$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft File: D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft (raw, json) Hash identifier: ULQfpAscPKeuvoMNcxIZSPaM5YY3RsmWwn9CkaNDFsA= Subject key identifier: EC:2D:A6:18:1F:4F:C7:A5:90:FC:7C:A8:54:82:6A:75:E8:E9:C5:75 Authority key identifier: D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 Certificate issuer: /CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Certificate serial: 71B94A80BDC3B38C6D0B736B96BDC019FB608FDF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 20:13:38 +0000 Manifest this update: Tue 16 Jun 2026 20:08:38 +0000 Manifest next update: Wed 17 Jun 2026 20:42:38 +0000 Files and hashes: 1: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: B9uGziJoJ3vGf5NvgTMOSPQWAPSbs6/SbCQ1GHvUQS0=) 2: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: bR+rHQrh2BbDBIEXZD76jtCgM3z29GB3K8OSA3PHxZ8=) 3: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: GMEzbs3Ig2nQxKeMH+leqKXvdoQrLyt3lFNSHrwIV3w=) 4: D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl (hash: R3n6DCO5bSHEEC3oKQXLEHCVmySlHDJRgr/fbwRPgUM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b9:4a:80:bd:c3:b3:8c:6d:0b:73:6b:96:bd:c0:19:fb:60:8f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Validity Not Before: Jun 16 20:08:38 2026 GMT Not After : Jun 17 20:42:38 2026 GMT Subject: CN=EC2DA6181F4FC7A590FC7CA854826A75E8E9C575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:46:18:4e:b0:c3:15:49:7a:c1:e2:64:4c:71: 2b:64:37:a4:76:d5:ed:91:6a:8d:28:79:53:64:3f: 72:4c:dc:e7:f8:09:5d:a5:9f:a3:c8:88:fe:07:7b: 83:ec:f5:fa:a1:c5:1f:12:d7:b5:a0:cf:e6:17:37: 3d:3f:f1:a8:fe:15:08:06:bc:6b:61:26:c2:72:3f: b4:f8:b8:1f:18:f3:37:0f:5e:b7:48:6d:95:6b:93: 68:1d:8a:39:3e:36:ad:23:d9:dc:26:6e:cd:85:71: 11:79:ae:c2:7c:a3:2d:57:91:72:61:e1:be:b3:0c: 9c:1b:f3:f6:40:1a:fe:19:39:08:80:60:c8:f2:84: 49:c1:ad:44:9e:5b:4b:9b:a0:c0:9d:c8:5d:fe:49: 75:56:e9:49:a7:db:bb:fd:f9:17:aa:c4:b0:ce:2e: 85:3a:39:ce:e9:36:27:36:6b:ad:8a:71:73:83:00: 45:74:c2:b2:b6:6a:1e:c6:69:d1:85:fe:76:b9:37: a2:0a:10:11:8f:d4:7f:40:bd:90:a0:d7:1b:15:5f: 0d:0d:4f:66:44:a1:9e:9e:6d:43:73:64:06:61:b6: 00:83:6f:be:06:06:99:b5:bb:b9:bb:20:d4:4b:9c: 26:0b:dc:3c:c9:09:ad:ed:10:1c:6b:c8:a5:46:9e: 21:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2D:A6:18:1F:4F:C7:A5:90:FC:7C:A8:54:82:6A:75:E8:E9:C5:75 X509v3 Authority Key Identifier: keyid:D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:61:83:1b:3b:be:6d:26:01:32:15:29:2f:67:53:02:d2:e6: b7:ff:e0:ee:40:f7:a7:52:1f:cf:7d:eb:a2:7b:1e:a3:30:d3: 5f:09:bf:94:04:98:90:6c:10:56:a8:4a:42:43:95:90:c2:1d: 0c:ac:7c:96:41:31:fb:35:79:a5:ea:3c:9e:ec:bc:ac:64:1b: 21:15:5f:fd:da:24:d5:f9:17:36:48:6f:b3:ef:a0:15:1d:18: e5:43:f6:58:02:72:0d:15:73:c0:60:fe:32:bb:b3:64:2e:43: 81:a8:a9:05:e5:b2:8a:97:82:a5:d8:7b:12:12:6c:11:68:3e: 44:ae:96:08:9c:f1:8c:54:32:1a:08:91:15:3d:28:3b:f9:5a: 0a:b1:55:8c:8c:a6:ac:cc:2b:e6:f4:03:11:fb:2b:5f:e2:b6: aa:dd:91:e3:b6:ea:f8:78:9f:96:20:33:46:a1:8f:c4:1b:04: 1a:f0:1e:5a:4b:b6:58:41:c9:c1:a3:79:08:be:a2:9a:c0:b1: ad:84:98:32:20:e6:9e:c9:3a:af:2e:f7:a7:2c:6c:74:20:3f: a0:77:13:1b:e5:af:0c:0d:95:f1:47:ac:bc:a5:88:aa:b2:b4: 6b:de:ab:bd:5b:57:c1:6e:5f:a0:c1:59:76:81:f4:ab:f1:c3: 94:b8:3d:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcblKgL3Ds4xtC3Nrlr3AGftgj98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCMUFBQTREMjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0 REQxRjUyNDAeFw0yNjA2MTYyMDA4MzhaFw0yNjA2MTcyMDQyMzhaMDMxMTAvBgNV BAMTKEVDMkRBNjE4MUY0RkM3QTU5MEZDN0NBODU0ODI2QTc1RThFOUM1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChRhhOsMMVSXrB4mRMcStkN6R2 1e2Rao0oeVNkP3JM3Of4CV2ln6PIiP4He4Ps9fqhxR8S17Wgz+YXNz0/8aj+FQgG vGthJsJyP7T4uB8Y8zcPXrdIbZVrk2gdijk+Nq0j2dwmbs2FcRF5rsJ8oy1XkXJh 4b6zDJwb8/ZAGv4ZOQiAYMjyhEnBrUSeW0uboMCdyF3+SXVW6Umn27v9+ReqxLDO LoU6Oc7pNic2a62KcXODAEV0wrK2ah7GadGF/na5N6IKEBGP1H9AvZCg1xsVXw0N T2ZEoZ6ebUNzZAZhtgCDb74GBpm1u7m7INRLnCYL3DzJCa3tEBxryKVGniF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7C2mGB9Px6WQ/HyoVIJqdejpxXUwHwYDVR0j BBgwFoAU2LGqpNIqLiJZ5V56UMsV/03R9SQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2IzZWFiYjQtNGRiMy00MzczLWEzNDgtZmIxZWQ3MDU1NjUxLzAvRDhCMUFBQTRE MjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0REQxRjUyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEIxQUFBNEQyMkEyRTIyNTlFNTVFN0E1MENCMTVGRjRERDFG NTI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvRDhCMUFBQTREMjJBMkUyMjU5RTU1RTdBNTBDQjE1 RkY0REQxRjUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFhgxs7vm0mATIVKS9nUwLS5rf/4O5A96dS H89966J7HqMw018Jv5QEmJBsEFaoSkJDlZDCHQysfJZBMfs1eaXqPJ7svKxkGyEV X/3aJNX5FzZIb7PvoBUdGOVD9lgCcg0Vc8Bg/jK7s2QuQ4GoqQXlsoqXgqXYexIS bBFoPkSulgic8YxUMhoIkRU9KDv5WgqxVYyMpqzMK+b0AxH7K1/itqrdkeO26vh4 n5YgM0ahj8QbBBrwHlpLtlhBycGjeQi+oprAsa2EmDIg5p7JOq8u96csbHQgP6B3 ExvlrwwNlfFHrLyliKqytGveq71bV8FuX6DBWXaB9Kvxw5S4PXQ= -----END CERTIFICATE-----Generated at Wed Jun 17 12:40:17 2026 by rpki-client