$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft File: 8D7E0574648D2E037D2147F409FC002E56E42A23.mft (raw, json) Hash identifier: 18SwLJC8n5JlVayo87NJ39qzvJQD5GI/Cbhyh296rh0= Subject key identifier: FB:70:E0:8F:BB:B6:49:C8:6E:9D:5A:7A:86:E7:72:88:A4:A9:22:A7 Authority key identifier: 8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 Certificate issuer: /CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Certificate serial: 1412AD1E3FD6E9F1E03D69C4D7C7A94AFFB02589 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:25:09 +0000 Manifest this update: Tue 16 Jun 2026 17:20:09 +0000 Manifest next update: Wed 17 Jun 2026 18:52:09 +0000 Files and hashes: 1: 8D7E0574648D2E037D2147F409FC002E56E42A23.crl (hash: 3K/8SryapQMisPEv6vd5gDKoTr8R0mxBDyZv73+5xKo=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: Wh9jPiaMLmpVJg4WJmhSTDv7ObmHyLTAXzkGZmow5b0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:12:ad:1e:3f:d6:e9:f1:e0:3d:69:c4:d7:c7:a9:4a:ff:b0:25:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Validity Not Before: Jun 16 17:20:09 2026 GMT Not After : Jun 17 18:52:09 2026 GMT Subject: CN=FB70E08FBBB649C86E9D5A7A86E77288A4A922A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:ad:db:67:ef:5b:b2:5d:26:5b:54:5d:5f: 23:91:78:03:5e:9c:96:bf:84:04:08:3b:c6:23:17: 0e:cf:de:26:26:80:89:de:de:44:f6:49:c6:a4:2c: 5c:f5:58:8c:57:d2:07:c2:f2:60:14:25:5a:aa:eb: 81:fc:74:28:91:1f:0a:41:40:29:98:34:41:bb:f1: 30:36:09:37:8f:82:56:65:63:b5:a7:12:a3:a7:b8: 8a:b1:c8:82:c1:27:f2:21:cb:33:31:3c:3c:58:49: 30:09:12:bf:c3:48:38:30:6e:e9:31:f8:37:3e:4b: 1f:81:27:e5:a6:5a:54:54:3f:2b:88:ce:4b:87:25: 8b:ce:d5:00:45:43:88:bb:7c:04:9e:c5:8a:e2:ed: 73:8c:8b:6e:4d:5b:45:97:ac:1e:82:25:56:60:1c: 3c:45:cd:8a:c3:17:1f:3b:19:32:74:76:2d:f3:07: cf:48:c9:77:1e:74:52:98:fa:66:4e:c0:ef:11:d2: b7:b1:41:32:ad:d8:a6:78:c2:16:b0:96:24:cb:5b: c5:66:3f:2d:65:e8:f7:75:c2:f4:5a:e1:51:ec:7e: 47:c8:3e:b7:e2:6e:5b:e5:d4:e6:00:a2:6a:8d:10: 72:e0:85:d6:48:96:3a:cc:4a:bb:f6:00:ec:e4:f1: 87:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:70:E0:8F:BB:B6:49:C8:6E:9D:5A:7A:86:E7:72:88:A4:A9:22:A7 X509v3 Authority Key Identifier: keyid:8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5a:3c:6c:da:11:40:cf:e6:53:07:74:ee:0c:a4:e4:a9:cd: 81:2c:2e:a7:6e:01:48:e9:99:e4:9e:60:56:7d:7b:6a:7e:39: c7:e0:df:62:3b:54:97:d4:58:da:78:b0:42:73:e4:e5:32:d3: 36:4d:f9:8a:27:4f:15:c5:e7:2b:cb:dc:5c:f3:fd:70:ed:57: 7f:62:a7:0e:ee:bc:d0:b7:44:fa:a1:cd:d1:1a:b8:ab:9d:09: 82:59:0d:bb:19:38:55:fc:5a:42:be:4c:10:2a:a0:be:f9:11: a6:90:a0:7f:d2:45:25:58:06:a3:59:aa:91:76:a5:fc:96:60: 3d:e8:25:00:43:30:3f:8f:41:3c:15:6b:31:64:29:67:58:95: 87:ba:ca:9b:13:4f:dc:d4:7e:d6:58:c6:a1:34:ef:82:33:23: 3e:0d:f0:01:4e:57:9d:9d:64:6d:7a:b9:7b:49:7c:9c:05:ef: 65:c8:c7:19:19:e0:f0:ce:1b:e0:d3:91:f7:be:27:83:cb:af: 79:36:51:72:45:2e:55:35:2d:85:13:30:67:74:bd:16:63:73: a8:d6:cb:cb:0e:cd:bd:51:33:6c:e6:bf:d8:aa:7e:65:02:62: 89:83:da:d5:9c:ad:b5:5a:34:0b:3b:80:59:74:31:80:c1:9b: 8e:7e:5b:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBKtHj/W6fHgPWnE18epSv+wJYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1 NkU0MkEyMzAeFw0yNjA2MTYxNzIwMDlaFw0yNjA2MTcxODUyMDlaMDMxMTAvBgNV BAMTKEZCNzBFMDhGQkJCNjQ5Qzg2RTlENUE3QTg2RTc3Mjg4QTRBOTIyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQK3bZ+9bsl0mW1RdXyOReANe nJa/hAQIO8YjFw7P3iYmgIne3kT2ScakLFz1WIxX0gfC8mAUJVqq64H8dCiRHwpB QCmYNEG78TA2CTePglZlY7WnEqOnuIqxyILBJ/IhyzMxPDxYSTAJEr/DSDgwbukx +Dc+Sx+BJ+WmWlRUPyuIzkuHJYvO1QBFQ4i7fASexYri7XOMi25NW0WXrB6CJVZg HDxFzYrDFx87GTJ0di3zB89IyXcedFKY+mZOwO8R0rexQTKt2KZ4whawliTLW8Vm Py1l6Pd1wvRa4VHsfkfIPrfiblvl1OYAomqNEHLghdZIljrMSrv2AOzk8YcTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+3Dgj7u2SchunVp6hudyiKSpIqcwHwYDVR0j BBgwFoAUjX4FdGSNLgN9IUf0CfwALlbkKiMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2 NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1NkU0MkEyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDdFMDU3NDY0OEQyRTAzN0QyMTQ3RjQwOUZDMDAyRTU2RTQy QTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAw MkU1NkU0MkEyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1aPGzaEUDP5lMHdO4MpOSpzYEsLqduAUjp meSeYFZ9e2p+Ocfg32I7VJfUWNp4sEJz5OUy0zZN+YonTxXF5yvL3Fzz/XDtV39i pw7uvNC3RPqhzdEauKudCYJZDbsZOFX8WkK+TBAqoL75EaaQoH/SRSVYBqNZqpF2 pfyWYD3oJQBDMD+PQTwVazFkKWdYlYe6ypsTT9zUftZYxqE074IzIz4N8AFOV52d ZG16uXtJfJwF72XIxxkZ4PDOG+DTkfe+J4PLr3k2UXJFLlU1LYUTMGd0vRZjc6jW y8sOzb1RM2zmv9iqfmUCYomD2tWcrbVaNAs7gFl0MYDBm45+W34= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:36 2026 by rpki-client