$ rpki-client -vvf rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft File: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft (raw, json) Hash identifier: zJGydduuapfAJ209m6YwsoEzFbGpFNcXYX6/vjFyAss= Subject key identifier: B5:29:03:1D:C2:06:AD:2B:AF:73:1C:63:71:72:6E:D8:9A:AD:D0:3B Authority key identifier: C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 Certificate issuer: /CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Certificate serial: 67E69184C1BE888372865F44B26CB98EF23927B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:00:05 +0000 Manifest this update: Wed 17 Jun 2026 05:55:05 +0000 Manifest next update: Thu 18 Jun 2026 09:20:05 +0000 Files and hashes: 1: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl (hash: mLj00ZCVXUmxER4Jf1Au/VrLjlcAFMuVOBAqFQDkUHI=) 2: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: qW0AGce8XtjjXQ3Aq1xPuwzcIhd6zyH7ybAi9hoWtzA=) 3: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: W+SevG4xTFDq1sgkDkONqUQc3ucQK2u8ntiRI2DImrc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e6:91:84:c1:be:88:83:72:86:5f:44:b2:6c:b9:8e:f2:39:27:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Validity Not Before: Jun 17 05:55:05 2026 GMT Not After : Jun 18 09:20:05 2026 GMT Subject: CN=B529031DC206AD2BAF731C6371726ED89AADD03B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:30:1a:51:ce:9b:04:e0:b2:78:df:ae:f2: 27:b4:a4:78:ef:50:b2:86:1a:0a:5f:5b:e4:41:18: 86:e4:ca:c5:c4:08:c3:fc:98:8b:b7:50:57:b1:2f: 8c:87:18:4d:46:5d:0d:40:bb:73:bb:3c:e1:04:9e: 13:23:1c:68:3f:fc:17:8f:8b:39:51:19:af:0c:52: 14:79:12:a8:ad:ad:4a:0e:be:8b:ff:2c:0f:ec:a6: 75:b7:f6:a3:fc:32:11:e7:5d:ed:0f:c9:c0:ca:5b: 3c:54:21:6d:95:68:cf:38:6f:99:ff:c5:64:79:e8: 7c:61:09:c9:34:56:74:d4:0d:15:58:ed:de:7b:f0: 8c:e6:e5:01:19:cd:87:78:e8:ba:37:e3:ca:11:3d: 5d:bf:c1:d3:36:5a:db:61:63:5c:05:a6:27:a2:be: a7:06:bb:32:93:87:99:6d:04:59:91:9a:99:d3:3b: 17:a9:3c:3e:02:63:8b:f3:0b:06:8b:89:7f:da:92: be:71:f7:d1:88:e6:2a:8e:39:a4:75:fc:a8:41:ee: 49:d3:90:47:4e:7e:ea:a6:91:e7:5d:a7:f4:05:83: f4:8b:6e:83:bb:83:c4:1b:32:c7:b8:a1:18:0c:da: 32:3e:6e:54:ba:83:0d:ed:66:5f:ee:de:b9:3b:d4: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:29:03:1D:C2:06:AD:2B:AF:73:1C:63:71:72:6E:D8:9A:AD:D0:3B X509v3 Authority Key Identifier: keyid:C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:39:9f:14:f3:df:48:5e:5f:7e:79:fc:4b:0d:5d:42:61:d0: cb:88:32:f9:1c:1b:3a:df:a9:13:e6:ff:80:1c:c1:0b:a2:12: 51:e3:4d:c1:0d:d5:16:1d:15:22:d8:25:b3:d6:7b:cb:2b:3b: b7:76:28:9f:fe:1a:86:9c:0e:11:ba:70:2f:8b:04:69:fa:2d: fd:a6:d6:03:d3:99:ff:b8:ba:27:e4:b4:59:e0:f9:0f:0a:56: 3a:04:e4:70:ba:85:29:2a:a7:6e:4e:c4:48:0e:68:b7:d0:f1: a1:b5:3a:1c:d8:df:6a:9d:a7:60:e5:39:d2:97:d0:b2:db:d0: 18:36:f9:36:d2:8b:07:20:21:66:e8:4d:3e:1a:2f:87:98:45: 53:93:2c:36:29:cc:ce:6e:20:a9:e3:8a:bd:22:e1:af:3c:4e: 2b:93:0e:49:fc:ec:02:c4:93:4d:bd:d3:25:cd:58:ba:7f:7d: a9:6c:30:c4:49:b0:38:e1:f9:ca:f4:3e:74:6d:60:42:c3:7f: d3:1d:8d:ac:31:48:44:51:62:7f:7b:7b:33:7e:cd:1b:e5:1a: 4e:16:e5:5a:fe:d5:3c:fb:d3:54:99:ea:a8:42:5c:e4:e3:0f: a2:f6:c0:79:36:94:c4:db:cb:9d:4b:d8:df:21:c9:18:1c:59: fa:b3:9a:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+aRhMG+iINyhl9Esmy5jvI5J7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2 QzRFREMzMjAeFw0yNjA2MTcwNTU1MDVaFw0yNjA2MTgwOTIwMDVaMDMxMTAvBgNV BAMTKEI1MjkwMzFEQzIwNkFEMkJBRjczMUM2MzcxNzI2RUQ4OUFBREQwM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kjAaUc6bBOCyeN+u8ie0pHjv ULKGGgpfW+RBGIbkysXECMP8mIu3UFexL4yHGE1GXQ1Au3O7POEEnhMjHGg//BeP izlRGa8MUhR5EqitrUoOvov/LA/spnW39qP8MhHnXe0PycDKWzxUIW2VaM84b5n/ xWR56HxhCck0VnTUDRVY7d578Izm5QEZzYd46Lo348oRPV2/wdM2WtthY1wFpiei vqcGuzKTh5ltBFmRmpnTOxepPD4CY4vzCwaLiX/akr5x99GI5iqOOaR1/KhB7knT kEdOfuqmkeddp/QFg/SLboO7g8QbMse4oRgM2jI+blS6gw3tZl/u3rk71P9FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtSkDHcIGrSuvcxxjcXJu2Jqt0DswHwYDVR0j BBgwFoAUyKJ3s97IwPCqTB+lQugZNmxO3DIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIyNmIzZTEtZDdmNi00NjVlLTgzMDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNE RUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2QzRFREMzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEEyNzdCM0RFQzhDMEYwQUE0QzFGQTU0MkU4MTkzNjZDNEVE QzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5 MzY2QzRFREMzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAM5nxTz30heX355/EsNXUJh0MuIMvkcGzrf qRPm/4AcwQuiElHjTcEN1RYdFSLYJbPWe8srO7d2KJ/+GoacDhG6cC+LBGn6Lf2m 1gPTmf+4uifktFng+Q8KVjoE5HC6hSkqp25OxEgOaLfQ8aG1OhzY32qdp2DlOdKX 0LLb0Bg2+TbSiwcgIWboTT4aL4eYRVOTLDYpzM5uIKnjir0i4a88TiuTDkn87ALE k0290yXNWLp/falsMMRJsDjh+cr0PnRtYELDf9MdjawxSERRYn97ezN+zRvlGk4W 5Vr+1Tz701SZ6qhCXOTjD6L2wHk2lMTby51L2N8hyRgcWfqzmvA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:39 2026 by rpki-client