$ rpki-client -vvf rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft File: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft (raw, json) Hash identifier: bjRouZYI5GL4ed6rLMxrxUFI3V7xWHnlYwuV/2gHz+A= Subject key identifier: 64:B9:81:C0:FE:51:9D:D6:97:CC:B8:40:17:A4:73:F3:14:67:ED:17 Authority key identifier: 82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F Certificate issuer: /CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Certificate serial: 46DBC6E3B2C1186B9E1D0703F41578A5EC9022F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:00:04 +0000 Manifest this update: Wed 17 Jun 2026 05:55:04 +0000 Manifest next update: Thu 18 Jun 2026 08:29:04 +0000 Files and hashes: 1: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: dcn7JjA5cMl377hf4qH/uXB97TvgtDVrGSS8WaneiPA=) 2: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: sAJt4KOFRGK6/p9H5qEjBboJGlbpIE0n8tuPpLq/ACA=) 3: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: J9Ppr3YgZsd8hgKwRlpPASzO8XUT6qbE4ua4z+T5rRI=) 4: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl (hash: 595DDdIz4tpxd9wSmVoxt3JeIerxbH4sic/WdrgfdZE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:db:c6:e3:b2:c1:18:6b:9e:1d:07:03:f4:15:78:a5:ec:90:22:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Validity Not Before: Jun 17 05:55:04 2026 GMT Not After : Jun 18 08:29:04 2026 GMT Subject: CN=64B981C0FE519DD697CCB84017A473F31467ED17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:02:d5:03:b7:f2:71:88:f7:4c:7f:83:e0:45: 5c:70:c5:92:7e:1e:be:08:58:20:77:ab:f1:8f:0b: e0:5e:a3:8f:67:07:ee:52:a4:df:3c:c8:e1:63:8d: 01:27:c5:3e:0b:51:e9:03:2e:7b:41:70:ff:a0:e3: 96:95:f0:9a:ba:93:48:6c:62:8c:08:b0:fa:ad:a9: 7d:c5:f7:0f:d6:7c:f1:2e:8f:51:c4:0f:16:a0:9b: b8:8f:c0:21:ae:87:97:ec:71:bb:91:fa:d0:82:3b: 0a:24:4b:bf:0c:42:85:41:7d:39:d4:50:a3:94:7e: e6:07:c9:c5:4c:2b:5b:a9:28:bd:d8:36:c0:13:92: b1:f2:61:60:67:ee:8b:fa:ac:7e:1c:63:90:d5:4f: aa:c1:a8:84:92:ee:78:0a:00:23:39:2e:15:22:b1: c2:4a:dc:d2:0c:d3:e7:21:4c:84:f9:b1:ab:a8:38: d2:f9:7d:3f:e3:4f:b2:68:5f:6e:da:00:27:39:4d: 88:b6:3d:21:dd:ab:05:ce:ac:ef:dc:6f:bc:a4:c8: bd:2c:73:36:5c:b3:36:37:a9:ff:7c:fc:f8:10:77: 0a:2c:65:2f:9c:8c:98:80:86:9e:2f:bf:5b:93:37: 7c:3b:1e:d5:e3:f0:fb:a7:5a:3c:3a:78:35:dd:b0: 3c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B9:81:C0:FE:51:9D:D6:97:CC:B8:40:17:A4:73:F3:14:67:ED:17 X509v3 Authority Key Identifier: keyid:82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:eb:d8:62:d7:54:bc:03:f7:c0:65:f2:2d:cb:38:c4:4d:3b: 61:26:d0:ee:69:4d:01:fe:29:fe:c7:00:7e:8e:26:f5:19:65: c9:1e:7f:38:fd:55:3b:76:37:09:41:cf:b6:62:7f:8e:63:0b: e6:64:35:96:97:f1:08:46:19:c6:5b:5c:ef:09:1b:19:77:8a: 72:5d:2a:c5:8f:36:1b:38:6e:61:fc:31:01:35:52:45:f3:ca: f7:ef:68:18:1c:99:ef:8f:86:a6:70:91:19:5e:46:4a:6c:96: b6:c2:f9:4d:00:ab:b1:f9:26:74:96:93:2f:28:44:19:dc:69: e9:03:29:4d:fa:ef:45:2e:6f:46:0e:cb:57:a5:d7:30:45:b1: 72:c9:e3:a2:6c:8c:05:ba:5b:33:4f:9f:56:3a:77:f4:11:24: 1e:8a:2e:86:b2:d8:fe:44:6e:ac:90:c4:f9:32:f4:64:1a:47: 9f:8e:a8:da:9d:a7:db:79:13:59:8e:e9:4c:b5:2d:8b:7e:2a: c0:fd:ca:6a:1d:c8:29:a4:76:69:b1:66:19:67:0b:18:d5:7b: 60:25:3e:a4:d4:00:8c:7c:a2:48:53:b2:db:2b:19:f4:d7:59: 32:d1:e4:c1:da:86:91:d7:77:1d:f4:6e:79:5b:de:72:c4:76: 51:24:5f:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURtvG47LBGGueHQcD9BV4peyQIvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVB MUM0MEY2RjAeFw0yNjA2MTcwNTU1MDRaFw0yNjA2MTgwODI5MDRaMDMxMTAvBgNV BAMTKDY0Qjk4MUMwRkU1MTlERDY5N0NDQjg0MDE3QTQ3M0YzMTQ2N0VEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZAtUDt/JxiPdMf4PgRVxwxZJ+ Hr4IWCB3q/GPC+Beo49nB+5SpN88yOFjjQEnxT4LUekDLntBcP+g45aV8Jq6k0hs YowIsPqtqX3F9w/WfPEuj1HEDxagm7iPwCGuh5fscbuR+tCCOwokS78MQoVBfTnU UKOUfuYHycVMK1upKL3YNsATkrHyYWBn7ov6rH4cY5DVT6rBqISS7ngKACM5LhUi scJK3NIM0+chTIT5sauoONL5fT/jT7JoX27aACc5TYi2PSHdqwXOrO/cb7ykyL0s czZcszY3qf98/PgQdwosZS+cjJiAhp4vv1uTN3w7HtXj8PunWjw6eDXdsDzTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZLmBwP5RndaXzLhAF6Rz8xRn7RcwHwYDVR0j BBgwFoAUgotiPppEPot+ldSli14pZaHED28wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFmMGY0MjMtM2JlZC00OTM4LTlmODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5 QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVBMUM0MEY2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjhCNjIzRTlBNDQzRThCN0U5NUQ0QTU4QjVFMjk2NUExQzQw RjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5 NjVBMUM0MEY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/r2GLXVLwD98Bl8i3LOMRNO2Em0O5pTQH+ Kf7HAH6OJvUZZckefzj9VTt2NwlBz7Zif45jC+ZkNZaX8QhGGcZbXO8JGxl3inJd KsWPNhs4bmH8MQE1UkXzyvfvaBgcme+PhqZwkRleRkpslrbC+U0Aq7H5JnSWky8o RBncaekDKU3670Uub0YOy1el1zBFsXLJ46JsjAW6WzNPn1Y6d/QRJB6KLoay2P5E bqyQxPky9GQaR5+OqNqdp9t5E1mO6Uy1LYt+KsD9ymodyCmkdmmxZhlnCxjVe2Al PqTUAIx8okhTstsrGfTXWTLR5MHahpHXdx30bnlb3nLEdlEkX8c= -----END CERTIFICATE-----Generated at Wed Jun 17 11:50:36 2026 by rpki-client