$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft File: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft (raw, json) Hash identifier: t9lWY9sOpFiDMq+lL16rdqQ9bQYIL5XErgu1jchCvpk= Subject key identifier: C8:E9:8A:8D:8D:E8:B9:66:F8:50:0D:40:A2:99:76:E6:0F:87:9B:9A Authority key identifier: A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC Certificate issuer: /CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC Certificate serial: 3C5B2F9FB3AE738AD3C23CDBBA845D9F5873A180 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 06:51:10 +0000 Manifest this update: Wed 17 Jun 2026 06:46:10 +0000 Manifest next update: Thu 18 Jun 2026 10:00:10 +0000 Files and hashes: 1: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: Avv7/9ccLlQ1aIPCfbfxFrVouBultgrgCwZuIM827ow=) 2: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: Zeaoa8MH2HdVHd5TglLIUEl41Yo/QcdVaZotZEH8Cts=) 3: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl (hash: 5YozHN+YVZZAiLe7Nlb1avD8WK9PhBfMZ3dQtBml454=) 4: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: UJ/To0XTouVSFOn7NWj23fxNZAouQWAqvBpnkIJXRFM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5b:2f:9f:b3:ae:73:8a:d3:c2:3c:db:ba:84:5d:9f:58:73:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC Validity Not Before: Jun 17 06:46:10 2026 GMT Not After : Jun 18 10:00:10 2026 GMT Subject: CN=C8E98A8D8DE8B966F8500D40A29976E60F879B9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:bb:c7:c9:cc:79:32:c4:99:c0:be:5f:ec: 76:dd:10:54:a2:eb:89:61:87:95:08:b3:c3:59:69: 99:b7:05:90:82:55:85:b1:31:d6:21:5b:96:3c:1e: 4f:8b:7a:67:a2:9d:7c:e5:1a:07:af:74:27:13:ed: 4e:e8:20:50:e4:57:4d:30:9e:f4:e4:e2:1a:20:77: e4:8c:86:69:73:34:90:3c:6e:62:1a:47:c3:d3:6e: db:a2:55:11:7d:97:97:f2:67:b1:ec:84:f5:1b:de: c5:e7:f8:68:f7:19:18:0a:af:6a:ac:0c:9c:2c:34: 60:a5:49:c2:00:77:62:04:8f:b5:47:31:49:0b:5e: 56:16:23:5f:c9:b6:de:a1:9b:3b:f4:a8:83:83:54: 2d:35:ce:45:50:0f:76:3e:65:22:60:b7:7b:53:18: 35:83:18:ec:ce:15:5f:c2:ec:af:2d:19:60:89:36: 00:a6:43:b3:06:e1:dd:11:7a:6a:77:0e:fe:e0:d3: 57:55:8b:df:91:35:1c:34:77:e4:34:1e:1c:44:c3: 28:1d:25:c9:d5:8e:b7:4f:7d:54:b9:f8:8b:45:48: fd:89:fb:b5:f7:80:11:31:09:47:70:4d:53:4f:7f: 2f:10:a8:2f:fe:f3:a2:d3:46:6c:42:ee:e7:be:36: 8a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E9:8A:8D:8D:E8:B9:66:F8:50:0D:40:A2:99:76:E6:0F:87:9B:9A X509v3 Authority Key Identifier: keyid:A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:6a:56:5f:98:6c:c1:20:77:ea:1e:96:fd:df:2e:68:91:39: 3a:37:f6:f6:69:df:7b:1d:89:34:82:3e:b7:df:94:aa:58:17: 07:48:f5:61:de:d2:04:6f:d0:11:8d:11:03:5e:d4:17:f5:4d: c5:48:fc:cb:18:8c:83:b7:aa:25:2a:51:b2:a1:62:61:fa:f0: a7:cd:f9:ae:aa:3d:55:e4:61:87:52:50:a7:ce:73:8c:99:86: 94:9e:bd:f2:7e:37:ee:b1:7e:44:34:21:4c:5b:08:06:24:dd: 48:b5:65:93:38:32:1a:05:de:ec:52:10:ec:b6:44:9f:5e:d2: 3c:41:86:fb:6d:f5:31:26:a9:44:bc:f1:d4:2a:cc:ac:36:5c: b6:95:8c:a7:54:98:58:27:25:cb:56:03:21:c7:84:2c:b4:1d: f3:72:b6:47:3e:46:e1:7e:03:9e:37:74:ba:a5:c6:58:7d:95: 5d:d4:cc:ac:38:19:04:9b:2b:b6:fe:82:17:a2:0f:ab:f8:d8: c6:c0:76:ae:1e:64:33:b6:31:bd:ae:ff:53:10:88:37:14:06: 2d:d3:d3:a9:5c:52:c4:55:ea:73:7c:41:84:72:9b:8e:6b:6d: e3:31:bb:7a:48:d0:ad:34:08:8e:29:c0:2b:36:63:f3:db:fb: 75:20:35:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPFsvn7Ouc4rTwjzbuoRdn1hzoYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThENjAyMTczODhEQ0VFNjg5N0JEQTVCQzZENTE5MDMx N0NFQzBFQzAeFw0yNjA2MTcwNjQ2MTBaFw0yNjA2MTgxMDAwMTBaMDMxMTAvBgNV BAMTKEM4RTk4QThEOERFOEI5NjZGODUwMEQ0MEEyOTk3NkU2MEY4NzlCOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQLvHycx5MsSZwL5f7HbdEFSi 64lhh5UIs8NZaZm3BZCCVYWxMdYhW5Y8Hk+LemeinXzlGgevdCcT7U7oIFDkV00w nvTk4hogd+SMhmlzNJA8bmIaR8PTbtuiVRF9l5fyZ7HshPUb3sXn+Gj3GRgKr2qs DJwsNGClScIAd2IEj7VHMUkLXlYWI1/Jtt6hmzv0qIODVC01zkVQD3Y+ZSJgt3tT GDWDGOzOFV/C7K8tGWCJNgCmQ7MG4d0Remp3Dv7g01dVi9+RNRw0d+Q0HhxEwygd JcnVjrdPfVS5+ItFSP2J+7X3gBExCUdwTVNPfy8QqC/+86LTRmxC7ue+NoqRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyOmKjY3ouWb4UA1Aopl25g+Hm5owHwYDVR0j BBgwFoAUqNYCFziNzuaJe9pbxtUZAxfOwOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk1NzdjM2MtNjZjZC00MGE0LWFmYzUtNmM2ZjhiNjY0YTUxLzAvQThENjAyMTcz ODhEQ0VFNjg5N0JEQTVCQzZENTE5MDMxN0NFQzBFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEQ2MDIxNzM4OERDRUU2ODk3QkRBNUJDNkQ1MTkwMzE3Q0VD MEVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQThENjAyMTczODhEQ0VFNjg5N0JEQTVCQzZENTE5 MDMxN0NFQzBFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtqVl+YbMEgd+oelv3fLmiROTo39vZp33sd iTSCPrfflKpYFwdI9WHe0gRv0BGNEQNe1Bf1TcVI/MsYjIO3qiUqUbKhYmH68KfN +a6qPVXkYYdSUKfOc4yZhpSevfJ+N+6xfkQ0IUxbCAYk3Ui1ZZM4MhoF3uxSEOy2 RJ9e0jxBhvtt9TEmqUS88dQqzKw2XLaVjKdUmFgnJctWAyHHhCy0HfNytkc+RuF+ A543dLqlxlh9lV3UzKw4GQSbK7b+gheiD6v42MbAdq4eZDO2Mb2u/1MQiDcUBi3T 06lcUsRV6nN8QYRym45rbeMxu3pI0K00CI4pwCs2Y/Pb+3UgNcI= -----END CERTIFICATE-----Generated at Wed Jun 17 10:44:58 2026 by rpki-client