$ rpki-client -vvf rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft File: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft (raw, json) Hash identifier: 6Z2Ac2xhXlO6zc74vE5RzlM7x2G2AtX5CNtfFxnVupo= Subject key identifier: AF:F8:A9:36:7D:C3:8A:2A:E5:F1:3D:FB:A9:0E:58:3F:DE:AF:BC:79 Authority key identifier: D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A Certificate issuer: /CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Certificate serial: 7AE85BE3777F656D2AD33C830691225FDE8A033B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:55:49 +0000 Manifest this update: Tue 16 Jun 2026 21:50:49 +0000 Manifest next update: Thu 18 Jun 2026 01:15:49 +0000 Files and hashes: 1: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: Jx05B7mkwgYoEihHJr1Mblw6Kt55kFXhZ9MUCvCt+Go=) 2: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: 6VIXf9PufTTIF0jlFfBvIGu6EFZnq37iO9mrrQ1/lbk=) 3: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: B7a7PzCNzeD/tq1cXAKoZlfFY/BQzoD5xWVoqKq0SF0=) 4: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl (hash: zuxCN7i8WV4j57Q4xFtPaYJmNsidudWmOG61hRV+TpY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e8:5b:e3:77:7f:65:6d:2a:d3:3c:83:06:91:22:5f:de:8a:03:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Validity Not Before: Jun 16 21:50:49 2026 GMT Not After : Jun 18 01:15:49 2026 GMT Subject: CN=AFF8A9367DC38A2AE5F13DFBA90E583FDEAFBC79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a6:ce:3d:ce:41:7c:2b:7f:72:a1:3e:ad:01: e1:e9:39:9a:85:94:cf:e1:0d:d5:10:ec:18:59:f4: 16:0f:1f:51:e8:dc:51:71:dc:24:65:01:7f:9a:7d: 98:0d:31:90:dc:86:95:0d:8e:86:e7:d4:cd:f9:eb: aa:72:b1:c0:0a:44:22:79:1d:b0:38:43:b2:cd:55: f1:c7:d9:b0:7c:72:41:7b:ac:08:70:ff:f0:c5:28: f0:dc:c0:e5:70:6f:b5:6f:dd:f2:b8:10:f5:f5:b3: fd:c5:02:ad:a7:d3:0f:d0:43:7a:34:f4:e8:22:4c: dd:30:fd:0a:57:e2:07:a3:d8:69:c8:17:27:a4:14: 63:79:44:69:0f:26:c1:d9:3d:62:5a:c6:82:bc:c5: 54:2a:15:85:45:3d:d2:ff:28:9e:23:9e:eb:0b:41: 28:4d:f4:97:ce:04:ec:57:a2:34:86:20:83:4a:eb: 8c:d2:a3:52:a5:05:8f:45:a8:ce:37:b6:51:ac:54: c5:8e:6b:52:02:30:f8:21:aa:df:bb:3f:f9:7b:db: 4d:97:ac:24:5f:24:77:ae:bf:c0:eb:a4:94:78:7a: 12:02:7d:fb:16:6c:80:8e:08:cd:66:ab:62:e9:87: 5f:eb:75:6d:a7:9b:19:68:a9:02:51:aa:e3:58:cf: 62:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F8:A9:36:7D:C3:8A:2A:E5:F1:3D:FB:A9:0E:58:3F:DE:AF:BC:79 X509v3 Authority Key Identifier: keyid:D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b0:de:d6:75:91:1b:19:18:cd:31:31:2c:75:f2:c7:69:f0: b2:b3:fa:6b:f5:c7:1e:f5:f3:09:ec:f3:cc:c1:fa:4a:7b:01: a5:38:38:34:23:ca:18:88:8b:ef:0d:4f:71:17:79:a9:94:0b: 7f:3b:45:32:43:24:a3:72:f3:70:48:e1:97:4a:10:8c:c8:0c: 59:98:18:4a:a3:5a:ae:cb:11:e1:a1:83:7f:52:7e:e4:2a:88: e7:93:ba:23:3a:4e:d2:08:d4:d2:fe:16:32:2a:8d:57:7e:f7: 07:3c:ac:72:34:fe:08:38:67:98:b7:4a:9c:e1:6a:54:c2:7c: 46:29:e7:c8:1c:13:0b:45:a1:61:5b:9d:e9:f3:d2:17:80:b8: ec:8b:19:20:d1:69:52:09:70:bc:2f:1f:18:ae:e8:72:27:a3: 02:b7:ca:fd:08:53:2e:6e:f4:d8:cc:39:35:83:8e:9e:93:91: e1:6e:a6:a7:c0:08:ca:70:a8:c4:0e:9b:f2:18:f3:30:e2:06: 0b:c9:97:b5:56:da:25:bd:21:66:ce:73:d0:8b:42:ab:55:6e: a3:cc:64:92:ee:6d:bf:a7:b8:94:2e:ce:2f:37:7f:d4:ee:62: c3:40:a5:85:61:58:57:e1:65:e4:b1:fe:34:7e:ca:a7:09:84: 8e:de:61:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeuhb43d/ZW0q0zyDBpEiX96KAzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2 OEJCMDEyQTAeFw0yNjA2MTYyMTUwNDlaFw0yNjA2MTgwMTE1NDlaMDMxMTAvBgNV BAMTKEFGRjhBOTM2N0RDMzhBMkFFNUYxM0RGQkE5MEU1ODNGREVBRkJDNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRps49zkF8K39yoT6tAeHpOZqF lM/hDdUQ7BhZ9BYPH1Ho3FFx3CRlAX+afZgNMZDchpUNjobn1M3566pyscAKRCJ5 HbA4Q7LNVfHH2bB8ckF7rAhw//DFKPDcwOVwb7Vv3fK4EPX1s/3FAq2n0w/QQ3o0 9OgiTN0w/QpX4gej2GnIFyekFGN5RGkPJsHZPWJaxoK8xVQqFYVFPdL/KJ4jnusL QShN9JfOBOxXojSGIINK64zSo1KlBY9FqM43tlGsVMWOa1ICMPghqt+7P/l7202X rCRfJHeuv8DrpJR4ehICffsWbICOCM1mq2Lph1/rdW2nmxloqQJRquNYz2KhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr/ipNn3Diirl8T37qQ5YP96vvHkwHwYDVR0j BBgwFoAU2Kljzlfpmxq+FiqEUtnk02i7ASowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjExY2E2MjAtZGFjZS00YTlmLWI4ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1 N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2OEJCMDEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEE5NjNDRTU3RTk5QjFBQkUxNjJBODQ1MkQ5RTREMzY4QkIw MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjExY2E2MjAtZGFjZS00YTlmLWI4 ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0 RDM2OEJCMDEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6w3tZ1kRsZGM0xMSx18sdp8LKz+mv1xx71 8wns88zB+kp7AaU4ODQjyhiIi+8NT3EXeamUC387RTJDJKNy83BI4ZdKEIzIDFmY GEqjWq7LEeGhg39SfuQqiOeTuiM6TtII1NL+FjIqjVd+9wc8rHI0/gg4Z5i3Spzh alTCfEYp58gcEwtFoWFbnenz0heAuOyLGSDRaVIJcLwvHxiu6HInowK3yv0IUy5u 9NjMOTWDjp6TkeFupqfACMpwqMQOm/IY8zDiBgvJl7VW2iW9IWbOc9CLQqtVbqPM ZJLubb+nuJQuzi83f9TuYsNApYVhWFfhZeSx/jR+yqcJhI7eYUw= -----END CERTIFICATE-----Generated at Wed Jun 17 10:31:36 2026 by rpki-client