$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft File: 8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft (raw, json) Hash identifier: b4ZwewGRdwuIyp7DVmFsu2HaynMQC1LAgASy+kpMVzU= Subject key identifier: 96:47:E6:6A:6A:4B:A6:69:67:BD:BE:03:95:EA:59:14:57:76:1F:D6 Authority key identifier: 87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2 Certificate issuer: /CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2 Certificate serial: 64413F0D2B59B1B3C4B573BB94DFD49E8012EBA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 23:12:12 +0000 Manifest this update: Sat 13 Jun 2026 23:07:12 +0000 Manifest next update: Mon 15 Jun 2026 00:32:12 +0000 Files and hashes: 1: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: TG9ZchK6MwAHkiaJ/8wY22oJErP/aDt3mOhVppYOUpA=) 2: 8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl (hash: dJKenFm1t0xquGqyrFdErlO/F+G8fUHUMdvmlu/hy9A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:41:3f:0d:2b:59:b1:b3:c4:b5:73:bb:94:df:d4:9e:80:12:eb:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2 Validity Not Before: Jun 13 23:07:12 2026 GMT Not After : Jun 15 00:32:12 2026 GMT Subject: CN=9647E66A6A4BA66967BDBE0395EA591457761FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:98:d7:f6:66:df:f9:38:10:cb:1f:34:69: 6a:62:d3:f2:45:46:22:7d:4a:32:35:3b:f8:2f:54: b0:af:a9:d1:4d:cd:78:aa:d9:f9:f1:71:cf:37:b3: e0:8d:df:40:f7:f6:44:a1:58:01:54:3b:13:2d:de: 8c:25:c8:61:27:5d:c4:80:8a:da:fa:5a:2c:7f:b4: 2c:18:a3:0e:74:ef:d3:33:b5:be:51:4b:0e:9d:b2: 35:5d:e5:2d:eb:cd:23:f1:23:1f:6a:d5:bd:ee:6c: 0a:90:5a:fb:ee:d1:ff:a8:c5:ad:60:1d:6b:41:ef: 50:af:04:d8:f5:5a:3c:90:34:e2:71:0e:f3:0e:bd: a6:7c:05:02:fa:cb:8a:1d:0c:66:68:ef:7d:50:60: 56:06:4f:bc:18:98:9c:94:bf:a6:f9:3e:56:b1:8d: 75:ea:1d:71:32:08:e6:83:d1:67:61:ca:ce:bc:0b: 5a:b9:9e:e3:68:77:07:72:7b:89:09:33:95:a9:80: 2c:4f:8d:c0:92:61:16:51:e5:1a:2f:a0:bf:dc:16: 2f:40:b1:9c:be:8f:4e:67:8d:4f:a7:e6:8f:4d:14: da:e1:8c:8d:e7:c6:07:b4:2c:07:28:e8:29:55:d0: 81:d5:88:01:59:64:a6:0c:a6:1f:c6:99:e9:e2:5c: f9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:47:E6:6A:6A:4B:A6:69:67:BD:BE:03:95:EA:59:14:57:76:1F:D6 X509v3 Authority Key Identifier: keyid:87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c4:03:93:74:04:b6:48:89:bd:07:3d:91:b0:df:6d:c8:64: ca:fd:54:75:a3:b3:72:6d:07:f0:f4:63:35:2f:e7:19:3d:33: 35:d6:11:62:d5:5f:8f:25:ce:61:4b:bc:27:2e:78:28:fa:8a: fa:69:8b:1b:b6:48:31:cb:47:c7:e2:1c:31:cb:16:2e:43:b1: c2:8c:c1:55:ad:89:0a:f2:ac:22:10:3f:fb:23:b4:a2:ec:e7: c0:2e:90:f6:7c:e1:4e:77:e7:4a:24:e4:87:6a:c3:18:cb:a7: 7f:21:c2:0e:4d:53:1f:54:7b:0a:5d:f2:e6:40:ce:19:0d:48: f0:1b:ea:63:0b:45:e1:77:7e:52:ed:2e:bb:49:21:5d:1f:31: 03:4b:a4:4d:89:56:e8:54:c8:38:31:b0:5f:ae:e9:6e:2d:a9: 83:b2:bb:66:1c:4b:97:b5:e8:28:4f:a6:8d:25:3e:a3:1a:55: 98:dd:67:0b:82:19:0e:12:21:dd:64:0b:db:1a:c1:dc:bb:e7: 3b:86:09:0c:51:1c:bd:e8:17:76:71:78:7e:17:05:ea:72:3d: 63:b0:88:ea:16:9b:62:e5:4c:92:08:d3:f7:be:e2:09:4d:ed: 36:3f:a8:8d:17:92:ff:69:2f:37:ba:52:46:f5:29:ef:ce:be: 51:f4:2a:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZEE/DStZsbPEtXO7lN/UnoAS66MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcwM0JCNkYxRUJDN0FFMkZFODBEQ0I5Mjk1QkM4Njgy OTkwQjRCMjAeFw0yNjA2MTMyMzA3MTJaFw0yNjA2MTUwMDMyMTJaMDMxMTAvBgNV BAMTKDk2NDdFNjZBNkE0QkE2Njk2N0JEQkUwMzk1RUE1OTE0NTc3NjFGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCghpjX9mbf+TgQyx80aWpi0/JF RiJ9SjI1O/gvVLCvqdFNzXiq2fnxcc83s+CN30D39kShWAFUOxMt3owlyGEnXcSA itr6Wix/tCwYow5079Mztb5RSw6dsjVd5S3rzSPxIx9q1b3ubAqQWvvu0f+oxa1g HWtB71CvBNj1WjyQNOJxDvMOvaZ8BQL6y4odDGZo731QYFYGT7wYmJyUv6b5Plax jXXqHXEyCOaD0Wdhys68C1q5nuNodwdye4kJM5WpgCxPjcCSYRZR5RovoL/cFi9A sZy+j05njU+n5o9NFNrhjI3nxge0LAco6ClV0IHViAFZZKYMph/GmeniXPmDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlkfmampLpmlnvb4DlepZFFd2H9YwHwYDVR0j BBgwFoAUhwO7bx68euL+gNy5KVvIaCmQtLIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQ4N2JlZWQtNjMzMC00ZjMzLTkxMDUtODc3MjJjZGYyZGQwLzAvODcwM0JCNkYx RUJDN0FFMkZFODBEQ0I5Mjk1QkM4NjgyOTkwQjRCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzAzQkI2RjFFQkM3QUUyRkU4MERDQjkyOTVCQzg2ODI5OTBC NEIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvODcwM0JCNkYxRUJDN0FFMkZFODBEQ0I5Mjk1QkM4 NjgyOTkwQjRCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/EA5N0BLZIib0HPZGw323IZMr9VHWjs3Jt B/D0YzUv5xk9MzXWEWLVX48lzmFLvCcueCj6ivppixu2SDHLR8fiHDHLFi5DscKM wVWtiQryrCIQP/sjtKLs58AukPZ84U5350ok5IdqwxjLp38hwg5NUx9Uewpd8uZA zhkNSPAb6mMLReF3flLtLrtJIV0fMQNLpE2JVuhUyDgxsF+u6W4tqYOyu2YcS5e1 6ChPpo0lPqMaVZjdZwuCGQ4SId1kC9sawdy75zuGCQxRHL3oF3ZxeH4XBepyPWOw iOoWm2LlTJII0/e+4glN7TY/qI0Xkv9pLze6Ukb1Ke/OvlH0Ktk= -----END CERTIFICATE-----Generated at Sun Jun 14 02:43:56 2026 by rpki-client