$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft File: 8638D28E3BD2280125963C7B30C34A226398A39F.mft (raw, json) Hash identifier: IRYlwjOUTRU2KOa1n0V9TM+8RmN9XsOr2pRNf0ObgsU= Subject key identifier: 77:F8:7C:BC:16:22:E2:99:33:7C:B0:AE:23:DB:84:B2:2C:8D:52:8B Authority key identifier: 86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F Certificate issuer: /CN=8638D28E3BD2280125963C7B30C34A226398A39F Certificate serial: 4B1D93D1605F63EC1391D7DC0B44939A0978B49C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:12:16 +0000 Manifest this update: Tue 16 Jun 2026 19:07:16 +0000 Manifest next update: Wed 17 Jun 2026 20:49:16 +0000 Files and hashes: 1: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: K8RuD4iVWNDoq5/nKnK+l+BvrNOPQLNp6COtNPtCMfY=) 2: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 9/PIsC2XMlKZxB7OIm0Zr26jWW2WY5JodvXs3A+orYA=) 3: 8638D28E3BD2280125963C7B30C34A226398A39F.crl (hash: XioPAEhrBgL+mLB1+n0RgLNTjDv4BvTcjtXv0k6EWm0=) 4: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: 7CUUFxXBF00bkdoTMxFKQ2ao9fNDKa33JZ3nwQoI/v0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1d:93:d1:60:5f:63:ec:13:91:d7:dc:0b:44:93:9a:09:78:b4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8638D28E3BD2280125963C7B30C34A226398A39F Validity Not Before: Jun 16 19:07:16 2026 GMT Not After : Jun 17 20:49:16 2026 GMT Subject: CN=77F87CBC1622E299337CB0AE23DB84B22C8D528B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3a:47:8c:40:9c:ed:10:ac:af:21:6c:d9:f7: 52:b8:6c:67:b7:b9:3e:09:cd:70:7a:a8:9d:1c:be: 83:cf:41:b0:a6:30:fe:59:13:8a:6a:38:b4:4f:7c: 13:9b:49:9c:50:f6:b0:8b:88:a8:a8:d2:4c:71:04: f2:da:cc:82:d2:23:82:df:b5:81:2d:22:13:0f:b1: 5e:d2:69:3f:87:e3:df:63:ae:01:09:be:0d:61:f6: 5e:68:7b:f7:28:87:5d:92:41:c5:d0:51:27:b7:06: 69:08:29:91:ac:e8:7b:68:da:bc:ba:b9:b2:1f:36: a7:1f:36:31:2e:4d:c4:cf:bf:93:f0:6d:eb:5b:09: 9f:e4:2e:27:f0:5b:22:d8:aa:4a:8c:6e:90:ac:01: 05:80:b4:d1:bf:f2:c9:48:29:84:f3:d9:ef:46:90: e7:8a:81:4c:89:36:19:bb:bc:d4:35:b6:b8:9d:e0: 52:95:d8:2c:9c:a4:f2:94:e7:b9:cc:66:02:a8:65: 8c:8a:ef:55:d9:98:5e:1c:43:0d:cb:7e:f9:a5:81: a4:c8:8b:45:ad:1f:2f:ed:16:92:13:3d:d7:a6:8d: 65:b2:26:cb:88:52:31:8c:90:ae:c7:7c:bd:e5:6a: 65:c1:61:30:fd:3d:9d:40:dc:8e:69:bf:b2:c9:c6: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F8:7C:BC:16:22:E2:99:33:7C:B0:AE:23:DB:84:B2:2C:8D:52:8B X509v3 Authority Key Identifier: keyid:86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:bd:cb:6b:dc:38:de:22:5f:16:e8:47:21:1c:0f:55:6e:02: 64:3a:03:62:42:1a:1d:7f:4e:62:93:df:f1:bc:29:d0:25:38: 7f:3b:18:2a:5e:b5:0c:c6:5c:7f:ed:2e:33:e7:e6:b5:9e:c0: ca:cc:26:3e:e7:35:64:8f:fc:f0:9f:86:7b:75:91:76:2e:77: e2:7d:08:e5:db:ca:d6:4c:e7:f8:e7:91:e1:90:0f:7a:bf:ec: bd:f8:4a:16:53:51:b0:cb:84:0c:3b:ea:74:a3:b6:60:14:9d: 77:20:07:2f:36:7f:c6:73:45:a3:6b:74:e5:b2:42:90:9e:7e: d6:54:1f:d3:f3:17:f7:13:ef:d7:19:00:0b:38:c1:34:96:c8: 9d:c9:9f:78:7a:44:55:45:92:c1:1d:24:51:56:fa:b0:ea:43: 58:09:75:fc:09:ab:57:9b:41:18:ae:7e:6f:e8:3e:33:10:6f: e6:9f:8a:dd:5e:df:ca:9a:d6:63:28:49:7b:ab:ea:0f:65:86: e2:92:f2:3e:d3:97:d9:6a:8a:3d:99:d0:43:bc:65:30:51:d8: 5a:05:cf:f3:67:36:c1:93:85:9c:70:ce:e4:e0:e3:9e:eb:1b: ca:4f:ad:f6:76:0a:b8:23:a4:13:0d:09:35:8e:cf:79:75:dc: 24:ec:6f:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSx2T0WBfY+wTkdfcC0STmgl4tJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2 Mzk4QTM5RjAeFw0yNjA2MTYxOTA3MTZaFw0yNjA2MTcyMDQ5MTZaMDMxMTAvBgNV BAMTKDc3Rjg3Q0JDMTYyMkUyOTkzMzdDQjBBRTIzREI4NEIyMkM4RDUyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOOkeMQJztEKyvIWzZ91K4bGe3 uT4JzXB6qJ0cvoPPQbCmMP5ZE4pqOLRPfBObSZxQ9rCLiKio0kxxBPLazILSI4Lf tYEtIhMPsV7SaT+H499jrgEJvg1h9l5oe/coh12SQcXQUSe3BmkIKZGs6Hto2ry6 ubIfNqcfNjEuTcTPv5PwbetbCZ/kLifwWyLYqkqMbpCsAQWAtNG/8slIKYTz2e9G kOeKgUyJNhm7vNQ1trid4FKV2CycpPKU57nMZgKoZYyK71XZmF4cQw3LfvmlgaTI i0WtHy/tFpITPdemjWWyJsuIUjGMkK7HfL3lamXBYTD9PZ1A3I5pv7LJxnqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd/h8vBYi4pkzfLCuI9uEsiyNUoswHwYDVR0j BBgwFoAUhjjSjjvSKAElljx7MMNKImOYo58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdmZjAxZDAtMjZmOS00YjIwLWEzMTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUz QkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2Mzk4QTM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjM4RDI4RTNCRDIyODAxMjU5NjNDN0IzMEMzNEEyMjYzOThB MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRB MjI2Mzk4QTM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKO9y2vcON4iXxboRyEcD1VuAmQ6A2JCGh1/ TmKT3/G8KdAlOH87GCpetQzGXH/tLjPn5rWewMrMJj7nNWSP/PCfhnt1kXYud+J9 COXbytZM5/jnkeGQD3q/7L34ShZTUbDLhAw76nSjtmAUnXcgBy82f8ZzRaNrdOWy QpCeftZUH9PzF/cT79cZAAs4wTSWyJ3Jn3h6RFVFksEdJFFW+rDqQ1gJdfwJq1eb QRiufm/oPjMQb+afit1e38qa1mMoSXur6g9lhuKS8j7Tl9lqij2Z0EO8ZTBR2FoF z/NnNsGThZxwzuTg457rG8pPrfZ2CrgjpBMNCTWOz3l13CTsb7s= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:33 2026 by rpki-client