$ rpki-client -vvf rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft File: 8557597ED1797691974B01C1D7D410DE0468CB64.mft (raw, json) Hash identifier: OiCmTGiTIUfkUwZONkNDk9VRCBISERFrMxSav4mggn8= Subject key identifier: B8:CD:0B:2B:A6:FD:BE:96:FA:1E:09:29:BB:A1:73:0F:08:E4:82:0E Authority key identifier: 85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64 Certificate issuer: /CN=8557597ED1797691974B01C1D7D410DE0468CB64 Certificate serial: 012B060CB09215817995531A494BB33A4701414A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 23:54:23 +0000 Manifest this update: Fri 12 Jun 2026 23:49:23 +0000 Manifest next update: Sun 14 Jun 2026 02:17:23 +0000 Files and hashes: 1: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: 7N8cgyb6Ww7RJC4vhy0UsAqS4uP5oOpnOjak+OLi484=) 2: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: cqcltXHdESyCAro4lMlrbhRLXh2L5uRV2u8+8/UIEXU=) 3: 8557597ED1797691974B01C1D7D410DE0468CB64.crl (hash: JrB0jKY6L8CQ9R6GFLCGYKvpU45a+epcqSpn8Uu345k=) 4: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: TH1xxKIpC/iys3VyCm1mmUpDcchr21F0tjGUobHxDDI=) 5: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: +2lXgv7qT46jamYAhQHOD/peUAc/KCPSkZn0WfZ6XNU=) 6: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: TL3itnqoh4qV4HBGxDux8BTRX5lkC3J82Sib/ZT6wuU=) 7: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: ooohintErIiZJY6PsGdeSKgN/xAUtlDemuxd4hTQIlw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 02:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:2b:06:0c:b0:92:15:81:79:95:53:1a:49:4b:b3:3a:47:01:41:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8557597ED1797691974B01C1D7D410DE0468CB64 Validity Not Before: Jun 12 23:49:23 2026 GMT Not After : Jun 14 02:17:23 2026 GMT Subject: CN=B8CD0B2BA6FDBE96FA1E0929BBA1730F08E4820E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:52:1f:d8:6b:a3:44:9c:ff:89:a0:8d:19:60: 51:12:d2:b7:7d:9e:5c:b6:c5:40:cc:5a:e7:8b:ec: 04:10:ea:5c:39:16:3d:55:92:7c:ed:74:5a:b7:ab: f6:4e:48:c4:4d:06:a2:82:a2:b0:28:43:b7:2b:eb: f9:f0:f1:00:76:24:3b:ab:4d:32:94:2b:a2:72:e3: 9e:08:c2:2a:9b:a3:0c:7e:8b:7f:cd:9e:0e:95:6d: 57:ed:eb:d7:bb:5d:13:f4:87:f2:03:e0:04:ee:65: 4b:c9:d9:60:cb:31:ef:48:52:f1:b7:4a:77:0c:b6: f0:f0:ba:98:00:4c:57:18:a2:4a:3e:59:b8:92:b3: 0c:c1:02:f1:b9:3b:87:80:b6:db:dc:bd:4c:80:d4: 75:30:92:50:c6:17:10:6e:84:2b:7a:74:c5:5a:27: bf:48:51:80:10:44:f0:82:24:75:ae:0e:57:c2:0f: 5b:99:89:3e:57:6c:bc:d4:a0:87:5d:68:0d:66:e2: 33:b6:ff:33:b9:99:34:4d:9c:c9:07:50:7d:79:f0: e1:af:33:3b:29:ad:4a:c9:61:36:62:cc:8d:2f:ad: 8c:8d:fc:82:79:b2:6e:44:4f:6c:03:19:f5:c0:6b: 8d:ea:71:99:0e:4f:15:1f:50:bc:0c:b6:52:19:f6: 97:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CD:0B:2B:A6:FD:BE:96:FA:1E:09:29:BB:A1:73:0F:08:E4:82:0E X509v3 Authority Key Identifier: keyid:85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a5:fe:0c:f6:bb:dd:74:70:0e:2f:63:30:bb:39:20:c3:d8: 1e:45:63:fe:09:18:fe:8f:b6:5c:e1:51:1d:3e:72:77:4d:d9: c4:a8:05:7c:81:30:3b:e0:73:0a:dc:ee:4b:89:01:d4:17:e9: 61:60:f0:7d:4b:fb:35:80:70:a4:cf:4b:46:24:a2:cc:ca:f6: 3a:4c:63:e0:ff:54:5d:3c:48:6d:91:71:c4:73:68:33:c9:63: cc:c6:92:fc:c4:db:71:a6:d8:ea:0f:87:58:a3:2d:fd:7a:c0: 98:21:f5:2c:de:d0:f6:ec:d7:2b:88:0c:91:5d:f3:b7:a1:8a: b8:54:5e:54:d1:36:68:6e:e9:6e:3b:36:b6:f7:bd:66:9e:eb: 40:a7:79:9a:76:16:18:cf:7b:67:5f:af:10:4a:eb:7f:bd:7b: 00:f0:84:f7:0d:95:df:99:9f:a1:b4:a8:d1:17:21:73:be:e5: 6b:6a:4d:ef:df:c1:c1:95:9f:04:6b:01:0c:ac:d4:f8:05:20: 32:4f:47:11:5f:21:57:07:69:e9:b8:42:87:ce:ec:a8:e1:0e: 2e:2f:80:de:ca:ae:ea:06:48:59:9f:bd:47:95:66:c3:45:31: a8:61:21:a1:c8:f0:29:61:70:79:46:92:c7:1d:d0:d1:8b:d1: da:08:b8:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUASsGDLCSFYF5lVMaSUuzOkcBQUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1NzU5N0VEMTc5NzY5MTk3NEIwMUMxRDdENDEwREUw NDY4Q0I2NDAeFw0yNjA2MTIyMzQ5MjNaFw0yNjA2MTQwMjE3MjNaMDMxMTAvBgNV BAMTKEI4Q0QwQjJCQTZGREJFOTZGQTFFMDkyOUJCQTE3MzBGMDhFNDgyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbUh/Ya6NEnP+JoI0ZYFES0rd9 nly2xUDMWueL7AQQ6lw5Fj1VknztdFq3q/ZOSMRNBqKCorAoQ7cr6/nw8QB2JDur TTKUK6Jy454Iwiqbowx+i3/Nng6VbVft69e7XRP0h/ID4ATuZUvJ2WDLMe9IUvG3 SncMtvDwupgATFcYoko+WbiSswzBAvG5O4eAttvcvUyA1HUwklDGFxBuhCt6dMVa J79IUYAQRPCCJHWuDlfCD1uZiT5XbLzUoIddaA1m4jO2/zO5mTRNnMkHUH158OGv MzsprUrJYTZizI0vrYyN/IJ5sm5ET2wDGfXAa43qcZkOTxUfULwMtlIZ9peDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuM0LK6b9vpb6Hgkpu6FzDwjkgg4wHwYDVR0j BBgwFoAUhVdZftF5dpGXSwHB19QQ3gRoy2QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBjZTQ3OTYtNDlkZS00M2IxLWExNTItYjE4ZDExYWRhNTI5LzAvODU1NzU5N0VE MTc5NzY5MTk3NEIwMUMxRDdENDEwREUwNDY4Q0I2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTU3NTk3RUQxNzk3NjkxOTc0QjAxQzFEN0Q0MTBERTA0NjhD QjY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvODU1NzU5N0VEMTc5NzY5MTk3NEIwMUMxRDdENDEw REUwNDY4Q0I2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKl/gz2u910cA4vYzC7OSDD2B5FY/4JGP6P tlzhUR0+cndN2cSoBXyBMDvgcwrc7kuJAdQX6WFg8H1L+zWAcKTPS0YkoszK9jpM Y+D/VF08SG2RccRzaDPJY8zGkvzE23Gm2OoPh1ijLf16wJgh9Sze0Pbs1yuIDJFd 87ehirhUXlTRNmhu6W47Nrb3vWae60CneZp2FhjPe2dfrxBK63+9ewDwhPcNld+Z n6G0qNEXIXO+5WtqTe/fwcGVnwRrAQys1PgFIDJPRxFfIVcHaem4QofO7KjhDi4v gN7KruoGSFmfvUeVZsNFMahhIaHI8ClhcHlGkscd0NGL0doIuAg= -----END CERTIFICATE-----Generated at Sat Jun 13 15:56:00 2026 by rpki-client