$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft File: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft (raw, json) Hash identifier: r8F4HW5Md5+yFjxdGaNbkD7lgl5HbO9+Oc/SmYA5w/M= Subject key identifier: AD:DC:37:B8:E6:83:80:E6:B9:B3:CB:A6:20:B6:52:90:0E:5A:19:12 Authority key identifier: 80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6 Certificate issuer: /CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6 Certificate serial: 7B2870E51DE8D318681B82C5399CDABEF8F6E4C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 14:21:57 +0000 Manifest this update: Sat 13 Jun 2026 14:16:57 +0000 Manifest next update: Sun 14 Jun 2026 14:50:57 +0000 Files and hashes: 1: AS17885.roa (hash: QDIkXwtnGbligvAEMFVpJlik2NMuLqD9yutNqqC9tvo=) 2: AS139994.roa (hash: yvMW+tHCsBkuY1gG/yGlJ6JOSC3lCz//Xfli/4HGudE=) 3: AS24203.roa (hash: elsc0fS7A3LxkWGHoyme7eZUKOvhFf04i/z5CF+hz8c=) 4: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl (hash: LNyRz52cNun5nDyqFv9BMeTvnSXjbFwTrADj1teTxSM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:28:70:e5:1d:e8:d3:18:68:1b:82:c5:39:9c:da:be:f8:f6:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6 Validity Not Before: Jun 13 14:16:57 2026 GMT Not After : Jun 14 14:50:57 2026 GMT Subject: CN=ADDC37B8E68380E6B9B3CBA620B652900E5A1912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a9:94:b8:77:09:c1:22:d5:56:9e:50:b5:61: e0:06:2b:ea:ea:21:57:43:54:5a:7f:7c:67:39:b8: 85:95:f1:98:c0:27:93:9c:87:45:16:91:55:1d:9f: 80:e9:52:d4:35:c3:e0:0c:f6:11:48:df:7f:fe:2c: 34:95:69:9f:70:45:77:b0:23:60:1c:ea:f8:b2:b5: c1:0f:c3:4a:1d:d6:57:11:56:ff:d1:56:8f:19:40: b1:a0:94:91:3b:f0:fa:57:07:61:00:b2:51:47:be: cc:5a:e1:bf:5b:5c:11:6d:2d:6d:86:37:29:e9:bc: 87:a7:2a:8f:a9:bc:cc:81:dc:7f:3d:51:a4:ac:07: b2:2a:54:88:e8:db:10:80:32:fd:6d:01:16:d5:09: cf:ed:4a:ff:33:74:64:a3:c9:3b:cc:c2:46:3f:fc: 77:a4:9a:33:6a:43:ed:c1:11:3d:48:40:39:db:1c: 4d:a7:8a:fe:c8:bd:db:c7:31:0c:34:ac:50:41:e6: ce:95:1f:71:8d:5a:08:1c:75:22:64:c6:74:8d:4d: ca:3c:c3:13:6f:ca:c6:9e:b6:5b:13:80:fa:35:01: 39:0a:e2:a8:86:12:8a:f3:f7:ad:2a:e7:c2:da:26: ce:54:7c:04:b8:02:6d:76:f3:af:71:b5:85:3a:b0: 1a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DC:37:B8:E6:83:80:E6:B9:B3:CB:A6:20:B6:52:90:0E:5A:19:12 X509v3 Authority Key Identifier: keyid:80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:de:c1:33:3d:b6:00:fd:b2:1a:1f:ca:44:48:94:30:65:40: bd:4d:5f:7a:b9:13:f1:01:f6:78:4e:71:08:3e:ef:c7:a2:9d: 51:da:31:1a:f3:5d:10:e5:56:c8:90:a7:d3:84:e4:18:af:25: cf:b4:d5:a3:5d:c9:40:f9:cf:d2:ef:94:ae:9c:6e:84:33:bb: 6f:bf:15:3d:cc:54:b7:d4:04:90:4c:a8:3b:ee:07:5e:6a:4c: 69:5c:16:b2:c3:c9:71:15:14:a1:5c:77:cb:bf:17:04:38:14: 3e:01:35:a5:17:05:ac:c1:cc:a1:fc:87:00:b7:9c:c9:13:df: 03:0b:7e:25:03:50:f4:92:d6:04:e0:7f:5a:eb:4e:49:bf:d6: 17:03:39:d9:55:ef:37:2b:dd:00:5e:02:64:82:a5:b9:dd:58: 52:61:07:cb:fc:48:0e:7d:2a:7a:84:df:ee:72:19:ed:35:c2: 37:0f:1f:d4:46:fb:28:c4:9e:e8:69:ef:29:26:05:82:cf:05: a9:12:40:a0:3e:48:45:12:bf:f9:04:7d:2e:36:6f:8d:aa:1a: 90:bc:af:5c:32:06:7d:0e:b7:53:80:6b:93:fc:f9:b1:3d:c0: bc:07:39:35:5d:2c:4c:4f:7c:8a:f9:c2:f3:78:ad:a4:22:41: d0:f3:c0:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeyhw5R3o0xhoG4LFOZzavvj25MAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5 NTMyOTZBNjAeFw0yNjA2MTMxNDE2NTdaFw0yNjA2MTQxNDUwNTdaMDMxMTAvBgNV BAMTKEFEREMzN0I4RTY4MzgwRTZCOUIzQ0JBNjIwQjY1MjkwMEU1QTE5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlqZS4dwnBItVWnlC1YeAGK+rq IVdDVFp/fGc5uIWV8ZjAJ5Och0UWkVUdn4DpUtQ1w+AM9hFI33/+LDSVaZ9wRXew I2Ac6viytcEPw0od1lcRVv/RVo8ZQLGglJE78PpXB2EAslFHvsxa4b9bXBFtLW2G NynpvIenKo+pvMyB3H89UaSsB7IqVIjo2xCAMv1tARbVCc/tSv8zdGSjyTvMwkY/ /HekmjNqQ+3BET1IQDnbHE2niv7IvdvHMQw0rFBB5s6VH3GNWggcdSJkxnSNTco8 wxNvysaetlsTgPo1ATkK4qiGEorz960q58LaJs5UfAS4Am12869xtYU6sBr5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrdw3uOaDgOa5s8umILZSkA5aGRIwHwYDVR0j BBgwFoAUgHbFZHe4/VRgbo97uVwbzZUylqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3 N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5NTMyOTZBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDc2QzU2NDc3QjhGRDU0NjA2RThGN0JCOTVDMUJDRDk1MzI5 NkE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFC Q0Q5NTMyOTZBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrewTM9tgD9shofykRIlDBlQL1NX3q5E/EB 9nhOcQg+78einVHaMRrzXRDlVsiQp9OE5BivJc+01aNdyUD5z9LvlK6cboQzu2+/ FT3MVLfUBJBMqDvuB15qTGlcFrLDyXEVFKFcd8u/FwQ4FD4BNaUXBazBzKH8hwC3 nMkT3wMLfiUDUPSS1gTgf1rrTkm/1hcDOdlV7zcr3QBeAmSCpbndWFJhB8v8SA59 KnqE3+5yGe01wjcPH9RG+yjEnuhp7ykmBYLPBakSQKA+SEUSv/kEfS42b42qGpC8 r1wyBn0Ot1OAa5P8+bE9wLwHOTVdLExPfIr5wvN4raQiQdDzwOs= -----END CERTIFICATE-----Generated at Sat Jun 13 23:12:35 2026 by rpki-client