$ rpki-client -vvf rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft File: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft (raw, json) Hash identifier: jmrPQcJuSsL1I76o0NUFpE4Rq7mlN0NZwdqpZ3KPJqA= Subject key identifier: 43:BD:23:12:95:81:FC:B3:75:E3:F1:20:25:B3:55:BE:02:E0:D5:F0 Authority key identifier: D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E Certificate issuer: /CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Certificate serial: 487375F4886C11A85132C5F041424663DE6A939D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 04:38:31 +0000 Manifest this update: Wed 17 Jun 2026 04:33:31 +0000 Manifest next update: Thu 18 Jun 2026 07:13:31 +0000 Files and hashes: 1: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: yr/oT9BlQ/M4JMNvCd0w0W7t+J3wxH6iIKEMfOlwP+M=) 2: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl (hash: txHjsBxRvJbWSdGVxEUHbAO6/szzok3BcykgqJGC8FM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:73:75:f4:88:6c:11:a8:51:32:c5:f0:41:42:46:63:de:6a:93:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Validity Not Before: Jun 17 04:33:31 2026 GMT Not After : Jun 18 07:13:31 2026 GMT Subject: CN=43BD23129581FCB375E3F12025B355BE02E0D5F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e9:62:05:3b:be:1a:24:4c:29:b9:0c:5f:83: 6d:08:39:3d:93:45:45:d7:53:12:3f:04:61:3e:30: 5b:a2:da:d7:12:c6:9c:6e:fc:3b:c2:fb:24:6a:b6: a7:24:ba:b0:c4:9f:19:11:11:05:3e:c6:5a:b4:2d: 3c:cd:dc:f7:61:cd:9d:6b:35:4f:ed:90:53:6e:1d: 10:26:5e:35:31:72:08:c6:9d:01:82:fd:28:78:21: 7a:5c:a8:bb:8a:62:72:61:7e:9f:1b:2f:66:d7:49: 01:d2:5f:d4:34:42:e2:56:26:53:d3:f3:72:51:8d: c5:7d:65:0c:4a:7e:08:f5:34:53:37:e1:02:18:94: 18:22:ec:75:2c:bd:05:f8:3d:08:b3:e3:7c:16:22: 41:75:92:f9:89:af:24:60:20:2c:98:2d:fb:a1:0a: 89:e6:3e:9b:f3:a9:f2:4a:60:c0:4f:1d:3e:bb:a0: 56:f7:71:13:cb:fd:6b:c2:e6:87:e9:3f:b2:cd:12: 6c:5f:a1:ac:66:d1:4b:88:c9:0e:f4:4b:fb:84:87: 99:8d:90:53:92:f7:b3:94:4b:b9:57:e4:2f:ca:0f: dc:a4:d2:1d:b9:83:17:2c:3b:4e:22:da:94:7c:f3: 94:db:0a:95:13:2e:f6:b6:11:41:21:ad:7a:82:13: 0d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BD:23:12:95:81:FC:B3:75:E3:F1:20:25:B3:55:BE:02:E0:D5:F0 X509v3 Authority Key Identifier: keyid:D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:dc:dd:09:57:c3:ea:aa:21:47:0b:7a:dc:8c:e8:a2:1d:36: 48:e7:d1:b4:7d:33:34:1d:ba:8f:b2:f6:d7:98:a9:21:ae:89: 38:fc:52:b0:4d:12:a7:ab:50:7c:92:76:64:fe:f9:6a:4f:a6: 11:c9:03:99:b4:3a:bb:42:bd:48:0f:d2:7f:16:00:e1:50:dd: 43:e8:81:35:5b:05:b3:57:21:28:5a:d2:2b:a3:63:bb:7f:13: 31:56:73:3e:0b:17:4a:37:f1:8d:2c:bf:6a:27:06:0a:aa:c0: b2:f6:57:89:a7:6d:f5:fa:a6:2b:64:5a:61:b7:2a:d0:de:59: 77:0b:e1:3c:04:f0:94:33:e6:db:e4:11:e2:f0:f0:ff:3a:c5: 70:21:4b:90:5b:8c:6a:d1:9f:e9:14:31:97:6d:a9:74:ea:42: f4:ba:05:47:fc:b9:49:18:15:18:aa:1d:05:4f:99:0a:d4:39: 5d:81:96:21:5a:f7:35:63:77:ca:8f:d7:69:4f:01:4b:c0:62: 0f:fa:8e:7f:65:58:9f:26:a2:8c:5f:4f:d5:13:e7:69:2a:cb: af:5e:a3:2a:26:c9:0a:8f:fd:23:19:fc:ea:bd:e0:92:7c:8f: 77:4b:62:f9:84:38:a3:6d:c3:a7:06:64:63:f9:34:0b:64:79: 6b:de:1e:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHN19IhsEahRMsXwQUJGY95qk50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThC Q0M3NEI4RTAeFw0yNjA2MTcwNDMzMzFaFw0yNjA2MTgwNzEzMzFaMDMxMTAvBgNV BAMTKDQzQkQyMzEyOTU4MUZDQjM3NUUzRjEyMDI1QjM1NUJFMDJFMEQ1RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX6WIFO74aJEwpuQxfg20IOT2T RUXXUxI/BGE+MFui2tcSxpxu/DvC+yRqtqckurDEnxkREQU+xlq0LTzN3PdhzZ1r NU/tkFNuHRAmXjUxcgjGnQGC/Sh4IXpcqLuKYnJhfp8bL2bXSQHSX9Q0QuJWJlPT 83JRjcV9ZQxKfgj1NFM34QIYlBgi7HUsvQX4PQiz43wWIkF1kvmJryRgICyYLfuh ConmPpvzqfJKYMBPHT67oFb3cRPL/WvC5ofpP7LNEmxfoaxm0UuIyQ70S/uEh5mN kFOS97OUS7lX5C/KD9yk0h25gxcsO04i2pR885TbCpUTLva2EUEhrXqCEw31AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ70jEpWB/LN14/EgJbNVvgLg1fAwHwYDVR0j BBgwFoAU0Mi0OuhfDwnUmHMpIyvs6LzHS44wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkZDRmMTYtNTcwZS00YzhjLWE5OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FF ODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThCQ0M3NEI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEM4QjQzQUU4NUYwRjA5RDQ5ODczMjkyMzJCRUNFOEJDQzc0 QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVD RThCQ0M3NEI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3c3QlXw+qqIUcLetyM6KIdNkjn0bR9MzQd uo+y9teYqSGuiTj8UrBNEqerUHySdmT++WpPphHJA5m0OrtCvUgP0n8WAOFQ3UPo gTVbBbNXISha0iujY7t/EzFWcz4LF0o38Y0sv2onBgqqwLL2V4mnbfX6pitkWmG3 KtDeWXcL4TwE8JQz5tvkEeLw8P86xXAhS5BbjGrRn+kUMZdtqXTqQvS6BUf8uUkY FRiqHQVPmQrUOV2BliFa9zVjd8qP12lPAUvAYg/6jn9lWJ8mooxfT9UT52kqy69e oyomyQqP/SMZ/Oq94JJ8j3dLYvmEOKNtw6cGZGP5NAtkeWveHrg= -----END CERTIFICATE-----Generated at Wed Jun 17 13:32:38 2026 by rpki-client