$ rpki-client -vvf rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft File: 8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft (raw, json) Hash identifier: m18TJpMFFU4EuQFbWFUzwIrDHAQZYO1Hv5T3x+xwKFk= Subject key identifier: 56:91:C0:36:E7:AB:D7:B7:1F:58:53:8A:F6:7B:64:C2:69:AB:53:3A Authority key identifier: 8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7 Certificate issuer: /CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7 Certificate serial: 15535B84B0C1F19BC22702BF91207EA29C36A3A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:02:07 +0000 Manifest this update: Tue 16 Jun 2026 18:57:07 +0000 Manifest next update: Wed 17 Jun 2026 19:38:07 +0000 Files and hashes: 1: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: KbKAffsvKxiK1iR4ZLtyFSXqzPv63zoW9cNrraJoQ4s=) 2: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: CtGqY694vs+5rhe29OiFriR1fCqTy1GqyZ3iimqLrsk=) 3: 8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl (hash: oNtO3VGYrRQRrMTHh2j6rehiRuwLR4tOdNKqn5rairY=) 4: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: J67UWBhwkB4SyeMxqFOonlk/hP7ZCxo/ttgUlmNhJvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:53:5b:84:b0:c1:f1:9b:c2:27:02:bf:91:20:7e:a2:9c:36:a3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7 Validity Not Before: Jun 16 18:57:07 2026 GMT Not After : Jun 17 19:38:07 2026 GMT Subject: CN=5691C036E7ABD7B71F58538AF67B64C269AB533A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:d1:7d:13:e7:1d:a5:d6:40:04:ed:19:8f: 9b:f6:9e:3f:49:53:da:64:b3:be:6b:62:09:54:56: c3:6a:9d:45:ba:9e:ce:32:9a:61:32:32:6e:24:7a: 2b:91:e8:e9:a9:2c:94:f2:21:25:d7:63:1a:2b:7e: 42:5f:62:48:a1:54:05:37:60:a7:76:1c:3b:64:2f: 4d:ef:e0:c9:65:cd:cb:e8:7b:38:dc:25:0a:ab:a0: 2d:d7:f8:99:00:27:6a:af:77:0d:8a:12:ba:00:d8: 43:8e:83:62:a7:2a:b3:25:7a:67:2d:3f:05:9d:ac: fe:38:98:bd:e8:7d:35:cc:74:ab:c2:77:fc:45:04: e8:55:76:61:32:4e:b7:79:38:cc:a2:d6:cb:6e:9d: 33:03:7e:e6:26:af:5f:65:98:84:65:57:fd:00:a5: 35:9c:cc:d4:0c:89:41:96:4e:7e:96:da:8d:be:49: ef:35:4b:a6:93:e0:69:5c:e6:1a:2c:b1:ee:76:a3: 88:44:9b:b3:37:22:42:4d:1b:cf:fd:ce:e7:fe:06: 09:ea:e7:94:e2:78:6d:54:c7:e5:85:c6:59:ac:5c: bc:b9:c6:92:24:54:bc:35:5c:fa:8a:78:49:b2:1e: e5:80:a5:36:de:71:21:02:b6:5f:be:44:3a:c3:a3: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:91:C0:36:E7:AB:D7:B7:1F:58:53:8A:F6:7B:64:C2:69:AB:53:3A X509v3 Authority Key Identifier: keyid:8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:13:ad:7c:8e:f2:e7:54:c6:82:0a:88:3f:7d:20:9b:5f:a1: 7b:c7:0d:07:ff:05:93:cc:65:83:e5:9e:78:be:a9:36:85:0d: 67:a4:9e:98:01:6f:be:72:ca:f6:ff:06:18:4d:e7:ac:9e:a7: 9e:2a:1d:d3:24:2f:6e:c5:e6:85:8e:4e:2a:25:51:64:24:3f: ad:ea:c2:b0:a0:5f:61:06:d1:71:64:82:d0:fb:26:7b:98:e1: ca:cc:9d:93:ee:05:a4:d7:ff:26:10:a3:c4:af:8b:89:3f:f9: c4:a6:4b:97:a6:66:7e:e5:8d:c1:de:ea:4b:e4:f0:ad:20:5b: ba:fc:9f:db:8f:6d:0b:15:fc:09:9d:70:52:8c:d2:88:83:a0: bb:4c:35:52:b3:9e:c4:27:5f:83:66:b2:0d:b2:0f:18:e3:ae: 4b:2c:68:02:9d:10:86:4e:75:4d:70:21:b8:c9:69:2c:c6:f1: 12:fb:4f:93:03:0e:59:c9:90:82:17:8a:4b:51:8b:01:01:ac: a1:84:e1:7b:ab:83:db:a1:e0:d9:3f:d6:4b:cb:40:96:3e:f9: bd:eb:50:0b:0d:b7:f2:1e:ef:d6:39:05:80:fb:2f:d9:93:7b: 35:28:71:b0:27:a6:70:c5:c5:09:94:ff:c4:f0:89:fb:db:85: bd:f8:2d:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFVNbhLDB8ZvCJwK/kSB+opw2o6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENBOEE2NjhBMjQwREY3QjE1RkJDM0U0NTE2QTg0MDhC QkRDNDdFNzAeFw0yNjA2MTYxODU3MDdaFw0yNjA2MTcxOTM4MDdaMDMxMTAvBgNV BAMTKDU2OTFDMDM2RTdBQkQ3QjcxRjU4NTM4QUY2N0I2NEMyNjlBQjUzM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCueNF9E+cdpdZABO0Zj5v2nj9J U9pks75rYglUVsNqnUW6ns4ymmEyMm4keiuR6OmpLJTyISXXYxorfkJfYkihVAU3 YKd2HDtkL03v4MllzcvoezjcJQqroC3X+JkAJ2qvdw2KEroA2EOOg2KnKrMlemct PwWdrP44mL3ofTXMdKvCd/xFBOhVdmEyTrd5OMyi1stunTMDfuYmr19lmIRlV/0A pTWczNQMiUGWTn6W2o2+Se81S6aT4Glc5hosse52o4hEm7M3IkJNG8/9zuf+Bgnq 55TieG1Ux+WFxlmsXLy5xpIkVLw1XPqKeEmyHuWApTbecSECtl++RDrDo8I9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVpHANuer17cfWFOK9ntkwmmrUzowHwYDVR0j BBgwFoAUjKimaKJA33sV+8PkUWqECLvcR+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQyMDc1MjMtZDVmNS00YWNjLWIwYWMtYmZiMDk1NGZhNGUwLzAvOENBOEE2NjhB MjQwREY3QjE1RkJDM0U0NTE2QTg0MDhCQkRDNDdFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0E4QTY2OEEyNDBERjdCMTVGQkMzRTQ1MTZBODQwOEJCREM0 N0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvOENBOEE2NjhBMjQwREY3QjE1RkJDM0U0NTE2QTg0 MDhCQkRDNDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkTrXyO8udUxoIKiD99IJtfoXvHDQf/BZPM ZYPlnni+qTaFDWeknpgBb75yyvb/BhhN56yep54qHdMkL27F5oWOTiolUWQkP63q wrCgX2EG0XFkgtD7JnuY4crMnZPuBaTX/yYQo8Svi4k/+cSmS5emZn7ljcHe6kvk 8K0gW7r8n9uPbQsV/AmdcFKM0oiDoLtMNVKznsQnX4Nmsg2yDxjjrkssaAKdEIZO dU1wIbjJaSzG8RL7T5MDDlnJkIIXiktRiwEBrKGE4Xurg9uh4Nk/1kvLQJY++b3r UAsNt/Ie79Y5BYD7L9mTezUocbAnpnDFxQmU/8Twifvbhb34Law= -----END CERTIFICATE-----Generated at Wed Jun 17 11:49:26 2026 by rpki-client