$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft File: 8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft (raw, json) Hash identifier: j08kKGN0jR7mBxXcxBX3PrwfuY/6IzzHj6ZKZoQIO4I= Subject key identifier: 35:2B:6B:2D:07:A3:6F:1C:BB:FB:D1:B8:96:B0:64:10:D3:92:36:10 Authority key identifier: 8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7 Certificate issuer: /CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7 Certificate serial: 05353BF15F21832D963A029F4030D93201B4752B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 09:20:11 +0000 Manifest this update: Sat 13 Jun 2026 09:15:11 +0000 Manifest next update: Sun 14 Jun 2026 09:21:11 +0000 Files and hashes: 1: 8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl (hash: EZgQTcqAhWrnJ9XhjxVKruuGbEmbu+Rbj0Cunmw43z0=) 2: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: c2UfSKD11fX4h2x5HJIXy7pbYdyuzBLTiInfb4Fri14=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:35:3b:f1:5f:21:83:2d:96:3a:02:9f:40:30:d9:32:01:b4:75:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7 Validity Not Before: Jun 13 09:15:11 2026 GMT Not After : Jun 14 09:21:11 2026 GMT Subject: CN=352B6B2D07A36F1CBBFBD1B896B06410D3923610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:47:0e:ab:f3:a2:5d:38:b9:69:ca:9d:d1: 2a:40:8e:5c:49:22:2f:8a:24:a0:3a:da:2c:24:9c: b3:ba:a2:93:6d:d8:e6:76:81:1a:89:42:00:44:b9: 93:70:d6:34:dc:83:c1:70:12:20:76:2e:fa:a3:86: dc:94:70:b1:e3:7a:45:2c:59:7d:8b:1e:6b:b9:ed: f3:f9:55:bf:d8:94:f0:10:f9:e5:ac:ff:11:9c:cf: 0a:92:34:dc:95:19:fa:2a:4f:06:20:33:d3:49:b3: 83:83:17:e3:c4:bd:6e:36:6f:67:6c:09:31:0b:9d: ab:fc:c6:41:ef:5f:08:73:b5:fb:b3:56:ab:f2:86: 90:62:89:3a:25:e1:c5:4e:2b:62:76:0d:da:dd:89: 70:7d:86:98:21:f8:67:15:4c:68:eb:d4:13:2a:75: 7e:52:85:bd:86:52:60:36:64:66:8b:a4:88:2f:5d: 7a:71:da:81:51:1b:94:d4:17:bf:15:b6:ee:8f:52: 3e:6a:ff:be:2e:6c:91:42:77:a9:12:4f:75:bf:07: 47:34:b3:26:00:74:c8:0d:33:3b:2d:f4:4a:07:7e: a6:f4:cf:16:d7:61:2f:17:70:14:d0:b6:e5:12:5e: ac:5c:0f:e0:02:fa:55:94:73:ae:8a:77:09:ff:f9: 6d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:6B:2D:07:A3:6F:1C:BB:FB:D1:B8:96:B0:64:10:D3:92:36:10 X509v3 Authority Key Identifier: keyid:8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:55:27:ad:90:5d:81:9b:30:d7:4e:b1:3e:cb:3a:cc:26:eb: 82:2f:37:41:8a:bf:f2:93:6d:83:6d:4a:10:1a:e2:ea:f1:de: fe:8e:bb:1c:f7:8c:24:9c:32:96:e3:94:41:e6:9a:c4:09:03: 8d:95:6d:88:cf:dd:50:86:0a:b3:ec:80:8a:b4:6b:fc:1b:a3: 79:d9:f2:be:e9:6e:31:4e:f5:85:0d:25:00:6a:c8:0d:06:62: 32:14:96:59:a2:63:bc:8f:23:17:81:a8:dc:36:df:c3:bf:42: 67:c7:71:c3:ec:8c:cf:7f:3c:af:9f:fa:0e:cd:79:7a:13:c9: ed:25:4c:14:6b:41:21:ab:fe:b7:b3:74:73:46:c9:6b:a7:21: cd:28:c7:de:49:04:2c:a3:8c:3e:94:db:ef:a5:d2:58:4c:17: eb:36:28:ce:4a:a5:e4:93:0c:3f:e6:14:51:d9:5e:05:fb:94: ce:01:37:8d:b0:6e:1c:0f:ff:d3:a5:d4:80:00:6b:57:9e:c2: 70:fa:ba:b8:7d:0a:33:34:fb:62:fd:d3:bb:44:0b:93:f3:f9: 55:9f:16:33:f9:78:0e:ab:ea:7d:83:56:63:50:4e:c5:ae:d6: 16:3e:16:5c:a1:93:4f:cd:fa:c4:ea:01:85:6c:5b:26:25:1f: a3:fb:b9:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBTU78V8hgy2WOgKfQDDZMgG0dSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0NjM5ODRDMTY1MjJBMzVGQUFCNjA3MDhEMzRDODlE OUQ5RjFFNzAeFw0yNjA2MTMwOTE1MTFaFw0yNjA2MTQwOTIxMTFaMDMxMTAvBgNV BAMTKDM1MkI2QjJEMDdBMzZGMUNCQkZCRDFCODk2QjA2NDEwRDM5MjM2MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3oUcOq/OiXTi5acqd0SpAjlxJ Ii+KJKA62iwknLO6opNt2OZ2gRqJQgBEuZNw1jTcg8FwEiB2LvqjhtyUcLHjekUs WX2LHmu57fP5Vb/YlPAQ+eWs/xGczwqSNNyVGfoqTwYgM9NJs4ODF+PEvW42b2ds CTELnav8xkHvXwhztfuzVqvyhpBiiTol4cVOK2J2DdrdiXB9hpgh+GcVTGjr1BMq dX5Shb2GUmA2ZGaLpIgvXXpx2oFRG5TUF78Vtu6PUj5q/74ubJFCd6kST3W/B0c0 syYAdMgNMzst9EoHfqb0zxbXYS8XcBTQtuUSXqxcD+AC+lWUc66Kdwn/+W0jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNStrLQejbxy7+9G4lrBkENOSNhAwHwYDVR0j BBgwFoAUi0Y5hMFlIqNfqrYHCNNMidnZ8ecwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQ3NTUzNDctNmIxYy00MmMxLTlmNTQtZDdlYWIyMmUxODJjLzAvOEI0NjM5ODRD MTY1MjJBMzVGQUFCNjA3MDhEMzRDODlEOUQ5RjFFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQ2Mzk4NEMxNjUyMkEzNUZBQUI2MDcwOEQzNEM4OUQ5RDlG MUU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvOEI0NjM5ODRDMTY1MjJBMzVGQUFCNjA3MDhEMzRD ODlEOUQ5RjFFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlVJ62QXYGbMNdOsT7LOswm64IvN0GKv/KT bYNtShAa4urx3v6Ouxz3jCScMpbjlEHmmsQJA42VbYjP3VCGCrPsgIq0a/wbo3nZ 8r7pbjFO9YUNJQBqyA0GYjIUllmiY7yPIxeBqNw238O/QmfHccPsjM9/PK+f+g7N eXoTye0lTBRrQSGr/rezdHNGyWunIc0ox95JBCyjjD6U2++l0lhMF+s2KM5KpeST DD/mFFHZXgX7lM4BN42wbhwP/9Ol1IAAa1eewnD6urh9CjM0+2L907tEC5Pz+VWf FjP5eA6r6n2DVmNQTsWu1hY+Flyhk0/N+sTqAYVsWyYlH6P7uRA= -----END CERTIFICATE-----Generated at Sat Jun 13 15:56:21 2026 by rpki-client