$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft File: 8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft (raw, json) Hash identifier: lW4aMpOBJwfwAuZDUqxpokgdFD5N8sGS77cWd6vvtnw= Subject key identifier: 5C:25:B7:60:9B:70:35:1C:80:05:89:01:91:9F:E8:35:3C:88:46:F7 Authority key identifier: 8A:7F:3E:F8:5C:F3:AF:D7:26:AC:A3:1F:35:E7:09:D8:EF:F0:C1:3C Certificate issuer: /CN=8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C Certificate serial: 4CFC355FE0AB24843218C40ED93CF022B103FA37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:32:06 +0000 Manifest this update: Wed 17 Jun 2026 03:27:06 +0000 Manifest next update: Thu 18 Jun 2026 05:11:06 +0000 Files and hashes: 1: 8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl (hash: hXKKx0kZA/5oWXQXLrcU8HWvZZ7HGXakKwoVuuFxCko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fc:35:5f:e0:ab:24:84:32:18:c4:0e:d9:3c:f0:22:b1:03:fa:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C Validity Not Before: Jun 17 03:27:06 2026 GMT Not After : Jun 18 05:11:06 2026 GMT Subject: CN=5C25B7609B70351C80058901919FE8353C8846F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:94:bf:8d:52:22:f5:e6:10:ce:61:fc:4d: 6a:d5:62:2d:1d:72:4e:94:63:a5:4e:87:23:3d:ed: 04:fe:ac:92:14:cc:bd:4d:a2:35:85:5c:0e:9b:fd: eb:cb:d7:7e:b8:4e:ed:83:d6:91:3b:66:0b:fb:79: af:91:c7:2a:b8:95:a0:50:d7:15:9e:cd:29:8d:ea: 76:18:fd:27:08:f1:a0:ec:30:35:3b:17:a7:a2:31: 68:4c:fe:cb:14:4b:b3:ad:67:0f:3d:17:d4:3a:c6: f7:3a:5f:07:bd:97:66:34:b4:22:bf:2f:b2:e9:77: 5b:37:92:f7:eb:97:9f:b1:6b:53:5d:32:d2:f0:57: 7b:fe:e6:27:67:7c:72:3c:e6:ac:b3:32:af:92:82: a9:cc:79:27:31:59:74:03:c8:62:af:9b:7d:89:ec: 7c:d6:db:e9:d8:b3:5b:32:4a:02:9a:ba:7d:2f:57: 9d:ea:cb:0a:f9:c3:ef:94:0d:72:49:93:47:a7:e7: 67:74:35:c8:3d:24:1c:a2:98:d9:7f:ec:2d:6e:62: 93:5b:38:8f:28:a1:2e:c2:64:76:a9:ec:36:e9:d8: c4:47:db:2c:5b:45:f1:91:9f:40:66:bf:64:f2:8e: ea:56:2a:d2:ed:84:f2:8d:62:1e:69:65:34:aa:9e: c1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:25:B7:60:9B:70:35:1C:80:05:89:01:91:9F:E8:35:3C:88:46:F7 X509v3 Authority Key Identifier: keyid:8A:7F:3E:F8:5C:F3:AF:D7:26:AC:A3:1F:35:E7:09:D8:EF:F0:C1:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ca:72:88:22:01:47:33:bf:97:8b:43:1d:f0:9e:3d:3d:42: 3d:01:35:fe:2c:fe:65:d9:33:21:54:0c:6e:e3:5a:e5:ff:46: e5:89:7b:7b:0a:a1:9a:28:b4:ce:1a:55:b0:da:12:60:a2:0e: 6d:71:ef:5c:bf:ac:49:4d:60:37:7f:77:8c:a4:0f:46:da:d4: f1:f0:7b:27:32:92:6a:c1:50:45:cd:3f:c9:ae:e9:35:7f:6d: bf:7f:93:61:5e:49:e3:6b:7a:d2:b8:2a:f4:1a:b3:02:d2:ee: 93:7d:1c:ba:76:ea:0e:66:9f:29:5f:8d:3f:d2:a9:cb:cf:8f: 1b:bc:11:ba:93:5a:69:a6:7d:e9:61:ef:15:5c:af:3d:ee:98: 90:e1:e6:ec:c9:12:33:46:91:b0:a1:f3:7c:81:8c:61:f8:e9: 36:f2:fb:07:80:a7:c8:48:77:6f:8a:49:0e:8a:92:6b:7e:a3: 45:9b:9f:09:42:bc:10:9a:11:e1:6d:ab:f8:4a:73:fc:66:d9: 47:56:46:8d:27:ce:0e:d9:bd:32:c5:d8:09:b6:5e:58:c9:63: d0:95:7d:6d:c8:62:ce:ac:f6:48:b0:71:18:d2:8c:70:03:c0: 35:7b:32:0b:77:37:85:ce:c4:1b:6a:23:cd:c1:dc:dd:77:b1: 17:29:9c:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPw1X+CrJIQyGMQO2TzwIrED+jcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3RjNFRjg1Q0YzQUZENzI2QUNBMzFGMzVFNzA5RDhF RkYwQzEzQzAeFw0yNjA2MTcwMzI3MDZaFw0yNjA2MTgwNTExMDZaMDMxMTAvBgNV BAMTKDVDMjVCNzYwOUI3MDM1MUM4MDA1ODkwMTkxOUZFODM1M0M4ODQ2RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzl5S/jVIi9eYQzmH8TWrVYi0d ck6UY6VOhyM97QT+rJIUzL1NojWFXA6b/evL1364Tu2D1pE7Zgv7ea+Rxyq4laBQ 1xWezSmN6nYY/ScI8aDsMDU7F6eiMWhM/ssUS7OtZw89F9Q6xvc6Xwe9l2Y0tCK/ L7Lpd1s3kvfrl5+xa1NdMtLwV3v+5idnfHI85qyzMq+SgqnMeScxWXQDyGKvm32J 7HzW2+nYs1sySgKaun0vV53qywr5w++UDXJJk0en52d0Ncg9JByimNl/7C1uYpNb OI8ooS7CZHap7Dbp2MRH2yxbRfGRn0Bmv2TyjupWKtLthPKNYh5pZTSqnsEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXCW3YJtwNRyABYkBkZ/oNTyIRvcwHwYDVR0j BBgwFoAUin8++Fzzr9cmrKMfNecJ2O/wwTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NlNjhiNTAtMGU5ZS00YWU2LTgyNTMtNWJjMmNkMTIxMzczLzAvOEE3RjNFRjg1 Q0YzQUZENzI2QUNBMzFGMzVFNzA5RDhFRkYwQzEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QTdGM0VGODVDRjNBRkQ3MjZBQ0EzMUYzNUU3MDlEOEVGRjBD MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NlNjhiNTAtMGU5ZS00YWU2LTgy NTMtNWJjMmNkMTIxMzczLzAvOEE3RjNFRjg1Q0YzQUZENzI2QUNBMzFGMzVFNzA5 RDhFRkYwQzEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7KcogiAUczv5eLQx3wnj09Qj0BNf4s/mXZ MyFUDG7jWuX/RuWJe3sKoZootM4aVbDaEmCiDm1x71y/rElNYDd/d4ykD0ba1PHw eycykmrBUEXNP8mu6TV/bb9/k2FeSeNretK4KvQaswLS7pN9HLp26g5mnylfjT/S qcvPjxu8EbqTWmmmfelh7xVcrz3umJDh5uzJEjNGkbCh83yBjGH46Tby+weAp8hI d2+KSQ6Kkmt+o0WbnwlCvBCaEeFtq/hKc/xm2UdWRo0nzg7ZvTLF2Am2XljJY9CV fW3IYs6s9kiwcRjSjHADwDV7Mgt3N4XOxBtqI83B3N13sRcpnMQ= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:53 2026 by rpki-client