$ rpki-client -vvf rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft File: 8BBABE3D733222C2B6A217449635616F4F2C9625.mft (raw, json) Hash identifier: bND6CvMuErZYWAXB5d7JZqCaHs0HRokrPH2L5Vb0tbI= Subject key identifier: 00:88:7C:5D:85:A2:E2:A1:7F:CF:2F:77:4F:C9:8B:7D:9E:85:16:8E Authority key identifier: 8B:BA:BE:3D:73:32:22:C2:B6:A2:17:44:96:35:61:6F:4F:2C:96:25 Certificate issuer: /CN=8BBABE3D733222C2B6A217449635616F4F2C9625 Certificate serial: 7CDA099D85D51F60DDEA63916B3295434661BF37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 23:27:33 +0000 Manifest this update: Tue 16 Jun 2026 23:22:33 +0000 Manifest next update: Thu 18 Jun 2026 02:38:33 +0000 Files and hashes: 1: 8BBABE3D733222C2B6A217449635616F4F2C9625.crl (hash: jbXo89ZCCBkdRLd1pt0AXf7lIXc9rkixmGBdnqH/CbE=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: 3IjI2krzhLJYlKJkWyMM6q/EfNey4aUG89WZvwYr9zI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.crl rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:da:09:9d:85:d5:1f:60:dd:ea:63:91:6b:32:95:43:46:61:bf:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BBABE3D733222C2B6A217449635616F4F2C9625 Validity Not Before: Jun 16 23:22:33 2026 GMT Not After : Jun 18 02:38:33 2026 GMT Subject: CN=00887C5D85A2E2A17FCF2F774FC98B7D9E85168E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ac:24:58:bf:d1:37:99:fa:f9:d6:0e:34:4c: 37:e3:4b:a7:e1:e3:58:71:bd:c7:34:79:13:29:de: 96:cf:47:43:5c:aa:c7:1e:97:02:78:68:1c:8b:9e: 54:a1:ef:f8:40:08:e7:cd:48:30:15:c2:18:53:05: 6b:ba:4e:53:c0:c3:fa:49:17:e6:67:ea:cc:4c:13: 5f:19:b9:aa:76:ea:30:1d:c5:9d:65:af:55:f7:0c: a3:06:32:88:83:60:f3:ab:5d:8e:9c:1f:97:e7:25: a1:4f:ed:69:ab:d6:2c:3f:26:e8:3a:f1:6c:af:42: 4e:65:1a:e2:3f:2d:db:7e:90:4c:3f:0a:b0:5e:10: 1b:50:af:5a:43:e3:c8:cd:08:b4:54:df:2e:5d:23: 0a:0b:c5:4c:e6:2a:7e:0a:05:10:2a:c5:92:08:ca: 5d:57:3c:14:c6:de:e2:d2:90:ae:b6:39:49:7c:d8: 89:c7:b0:26:84:a4:07:0f:aa:b3:09:46:df:a3:96: ee:71:7c:f5:a5:34:74:e8:a7:be:c0:ff:87:85:c9: 8e:ec:04:1e:c0:c6:e8:aa:62:b0:c6:e7:c8:fe:8f: cd:fc:bc:c1:02:b4:ed:38:a1:5d:5a:b5:30:d0:a1: 49:07:b3:d7:fa:c5:ec:e5:e3:e2:40:db:ad:a7:47: 7c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:88:7C:5D:85:A2:E2:A1:7F:CF:2F:77:4F:C9:8B:7D:9E:85:16:8E X509v3 Authority Key Identifier: keyid:8B:BA:BE:3D:73:32:22:C2:B6:A2:17:44:96:35:61:6F:4F:2C:96:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:22:f2:a1:73:c4:e2:3a:e0:33:55:f8:e9:c3:d2:c2:4a:14: 50:61:c9:e1:ce:6a:2c:89:f9:f2:45:2b:10:ac:82:03:f2:68: a9:a6:f6:f7:4a:96:22:10:64:7a:8b:9e:62:1d:40:37:74:11: 7b:81:e2:d3:ec:16:60:cd:0d:b0:a3:94:56:5a:47:cb:ae:af: 05:0a:f6:d7:75:98:09:22:50:9b:d4:73:9e:83:77:38:d0:6e: e7:f1:7a:1e:2c:5d:4a:32:32:74:f2:33:dc:bf:23:6c:e2:28: 46:ed:f4:5e:84:4b:cd:54:11:3c:5d:a3:1c:29:8c:31:69:0c: b9:44:96:89:be:ac:1f:16:29:68:75:f5:db:d1:db:cd:47:d3: 14:59:18:0b:95:79:0e:c1:f9:f1:f4:52:a4:3e:3b:2d:75:eb: af:e7:3d:1d:9d:eb:2a:9a:d9:d6:25:bb:3f:ab:7c:8d:7c:c1: 1b:75:e0:0a:1a:5d:dd:b4:bd:81:38:87:5f:e7:c3:a8:d2:6d: dd:ff:1b:5d:4d:bc:35:68:9f:bb:52:61:fd:ef:89:12:77:e3: 1e:1d:0a:15:d2:97:40:64:d4:6e:99:93:8f:56:33:f4:68:e0: 4d:3b:62:7d:0a:61:79:22:27:75:2b:66:2e:cc:c5:a7:d4:f6: 89:84:fb:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNoJnYXVH2Dd6mORazKVQ0ZhvzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJCQUJFM0Q3MzMyMjJDMkI2QTIxNzQ0OTYzNTYxNkY0 RjJDOTYyNTAeFw0yNjA2MTYyMzIyMzNaFw0yNjA2MTgwMjM4MzNaMDMxMTAvBgNV BAMTKDAwODg3QzVEODVBMkUyQTE3RkNGMkY3NzRGQzk4QjdEOUU4NTE2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWrCRYv9E3mfr51g40TDfjS6fh 41hxvcc0eRMp3pbPR0NcqscelwJ4aByLnlSh7/hACOfNSDAVwhhTBWu6TlPAw/pJ F+Zn6sxME18Zuap26jAdxZ1lr1X3DKMGMoiDYPOrXY6cH5fnJaFP7Wmr1iw/Jug6 8WyvQk5lGuI/Ldt+kEw/CrBeEBtQr1pD48jNCLRU3y5dIwoLxUzmKn4KBRAqxZII yl1XPBTG3uLSkK62OUl82InHsCaEpAcPqrMJRt+jlu5xfPWlNHTop77A/4eFyY7s BB7AxuiqYrDG58j+j838vMECtO04oV1atTDQoUkHs9f6xezl4+JA262nR3yxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAIh8XYWi4qF/zy93T8mLfZ6FFo4wHwYDVR0j BBgwFoAUi7q+PXMyIsK2ohdEljVhb08sliUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFmMDAzMWUtMmE5ZS00N2NhLTkyODMtNDBlOTI3ZTM1OTkzLzAvOEJCQUJFM0Q3 MzMyMjJDMkI2QTIxNzQ0OTYzNTYxNkY0RjJDOTYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkJBQkUzRDczMzIyMkMyQjZBMjE3NDQ5NjM1NjE2RjRGMkM5 NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvOEJCQUJFM0Q3MzMyMjJDMkI2QTIxNzQ0OTYzNTYx NkY0RjJDOTYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEi8qFzxOI64DNV+OnD0sJKFFBhyeHOaiyJ +fJFKxCsggPyaKmm9vdKliIQZHqLnmIdQDd0EXuB4tPsFmDNDbCjlFZaR8uurwUK 9td1mAkiUJvUc56DdzjQbufxeh4sXUoyMnTyM9y/I2ziKEbt9F6ES81UETxdoxwp jDFpDLlElom+rB8WKWh19dvR281H0xRZGAuVeQ7B+fH0UqQ+Oy1166/nPR2d6yqa 2dYluz+rfI18wRt14AoaXd20vYE4h1/nw6jSbd3/G11NvDVon7tSYf3viRJ34x4d ChXSl0Bk1G6Zk49WM/Ro4E07Yn0KYXkiJ3UrZi7MxafU9omE+1c= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:35 2026 by rpki-client