$ rpki-client -vvf rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft File: D85622299CA02E9652CA0DB7304F71B950BF346D.mft (raw, json) Hash identifier: g8EdkjbThkDQ7Alv7jg/p52wlKWw4JDfBwNlpsn6sBk= Subject key identifier: 81:11:AA:70:B5:94:E0:33:B8:1C:B2:E5:F1:63:5F:06:6B:EE:85:0B Authority key identifier: D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D Certificate issuer: /CN=D85622299CA02E9652CA0DB7304F71B950BF346D Certificate serial: 7245105C413E4BA330DFD36766097F70E3D53B92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 02:41:06 +0000 Manifest this update: Sun 14 Jun 2026 02:36:06 +0000 Manifest next update: Mon 15 Jun 2026 03:48:06 +0000 Files and hashes: 1: D85622299CA02E9652CA0DB7304F71B950BF346D.crl (hash: 92OMEn8Za7I0zDHq/iee1xnS4YaVmSuCqymDm+P8Bbg=) 2: 323430313a613565303a3a2f33322d3438203d3e20313532383130.roa (hash: EjCZCWM26KDivUXMEfL07ocLZOd7dbm1FkmvXFA+kQY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 03:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:45:10:5c:41:3e:4b:a3:30:df:d3:67:66:09:7f:70:e3:d5:3b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85622299CA02E9652CA0DB7304F71B950BF346D Validity Not Before: Jun 14 02:36:06 2026 GMT Not After : Jun 15 03:48:06 2026 GMT Subject: CN=8111AA70B594E033B81CB2E5F1635F066BEE850B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b5:72:e8:bf:f0:86:4d:58:33:6d:3f:fa:0f: 58:db:6c:1b:09:2e:c4:df:a2:51:13:4e:86:61:3e: 04:7e:18:48:4b:9a:f1:dc:15:e7:04:6c:02:58:1f: 56:86:43:99:4b:ff:53:5c:06:f1:46:a3:36:63:48: 63:fc:8e:55:6f:ba:55:be:a7:47:d3:a9:29:6b:47: 71:46:3b:40:72:54:5b:25:5f:42:08:19:39:3f:71: 99:07:16:39:7c:b6:0a:b2:9a:d2:0d:64:43:12:c2: 36:e1:36:3c:a8:45:c4:63:d5:de:e1:4f:93:8d:15: 91:a0:11:d5:5e:d9:13:60:48:13:25:19:d2:44:35: b6:13:f6:f7:2e:ca:8a:c7:7a:56:f0:af:24:c1:8a: 66:5f:92:98:8d:1e:41:ec:21:a6:13:32:96:fe:ff: 45:c0:21:a6:c1:18:75:f5:86:ce:00:fc:aa:91:17: 4f:91:d4:92:82:0f:53:f8:79:17:70:89:01:30:06: 69:5d:de:ef:03:7e:49:e4:6c:d9:b7:02:5a:b9:e1: 48:42:5f:ee:e2:00:8d:05:ce:91:61:54:03:ca:d4: e3:84:67:1d:6c:91:61:3f:d4:32:c2:6f:0c:89:b1: 35:27:0b:75:68:ce:42:e4:c7:be:78:11:90:ac:33: 6f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:11:AA:70:B5:94:E0:33:B8:1C:B2:E5:F1:63:5F:06:6B:EE:85:0B X509v3 Authority Key Identifier: keyid:D8:56:22:29:9C:A0:2E:96:52:CA:0D:B7:30:4F:71:B9:50:BF:34:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85622299CA02E9652CA0DB7304F71B950BF346D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/1/D85622299CA02E9652CA0DB7304F71B950BF346D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:24:83:ec:ed:d3:f7:39:ef:0f:f1:da:fa:db:0e:8e:42:ea: 61:da:26:b3:90:de:62:de:9d:39:06:eb:f3:a5:18:1c:bb:c4: 80:81:d5:69:30:ff:53:bf:98:89:f0:0a:5f:85:3e:63:38:89: 4c:81:33:32:e5:f5:cc:9b:bd:7f:0a:38:79:df:ca:3c:53:76: 5b:e4:b1:d3:fd:73:1c:da:e2:3c:9c:38:32:d7:c4:93:94:38: fd:66:5e:8a:0b:b0:e8:a5:f0:b4:e8:53:ac:b6:2c:ec:2d:87: ff:cd:db:21:f7:36:51:37:f2:ea:d5:99:54:95:4b:fb:2b:61: e1:ed:00:ac:6a:18:db:15:98:06:00:25:ec:50:6d:99:2c:e7: 32:2a:22:63:80:63:76:39:a2:bd:f7:a5:d2:64:f8:cf:c0:74: 6f:d2:dd:e8:9a:67:d8:c6:18:a2:85:3c:1b:2f:64:41:89:38: 49:e9:d0:db:85:eb:8b:95:03:fb:ab:eb:1a:3b:e5:b1:1b:6c: bb:c7:16:99:50:8c:d8:e8:bf:bd:79:2d:b7:a9:5f:68:c3:19: 8e:1f:0a:2e:84:c4:bf:ac:be:f1:15:83:b9:46:7e:88:db:05: 1a:53:86:39:3e:13:d4:63:5f:33:75:4b:63:22:0c:75:35:3a: d6:eb:25:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUckUQXEE+S6Mw39NnZgl/cOPVO5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1 MEJGMzQ2RDAeFw0yNjA2MTQwMjM2MDZaFw0yNjA2MTUwMzQ4MDZaMDMxMTAvBgNV BAMTKDgxMTFBQTcwQjU5NEUwMzNCODFDQjJFNUYxNjM1RjA2NkJFRTg1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMtXLov/CGTVgzbT/6D1jbbBsJ LsTfolETToZhPgR+GEhLmvHcFecEbAJYH1aGQ5lL/1NcBvFGozZjSGP8jlVvulW+ p0fTqSlrR3FGO0ByVFslX0IIGTk/cZkHFjl8tgqymtINZEMSwjbhNjyoRcRj1d7h T5ONFZGgEdVe2RNgSBMlGdJENbYT9vcuyorHelbwryTBimZfkpiNHkHsIaYTMpb+ /0XAIabBGHX1hs4A/KqRF0+R1JKCD1P4eRdwiQEwBmld3u8DfknkbNm3Alq54UhC X+7iAI0FzpFhVAPK1OOEZx1skWE/1DLCbwyJsTUnC3VozkLkx754EZCsM2+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgRGqcLWU4DO4HLLl8WNfBmvuhQswHwYDVR0j BBgwFoAU2FYiKZygLpZSyg23ME9xuVC/NG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODQ3NTMzOGQtN2FjYi00YWE3LWJlZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5 Q0EwMkU5NjUyQ0EwREI3MzA0RjcxQjk1MEJGMzQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODU2MjIyOTlDQTAyRTk2NTJDQTBEQjczMDRGNzFCOTUwQkYz NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl ZGMtZDY0NTlmZDEzNTA0LzEvRDg1NjIyMjk5Q0EwMkU5NjUyQ0EwREI3MzA0Rjcx Qjk1MEJGMzQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAkg+zt0/c57w/x2vrbDo5C6mHaJrOQ3mLe nTkG6/OlGBy7xICB1Wkw/1O/mInwCl+FPmM4iUyBMzLl9cybvX8KOHnfyjxTdlvk sdP9cxza4jycODLXxJOUOP1mXooLsOil8LToU6y2LOwth//N2yH3NlE38urVmVSV S/srYeHtAKxqGNsVmAYAJexQbZks5zIqImOAY3Y5or33pdJk+M/AdG/S3eiaZ9jG GKKFPBsvZEGJOEnp0NuF64uVA/ur6xo75bEbbLvHFplQjNjov715LbepX2jDGY4f Ci6ExL+svvEVg7lGfojbBRpThjk+E9RjXzN1S2MiDHU1OtbrJXc= -----END CERTIFICATE-----Generated at Sun Jun 14 08:05:41 2026 by rpki-client