$ rpki-client -vvf rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft File: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft (raw, json) Hash identifier: Ona9LCKutLJp30DkWnA597m00ShzguXf169XJTEnF2U= Subject key identifier: 71:51:0D:68:08:C7:1A:8A:94:40:ED:4A:A5:95:49:39:8A:B3:30:5B Authority key identifier: D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F Certificate issuer: /CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Certificate serial: 381785BD0CB2037CDAA63A5E665E9E9C05630847 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 20:13:37 +0000 Manifest this update: Tue 16 Jun 2026 20:08:37 +0000 Manifest next update: Wed 17 Jun 2026 22:51:37 +0000 Files and hashes: 1: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl (hash: QNuMNAADLMlxYqYHDQ4XrJDjNCqhaWzV6XtUOCeE810=) 2: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: aqo6iqJhHng8SceS0GB2zDkvhHekA+jqXPQYRYjWZBA=) 3: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: BSuw1whkNZvJE4R4/j402PtZbyO7u4uvse4a8U9c4JA=) 4: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: 4zjQiDOO1u6032UYBIQ3bbHO8yvV/zbc51HnTLw1PKM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:17:85:bd:0c:b2:03:7c:da:a6:3a:5e:66:5e:9e:9c:05:63:08:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Validity Not Before: Jun 16 20:08:37 2026 GMT Not After : Jun 17 22:51:37 2026 GMT Subject: CN=71510D6808C71A8A9440ED4AA59549398AB3305B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:cb:13:07:69:82:66:89:d9:b3:06:5d:4d: f2:66:7d:10:91:c3:60:76:e5:93:02:da:46:82:23: 92:ce:f2:52:62:f3:36:75:60:49:11:5e:0f:cb:e9: b8:cc:53:e6:7c:d0:42:a9:2e:e5:14:99:f2:3d:47: 19:d0:83:40:fa:56:0b:46:35:01:0d:a7:53:3c:45: f4:a9:c5:09:7e:fa:57:f8:3f:1a:f6:5b:c6:c6:cc: 81:7e:60:34:e2:35:b6:99:a7:14:99:00:f3:82:2f: 61:fd:65:bb:06:1b:f5:ae:08:22:b3:18:d2:cc:c4: f0:74:d2:53:d2:8b:ae:ca:9c:eb:18:af:83:2b:81: 42:69:13:81:dc:e8:f2:1a:68:f6:70:4c:64:3f:53: 35:aa:72:64:3f:7c:48:5a:cb:b5:4d:97:8f:d0:fd: f1:db:00:a5:71:f5:c4:48:16:3a:81:46:d1:b8:a7: 4f:4d:43:bd:39:ad:20:d0:eb:b2:80:c6:65:65:d7: ef:d2:e9:28:3b:c8:6d:68:8b:59:36:e4:8c:91:d6: 63:9c:a6:c7:7f:99:77:a4:b7:d0:94:16:09:54:33: 8a:a2:83:31:1e:ca:dc:3c:7b:89:89:88:a1:b8:e5: 98:b7:e3:0f:26:bc:45:00:9c:a7:18:15:0f:6f:c5: 9e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:51:0D:68:08:C7:1A:8A:94:40:ED:4A:A5:95:49:39:8A:B3:30:5B X509v3 Authority Key Identifier: keyid:D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:79:f1:d8:23:2a:c5:1c:7a:6e:40:2a:59:db:28:4d:ef:d3: de:b6:98:a3:a2:a2:51:e2:a7:f7:2f:ea:b9:ff:dd:76:2c:4e: 29:06:17:01:df:3d:99:a7:6a:f6:b0:d9:8d:43:05:99:06:79: 13:23:26:19:98:90:2c:87:75:a9:90:a6:46:d6:1f:5a:76:e6: e5:33:f0:36:00:69:23:b4:19:cb:f9:f0:9e:59:74:4a:fe:d0: fa:a8:d8:ba:1d:11:fb:3f:72:2b:36:74:04:35:03:a1:93:f1: 25:07:11:87:5e:13:80:eb:7c:33:47:bb:90:d5:c6:77:29:db: 5c:90:39:da:cf:b3:a8:97:6d:c3:b5:36:a5:cb:10:72:69:3e: 51:60:f3:e0:35:e3:3f:66:86:ac:e3:8d:73:3f:82:41:7a:6d: f4:2a:26:e8:cf:6d:c1:62:97:15:b2:8e:43:75:75:43:dc:9f: fb:99:d4:bf:6e:4f:d2:5a:d3:20:64:b4:58:cd:b4:31:1a:0b: 68:7f:31:e9:49:79:5f:88:e5:ab:e9:c8:d3:e9:25:b7:d7:d3: b8:4a:46:38:5e:1e:09:4c:93:43:dd:4c:cd:63:36:18:fa:3f: 3c:50:9f:23:84:d5:ef:bc:ef:52:dc:1d:2c:ad:20:ca:53:c3: 08:1a:54:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBeFvQyyA3zapjpeZl6enAVjCEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0 NkYyOUQ3RjAeFw0yNjA2MTYyMDA4MzdaFw0yNjA2MTcyMjUxMzdaMDMxMTAvBgNV BAMTKDcxNTEwRDY4MDhDNzFBOEE5NDQwRUQ0QUE1OTU0OTM5OEFCMzMwNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQcsTB2mCZonZswZdTfJmfRCR w2B25ZMC2kaCI5LO8lJi8zZ1YEkRXg/L6bjMU+Z80EKpLuUUmfI9RxnQg0D6VgtG NQENp1M8RfSpxQl++lf4Pxr2W8bGzIF+YDTiNbaZpxSZAPOCL2H9ZbsGG/WuCCKz GNLMxPB00lPSi67KnOsYr4MrgUJpE4Hc6PIaaPZwTGQ/UzWqcmQ/fEhay7VNl4/Q /fHbAKVx9cRIFjqBRtG4p09NQ705rSDQ67KAxmVl1+/S6Sg7yG1oi1k25IyR1mOc psd/mXekt9CUFglUM4qigzEeytw8e4mJiKG45Zi34w8mvEUAnKcYFQ9vxZ7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcVENaAjHGoqUQO1KpZVJOYqzMFswHwYDVR0j BBgwFoAU2Mt/i1Zm4H5Xy+/AI8b2A0bynX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM2YWIwNGQtNjhjNy00MjQ5LWIxMDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1 NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0NkYyOUQ3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOENCN0Y4QjU2NjZFMDdFNTdDQkVGQzAyM0M2RjYwMzQ2RjI5 RDdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2 MDM0NkYyOUQ3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABd58dgjKsUcem5AKlnbKE3v0962mKOiolHi p/cv6rn/3XYsTikGFwHfPZmnavaw2Y1DBZkGeRMjJhmYkCyHdamQpkbWH1p25uUz 8DYAaSO0Gcv58J5ZdEr+0Pqo2LodEfs/cis2dAQ1A6GT8SUHEYdeE4DrfDNHu5DV xncp21yQOdrPs6iXbcO1NqXLEHJpPlFg8+A14z9mhqzjjXM/gkF6bfQqJujPbcFi lxWyjkN1dUPcn/uZ1L9uT9Ja0yBktFjNtDEaC2h/MelJeV+I5avpyNPpJbfX07hK RjheHglMk0PdTM1jNhj6PzxQnyOE1e+871LcHSytIMpTwwgaVMw= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:20 2026 by rpki-client