$ rpki-client -vvf rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft File: 8CDF206FDB99524CD59E5141686928A6FF94305F.mft (raw, json) Hash identifier: 7Oikc480F9BurRUeHqbz5hYYRbmkSMDgHNYyRB7tK2E= Subject key identifier: B5:2C:29:40:F4:A1:0E:8C:86:BD:FA:D3:F9:82:00:40:AE:40:E9:19 Authority key identifier: 8C:DF:20:6F:DB:99:52:4C:D5:9E:51:41:68:69:28:A6:FF:94:30:5F Certificate issuer: /CN=8CDF206FDB99524CD59E5141686928A6FF94305F Certificate serial: 3825EA0C588930DFF82FE3D4703E9AD6D1871E1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:57:27 +0000 Manifest this update: Wed 17 Jun 2026 07:52:27 +0000 Manifest next update: Thu 18 Jun 2026 09:06:27 +0000 Files and hashes: 1: 8CDF206FDB99524CD59E5141686928A6FF94305F.crl (hash: c5ok+4ZFGr9ADe+h4gPeXpyWwv4D4HL7y9Gmwfh3BvQ=) 2: 3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (hash: AtW3qZZhBOBkSL0i4aoVF1GR5f7KIfCN2XApbUwdv2U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.crl rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:25:ea:0c:58:89:30:df:f8:2f:e3:d4:70:3e:9a:d6:d1:87:1e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF206FDB99524CD59E5141686928A6FF94305F Validity Not Before: Jun 17 07:52:27 2026 GMT Not After : Jun 18 09:06:27 2026 GMT Subject: CN=B52C2940F4A10E8C86BDFAD3F9820040AE40E919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fe:ba:ac:27:98:09:e2:df:23:bd:05:f3:d6: e4:59:b6:95:6a:55:5c:d1:45:d0:21:9c:32:8e:d5: 2a:42:67:1a:ec:49:89:c8:3b:90:f3:7e:db:e0:6a: 2c:80:69:bd:c5:30:b5:99:df:74:7d:e7:5c:6f:3e: ef:db:d6:81:33:48:3c:ed:5c:17:73:c9:51:b5:28: 7e:84:41:bb:0b:bb:c7:1e:0a:f6:43:92:f1:36:9f: c5:82:57:e9:c8:c4:d7:b3:27:9d:0a:f5:b2:37:4a: 5e:c2:e0:76:18:c5:92:04:f1:55:90:d9:b2:37:c8: 59:f5:65:5d:89:f0:d9:14:67:95:ee:2d:6c:c0:d5: ad:00:b9:83:2c:02:3a:e1:a9:70:19:01:c8:1d:1e: 57:87:05:3a:11:fd:5e:2d:a6:9e:36:b8:7c:e9:74: 0a:e1:36:30:a0:8b:71:25:10:2c:e0:75:5b:b5:cc: 8b:a9:52:0f:bc:2e:98:28:4e:d4:0c:dd:74:ba:01: 0e:76:e3:2b:81:cc:37:49:8f:4f:a7:9d:93:7c:fa: 48:a0:f6:ed:89:fa:68:e2:04:13:a5:a0:55:95:16: bc:4c:cf:7e:70:51:34:e4:ea:70:e7:7a:43:14:53: a3:50:c7:e2:38:8b:2a:8a:cf:d6:cd:f2:0e:6e:9e: dc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2C:29:40:F4:A1:0E:8C:86:BD:FA:D3:F9:82:00:40:AE:40:E9:19 X509v3 Authority Key Identifier: keyid:8C:DF:20:6F:DB:99:52:4C:D5:9E:51:41:68:69:28:A6:FF:94:30:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:d0:c1:a3:a3:7a:bb:ad:89:0d:48:41:07:a8:5b:0c:fd:9a: 52:da:22:cd:48:82:ba:33:3d:a8:aa:3a:84:f2:90:fa:e2:3e: 58:4e:96:da:97:d1:b4:e9:d8:f3:75:f1:b6:b2:43:37:70:e2: a7:68:25:66:36:fa:2a:44:e4:bc:90:bc:5d:e9:e9:65:06:45: 0c:de:ad:9e:bd:94:a4:ba:61:fa:b0:10:e2:b7:4f:65:a7:3f: f1:99:8e:5c:2d:cd:50:eb:08:b4:84:3a:b5:0a:85:6f:51:7b: 39:a0:31:ff:f0:80:84:bd:48:c1:db:bc:e5:d7:97:67:8d:9f: 8f:91:4c:4e:da:6e:d7:2d:e1:a1:c9:89:17:93:ba:77:64:11: 7c:de:fc:5a:db:83:9d:ee:4b:10:f7:97:7a:bd:a9:45:48:74: 2a:61:91:08:9b:9f:f2:05:0b:5e:80:ee:0c:78:a5:3a:eb:a0: 99:ba:aa:35:15:ce:a1:19:5e:93:bc:55:d5:52:50:05:dd:94: cc:18:f0:df:a0:d7:66:da:73:80:86:40:53:09:69:b3:86:f7: 94:0a:ee:66:15:05:72:44:ef:02:b1:6a:52:3a:25:f8:26:46: dc:a3:28:ee:a7:3e:fe:3b:2f:97:66:b6:44:89:1b:36:8e:2e: 45:96:d0:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOCXqDFiJMN/4L+PUcD6a1tGHHh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjIwNkZEQjk5NTI0Q0Q1OUU1MTQxNjg2OTI4QTZG Rjk0MzA1RjAeFw0yNjA2MTcwNzUyMjdaFw0yNjA2MTgwOTA2MjdaMDMxMTAvBgNV BAMTKEI1MkMyOTQwRjRBMTBFOEM4NkJERkFEM0Y5ODIwMDQwQUU0MEU5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/rqsJ5gJ4t8jvQXz1uRZtpVq VVzRRdAhnDKO1SpCZxrsSYnIO5DzftvgaiyAab3FMLWZ33R951xvPu/b1oEzSDzt XBdzyVG1KH6EQbsLu8ceCvZDkvE2n8WCV+nIxNezJ50K9bI3Sl7C4HYYxZIE8VWQ 2bI3yFn1ZV2J8NkUZ5XuLWzA1a0AuYMsAjrhqXAZAcgdHleHBToR/V4tpp42uHzp dArhNjCgi3ElECzgdVu1zIupUg+8LpgoTtQM3XS6AQ524yuBzDdJj0+nnZN8+kig 9u2J+mjiBBOloFWVFrxMz35wUTTk6nDnekMUU6NQx+I4iyqKz9bN8g5untyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtSwpQPShDoyGvfrT+YIAQK5A6RkwHwYDVR0j BBgwFoAUjN8gb9uZUkzVnlFBaGkopv+UMF8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjMzOTc4ZjgtYWVhYi00MjdhLWJkNzUtMmNkZjFkOWViNTE3LzAvOENERjIwNkZE Qjk5NTI0Q0Q1OUU1MTQxNjg2OTI4QTZGRjk0MzA1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0RGMjA2RkRCOTk1MjRDRDU5RTUxNDE2ODY5MjhBNkZGOTQz MDVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjMzOTc4ZjgtYWVhYi00MjdhLWJk NzUtMmNkZjFkOWViNTE3LzAvOENERjIwNkZEQjk5NTI0Q0Q1OUU1MTQxNjg2OTI4 QTZGRjk0MzA1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPQwaOjerutiQ1IQQeoWwz9mlLaIs1Igroz PaiqOoTykPriPlhOltqX0bTp2PN18bayQzdw4qdoJWY2+ipE5LyQvF3p6WUGRQze rZ69lKS6YfqwEOK3T2WnP/GZjlwtzVDrCLSEOrUKhW9RezmgMf/wgIS9SMHbvOXX l2eNn4+RTE7abtct4aHJiReTundkEXze/Frbg53uSxD3l3q9qUVIdCphkQibn/IF C16A7gx4pTrroJm6qjUVzqEZXpO8VdVSUAXdlMwY8N+g12bac4CGQFMJabOG95QK 7mYVBXJE7wKxalI6JfgmRtyjKO6nPv47L5dmtkSJGzaOLkWW0Jk= -----END CERTIFICATE-----Generated at Wed Jun 17 10:47:27 2026 by rpki-client