n2MZKhBLsJC+FFY3yY+VuCyDMcwHwYDVR0j BBgwFoAUiCjTlbd15iZ+0cSWttqHDJ2jYjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTljMjc2MjEtZTI5Ny00MTAwLTk3MWEtMWM2OTY3YzUyYjFiLzAvODgyOEQzOTVC Nzc1RTYyNjdFRDFDNDk2QjZEQTg3MEM5REEzNjIzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODI4RDM5NUI3NzVFNjI2N0VEMUM0OTZCNkRBODcwQzlEQTM2 MjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvODgyOEQzOTVCNzc1RTYyNjdFRDFDNDk2QjZEQTg3 MEM5REEzNjIzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfvsPcPgpdVeCWPIQiKwHEzwvN8Y/M4LtDI xHkUzM6jnG9atsdGx44hgx7nhRncZf9IBMN3b3kPFWeZHwF0OnxSGpVWWe8b93UG qxmu/nebIavt4SF9zd7v0MMrDOa1Ff7MI6BCcmMbvOw5Q9zm0z1ZDtb2lOzaGSGu 5Sm3tmBNCfmQWHSm6j87najcEQxVKSEv68REKSxhjV13K0wX8ZSFCyTwy2Osccx8 Z/0GtxZOrpHB5BpDZOWamwkQ0raotqgaXR542TRgPJUrNuDGMPIo0qxhjtAyDSS6 Dm5twcN7NSYliWylZrxiOXcsgq8BDs1FBmBtJx715V++pS7BL60= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:12 2026 by rpki-client