$ rpki-client -vvf rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft File: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft (raw, json) Hash identifier: 0hcSA1lvbHOIy2UVkbd+8y6YGT2kRNR+y98kQc3qiRc= Subject key identifier: 5B:16:73:ED:EA:CA:9C:4D:57:D9:E1:A8:F7:F2:69:A3:E7:EE:29:C9 Authority key identifier: 8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 Certificate issuer: /CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Certificate serial: 18EA7E9E7715C60ADE41E334ECF134ECDF1AB202 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:44:14 +0000 Manifest this update: Tue 16 Jun 2026 20:39:14 +0000 Manifest next update: Wed 17 Jun 2026 21:39:14 +0000 Files and hashes: 1: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl (hash: P4EmWZibRLWWpDObK3AOAejYsjMlmY77ZuFc7FwGcwE=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: NR10Bfbwh6SYopHFVcr7fLYC1ZrjLqSPhi8hfWEGSfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ea:7e:9e:77:15:c6:0a:de:41:e3:34:ec:f1:34:ec:df:1a:b2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Validity Not Before: Jun 16 20:39:14 2026 GMT Not After : Jun 17 21:39:14 2026 GMT Subject: CN=5B1673EDEACA9C4D57D9E1A8F7F269A3E7EE29C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:fa:eb:65:65:bb:7d:9a:d7:70:2f:a8:a7: f6:5f:f0:7c:2f:eb:25:48:4e:4a:f4:ce:58:eb:bd: 66:8a:73:c5:df:c1:27:da:2e:b3:70:06:52:dc:ae: 86:f7:5e:e4:41:9e:69:db:8a:3f:21:31:6f:3e:1f: d1:48:65:d8:fa:73:34:51:dc:3d:4e:f1:39:af:e1: 9e:3c:40:86:a2:e2:77:be:ec:61:99:32:b9:bd:f5: 61:1c:06:ab:19:f8:11:2f:83:ca:8f:97:23:39:22: c4:c7:f1:6c:5e:6a:e6:f8:c9:81:67:86:00:0a:1b: 8c:7d:8e:07:70:17:34:66:7b:2c:8a:c1:39:85:1c: d3:b1:c3:1f:a4:d4:39:53:5f:e7:a7:2f:b9:13:39: 9b:06:0e:ec:1a:30:de:a0:51:65:7b:f3:50:35:f8: 4a:13:50:56:f6:e1:03:f6:52:2a:b4:13:71:fe:dd: 54:4d:11:84:25:16:1c:d6:07:ad:76:27:c0:54:ca: aa:4b:5f:09:2e:8a:91:af:c8:f5:40:34:91:a7:13: 99:7c:b0:b2:fb:b0:cf:de:b1:8b:00:b4:3b:e2:93: 41:86:79:27:ad:1b:ac:17:5b:63:79:1e:ed:c9:cf: 56:d5:6d:c7:df:1c:0f:f7:fb:8b:d9:0e:69:e0:49: ac:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:16:73:ED:EA:CA:9C:4D:57:D9:E1:A8:F7:F2:69:A3:E7:EE:29:C9 X509v3 Authority Key Identifier: keyid:8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:de:9f:5e:72:52:bc:86:ff:26:91:8f:e7:e1:0d:b4:8e:73: 25:11:6d:fe:6d:97:85:e0:2b:e5:3d:7d:f1:78:8b:e6:16:6b: 8a:02:2c:c7:89:ae:a5:66:41:4b:d8:ea:1a:9c:cd:2f:d6:01: 55:ab:f6:05:e5:58:67:39:19:a4:b6:7d:65:3f:04:74:a8:b5: 15:fc:82:0c:f6:ee:6f:d8:5c:fe:6a:47:aa:5b:0a:68:88:eb: 03:07:27:5c:31:a1:54:03:66:b2:45:ae:00:9b:33:eb:f2:8b: 54:2c:9f:4f:7a:75:e4:05:80:38:7c:4f:6b:5e:34:50:47:fa: e2:0c:f1:8d:c5:b1:bb:56:bc:42:47:c5:ad:af:2e:ee:e8:75: 5e:cf:53:03:09:d1:c6:7d:62:c9:b3:b1:34:34:70:a9:e3:71: 67:fa:f1:fa:52:63:00:4d:c4:87:09:ea:2b:42:b9:e4:66:2e: db:23:bb:fd:15:b5:47:6c:ab:b4:30:72:ac:2d:cf:97:11:d0: bc:37:aa:f1:57:38:47:b7:e4:37:55:06:69:2f:6e:32:cb:23: 60:41:fa:ee:1b:45:83:48:eb:94:79:c7:44:2e:f5:b3:78:43: 0b:c9:bf:83:8b:29:c6:ee:e7:c3:f3:dc:0e:94:66:a5:f2:3c: fe:df:9d:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGOp+nncVxgreQeM07PE07N8asgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5 QjFCNDU3MzAeFw0yNjA2MTYyMDM5MTRaFw0yNjA2MTcyMTM5MTRaMDMxMTAvBgNV BAMTKDVCMTY3M0VERUFDQTlDNEQ1N0Q5RTFBOEY3RjI2OUEzRTdFRTI5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxvrrZWW7fZrXcC+op/Zf8Hwv 6yVITkr0zljrvWaKc8XfwSfaLrNwBlLcrob3XuRBnmnbij8hMW8+H9FIZdj6czRR 3D1O8Tmv4Z48QIai4ne+7GGZMrm99WEcBqsZ+BEvg8qPlyM5IsTH8Wxeaub4yYFn hgAKG4x9jgdwFzRmeyyKwTmFHNOxwx+k1DlTX+enL7kTOZsGDuwaMN6gUWV781A1 +EoTUFb24QP2Uiq0E3H+3VRNEYQlFhzWB612J8BUyqpLXwkuipGvyPVANJGnE5l8 sLL7sM/esYsAtDvik0GGeSetG6wXW2N5Hu3Jz1bVbcffHA/3+4vZDmngSax7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWxZz7erKnE1X2eGo9/Jpo+fuKckwHwYDVR0j BBgwFoAUjRqU6g+f1RSOCcrgowe9yZsbRXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2MjExMWQtMGExMy00NDA3LWFmMzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEw RjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5QjFCNDU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDFBOTRFQTBGOUZENTE0OEUwOUNBRTBBMzA3QkRDOTlCMUI0 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JE Qzk5QjFCNDU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHen15yUryG/yaRj+fhDbSOcyURbf5tl4Xg K+U9ffF4i+YWa4oCLMeJrqVmQUvY6hqczS/WAVWr9gXlWGc5GaS2fWU/BHSotRX8 ggz27m/YXP5qR6pbCmiI6wMHJ1wxoVQDZrJFrgCbM+vyi1Qsn096deQFgDh8T2te NFBH+uIM8Y3FsbtWvEJHxa2vLu7odV7PUwMJ0cZ9YsmzsTQ0cKnjcWf68fpSYwBN xIcJ6itCueRmLtsju/0VtUdsq7Qwcqwtz5cR0Lw3qvFXOEe35DdVBmkvbjLLI2BB +u4bRYNI65R5x0Qu9bN4QwvJv4OLKcbu58Pz3A6UZqXyPP7fncQ= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:17 2026 by rpki-client