$ rpki-client -vvf rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft File: 8B43E14BD4588C4904A641356A5D07D628190CAB.mft (raw, json) Hash identifier: nzuNbVQ2rNwMSsxNZKsw+pYVqj9+ldOCG4eyDztqHm8= Subject key identifier: 0F:16:62:00:C3:10:6E:72:14:FA:7A:83:8A:2A:C6:F3:41:80:F7:5A Authority key identifier: 8B:43:E1:4B:D4:58:8C:49:04:A6:41:35:6A:5D:07:D6:28:19:0C:AB Certificate issuer: /CN=8B43E14BD4588C4904A641356A5D07D628190CAB Certificate serial: 4ADD74139147AFB854EE403FA32B4A43422ECE4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 17:35:50 +0000 Manifest this update: Sat 13 Jun 2026 17:30:50 +0000 Manifest next update: Sun 14 Jun 2026 21:03:50 +0000 Files and hashes: 1: 8B43E14BD4588C4904A641356A5D07D628190CAB.crl (hash: ohGXFxvvYeHZ2Za3q/rfDujkBIYoGfKvcOSUrKcvbB4=) 2: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: 0flsrdaSAjsWCJEWyeVcLLzCVtlFqOFqVNzD5e/gcuA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.crl rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:dd:74:13:91:47:af:b8:54:ee:40:3f:a3:2b:4a:43:42:2e:ce:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B43E14BD4588C4904A641356A5D07D628190CAB Validity Not Before: Jun 13 17:30:50 2026 GMT Not After : Jun 14 21:03:50 2026 GMT Subject: CN=0F166200C3106E7214FA7A838A2AC6F34180F75A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c2:86:00:bf:e6:33:f5:35:a0:79:86:ce:65: c0:16:30:ba:66:db:34:a8:8b:8e:cb:32:e0:ab:de: 50:f5:d2:ee:96:47:19:86:8b:a6:fe:bc:f0:26:02: 6c:fd:0f:57:f3:0d:b9:37:ae:33:c5:b7:e0:45:d8: 6c:78:97:46:41:a6:45:80:fb:74:5c:2a:2a:98:d2: cc:15:e1:8f:12:d0:07:5d:aa:f2:9b:67:6e:57:a8: c4:db:b2:c9:83:8a:79:f6:11:42:b8:15:0e:52:bb: 7b:56:a9:0a:1c:61:5e:71:ee:7a:3b:34:d4:4d:06: 6b:e5:ee:01:b0:70:89:d7:e0:b4:8c:07:17:35:71: 58:68:e1:50:ae:65:2e:a1:d9:64:b0:6d:31:6a:62: 18:d0:6e:cf:74:83:db:a8:06:1b:59:31:32:1e:60: 18:62:56:2a:10:2d:26:6f:3e:52:b2:77:44:bc:a8: 4f:72:44:ed:5a:82:a3:a3:d5:dc:d7:10:30:4a:7b: 64:56:49:89:bf:cd:f0:bf:dc:5d:90:c5:35:9e:78: 80:8c:5f:0b:0f:52:24:a3:b1:11:23:d1:fa:50:a1: 9a:c8:1c:0b:26:c1:c1:c8:c7:46:96:dd:36:18:4b: 8f:c2:f5:0e:73:a4:72:36:52:41:b6:66:5a:ba:70: ec:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:16:62:00:C3:10:6E:72:14:FA:7A:83:8A:2A:C6:F3:41:80:F7:5A X509v3 Authority Key Identifier: keyid:8B:43:E1:4B:D4:58:8C:49:04:A6:41:35:6A:5D:07:D6:28:19:0C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3c:66:ff:14:e7:27:1d:da:a4:f1:ea:17:d4:d9:93:30:90: 43:58:3f:ab:95:56:40:aa:53:42:fc:69:c0:16:05:8d:ec:77: 81:1d:e9:8d:80:3e:f4:67:b9:d9:e1:3b:62:d8:32:cb:c2:c6: 97:13:b7:7a:f8:6a:d5:22:db:64:7c:72:68:70:37:7f:aa:7c: 21:22:17:c7:fb:8f:7c:1c:9e:e8:ac:7c:74:e1:6a:8a:e3:9b: 03:46:f9:d7:a6:8d:65:96:69:65:7d:7e:db:d2:70:00:88:76: 6e:58:3d:cb:88:23:48:74:be:04:74:0f:a8:9d:bb:84:35:ef: b6:3c:ba:2f:7b:ec:b3:be:b6:c5:9b:a2:3e:69:11:88:da:c2: 1b:5c:c9:6a:5f:27:7d:3c:04:88:60:7e:36:f4:35:bf:46:7e: 50:2d:98:91:26:b1:cb:6d:d7:c3:fb:84:a6:9c:4f:ae:bd:7b: 07:a4:76:5e:7d:e9:ee:2c:03:eb:22:b4:d3:93:c4:3f:e3:d6: eb:84:62:a2:28:11:91:ba:6f:5d:53:c0:6f:ba:3f:76:3c:ba: c0:13:cf:df:88:ab:5f:84:d0:df:a2:f3:3d:18:91:64:10:8e: 3b:c6:85:c4:27:58:d6:e0:e3:d4:72:ca:99:a3:4b:a7:38:66: 3d:1f:66:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSt10E5FHr7hU7kA/oytKQ0Iuzk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0M0UxNEJENDU4OEM0OTA0QTY0MTM1NkE1RDA3RDYy ODE5MENBQjAeFw0yNjA2MTMxNzMwNTBaFw0yNjA2MTQyMTAzNTBaMDMxMTAvBgNV BAMTKDBGMTY2MjAwQzMxMDZFNzIxNEZBN0E4MzhBMkFDNkYzNDE4MEY3NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIwoYAv+Yz9TWgeYbOZcAWMLpm 2zSoi47LMuCr3lD10u6WRxmGi6b+vPAmAmz9D1fzDbk3rjPFt+BF2Gx4l0ZBpkWA +3RcKiqY0swV4Y8S0AddqvKbZ25XqMTbssmDinn2EUK4FQ5Su3tWqQocYV5x7no7 NNRNBmvl7gGwcInX4LSMBxc1cVho4VCuZS6h2WSwbTFqYhjQbs90g9uoBhtZMTIe YBhiVioQLSZvPlKyd0S8qE9yRO1agqOj1dzXEDBKe2RWSYm/zfC/3F2QxTWeeICM XwsPUiSjsREj0fpQoZrIHAsmwcHIx0aW3TYYS4/C9Q5zpHI2UkG2Zlq6cOzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDxZiAMMQbnIU+nqDiirG80GA91owHwYDVR0j BBgwFoAUi0PhS9RYjEkEpkE1al0H1igZDKswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzRhMjNjNGUtMzkzMi00M2JkLTgxNzYtZjYyNTFkZGVhODQyLzAvOEI0M0UxNEJE NDU4OEM0OTA0QTY0MTM1NkE1RDA3RDYyODE5MENBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjQzRTE0QkQ0NTg4QzQ5MDRBNjQxMzU2QTVEMDdENjI4MTkw Q0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvOEI0M0UxNEJENDU4OEM0OTA0QTY0MTM1NkE1RDA3 RDYyODE5MENBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACs8Zv8U5ycd2qTx6hfU2ZMwkENYP6uVVkCq U0L8acAWBY3sd4Ed6Y2APvRnudnhO2LYMsvCxpcTt3r4atUi22R8cmhwN3+qfCEi F8f7j3wcnuisfHThaorjmwNG+demjWWWaWV9ftvScACIdm5YPcuII0h0vgR0D6id u4Q177Y8ui977LO+tsWboj5pEYjawhtcyWpfJ308BIhgfjb0Nb9GflAtmJEmsctt 18P7hKacT669ewekdl596e4sA+sitNOTxD/j1uuEYqIoEZG6b11TwG+6P3Y8usAT z9+Iq1+E0N+i8z0YkWQQjjvGhcQnWNbg49RyypmjS6c4Zj0fZj4= -----END CERTIFICATE-----Generated at Sat Jun 13 21:42:31 2026 by rpki-client