$ rpki-client -vvf rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft File: C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft (raw, json) Hash identifier: UVtJfB4lXodbfZ5qqVfCysqLGQhVK6DEKVWtgC8KxkE= Subject key identifier: F3:E4:90:9A:5C:63:D4:9D:0A:40:07:19:05:70:66:A0:23:98:39:12 Authority key identifier: C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B Certificate issuer: /CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B Certificate serial: 208BA3534B5B0C975A652B3C10FDC453874FFC4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:38:13 +0000 Manifest this update: Tue 16 Jun 2026 15:33:13 +0000 Manifest next update: Wed 17 Jun 2026 18:27:13 +0000 Files and hashes: 1: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: T5iXYEZsEylyp3JdGzhmtU2Kjr1HhNQabu6sAc+svIA=) 2: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: yHStdJOfwpXotUrFqNRyBFcevnLpf2rHuaCz1qS9rN0=) 3: C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl (hash: UEsNvSbNPaGt94Q/92sJMKm1N1KNjuDa9VsHYcRzyJA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8b:a3:53:4b:5b:0c:97:5a:65:2b:3c:10:fd:c4:53:87:4f:fc:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B Validity Not Before: Jun 16 15:33:13 2026 GMT Not After : Jun 17 18:27:13 2026 GMT Subject: CN=F3E4909A5C63D49D0A400719057066A023983912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:13:11:0e:76:40:e3:1d:d7:94:3e:28:13:c4: 84:3d:a4:7a:d7:db:07:ee:97:05:aa:55:a7:b9:87: 5c:c1:e2:a0:88:08:86:a2:cb:01:21:f7:dc:ba:32: ad:5e:75:af:9a:8f:7d:41:bf:e6:6f:00:9c:1a:34: 70:aa:be:14:c5:f3:85:04:37:00:0f:49:5f:0a:f2: 5c:b7:86:3b:bb:a5:16:37:33:c4:fe:eb:47:f2:da: 28:f6:10:08:b5:9f:de:17:74:48:c2:6b:a3:45:35: 8e:cd:4c:e1:e1:ab:48:dc:b1:3a:10:2e:60:2d:a5: 53:53:22:1b:9f:bd:2b:9c:dd:74:5b:8d:3d:8d:98: d7:b7:18:87:ae:00:31:be:95:31:84:7f:b9:2b:7b: 57:c4:a6:b1:b2:8e:03:7b:80:a9:b2:44:26:42:a9: a6:5f:82:7d:3a:2a:d0:fa:0c:91:68:6b:56:bf:38: 9f:bc:16:df:06:06:a2:29:1c:a5:82:30:41:69:a1: 6b:5f:30:c4:93:5b:f0:69:c3:84:d5:a1:53:d5:12: 99:1a:ef:3c:3b:b4:70:b2:14:1a:1a:8b:0b:de:35: 04:bd:9d:11:80:7c:d8:17:64:31:6d:dc:e7:f9:41: 4c:7f:3f:41:73:98:45:a0:98:19:ef:47:de:88:75: 34:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E4:90:9A:5C:63:D4:9D:0A:40:07:19:05:70:66:A0:23:98:39:12 X509v3 Authority Key Identifier: keyid:C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:3b:55:34:ff:0b:ee:ca:73:a6:3a:9f:0f:e1:38:2f:43:97: 9a:e4:8b:24:71:11:90:70:58:00:8e:bf:28:92:44:61:d4:6f: 4c:c2:b1:19:96:05:46:50:ad:be:c7:25:ca:93:62:1e:11:42: 37:d5:9b:cd:bb:ea:18:13:e0:27:da:b1:f4:37:b1:ca:8b:af: 39:b7:56:e8:6a:f1:d9:8f:18:67:84:27:93:d8:88:30:62:94: d7:06:21:df:8b:47:81:0e:fe:6a:26:a1:11:d6:02:b4:f4:52: 48:be:ec:0d:9d:95:91:15:bf:ae:a9:8f:30:7c:42:98:c3:e5: b8:ce:a0:35:4b:41:4c:f2:67:11:d9:b1:f4:24:55:7d:44:52: 4a:e7:0a:90:7e:0a:97:13:53:88:85:ed:3d:93:76:b3:9b:5f: d0:ef:e1:8b:11:37:be:c6:e2:db:7c:56:ae:3e:a2:f3:f8:c6: 9b:3b:57:60:26:1a:85:a6:e3:ec:ba:f4:56:c9:b2:6c:b2:1d: 44:b9:c1:1e:09:9f:69:6f:e5:1c:72:dd:be:c7:76:01:da:c0: 1b:ac:51:5e:41:c7:a3:5e:d2:68:57:11:19:50:d4:aa:14:cc: 8b:84:bf:96:4e:1a:dd:29:74:63:d4:b5:f2:1b:56:1a:82:7e: 27:80:cb:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIIujU0tbDJdaZSs8EP3EU4dP/EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhEMjRBREY1Qzc0MzJFNUUzQzFENTk4ODc3NDEwN0E3 MTdGODI3QjAeFw0yNjA2MTYxNTMzMTNaFw0yNjA2MTcxODI3MTNaMDMxMTAvBgNV BAMTKEYzRTQ5MDlBNUM2M0Q0OUQwQTQwMDcxOTA1NzA2NkEwMjM5ODM5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmExEOdkDjHdeUPigTxIQ9pHrX 2wfulwWqVae5h1zB4qCICIaiywEh99y6Mq1eda+aj31Bv+ZvAJwaNHCqvhTF84UE NwAPSV8K8ly3hju7pRY3M8T+60fy2ij2EAi1n94XdEjCa6NFNY7NTOHhq0jcsToQ LmAtpVNTIhufvSuc3XRbjT2NmNe3GIeuADG+lTGEf7kre1fEprGyjgN7gKmyRCZC qaZfgn06KtD6DJFoa1a/OJ+8Ft8GBqIpHKWCMEFpoWtfMMSTW/Bpw4TVoVPVEpka 7zw7tHCyFBoaiwveNQS9nRGAfNgXZDFt3Of5QUx/P0FzmEWgmBnvR96IdTT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8+SQmlxj1J0KQAcZBXBmoCOYORIwHwYDVR0j BBgwFoAUyNJK31x0MuXjwdWYh3QQenF/gnswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhZDA5ZjMtMDAyMy00NDQ1LTg0MTYtNWNiZGUxM2ZkZDQwLzAvQzhEMjRBREY1 Qzc0MzJFNUUzQzFENTk4ODc3NDEwN0E3MTdGODI3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEQyNEFERjVDNzQzMkU1RTNDMUQ1OTg4Nzc0MTA3QTcxN0Y4 MjdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvQzhEMjRBREY1Qzc0MzJFNUUzQzFENTk4ODc3NDEw N0E3MTdGODI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ7VTT/C+7Kc6Y6nw/hOC9Dl5rkiyRxEZBw WACOvyiSRGHUb0zCsRmWBUZQrb7HJcqTYh4RQjfVm8276hgT4CfasfQ3scqLrzm3 Vuhq8dmPGGeEJ5PYiDBilNcGId+LR4EO/momoRHWArT0Uki+7A2dlZEVv66pjzB8 QpjD5bjOoDVLQUzyZxHZsfQkVX1EUkrnCpB+CpcTU4iF7T2TdrObX9Dv4YsRN77G 4tt8Vq4+ovP4xps7V2AmGoWm4+y69FbJsmyyHUS5wR4Jn2lv5Rxy3b7HdgHawBus UV5Bx6Ne0mhXERlQ1KoUzIuEv5ZOGt0pdGPUtfIbVhqCfieAy9M= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:38 2026 by rpki-client