$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft File: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft (raw, json) Hash identifier: FBw0rFsEzvuP+iLc/UnAZavPeyv6bP4J3F+hrTwRBC4= Subject key identifier: E9:8C:9F:FF:63:B2:64:B4:C1:BA:36:D6:5A:72:DF:82:28:D9:07:A9 Authority key identifier: 88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 Certificate issuer: /CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Certificate serial: 584F71CD7183B5147A90F4054B40B898DAF62A09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 14:01:36 +0000 Manifest this update: Sat 13 Jun 2026 13:56:36 +0000 Manifest next update: Sun 14 Jun 2026 14:23:36 +0000 Files and hashes: 1: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: YJRCBupflF/I8POF8sMQ3AXgFo1nrT6mZHr4XrUFzvU=) 2: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: l0DIBrvHKOmdXYA8EMn7r3ept4hzvTyfATy5T2AkXgc=) 3: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 0+nHSjmEBtHrdpW5swBsy/CGgBdToecJRrJ4YRQ1Ieo=) 4: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl (hash: Ag/QFwB6lNPjTW1iZS1uxRHVAYxKqr49r/HIiDrd2D8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4f:71:cd:71:83:b5:14:7a:90:f4:05:4b:40:b8:98:da:f6:2a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Validity Not Before: Jun 13 13:56:36 2026 GMT Not After : Jun 14 14:23:36 2026 GMT Subject: CN=E98C9FFF63B264B4C1BA36D65A72DF8228D907A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:f9:11:5d:91:d6:f3:06:24:ef:6a:2a:09: aa:86:f2:49:e3:c0:92:91:02:14:33:f2:36:51:f3: 1d:34:b5:79:a4:65:25:97:c7:b0:bd:3b:57:74:d3: c5:e4:29:15:bc:d7:13:86:08:a9:0a:8d:30:51:b0: fc:cc:b0:46:1e:23:0e:e2:48:8a:88:ac:16:15:9e: e0:61:75:62:d4:ab:3b:0d:68:e9:5c:2c:e3:34:e2: 0b:ba:4c:a4:18:27:dc:90:34:18:19:b9:ec:a3:1f: 21:90:5a:73:5a:4f:b4:ee:07:62:86:f0:63:af:a3: 54:f1:f7:9e:58:5a:02:a5:6c:7f:61:fa:cc:54:24: b7:7f:67:2a:0d:06:d4:c7:fb:ed:b0:57:41:ae:df: c6:bf:e4:f0:67:9f:7f:29:d9:68:2d:90:d3:29:2b: cd:ae:f0:7e:73:21:0f:25:8d:40:20:6d:48:fe:ad: 48:17:96:fe:01:91:1f:eb:fc:bd:38:ab:e3:1b:5b: dc:c2:df:14:21:b3:34:29:a2:19:3b:73:10:ca:59: 9b:b9:16:08:55:6d:35:cd:db:24:9a:24:6d:de:b1: 29:08:61:e7:3b:1a:17:3a:99:f1:39:56:48:10:6b: a6:e5:2b:74:ef:e4:15:3c:7e:98:61:05:61:97:87: 33:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8C:9F:FF:63:B2:64:B4:C1:BA:36:D6:5A:72:DF:82:28:D9:07:A9 X509v3 Authority Key Identifier: keyid:88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:2d:80:1b:3e:f8:49:a5:af:92:02:6c:9f:cb:50:fd:7f:fd: 31:39:36:90:f0:5a:b2:16:67:42:a3:e5:97:bf:98:c7:f5:bc: f1:06:70:83:1d:44:05:9d:e1:8c:6f:2f:e5:bb:a9:6b:05:36: 00:c4:72:ab:52:4e:ba:0a:62:9d:97:71:83:f7:5a:05:96:8a: d0:68:05:d9:3f:14:ba:72:74:21:ee:da:73:f2:91:31:de:4e: ea:07:1d:8c:7c:c3:41:2c:82:43:38:7d:25:e0:8d:f8:48:83: 09:be:f0:ee:bc:80:42:4d:fb:cd:cb:16:2d:af:ff:cf:e0:25: f1:5a:4c:82:f5:41:84:5e:97:c2:e5:98:eb:25:f1:e7:68:45: 35:57:a1:d7:55:7c:56:da:8d:26:7a:b9:c3:a0:b5:96:f3:87: 81:d6:47:75:72:12:7c:76:86:87:0c:c3:85:1e:cf:d0:d0:d3: fb:ce:e8:32:2b:17:ad:83:48:c3:96:7a:8d:b1:f2:e5:ff:e9: be:6e:e4:24:e5:dd:08:b2:c5:ec:29:a9:07:54:a8:b1:f9:ba: 0d:05:10:5c:d5:ce:32:1d:24:ce:25:22:fd:d0:82:f3:f0:6f: 7b:70:c9:1f:dd:af:71:37:5f:97:5a:ee:46:db:ef:f6:bf:eb: 2d:b6:65:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWE9xzXGDtRR6kPQFS0C4mNr2KgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1 QzRGMjk4NTAeFw0yNjA2MTMxMzU2MzZaFw0yNjA2MTQxNDIzMzZaMDMxMTAvBgNV BAMTKEU5OEM5RkZGNjNCMjY0QjRDMUJBMzZENjVBNzJERjgyMjhEOTA3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCji/kRXZHW8wYk72oqCaqG8knj wJKRAhQz8jZR8x00tXmkZSWXx7C9O1d008XkKRW81xOGCKkKjTBRsPzMsEYeIw7i SIqIrBYVnuBhdWLUqzsNaOlcLOM04gu6TKQYJ9yQNBgZueyjHyGQWnNaT7TuB2KG 8GOvo1Tx955YWgKlbH9h+sxUJLd/ZyoNBtTH++2wV0Gu38a/5PBnn38p2WgtkNMp K82u8H5zIQ8ljUAgbUj+rUgXlv4BkR/r/L04q+MbW9zC3xQhszQpohk7cxDKWZu5 FghVbTXN2ySaJG3esSkIYec7Ghc6mfE5VkgQa6blK3Tv5BU8fphhBWGXhzNnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Yyf/2OyZLTBujbWWnLfgijZB6kwHwYDVR0j BBgwFoAUiGPUPCzTbp3ijH5V8YkcwlxPKYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVlOTQwMTQtODdmYS00YmMyLWIxYzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0My Q0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1QzRGMjk4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODYzRDQzQzJDRDM2RTlERTI4QzdFNTVGMTg5MUNDMjVDNEYy OTg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFD QzI1QzRGMjk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEtgBs++Emlr5ICbJ/LUP1//TE5NpDwWrIW Z0Kj5Ze/mMf1vPEGcIMdRAWd4YxvL+W7qWsFNgDEcqtSTroKYp2XcYP3WgWWitBo Bdk/FLpydCHu2nPykTHeTuoHHYx8w0EsgkM4fSXgjfhIgwm+8O68gEJN+83LFi2v /8/gJfFaTIL1QYRel8LlmOsl8edoRTVXoddVfFbajSZ6ucOgtZbzh4HWR3VyEnx2 hocMw4Uez9DQ0/vO6DIrF62DSMOWeo2x8uX/6b5u5CTl3QiyxewpqQdUqLH5ug0F EFzVzjIdJM4lIv3QgvPwb3twyR/dr3E3X5da7kbb7/a/6y22ZSQ= -----END CERTIFICATE-----Generated at Sat Jun 13 22:39:32 2026 by rpki-client