$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft File: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft (raw, json) Hash identifier: ebPR8NbBoHCscDzvKOteXWvgOxLd4ooObXM4NphrrCY= Subject key identifier: 9E:38:83:D9:66:7A:DC:B7:41:EC:2A:AD:0E:AF:5E:2A:25:DF:29:65 Authority key identifier: D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 Certificate issuer: /CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Certificate serial: 6D65A7D44EA270900AC4593E0EFA68A0A93EFD39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 05:15:20 +0000 Manifest this update: Sat 13 Jun 2026 05:10:20 +0000 Manifest next update: Sun 14 Jun 2026 08:29:20 +0000 Files and hashes: 1: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: L6oL2whYFSSKY1+OlvsQBxpegvioTL+JL/PrizaKM4w=) 2: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: dz8GDvSUHBxefCxM449tm0eNclhVLJnu4XpLW3XQ1J8=) 3: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: Jbbv7LheQBY4j7uxSO+OAvKD/NoLJjSel5LCZW8mlwI=) 4: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl (hash: bTTtNPBqggYyC6lyhdx5T/cY8v6oqRKHzOY55DujzQ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 08:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:65:a7:d4:4e:a2:70:90:0a:c4:59:3e:0e:fa:68:a0:a9:3e:fd:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Validity Not Before: Jun 13 05:10:20 2026 GMT Not After : Jun 14 08:29:20 2026 GMT Subject: CN=9E3883D9667ADCB741EC2AAD0EAF5E2A25DF2965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:67:69:c0:3c:03:3a:6f:cd:fa:db:71:7c: 44:f0:90:c8:a5:fe:e3:af:86:0a:39:1d:a8:bc:ca: 89:f2:2a:61:4d:97:6e:7d:a5:27:1a:49:45:39:73: 91:84:b6:5d:60:b9:97:9b:e2:9d:f6:24:37:e8:73: d9:03:86:39:dc:35:92:45:41:3d:a1:14:27:ba:20: 67:e0:df:54:2b:8b:75:aa:ed:ed:3c:1e:f3:01:75: 87:98:7d:23:39:8d:fa:4f:54:39:09:22:bc:1e:73: 71:a5:2d:6f:73:36:4f:4a:3a:59:0c:14:d7:e2:f4: 17:8a:c4:18:9b:8d:b5:17:c9:4a:6a:59:57:62:90: ce:3c:46:1d:5a:fd:aa:67:5d:cc:cb:65:d8:de:27: 91:8f:10:6d:cb:3b:37:b7:0c:9e:11:72:ba:56:44: 9d:66:a8:49:67:19:38:f8:9d:d4:1a:e1:0f:d4:22: 1e:4a:b2:d5:70:e2:b3:43:80:8a:63:e8:c3:98:c7: f5:ff:22:3b:9d:bf:d9:56:1f:3a:16:75:d1:f9:1a: 99:99:ab:5c:93:3b:96:e3:d9:fd:dc:61:6a:81:f2: fe:0e:32:4c:fa:dd:06:b8:c0:95:f4:5a:96:12:07: 15:ca:6b:33:3e:35:43:48:4f:f2:b5:8e:03:c2:e2: 6f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:38:83:D9:66:7A:DC:B7:41:EC:2A:AD:0E:AF:5E:2A:25:DF:29:65 X509v3 Authority Key Identifier: keyid:D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:39:da:9f:0d:9c:20:77:58:5f:4d:75:60:a6:54:06:cb:62: 6b:d9:ee:db:9b:7e:eb:3a:ad:da:0c:0a:ec:e3:42:df:84:3a: 13:d5:9f:67:fb:67:83:c4:70:9f:48:d8:6a:cf:e5:bd:cf:76: 86:71:e5:8e:ad:64:c6:79:cb:dc:7d:38:c4:78:90:52:47:cf: 39:e0:1c:af:c5:7f:84:7b:ca:b5:45:d6:bb:c0:53:6e:21:19: b8:7e:5c:64:60:02:98:a7:69:a7:4c:c8:81:16:43:da:a0:41: 92:7b:d6:13:81:73:d5:55:ef:6b:c6:91:69:86:be:d1:e1:cf: 6b:5c:6e:1f:50:a1:b7:55:62:45:36:6b:5a:59:dd:23:a6:8a: 06:b7:ca:c7:e4:ac:7d:c5:cf:b1:3e:de:4f:3d:5c:a1:42:1e: 4d:74:78:67:52:29:d9:f3:7a:ff:a6:d3:cb:77:46:c2:31:52: 68:38:3b:d2:51:1d:f8:91:c1:c4:87:c3:2e:13:d8:26:ca:a3: e2:57:1b:e9:3d:59:dc:bd:cb:eb:12:8d:b1:6b:88:f5:99:cf: ef:4b:e2:d0:58:ee:97:18:da:36:43:3e:85:54:d7:12:c8:44: d3:4a:17:43:78:f7:ef:c9:99:03:73:ac:df:f6:85:2c:fa:7a: 7d:78:1c:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWWn1E6icJAKxFk+DvpooKk+/TkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBC REYzRkQ4OTAeFw0yNjA2MTMwNTEwMjBaFw0yNjA2MTQwODI5MjBaMDMxMTAvBgNV BAMTKDlFMzg4M0Q5NjY3QURDQjc0MUVDMkFBRDBFQUY1RTJBMjVERjI5NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67GdpwDwDOm/N+ttxfETwkMil /uOvhgo5Hai8yonyKmFNl259pScaSUU5c5GEtl1guZeb4p32JDfoc9kDhjncNZJF QT2hFCe6IGfg31Qri3Wq7e08HvMBdYeYfSM5jfpPVDkJIrwec3GlLW9zNk9KOlkM FNfi9BeKxBibjbUXyUpqWVdikM48Rh1a/apnXczLZdjeJ5GPEG3LOze3DJ4RcrpW RJ1mqElnGTj4ndQa4Q/UIh5KstVw4rNDgIpj6MOYx/X/Ijudv9lWHzoWddH5GpmZ q1yTO5bj2f3cYWqB8v4OMkz63Qa4wJX0WpYSBxXKazM+NUNIT/K1jgPC4m8LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnjiD2WZ63LdB7CqtDq9eKiXfKWUwHwYDVR0j BBgwFoAU0oJVBnmOSO5Pa9C3yKS5gL3z/YkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGMxZTgwZDQtNmViZS00OTJjLWEwYzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3 OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBCREYzRkQ4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjgyNTUwNjc5OEU0OEVFNEY2QkQwQjdDOEE0Qjk4MEJERjNG RDg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5 ODBCREYzRkQ4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADM52p8NnCB3WF9NdWCmVAbLYmvZ7tubfus6 rdoMCuzjQt+EOhPVn2f7Z4PEcJ9I2GrP5b3PdoZx5Y6tZMZ5y9x9OMR4kFJHzzng HK/Ff4R7yrVF1rvAU24hGbh+XGRgApinaadMyIEWQ9qgQZJ71hOBc9VV72vGkWmG vtHhz2tcbh9QobdVYkU2a1pZ3SOmiga3ysfkrH3Fz7E+3k89XKFCHk10eGdSKdnz ev+m08t3RsIxUmg4O9JRHfiRwcSHwy4T2CbKo+JXG+k9Wdy9y+sSjbFriPWZz+9L 4tBY7pcY2jZDPoVU1xLIRNNKF0N49+/JmQNzrN/2hSz6en14HHQ= -----END CERTIFICATE-----Generated at Sun Jun 14 02:00:46 2026 by rpki-client