$ rpki-client -vvf rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft File: 8F6B228755F970273B8D779247A1AE56FE0C9587.mft (raw, json) Hash identifier: Hd0n+v2OUKsECQbgzAKNQFJx6IhKrnNW2VBI1zcs374= Subject key identifier: 01:A1:43:FA:A5:D2:61:0E:75:B1:51:30:62:71:C2:A9:0F:AE:67:B2 Authority key identifier: 8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87 Certificate issuer: /CN=8F6B228755F970273B8D779247A1AE56FE0C9587 Certificate serial: 270AFF54A84A4D0AFC3EB5BAE3F481518BF75FD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:36:33 +0000 Manifest this update: Tue 16 Jun 2026 18:31:33 +0000 Manifest next update: Wed 17 Jun 2026 21:10:33 +0000 Files and hashes: 1: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: Xy8vvuZlhVSnjTAKWEI2yBt5W17a07XY3wxdN0sfnOc=) 2: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: ZGy+loCXTZu4lKXZ9Xy1tyQd/a/a5ZNJkzDyvD+H2Qo=) 3: 8F6B228755F970273B8D779247A1AE56FE0C9587.crl (hash: ieOx+yRZtJQdazwQ9Dtxw6/DcT/QWawSkfHtS3BeFxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:0a:ff:54:a8:4a:4d:0a:fc:3e:b5:ba:e3:f4:81:51:8b:f7:5f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F6B228755F970273B8D779247A1AE56FE0C9587 Validity Not Before: Jun 16 18:31:33 2026 GMT Not After : Jun 17 21:10:33 2026 GMT Subject: CN=01A143FAA5D2610E75B151306271C2A90FAE67B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cf:0a:b3:92:5e:49:19:28:c1:6c:e1:3c:65: 94:b0:e8:00:8e:87:43:7d:a0:93:95:0b:ec:a2:03: 1a:0e:d5:c0:f3:ee:39:1f:fb:b2:24:33:dd:08:b4: 08:a7:86:7c:c2:7c:a3:69:99:39:1c:56:1a:0e:47: fe:c4:59:3e:b7:72:e3:42:6c:18:8e:aa:b5:e5:1f: 10:3a:f0:fb:22:bd:10:ad:6b:5b:cb:a2:8c:91:d7: 3d:a4:be:da:54:7c:78:9b:a9:0b:49:5f:86:f8:da: ce:f0:82:56:b3:01:35:f1:2c:c8:dc:d4:45:79:1f: 58:c7:68:35:5c:a9:ac:1d:fb:d1:8d:3b:a5:28:f2: 4c:e2:0d:a4:b4:35:f3:26:ec:d9:a0:e2:90:58:d4: 96:1e:6d:6b:03:79:a9:5f:37:63:af:9a:59:52:0a: 3a:d2:2b:73:ec:76:18:c4:0f:a1:ad:92:9e:df:15: 67:46:49:fe:58:f8:65:40:46:5f:42:aa:9d:d1:94: fb:57:90:8e:7a:84:01:b6:45:25:0a:af:77:d6:fc: 23:b9:c0:b5:9c:a4:0d:34:a2:bb:f0:00:fa:0d:aa: bd:ac:88:34:20:d3:67:ce:1a:b8:0a:2d:b7:66:7b: 5c:c9:79:ba:94:18:b6:88:99:c2:ff:81:0d:64:b6: c5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A1:43:FA:A5:D2:61:0E:75:B1:51:30:62:71:C2:A9:0F:AE:67:B2 X509v3 Authority Key Identifier: keyid:8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a4:da:48:c2:42:df:61:ee:63:d3:9d:24:9f:47:99:ee:b2: 1e:60:41:11:f4:c1:ef:94:a5:4c:d5:b0:f2:cf:fc:17:73:a2: b6:f2:8c:d5:72:2c:60:d2:da:5a:fe:eb:c3:bc:e4:fb:32:56: 68:e6:ff:f9:fc:ab:11:06:78:43:98:99:0b:79:1e:2e:04:8c: 58:75:34:08:99:a3:d8:05:ee:42:8c:83:b6:60:e2:d8:75:a2: f1:cf:21:f0:18:3d:f9:59:79:74:90:0a:1b:98:81:57:d9:7c: ee:3e:b8:fc:ac:1a:ac:3a:22:c9:0b:56:a9:f9:e8:52:eb:ee: 97:a1:a8:22:25:5a:b1:ad:6d:80:50:79:d4:fa:c7:d3:b3:ba: e8:b9:eb:6c:fa:02:f3:35:4e:00:44:f6:6d:31:6d:be:a7:fa: 84:64:18:78:29:49:19:44:fe:37:f2:8c:22:80:77:5c:bc:91: 6f:1c:7f:4b:eb:a7:90:91:16:11:c2:fd:68:44:63:06:5c:8d: 99:45:24:e4:68:f8:f4:91:6c:ee:40:8a:5b:ce:65:d1:1f:38: 44:23:fa:dd:ee:ee:d8:d6:b8:b7:fd:aa:8a:1a:d1:8a:3d:fe: 6d:82:43:2e:5e:eb:4b:27:64:da:ae:08:91:cd:8f:23:49:17: 5b:97:68:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJwr/VKhKTQr8PrW64/SBUYv3X9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY2QjIyODc1NUY5NzAyNzNCOEQ3NzkyNDdBMUFFNTZG RTBDOTU4NzAeFw0yNjA2MTYxODMxMzNaFw0yNjA2MTcyMTEwMzNaMDMxMTAvBgNV BAMTKDAxQTE0M0ZBQTVEMjYxMEU3NUIxNTEzMDYyNzFDMkE5MEZBRTY3QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZzwqzkl5JGSjBbOE8ZZSw6ACO h0N9oJOVC+yiAxoO1cDz7jkf+7IkM90ItAinhnzCfKNpmTkcVhoOR/7EWT63cuNC bBiOqrXlHxA68PsivRCta1vLooyR1z2kvtpUfHibqQtJX4b42s7wglazATXxLMjc 1EV5H1jHaDVcqawd+9GNO6Uo8kziDaS0NfMm7Nmg4pBY1JYebWsDealfN2OvmllS CjrSK3PsdhjED6Gtkp7fFWdGSf5Y+GVARl9Cqp3RlPtXkI56hAG2RSUKr3fW/CO5 wLWcpA00orvwAPoNqr2siDQg02fOGrgKLbdme1zJebqUGLaImcL/gQ1ktsUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAaFD+qXSYQ51sVEwYnHCqQ+uZ7IwHwYDVR0j BBgwFoAUj2sih1X5cCc7jXeSR6GuVv4MlYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU3ZmIxN2UtOWQ1OC00ZDUxLTg0NmUtMGE4NGM4Njk5MTQyLzAvOEY2QjIyODc1 NUY5NzAyNzNCOEQ3NzkyNDdBMUFFNTZGRTBDOTU4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjZCMjI4NzU1Rjk3MDI3M0I4RDc3OTI0N0ExQUU1NkZFMEM5 NTg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU3ZmIxN2UtOWQ1OC00ZDUxLTg0 NmUtMGE4NGM4Njk5MTQyLzAvOEY2QjIyODc1NUY5NzAyNzNCOEQ3NzkyNDdBMUFF NTZGRTBDOTU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOk2kjCQt9h7mPTnSSfR5nush5gQRH0we+U pUzVsPLP/BdzorbyjNVyLGDS2lr+68O85PsyVmjm//n8qxEGeEOYmQt5Hi4EjFh1 NAiZo9gF7kKMg7Zg4th1ovHPIfAYPflZeXSQChuYgVfZfO4+uPysGqw6IskLVqn5 6FLr7pehqCIlWrGtbYBQedT6x9Ozuui562z6AvM1TgBE9m0xbb6n+oRkGHgpSRlE /jfyjCKAd1y8kW8cf0vrp5CRFhHC/WhEYwZcjZlFJORo+PSRbO5AilvOZdEfOEQj +t3u7tjWuLf9qooa0Yo9/m2CQy5e60snZNquCJHNjyNJF1uXaP4= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:42 2026 by rpki-client