$ rpki-client -vvf rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft File: 8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft (raw, json) Hash identifier: oR2/dhkHyAwG/QmKS2tTmonLJ9I5cxnVGZczWBE+KqY= Subject key identifier: 73:46:71:E9:58:84:2C:72:E5:99:3E:D4:72:06:D4:12:12:60:A5:A0 Authority key identifier: 8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 Certificate issuer: /CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Certificate serial: 3DD14B0EAAFF685D94D92B4ADD29D8F3E92B1FAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 18:26:50 +0000 Manifest this update: Sat 13 Jun 2026 18:21:50 +0000 Manifest next update: Sun 14 Jun 2026 21:24:50 +0000 Files and hashes: 1: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: r7dovsQ2SZSV7IfPAfAuGK0MlNXhEY5b9y9M8jygZbk=) 2: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: 3gBu5z4wg47/tNqaD7YsE1EFFZZ6JYTR0325QFX63A0=) 3: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: vEKBFb87szZHK58hOoWh27DXWyqF6KjiEygYywKcCcA=) 4: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: FAM0vFS+CEP/k4I2FWb6JASyBXq3gfqT8CiCE9WHTo0=) 5: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: nhCth3GuuL56/ZX/YpeRjeCAIHYgJ/lFofg+gthNMoU=) 6: 8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl (hash: fJ1QCRy47BEMV9vlueYI//nj7H0bgzQD/pKy80JxrUA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d1:4b:0e:aa:ff:68:5d:94:d9:2b:4a:dd:29:d8:f3:e9:2b:1f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Validity Not Before: Jun 13 18:21:50 2026 GMT Not After : Jun 14 21:24:50 2026 GMT Subject: CN=734671E958842C72E5993ED47206D4121260A5A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:5a:0f:a9:d0:34:2d:45:db:22:4d:c9:81: 8e:f9:b0:d1:56:f1:fc:8f:97:d7:a7:82:3c:5f:b1: 06:36:53:4c:6e:dc:90:b1:bf:4a:1e:eb:74:40:81: 14:31:81:09:30:4d:e7:48:aa:84:13:a9:47:78:62: 41:85:17:ab:ad:ce:00:bc:1f:2e:1e:7e:82:b6:43: 40:ce:ab:54:3a:71:70:61:1d:77:39:c0:6e:d1:0e: 69:cf:e4:01:cf:b2:aa:05:31:28:91:67:52:5f:ef: 28:58:46:8b:5b:d4:77:0c:55:ef:60:86:a5:45:f8: 6a:5e:fb:c3:3d:7f:1f:ee:48:e9:f3:e9:51:d8:d5: 38:23:9b:46:e2:26:e8:62:7c:4f:e9:bb:f7:d8:0b: eb:e5:0d:c1:f9:ad:b3:e7:0a:55:53:9e:e3:55:14: a3:2d:5c:d1:af:80:35:7e:5a:fd:fc:b9:48:7c:31: b5:09:6f:0a:8e:ef:2f:c3:2f:99:56:49:a4:39:eb: e6:34:fe:03:6d:b1:8c:23:77:97:e5:5d:c3:82:77: d2:7c:b2:9c:87:c7:2d:06:92:6a:cc:f3:9b:7d:0b: ee:67:e9:1e:82:46:1e:24:27:f9:53:fd:ef:42:9d: ab:30:c7:c2:bf:cd:a1:c6:bb:f8:51:a5:e2:9a:f1: 03:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:46:71:E9:58:84:2C:72:E5:99:3E:D4:72:06:D4:12:12:60:A5:A0 X509v3 Authority Key Identifier: keyid:8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:45:80:3d:39:03:be:6a:9d:4b:9b:16:22:05:bd:62:55:59: 25:9e:e2:4b:66:f5:8d:1f:a9:03:75:fe:13:42:90:8a:79:c0: e4:d3:f4:f5:e8:10:47:ba:d0:de:96:5e:9f:db:8d:5c:a3:ff: 88:00:cc:fc:1a:a7:dd:d8:6e:2e:66:16:05:1d:fe:05:79:32: 55:54:9f:4a:91:59:c6:b6:e4:a3:72:52:45:5c:8f:15:82:9e: 15:68:7b:d9:5f:33:c1:dc:dc:c9:94:13:1b:10:ca:2c:13:38: 31:12:3f:32:d5:40:ec:ca:0b:5e:fd:70:bc:ee:a9:81:3d:c3: 05:b5:99:1d:a6:c7:1e:d4:fd:32:58:95:48:1e:e1:c7:ac:87: b4:30:9d:7d:9c:ec:90:6c:46:6a:b4:6c:67:e0:e6:17:6a:84: da:c7:1a:72:aa:ae:7e:c6:6c:18:3b:b9:ed:99:ad:47:d8:f2: 4b:e4:2e:3c:98:55:f8:55:ca:da:fc:25:87:e1:ee:f5:7e:4f: cb:84:09:75:4d:30:56:52:02:15:78:9d:45:4b:c7:05:2f:ae: 8b:54:26:d2:2b:b7:7c:25:40:17:b0:6f:7c:20:ad:8b:f8:a8: ab:d9:e4:3b:14:49:84:d0:6f:df:31:dd:eb:c8:b3:96:e9:2d: 46:24:83:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdFLDqr/aF2U2StK3SnY8+krH6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU3RDI5QjhCMkU2RjJGMDlCNTA3RkMzNkIzMTczMTYy QTQzMTZFOTAeFw0yNjA2MTMxODIxNTBaFw0yNjA2MTQyMTI0NTBaMDMxMTAvBgNV BAMTKDczNDY3MUU5NTg4NDJDNzJFNTk5M0VENDcyMDZENDEyMTI2MEE1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZFoPqdA0LUXbIk3JgY75sNFW 8fyPl9engjxfsQY2U0xu3JCxv0oe63RAgRQxgQkwTedIqoQTqUd4YkGFF6utzgC8 Hy4efoK2Q0DOq1Q6cXBhHXc5wG7RDmnP5AHPsqoFMSiRZ1Jf7yhYRotb1HcMVe9g hqVF+Gpe+8M9fx/uSOnz6VHY1Tgjm0biJuhifE/pu/fYC+vlDcH5rbPnClVTnuNV FKMtXNGvgDV+Wv38uUh8MbUJbwqO7y/DL5lWSaQ56+Y0/gNtsYwjd5flXcOCd9J8 spyHxy0GkmrM85t9C+5n6R6CRh4kJ/lT/e9Cnaswx8K/zaHGu/hRpeKa8QPpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc0Zx6ViELHLlmT7UcgbUEhJgpaAwHwYDVR0j BBgwFoAUjn0puLLm8vCbUH/DazFzFipDFukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI1MmVhZDMtZGM4Zi00ZDg2LWFmY2YtYTE0MGU1Yjg3NTMyLzAvOEU3RDI5QjhC MkU2RjJGMDlCNTA3RkMzNkIzMTczMTYyQTQzMTZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTdEMjlCOEIyRTZGMkYwOUI1MDdGQzM2QjMxNzMxNjJBNDMx NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOEU3RDI5QjhCMkU2RjJGMDlCNTA3RkMzNkIzMTcz MTYyQTQzMTZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNFgD05A75qnUubFiIFvWJVWSWe4ktm9Y0f qQN1/hNCkIp5wOTT9PXoEEe60N6WXp/bjVyj/4gAzPwap93Ybi5mFgUd/gV5MlVU n0qRWca25KNyUkVcjxWCnhVoe9lfM8Hc3MmUExsQyiwTODESPzLVQOzKC179cLzu qYE9wwW1mR2mxx7U/TJYlUge4cesh7QwnX2c7JBsRmq0bGfg5hdqhNrHGnKqrn7G bBg7ue2ZrUfY8kvkLjyYVfhVytr8JYfh7vV+T8uECXVNMFZSAhV4nUVLxwUvrotU JtIrt3wlQBewb3wgrYv4qKvZ5DsUSYTQb98x3evIs5bpLUYkg3M= -----END CERTIFICATE-----Generated at Sun Jun 14 02:22:51 2026 by rpki-client