$ rpki-client -vvf rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft File: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft (raw, json) Hash identifier: 1rXydo786wdW6HSao/6mHA5lvOCaslQdQc7isKAe4vo= Subject key identifier: 3D:1D:45:83:F3:57:E6:6A:A0:68:D1:6D:E5:AD:1B:75:A6:09:7E:C9 Authority key identifier: 8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C Certificate issuer: /CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C Certificate serial: 3EFF46C90DEFBF5E8E70B5D05B4AA48A8E4FCA76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:12:48 +0000 Manifest this update: Wed 17 Jun 2026 08:07:48 +0000 Manifest next update: Thu 18 Jun 2026 10:05:48 +0000 Files and hashes: 1: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: wesRzy414+ZceFD9/gwocQJzbKqVZ+NX+KTjHeWFakA=) 2: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: HIdPJqjIrOEvu8Fg+POUaS/pAuaPSBpatCRmSscMNd8=) 3: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl (hash: opp5od9Au/G10LmfKlywPgAZT+lT8OgBvx4/jE0VFcs=) 4: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: Bi2PlajLpuJF5Q77N7WIyjkq2NapiUAEv+5ltKF4LBc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ff:46:c9:0d:ef:bf:5e:8e:70:b5:d0:5b:4a:a4:8a:8e:4f:ca:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C Validity Not Before: Jun 17 08:07:48 2026 GMT Not After : Jun 18 10:05:48 2026 GMT Subject: CN=3D1D4583F357E66AA068D16DE5AD1B75A6097EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cc:54:f8:f2:01:35:9b:c6:9c:07:61:ef:7f: 60:21:1c:92:bc:a8:5c:8a:0c:0f:3b:d2:fd:d4:1f: 03:50:84:6b:79:ca:9a:53:28:b3:60:ad:44:e5:12: 24:61:a3:e2:63:b3:72:55:fa:cf:35:10:19:aa:db: ae:be:ed:89:4d:89:56:2c:d7:21:35:de:4f:c0:26: f5:52:9f:b6:ec:6b:4d:4d:21:ec:14:bc:22:2e:e3: 0d:cf:ee:f7:da:28:94:5e:df:f3:5c:76:20:0a:20: f2:33:a7:ad:fa:e6:75:45:1f:94:a8:58:1f:bc:4b: 6c:50:1e:57:78:03:88:62:ae:02:20:e3:52:5e:cb: bb:bc:29:d5:67:64:84:09:e5:49:77:34:40:aa:a8: 82:13:24:53:ef:fa:e2:d4:4b:f6:0c:de:d5:e4:16: 0a:34:3a:78:85:e7:8c:1d:2b:25:62:3e:7e:ad:5f: 54:9f:c4:c9:e9:22:01:eb:2c:8b:8e:da:ab:47:93: b8:4e:05:51:1b:e8:a1:bf:94:f4:7b:29:d5:3c:60: 30:cd:28:b8:91:37:0e:72:fb:a8:bb:ba:2c:dd:ff: 49:15:9f:75:e2:c9:53:42:e7:3a:cd:d6:e6:74:c3: 84:fc:ca:4d:fe:90:c7:a6:ea:16:67:80:78:07:ad: 09:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1D:45:83:F3:57:E6:6A:A0:68:D1:6D:E5:AD:1B:75:A6:09:7E:C9 X509v3 Authority Key Identifier: keyid:8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:32:0e:0e:f4:2f:f8:26:33:c4:bb:f2:f1:7b:17:75:7b:7c: f9:60:ec:f9:6c:49:a1:92:1b:e2:52:7a:b1:07:0a:99:27:84: ad:bc:60:35:b8:87:18:2d:e4:e6:4a:4b:24:57:1f:24:84:c2: ae:bf:a6:6c:c2:08:1e:5a:45:3d:ff:e4:83:e8:93:78:1d:ea: 5a:55:ac:1d:2d:94:9f:b8:c8:b4:c4:e1:97:ec:e6:1d:0f:2c: 33:fb:53:09:3e:68:a6:f7:fa:e5:a6:30:bc:f7:06:9c:60:a4: 6d:b4:ae:7f:6b:e4:9e:ae:39:42:76:01:be:b6:7b:cb:16:f1: 97:dd:f0:02:98:fc:c5:95:6c:c8:d3:01:c7:ae:7a:e1:6b:da: 68:52:ed:5e:30:0d:d8:d2:17:d1:7f:09:c3:29:ec:8f:1f:71: 6a:d5:5d:55:17:e0:d7:32:2f:07:a8:f5:94:8c:ce:89:fc:9e: 88:c2:00:8b:1f:c0:29:c1:f3:c8:62:1b:14:68:35:d1:0d:be: cb:28:85:f2:cf:a1:72:f0:ed:be:e6:d7:51:43:50:e4:92:fa: a7:dc:d7:2f:b2:dc:15:83:0f:a6:e0:9f:df:7d:c5:39:46:3b: 30:3c:d0:5a:c3:c2:0e:f1:a5:32:ab:ba:f4:a0:5d:20:01:dd: 72:f5:96:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPv9GyQ3vv16OcLXQW0qkio5PynYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQzOUQyMDdBNDlFMkE1QzFEOUZEOEE3QjI3RDM0NDg0 RUYxRTYyQzAeFw0yNjA2MTcwODA3NDhaFw0yNjA2MTgxMDA1NDhaMDMxMTAvBgNV BAMTKDNEMUQ0NTgzRjM1N0U2NkFBMDY4RDE2REU1QUQxQjc1QTYwOTdFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFzFT48gE1m8acB2Hvf2AhHJK8 qFyKDA870v3UHwNQhGt5yppTKLNgrUTlEiRho+Jjs3JV+s81EBmq266+7YlNiVYs 1yE13k/AJvVSn7bsa01NIewUvCIu4w3P7vfaKJRe3/NcdiAKIPIzp6365nVFH5So WB+8S2xQHld4A4hirgIg41Jey7u8KdVnZIQJ5Ul3NECqqIITJFPv+uLUS/YM3tXk Fgo0OniF54wdKyViPn6tX1SfxMnpIgHrLIuO2qtHk7hOBVEb6KG/lPR7KdU8YDDN KLiRNw5y+6i7uizd/0kVn3XiyVNC5zrN1uZ0w4T8yk3+kMem6hZngHgHrQmhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPR1Fg/NX5mqgaNFt5a0bdaYJfskwHwYDVR0j BBgwFoAUjTnSB6SeKlwdn9insn00SE7x5iwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFiNGUxNGQtMDIxZC00MGRjLTkyM2EtYzEyZDFhZjQ0M2I1LzAvOEQzOUQyMDdB NDlFMkE1QzFEOUZEOEE3QjI3RDM0NDg0RUYxRTYyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84RDM5RDIwN0E0OUUyQTVDMUQ5RkQ4QTdCMjdEMzQ0ODRFRjFF NjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvOEQzOUQyMDdBNDlFMkE1QzFEOUZEOEE3QjI3RDM0 NDg0RUYxRTYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAyDg70L/gmM8S78vF7F3V7fPlg7PlsSaGS G+JSerEHCpknhK28YDW4hxgt5OZKSyRXHySEwq6/pmzCCB5aRT3/5IPok3gd6lpV rB0tlJ+4yLTE4Zfs5h0PLDP7Uwk+aKb3+uWmMLz3BpxgpG20rn9r5J6uOUJ2Ab62 e8sW8Zfd8AKY/MWVbMjTAceueuFr2mhS7V4wDdjSF9F/CcMp7I8fcWrVXVUX4Ncy Lweo9ZSMzon8nojCAIsfwCnB88hiGxRoNdENvssohfLPoXLw7b7m11FDUOSS+qfc 1y+y3BWDD6bgn999xTlGOzA80FrDwg7xpTKruvSgXSAB3XL1lu0= -----END CERTIFICATE-----Generated at Wed Jun 17 11:02:41 2026 by rpki-client