$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft File: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft (raw, json) Hash identifier: YJ7i3yfDvFk8EbJIM9Mu3BNP52+NKP5h0Yc9ON8q/bs= Subject key identifier: 7C:B4:3F:AE:F3:41:E8:48:5A:2F:B1:7E:7D:39:D9:4F:8A:DA:5D:70 Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F Certificate issuer: /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Certificate serial: 6B89523676E93A5D9DC7645C4EFFBB047A008CC1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 17:30:45 +0000 Manifest this update: Sat 13 Jun 2026 17:25:45 +0000 Manifest next update: Sun 14 Jun 2026 18:10:45 +0000 Files and hashes: 1: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: icfsfhUwquzTy2StQKBYwmmyOmAVCsssAYK5CyA5iDI=) 2: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: CVqG9mh1X9V1ZbC6R/r5UJJ2xSfzA9r4RYW1GFYyElI=) 3: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: FdEj2/miSrHrif/CfoOvLE1OV+PuSrA43YH+LmHuPRM=) 4: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: ieJoOGDuwtLlA8t0dN5yUaBjAk+rstjVqpks3BBFT2E=) 5: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: 0WsKsDzY8LPfrJ1pgXZgjbVmTWXixBFTK8YpHb3DNxU=) 6: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl (hash: KvmKxub70YlBAf6mEgYSvdcDF4yFqk7rT7RiUPrhVLM=) 7: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: JuQ4cvsB/3E/np6OBFHLGq+Nt4mQQ/GxzLV4MrmhfZo=) 8: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: rkn+DI7lNxqSqCTlwACNzV0qOshNnDXKFLIZsdocYhE=) 9: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: pK3Vu7dEPBnTFAw3IDhWOXFOflNVhPv7/JjAZ1e/ubk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:89:52:36:76:e9:3a:5d:9d:c7:64:5c:4e:ff:bb:04:7a:00:8c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Validity Not Before: Jun 13 17:25:45 2026 GMT Not After : Jun 14 18:10:45 2026 GMT Subject: CN=7CB43FAEF341E8485A2FB17E7D39D94F8ADA5D70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:dd:c9:ca:33:c2:5d:9a:52:b0:e0:00:26: 36:59:d4:09:22:16:16:8b:f2:a1:33:9f:2f:96:ec: cf:b2:55:a7:63:ee:4a:ec:fb:ef:7a:19:a4:c9:af: ec:23:60:f1:78:d2:bc:1f:1e:95:cf:b9:24:1f:bb: 89:e8:6c:ba:ab:e4:d8:94:d4:63:aa:40:12:9c:89: 90:a9:4d:48:d2:47:a1:bb:ce:5f:f2:cf:d4:95:4f: 77:82:0d:70:f1:15:07:8f:cb:26:1e:da:f2:8e:94: 2b:7f:3a:a9:7b:19:5d:9e:06:6a:02:72:f4:23:b0: 78:e3:62:9f:70:a3:bb:b8:51:d9:09:f7:4d:59:09: cd:df:f2:f1:97:7a:d4:07:4c:c4:3d:b1:a2:1c:a2: cb:af:ce:82:f4:63:f5:e7:88:a8:d4:18:c7:e4:b6: 39:19:11:f6:35:2e:7c:10:df:88:3d:ea:ff:3d:fc: 14:0e:64:34:ed:1f:c9:bc:29:38:1a:cf:23:1b:76: e0:9c:86:33:bb:e2:d6:4f:c4:12:af:10:45:aa:f7: 70:27:2f:46:87:6e:88:ca:47:8d:ef:c8:7c:63:2d: 2e:ba:93:5d:7c:e9:a9:23:91:a4:e8:4c:56:05:94: 6e:f5:57:69:20:fe:c0:ee:25:b8:35:e9:44:e0:a9: c6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B4:3F:AE:F3:41:E8:48:5A:2F:B1:7E:7D:39:D9:4F:8A:DA:5D:70 X509v3 Authority Key Identifier: keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0f:0c:a7:3d:3d:fb:5a:2b:ab:74:3c:5d:b8:2c:d4:9a:ef: 02:ae:7f:8b:66:a5:c0:a7:62:d8:f7:43:a1:0d:f5:8f:45:d7: d6:34:54:35:be:a7:4e:29:a8:ad:5f:c3:f6:f4:9e:d5:04:0b: 92:08:3d:f5:e4:47:83:0b:b9:ad:d9:39:32:62:38:40:c1:25: f7:ba:9a:e0:b3:00:6a:a9:c1:57:d9:5e:94:f6:5f:5d:b1:c9: 7f:2d:0a:42:ee:cd:cf:d4:1d:0c:45:00:e4:46:e2:37:c5:12: 80:3a:f5:3d:c5:12:8a:4a:80:ce:4e:b2:dd:3f:10:fb:ed:2d: c8:f1:ef:99:59:2c:70:c5:6b:86:d7:e6:98:b1:98:5c:a5:27: b8:dc:ae:60:30:64:df:a0:94:bc:29:c7:85:c3:5f:13:8b:33: e4:52:ba:83:e8:d4:75:4b:a2:51:0e:5b:29:b2:ff:cb:86:ac: ae:6b:75:09:c8:fa:06:65:c6:a0:8f:bd:9e:5b:9b:ec:40:0d: 0c:fe:71:89:1a:94:8a:34:b0:09:d2:03:5c:3f:53:8f:65:7b: 05:4c:4e:25:d4:71:78:78:c7:f3:30:37:41:99:80:0e:b4:1e: 93:10:01:46:4e:1e:b9:f3:25:8e:58:9e:74:b3:2d:eb:e5:cd: 1a:72:6c:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa4lSNnbpOl2dx2RcTv+7BHoAjMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUwNDI0 RThDRUM4RjAeFw0yNjA2MTMxNzI1NDVaFw0yNjA2MTQxODEwNDVaMDMxMTAvBgNV BAMTKDdDQjQzRkFFRjM0MUU4NDg1QTJGQjE3RTdEMzlEOTRGOEFEQTVENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOD93JyjPCXZpSsOAAJjZZ1Aki FhaL8qEzny+W7M+yVadj7krs++96GaTJr+wjYPF40rwfHpXPuSQfu4nobLqr5NiU 1GOqQBKciZCpTUjSR6G7zl/yz9SVT3eCDXDxFQePyyYe2vKOlCt/Oql7GV2eBmoC cvQjsHjjYp9wo7u4UdkJ901ZCc3f8vGXetQHTMQ9saIcosuvzoL0Y/XniKjUGMfk tjkZEfY1LnwQ34g96v89/BQOZDTtH8m8KTgazyMbduCchjO74tZPxBKvEEWq93An L0aHbojKR43vyHxjLS66k1186akjkaToTFYFlG71V2kg/sDuJbg16UTgqcajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfLQ/rvNB6EhaL7F+fTnZT4raXXAwHwYDVR0j BBgwFoAUium7IQA+hzls7deJi0pQQk6M7I8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmOGY1NWMtOWUzNS00Y2UyLTg5MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEw MDNFODczOTZDRURENzg5OEI0QTUwNDI0RThDRUM4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUU5QkIyMTAwM0U4NzM5NkNFREQ3ODk4QjRBNTA0MjRFOENF QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUw NDI0RThDRUM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsPDKc9PftaK6t0PF24LNSa7wKuf4tmpcCn Ytj3Q6EN9Y9F19Y0VDW+p04pqK1fw/b0ntUEC5IIPfXkR4MLua3ZOTJiOEDBJfe6 muCzAGqpwVfZXpT2X12xyX8tCkLuzc/UHQxFAORG4jfFEoA69T3FEopKgM5Ost0/ EPvtLcjx75lZLHDFa4bX5pixmFylJ7jcrmAwZN+glLwpx4XDXxOLM+RSuoPo1HVL olEOWymy/8uGrK5rdQnI+gZlxqCPvZ5bm+xADQz+cYkalIo0sAnSA1w/U49lewVM TiXUcXh4x/MwN0GZgA60HpMQAUZOHrnzJY5YnnSzLevlzRpybDQ= -----END CERTIFICATE-----Generated at Sat Jun 13 22:40:22 2026 by rpki-client