$ rpki-client -vvf rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft File: 8DD710534DF68AAB08361EE28306B8FDEE71D144.mft (raw, json) Hash identifier: qbV3+uG4qaFTs/8NcznNQ3VOCmgsyNmB2Ftd0EkGYzg= Subject key identifier: 82:4A:3D:C9:69:C7:F0:A7:51:08:0F:10:1F:18:C7:73:6A:AC:91:20 Authority key identifier: 8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 Certificate issuer: /CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Certificate serial: 32C838CCA912EC05B755BC1286242A1FCA9C4E7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft Manifest number: 3C Signing time: Sun 14 Jun 2026 23:51:09 +0000 Manifest this update: Sun 14 Jun 2026 23:46:09 +0000 Manifest next update: Tue 16 Jun 2026 01:48:09 +0000 Files and hashes: 1: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: OzarGbzrKygn581G2dCLdzA7C4q7lKqki8T+O4VVozc=) 2: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: mt9y4ArG2gRgvhKLs+xygsf6wYJsNzK3vkSOg2Yasms=) 3: 8DD710534DF68AAB08361EE28306B8FDEE71D144.crl (hash: 0ATo8Qb9wLSAY+Fm4hE+aagXrkqTEBo/dfbuFlXuAOg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 01:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c8:38:cc:a9:12:ec:05:b7:55:bc:12:86:24:2a:1f:ca:9c:4e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Validity Not Before: Jun 14 23:46:09 2026 GMT Not After : Jun 16 01:48:09 2026 GMT Subject: CN=824A3DC969C7F0A751080F101F18C7736AAC9120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cc:a5:19:ae:e0:f3:0f:42:81:29:6f:b6:00: 59:26:9d:e2:6c:99:30:67:ed:7b:83:f8:af:c1:6e: 92:20:6d:fd:6a:45:67:83:6c:bc:dc:9e:c0:0d:18: 23:cc:e2:83:7c:ed:9e:7c:d4:1c:55:a5:02:66:71: b5:97:ce:42:6a:51:f4:46:59:17:75:b1:cf:ad:33: 60:b8:c4:15:12:f1:a4:22:cc:af:54:9d:8c:a7:cd: 6a:91:0c:71:f4:af:1a:ac:73:e5:5f:50:11:87:bc: 8b:fd:d2:cc:65:5c:1d:7f:c9:09:e5:fc:87:71:34: 9d:62:09:9e:50:3b:a0:95:cd:4e:e2:28:44:93:a8: 6b:d0:81:68:91:00:cd:70:fa:81:42:16:9d:2e:e0: 11:e7:ca:e7:05:3e:eb:d4:d7:af:4c:63:63:90:e2: f7:3e:14:13:d6:bf:6a:b9:c2:ca:6b:39:9a:5c:ac: 5c:99:4f:95:a8:f7:a5:45:4d:90:c9:84:6e:fb:32: 12:0d:7e:5e:af:a4:42:2d:ed:12:57:e2:f3:26:4e: fd:17:3b:c1:21:29:79:34:4b:62:31:1a:85:c9:10: 4f:3f:c6:fe:a3:b2:6a:fc:83:5b:d9:32:3e:de:10: 11:48:68:ae:8e:0f:07:2b:61:c4:16:30:69:dd:f8: 8c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4A:3D:C9:69:C7:F0:A7:51:08:0F:10:1F:18:C7:73:6A:AC:91:20 X509v3 Authority Key Identifier: keyid:8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:2f:61:c0:a0:f5:4b:58:1a:f0:1d:71:d7:85:cf:bb:5b:44: e5:1d:8d:49:d6:96:df:e5:7d:25:cc:bb:35:7b:70:70:1a:33: 91:b0:e0:8b:46:83:29:14:3c:21:f7:7e:a2:49:26:a3:72:19: 0f:a8:d4:a6:9b:7a:b7:21:76:c4:da:f0:91:55:d2:ab:4c:d4: 36:ab:14:6f:ba:2a:50:f2:e0:0f:8c:f5:35:c1:a4:c8:1c:fd: 59:75:fd:f5:6d:76:09:04:20:47:94:bc:fa:a4:eb:1c:ad:11: 97:b5:9a:2a:aa:f2:e1:ed:ce:1a:9d:69:55:04:e5:97:8f:eb: b6:2e:0d:e0:d6:d3:2e:d0:97:c8:3d:ac:4a:19:36:17:5a:2d: 7d:17:19:de:a4:4c:27:5c:c4:15:4a:5b:0d:ea:82:3d:db:60: 93:a6:b4:d4:ec:25:15:ec:3c:e5:93:8f:fa:84:cf:7a:8f:2d: 74:aa:d7:54:13:f3:51:6c:1d:6f:1c:27:c4:47:1a:12:7f:c6: aa:16:a9:ff:16:36:9c:e4:7c:0c:30:4f:f1:ac:6a:51:dd:de: a2:fd:a2:3d:b3:f4:5a:6a:f7:09:25:0a:a9:2f:3b:ac:7f:9e: 5b:49:40:95:eb:d4:3b:a7:c0:1f:46:9d:11:f8:3d:36:14:a6: 03:17:3f:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsg4zKkS7AW3VbwShiQqH8qcTn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4RkRF RTcxRDE0NDAeFw0yNjA2MTQyMzQ2MDlaFw0yNjA2MTYwMTQ4MDlaMDMxMTAvBgNV BAMTKDgyNEEzREM5NjlDN0YwQTc1MTA4MEYxMDFGMThDNzczNkFBQzkxMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzKUZruDzD0KBKW+2AFkmneJs mTBn7XuD+K/BbpIgbf1qRWeDbLzcnsANGCPM4oN87Z581BxVpQJmcbWXzkJqUfRG WRd1sc+tM2C4xBUS8aQizK9UnYynzWqRDHH0rxqsc+VfUBGHvIv90sxlXB1/yQnl /IdxNJ1iCZ5QO6CVzU7iKESTqGvQgWiRAM1w+oFCFp0u4BHnyucFPuvU169MY2OQ 4vc+FBPWv2q5wsprOZpcrFyZT5Wo96VFTZDJhG77MhINfl6vpEIt7RJX4vMmTv0X O8EhKXk0S2IxGoXJEE8/xv6jsmr8g1vZMj7eEBFIaK6ODwcrYcQWMGnd+IznAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgko9yWnH8KdRCA8QHxjHc2qskSAwHwYDVR0j BBgwFoAUjdcQU032iqsINh7igwa4/e5x0UQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjcyNGU0NWItMjU0Yi00ZmViLWJmOGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0 REY2OEFBQjA4MzYxRUUyODMwNkI4RkRFRTcxRDE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84REQ3MTA1MzRERjY4QUFCMDgzNjFFRTI4MzA2QjhGREVFNzFE MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4 RkRFRTcxRDE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkvYcCg9UtYGvAdcdeFz7tbROUdjUnWlt/l fSXMuzV7cHAaM5Gw4ItGgykUPCH3fqJJJqNyGQ+o1KaberchdsTa8JFV0qtM1Dar FG+6KlDy4A+M9TXBpMgc/Vl1/fVtdgkEIEeUvPqk6xytEZe1miqq8uHtzhqdaVUE 5ZeP67YuDeDW0y7Ql8g9rEoZNhdaLX0XGd6kTCdcxBVKWw3qgj3bYJOmtNTsJRXs POWTj/qEz3qPLXSq11QT81FsHW8cJ8RHGhJ/xqoWqf8WNpzkfAwwT/GsalHd3qL9 oj2z9Fpq9wklCqkvO6x/nltJQJXr1DunwB9GnRH4PTYUpgMXP/Q= -----END CERTIFICATE-----Generated at Mon Jun 15 16:27:55 2026 by rpki-client