$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft File: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft (raw, json) Hash identifier: 4qopBswy89fu75XnpTFEuJvkN0Z8vBPKDDs94v6Pd3Q= Subject key identifier: 6E:D2:21:12:C7:5C:F3:70:54:86:C2:2A:8D:CF:58:9C:3C:B2:1E:81 Authority key identifier: F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 Certificate issuer: /CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Certificate serial: 60D2281A0D41FE14FCFCC6D0E63B66FF8B2573FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:49:33 +0000 Manifest this update: Tue 16 Jun 2026 16:44:33 +0000 Manifest next update: Wed 17 Jun 2026 18:26:33 +0000 Files and hashes: 1: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ebJX0xmBUCyzAXEckdnMbEf0pSEsLD4g9s9OXuyGYmM=) 2: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: prj58PGbUwDLvrT9h5jO7nMgDDmjvocJnN5ph+z3PrU=) 3: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: 9E/Ti671GF/WZdUwZ2RH1G2YB9kJfWY4JlzPZetlvoI=) 4: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: VGZWopnP5E+cpki2YrX/ob7V+wdxOvea5qW0A+eDkWM=) 5: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl (hash: tq36AqCr+OGyPD4Pi4+jK8rilydBYp5ukgAd4+YBhwY=) 6: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: rPbVerJ1hIqpxViNC0hFDNp8HCiflf0mjWJTLUhjlFU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d2:28:1a:0d:41:fe:14:fc:fc:c6:d0:e6:3b:66:ff:8b:25:73:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Validity Not Before: Jun 16 16:44:33 2026 GMT Not After : Jun 17 18:26:33 2026 GMT Subject: CN=6ED22112C75CF3705486C22A8DCF589C3CB21E81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:c0:9f:73:75:c2:14:a1:ab:b5:3c:82:ce: 76:54:a1:c7:03:80:69:40:12:9d:62:b7:3b:44:ff: 7f:1a:1d:90:93:ea:50:76:e8:58:c3:9c:a3:81:e3: f7:11:8f:38:2d:b3:48:eb:8d:3d:ae:27:6c:be:b8: 58:18:d0:3e:1d:ed:46:cc:af:d8:64:42:48:06:21: 53:dc:1d:25:3a:85:51:3c:12:55:ce:da:37:21:63: c7:0a:bf:55:6c:f2:d9:8b:3a:5b:07:bd:8c:e1:66: 73:c1:3f:ad:a7:46:66:a7:a2:5e:8b:24:3b:0a:fd: d7:53:74:fe:aa:55:ed:3a:6a:c1:4f:5a:ab:08:a6: b3:fb:30:5d:b3:ac:b5:ea:dd:f5:64:d6:03:4a:74: d2:d9:76:0e:d4:be:0b:f9:db:16:28:cb:3d:67:b0: 96:b9:cd:5c:6e:d1:d9:6e:7b:2f:c9:6e:16:cb:af: 3f:e7:57:46:7c:fb:99:ab:69:a3:07:cb:fa:f6:33: 63:27:29:6f:1b:00:fd:61:fc:a5:a1:21:e3:c5:27: c1:2e:ac:80:56:4b:10:fa:53:72:6b:d7:92:2b:d1: 9f:35:37:be:4d:01:28:22:77:28:d1:4e:3f:d5:61: a3:b2:3f:e9:f8:ca:c8:7e:ad:b3:f8:ca:3a:7a:1a: 45:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D2:21:12:C7:5C:F3:70:54:86:C2:2A:8D:CF:58:9C:3C:B2:1E:81 X509v3 Authority Key Identifier: keyid:F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:92:fc:b8:ca:38:bf:16:52:e1:c2:3b:77:85:07:d3:6b:ad: 89:e1:84:31:39:7d:94:67:7f:60:9e:a0:cc:88:d1:84:b8:9a: 04:2e:c8:b5:82:91:78:b6:e1:a2:b5:36:2a:e9:e0:06:13:d5: de:9c:d3:0d:b7:92:3c:a7:27:90:4e:d8:91:62:c2:db:26:e1: 0f:5d:dd:36:58:5c:f1:c9:b8:ca:5a:4e:3b:47:b0:8c:8e:1d: c6:33:db:f7:05:b3:68:18:8a:bf:69:c6:3f:6d:4b:ee:30:87: 04:67:de:e1:c4:5f:35:dc:51:31:38:c9:ee:fc:f9:41:c6:c9: 4d:18:71:c2:1b:f1:54:6d:6d:1b:34:ff:da:8c:85:7e:5e:50: 0f:cd:39:f8:66:ec:f0:2a:2a:c5:0d:cb:c6:b9:6b:20:45:9a: ee:28:e4:b3:dc:d5:be:a8:6e:bd:c5:61:f1:8f:6f:2e:08:22: 04:ce:99:40:6a:40:90:e0:0a:25:24:10:7b:d4:e3:0c:01:3e: 2f:ed:08:42:07:8e:01:d2:2f:36:3c:dc:0c:db:ea:57:55:a9: 81:bb:c7:0c:ce:f7:c8:c2:e3:3b:8b:d7:ec:31:0f:74:fc:9a: d1:66:a0:a4:ad:2f:c3:be:41:42:b5:d7:f0:be:42:79:50:5c: cb:b4:4f:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNIoGg1B/hT8/MbQ5jtm/4slc/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlC MUVCRDIxNDAeFw0yNjA2MTYxNjQ0MzNaFw0yNjA2MTcxODI2MzNaMDMxMTAvBgNV BAMTKDZFRDIyMTEyQzc1Q0YzNzA1NDg2QzIyQThEQ0Y1ODlDM0NCMjFFODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChPMCfc3XCFKGrtTyCznZUoccD gGlAEp1itztE/38aHZCT6lB26FjDnKOB4/cRjzgts0jrjT2uJ2y+uFgY0D4d7UbM r9hkQkgGIVPcHSU6hVE8ElXO2jchY8cKv1Vs8tmLOlsHvYzhZnPBP62nRmanol6L JDsK/ddTdP6qVe06asFPWqsIprP7MF2zrLXq3fVk1gNKdNLZdg7Uvgv52xYoyz1n sJa5zVxu0dluey/JbhbLrz/nV0Z8+5mraaMHy/r2M2MnKW8bAP1h/KWhIePFJ8Eu rIBWSxD6U3Jr15Ir0Z81N75NASgidyjRTj/VYaOyP+n4ysh+rbP4yjp6GkVbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbtIhEsdc83BUhsIqjc9YnDyyHoEwHwYDVR0j BBgwFoAU+OnUjRfMOONMv8dLXAf0qbHr0hQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOGQ5MDgtMWI5OS00NTVjLWFjNzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQx N0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlCMUVCRDIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEU5RDQ4RDE3Q0MzOEUzNENCRkM3NEI1QzA3RjRBOUIxRUJE MjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0 QTlCMUVCRDIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyS/LjKOL8WUuHCO3eFB9NrrYnhhDE5fZRn f2CeoMyI0YS4mgQuyLWCkXi24aK1Nirp4AYT1d6c0w23kjynJ5BO2JFiwtsm4Q9d 3TZYXPHJuMpaTjtHsIyOHcYz2/cFs2gYir9pxj9tS+4whwRn3uHEXzXcUTE4ye78 +UHGyU0YccIb8VRtbRs0/9qMhX5eUA/NOfhm7PAqKsUNy8a5ayBFmu4o5LPc1b6o br3FYfGPby4IIgTOmUBqQJDgCiUkEHvU4wwBPi/tCEIHjgHSLzY83Azb6ldVqYG7 xwzO98jC4zuL1+wxD3T8mtFmoKStL8O+QUK11/C+QnlQXMu0TwY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:12 2026 by rpki-client