$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft File: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft (raw, json) Hash identifier: HZSA/KddAFwqDtjSNyBhKnx9vyaM1C6qupgVg0/4EbM= Subject key identifier: 4B:2E:6A:26:0F:C0:25:DE:19:BF:03:3B:82:7D:48:26:F1:A4:5E:FD Authority key identifier: F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 Certificate issuer: /CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Certificate serial: 036DE167210E8C7D7541365C76D9999BAF6381C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:04:52 +0000 Manifest this update: Tue 16 Jun 2026 16:59:52 +0000 Manifest next update: Wed 17 Jun 2026 17:57:52 +0000 Files and hashes: 1: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl (hash: IYLMo2p8Hmkti6uIoleXslgRIe/DCp/PIw5DBzD/RSs=) 2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: shXgjYK0NRlHgehnbq1wzNndxumpi8gg30laew1y7t0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6d:e1:67:21:0e:8c:7d:75:41:36:5c:76:d9:99:9b:af:63:81:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Validity Not Before: Jun 16 16:59:52 2026 GMT Not After : Jun 17 17:57:52 2026 GMT Subject: CN=4B2E6A260FC025DE19BF033B827D4826F1A45EFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:46:38:bd:68:54:bd:0b:d2:28:e3:ec:de: a2:65:43:95:35:f3:6c:39:98:14:20:9a:12:70:5c: fc:a3:24:27:90:b6:53:44:83:c8:87:e9:3e:e5:21: 88:13:6f:c7:4d:65:b5:53:35:59:82:8f:e6:00:02: 20:54:a9:a1:a1:1f:7d:e3:af:f8:28:4d:14:fa:52: 05:2d:4e:fb:af:47:cd:01:74:8f:2d:54:5d:b5:f8: 6c:d9:8e:af:78:2e:57:c8:36:3c:68:b2:0b:be:e7: c9:c1:76:f1:5d:11:c2:24:ef:71:5c:55:95:f2:a5: 74:8d:ed:f7:9d:cf:9c:a7:10:1e:3b:8c:ec:fa:9e: b5:e6:53:da:08:07:79:b3:20:85:7b:df:1b:ca:dd: 48:5a:9b:cd:95:d4:72:8e:24:1f:85:d5:49:44:fe: c1:82:2c:d5:e6:e3:c0:f5:89:ee:f0:49:43:7a:fb: db:66:dd:26:a9:e7:42:02:ed:ca:a9:c5:5b:39:a4: 0c:c7:e8:3e:50:23:fa:59:4a:df:3f:47:02:67:ba: 1d:3d:70:db:d4:e9:f7:94:f7:c8:35:d2:c8:22:8b: a3:41:aa:8f:30:c5:da:07:7d:9c:57:55:a3:e3:6d: a2:36:b0:35:5a:ec:47:96:19:d6:a8:3c:10:28:2e: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2E:6A:26:0F:C0:25:DE:19:BF:03:3B:82:7D:48:26:F1:A4:5E:FD X509v3 Authority Key Identifier: keyid:F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5e:50:64:9a:54:a0:77:0f:5e:c6:e8:5d:79:c8:4b:42:30: c0:7a:01:74:0b:64:f9:a0:79:62:ad:b8:85:d3:2c:00:b8:aa: 8d:18:fd:49:a7:bc:7b:10:f4:5a:c8:27:c5:05:3a:06:36:60: 0e:77:e3:91:23:af:be:fc:d7:36:27:e3:b0:eb:d4:a6:d5:90: 5b:be:df:79:be:27:fd:d7:29:15:47:06:00:a3:a0:b4:7e:86: f4:9b:33:bf:3a:ba:43:a3:9c:fd:b3:d5:db:80:e2:33:be:4b: 8f:ba:5c:e8:8d:9c:99:88:5a:a6:55:8d:77:db:9d:de:55:f0: 71:21:b5:0c:6a:28:34:6a:6f:90:7e:f7:1a:d0:26:ba:b9:c5: 39:06:c2:b2:83:21:ff:ad:b0:14:d8:e1:b4:88:47:5c:b1:65: 89:d5:ec:7e:cf:98:3d:07:8d:b6:d1:33:09:78:b3:e6:77:ce: a9:1c:12:bd:96:d0:fb:62:99:3c:e2:1b:48:98:cf:52:80:be: 22:82:9d:92:5d:90:d3:de:f2:4f:bf:4c:93:4f:d7:54:b6:5b: d8:9c:d4:92:f1:cc:77:97:d4:5e:4a:2d:f7:e1:aa:a2:a9:cb: 1c:35:85:b6:80:f2:4d:49:34:6d:9c:d1:c2:93:d6:0d:4f:41: 65:4d:af:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA23hZyEOjH11QTZcdtmZm69jgcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1RkUx QzUzNUJFMzAeFw0yNjA2MTYxNjU5NTJaFw0yNjA2MTcxNzU3NTJaMDMxMTAvBgNV BAMTKDRCMkU2QTI2MEZDMDI1REUxOUJGMDMzQjgyN0Q0ODI2RjFBNDVFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYp0Y4vWhUvQvSKOPs3qJlQ5U1 82w5mBQgmhJwXPyjJCeQtlNEg8iH6T7lIYgTb8dNZbVTNVmCj+YAAiBUqaGhH33j r/goTRT6UgUtTvuvR80BdI8tVF21+GzZjq94LlfINjxosgu+58nBdvFdEcIk73Fc VZXypXSN7fedz5ynEB47jOz6nrXmU9oIB3mzIIV73xvK3Uham82V1HKOJB+F1UlE /sGCLNXm48D1ie7wSUN6+9tm3Sap50IC7cqpxVs5pAzH6D5QI/pZSt8/RwJnuh09 cNvU6feU98g10sgii6NBqo8wxdoHfZxXVaPjbaI2sDVa7EeWGdaoPBAoLjYZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSy5qJg/AJd4ZvwM7gn1IJvGkXv0wHwYDVR0j BBgwFoAU+OJKtL6rPv7d3U4f0ukF/hxTW+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MzNkY2YtOWY1ZS00Nzc1LTljZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRC RUFCM0VGRUREREQ0RTFGRDJFOTA1RkUxQzUzNUJFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEUyNEFCNEJFQUIzRUZFRERERDRFMUZEMkU5MDVGRTFDNTM1 QkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1 RkUxQzUzNUJFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACheUGSaVKB3D17G6F15yEtCMMB6AXQLZPmg eWKtuIXTLAC4qo0Y/UmnvHsQ9FrIJ8UFOgY2YA5345Ejr7781zYn47Dr1KbVkFu+ 33m+J/3XKRVHBgCjoLR+hvSbM786ukOjnP2z1duA4jO+S4+6XOiNnJmIWqZVjXfb nd5V8HEhtQxqKDRqb5B+9xrQJrq5xTkGwrKDIf+tsBTY4bSIR1yxZYnV7H7PmD0H jbbRMwl4s+Z3zqkcEr2W0PtimTziG0iYz1KAviKCnZJdkNPe8k+/TJNP11S2W9ic 1JLxzHeX1F5KLffhqqKpyxw1hbaA8k1JNG2c0cKT1g1PQWVNr80= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:01 2026 by rpki-client