$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft File: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft (raw, json) Hash identifier: GtsQGIRVx9/nAW4+mqIZE29jDLSU3/KfGIfNr0ZX11Q= Subject key identifier: 7F:D1:1D:E1:70:9F:01:29:89:63:7A:48:35:C1:EC:07:83:A4:90:40 Authority key identifier: 8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92 Certificate issuer: /CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92 Certificate serial: 3DCA0B702438CA7A4C458C805C3EC3C6D31B14A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 01:09:16 +0000 Manifest this update: Sun 14 Jun 2026 01:04:16 +0000 Manifest next update: Mon 15 Jun 2026 03:54:16 +0000 Files and hashes: 1: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: LMawcFvlyGAFjmzGIPIL0Pb1GIlo75+QClOxIhDqopY=) 2: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl (hash: 237QtxTGUWRYLPtMnuITIFG/Ccu5r+AosLWvyP0sf/Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ca:0b:70:24:38:ca:7a:4c:45:8c:80:5c:3e:c3:c6:d3:1b:14:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92 Validity Not Before: Jun 14 01:04:16 2026 GMT Not After : Jun 15 03:54:16 2026 GMT Subject: CN=7FD11DE1709F012989637A4835C1EC0783A49040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2f:18:2f:b0:cb:de:2d:8c:db:63:d7:ba:33: 3f:d1:db:fd:9c:c2:16:9e:3d:8c:32:7f:f0:e4:d4: d5:33:10:0a:f1:cc:f5:92:0a:0a:de:3c:a2:60:25: 55:d9:60:c8:1d:b1:19:41:64:83:c0:d6:52:a5:40: 03:2e:08:3b:f1:aa:18:3d:43:39:72:4f:a1:29:62: 82:7b:1a:57:d6:38:04:fc:12:79:63:b7:e6:9a:08: 04:5d:d2:76:25:71:9c:5f:45:36:19:fc:e0:47:f2: e3:6a:d4:8c:67:c3:2e:28:8e:51:65:7f:95:88:c7: 85:25:ed:58:84:48:3c:34:7b:a8:25:2d:89:30:53: 3c:06:dd:5b:81:c9:70:e6:b1:02:9b:6e:20:e2:36: 27:e6:4d:68:01:ca:47:35:bd:46:bb:ed:34:46:a2: 3a:06:38:ee:08:28:bf:42:8d:76:8b:76:e5:19:1c: 58:43:f9:6a:66:6b:e6:c3:14:74:16:0c:21:9c:40: bf:fb:c6:25:20:be:9c:36:e5:c7:17:29:b7:d9:76: 3c:a6:00:f6:fb:46:22:1f:2b:e1:68:d0:26:a4:d7: 16:a0:c1:8d:78:3d:4c:57:4f:6a:e6:24:e8:b8:5c: 86:b1:36:45:ef:c5:f9:8d:52:d7:b6:2c:ce:ee:b5: 14:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D1:1D:E1:70:9F:01:29:89:63:7A:48:35:C1:EC:07:83:A4:90:40 X509v3 Authority Key Identifier: keyid:8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:c2:97:c5:2d:a1:12:2e:2c:5d:3b:0c:6b:c7:f2:f8:64:f9: c4:32:ff:a5:32:ab:87:09:a7:38:5a:f9:4d:b4:05:d6:1a:3c: a1:1c:3d:c7:c6:eb:1f:67:dd:8c:d7:9c:36:22:67:07:f6:9d: cc:6b:84:f7:18:f2:29:d1:c0:d9:76:26:cd:fb:c6:3b:01:f2: a8:70:ff:0f:02:38:d8:63:c5:77:ff:90:78:74:79:13:fb:b9: fd:db:65:85:bb:6f:94:09:22:da:f3:a9:fb:08:55:84:ca:d1: 6c:80:c9:d2:87:a0:f6:a6:76:c3:a1:08:17:66:8e:56:57:dd: be:dc:b4:75:8d:0d:96:88:8a:03:78:b1:14:a9:d0:94:0a:31: 00:10:41:b7:f7:45:8a:b5:38:d8:ca:f3:35:a5:46:81:39:02: cb:5d:2e:03:c6:10:6d:86:91:9e:29:0b:3f:f4:30:69:be:b2: 74:af:b1:25:b0:63:df:1a:84:d6:93:25:69:13:0b:d6:99:76: 41:1c:9b:4d:ae:99:0a:4f:53:d1:23:92:89:9e:2f:1d:26:26: 6f:19:cb:82:35:bc:71:d9:b9:a5:b7:f7:14:3f:ad:f4:fa:ca: 07:a7:f7:07:72:7f:e8:fd:cf:42:a5:94:e4:d9:a7:75:ea:79: ad:6b:4e:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPcoLcCQ4ynpMRYyAXD7DxtMbFKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4QjE1NUU4MzM1QzAyODU0OUQyQkY2QjU0QzI1RTRB NzhCOEM5MjAeFw0yNjA2MTQwMTA0MTZaFw0yNjA2MTUwMzU0MTZaMDMxMTAvBgNV BAMTKDdGRDExREUxNzA5RjAxMjk4OTYzN0E0ODM1QzFFQzA3ODNBNDkwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRLxgvsMveLYzbY9e6Mz/R2/2c whaePYwyf/Dk1NUzEArxzPWSCgrePKJgJVXZYMgdsRlBZIPA1lKlQAMuCDvxqhg9 QzlyT6EpYoJ7GlfWOAT8Enljt+aaCARd0nYlcZxfRTYZ/OBH8uNq1Ixnwy4ojlFl f5WIx4Ul7ViESDw0e6glLYkwUzwG3VuByXDmsQKbbiDiNifmTWgBykc1vUa77TRG ojoGOO4IKL9CjXaLduUZHFhD+Wpma+bDFHQWDCGcQL/7xiUgvpw25ccXKbfZdjym APb7RiIfK+Fo0Cak1xagwY14PUxXT2rmJOi4XIaxNkXvxfmNUte2LM7utRTRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf9Ed4XCfASmJY3pINcHsB4OkkEAwHwYDVR0j BBgwFoAUiosVXoM1wChUnSv2tUwl5KeLjJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA1MjBiNTQtM2JhNy00NjMxLWFmMGItNTU5ODRiMGJhN2YyLzAvOEE4QjE1NUU4 MzM1QzAyODU0OUQyQkY2QjU0QzI1RTRBNzhCOEM5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QThCMTU1RTgzMzVDMDI4NTQ5RDJCRjZCNTRDMjVFNEE3OEI4 QzkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOEE4QjE1NUU4MzM1QzAyODU0OUQyQkY2QjU0QzI1 RTRBNzhCOEM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjCl8UtoRIuLF07DGvH8vhk+cQy/6Uyq4cJ pzha+U20BdYaPKEcPcfG6x9n3YzXnDYiZwf2ncxrhPcY8inRwNl2Js37xjsB8qhw /w8CONhjxXf/kHh0eRP7uf3bZYW7b5QJItrzqfsIVYTK0WyAydKHoPamdsOhCBdm jlZX3b7ctHWNDZaIigN4sRSp0JQKMQAQQbf3RYq1ONjK8zWlRoE5AstdLgPGEG2G kZ4pCz/0MGm+snSvsSWwY98ahNaTJWkTC9aZdkEcm02umQpPU9EjkomeLx0mJm8Z y4I1vHHZuaW39xQ/rfT6ygen9wdyf+j9z0KllOTZp3Xqea1rThM= -----END CERTIFICATE-----Generated at Sun Jun 14 05:18:07 2026 by rpki-client