$ rpki-client -vvf rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft File: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft (raw, json) Hash identifier: 1gmrH1K/zdKmBVHSSwxBJSPm/OTtVfQ9zL9f9pVIX1c= Subject key identifier: 0B:13:8D:B3:44:01:E2:B4:C6:2C:6C:F3:ED:22:40:9B:CB:8F:A1:A7 Authority key identifier: 08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB Certificate issuer: /CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Certificate serial: 43AC3A18238FFB4A043B2B211EE4407FE284C59E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:54:05 +0000 Manifest this update: Wed 17 Jun 2026 00:49:05 +0000 Manifest next update: Thu 18 Jun 2026 01:02:05 +0000 Files and hashes: 1: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: Mcg9nbFeFqcbrXtsnWz+m6gsNfmlAcJQ2rPda7V7VVk=) 2: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl (hash: 5kOejVpFJKBZ9PKfbQlJqyD7fKHws3meqANWII1GCUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ac:3a:18:23:8f:fb:4a:04:3b:2b:21:1e:e4:40:7f:e2:84:c5:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Validity Not Before: Jun 17 00:49:05 2026 GMT Not After : Jun 18 01:02:05 2026 GMT Subject: CN=0B138DB34401E2B4C62C6CF3ED22409BCB8FA1A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:1d:c2:18:22:5c:fe:57:1c:6b:a0:83:ed: 25:0e:03:8f:71:0e:ef:6f:ee:ee:20:f2:9f:0b:5f: 1f:74:d0:4c:eb:e3:45:e0:27:7a:ba:f1:4f:c6:58: 67:f0:5a:08:01:2d:06:db:ee:46:31:03:7c:7e:67: 84:22:19:07:cc:cb:6f:c6:10:c1:2c:fe:f5:78:e7: 98:21:3f:c4:6a:67:46:ae:52:44:49:63:a3:ba:de: 02:60:ec:9b:09:76:4e:8f:6c:71:9d:86:b6:31:a7: 9a:af:21:91:34:33:32:a1:77:64:73:3a:00:4c:85: b5:ca:03:ea:23:86:c8:52:2b:c4:f7:21:3e:bb:0d: 20:a3:1d:ea:9d:eb:af:55:1d:9b:03:44:6d:1c:d2: 36:7a:57:8a:8f:ff:e6:b5:05:ca:06:8f:94:aa:b1: 50:68:e2:42:1b:78:29:b6:9b:63:d3:4e:72:91:be: 8a:14:a9:c8:07:33:e8:2a:22:87:db:b5:2a:7b:e0: 65:b4:4a:45:65:59:91:9d:89:0e:49:32:ef:f1:0e: e3:75:cc:a4:13:f6:39:33:9c:6b:cc:50:1d:3a:74: 66:44:9d:da:9a:90:7f:3d:b3:ff:94:94:cb:13:fb: a1:38:19:c5:7e:71:6b:a7:1c:c1:c5:f4:ad:b9:d5: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:13:8D:B3:44:01:E2:B4:C6:2C:6C:F3:ED:22:40:9B:CB:8F:A1:A7 X509v3 Authority Key Identifier: keyid:08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8e:6f:4e:cb:5f:97:c2:0d:4b:52:fb:a4:56:17:83:c4:a0: d3:d2:3f:ed:7e:f7:77:96:a2:e6:26:85:bd:db:e2:f4:1c:2f: 4e:4e:0a:3d:0c:a3:31:9b:dc:a2:c1:06:c0:8a:5f:a5:75:77: 4c:b2:05:0a:c9:bf:18:33:f6:2c:ce:3e:f1:ae:12:64:b1:8e: b9:9f:74:28:d5:ff:c7:7e:b9:49:11:88:66:69:c7:99:17:bc: 3c:d4:96:9c:06:d2:c1:c6:92:1a:8e:42:4d:92:78:0b:4f:59: db:cd:a3:11:b8:93:c9:15:48:d8:5d:58:d9:40:97:55:5b:d1: 46:35:15:2c:f0:b9:92:db:2f:85:89:ba:97:59:ec:ac:b8:97: 51:85:b7:7f:bf:76:c7:d5:80:0e:05:a4:a2:7f:25:2c:28:bb: d2:ab:b2:c6:03:a5:a8:7f:7f:e6:94:a5:9b:ce:1e:c0:16:66: e1:1b:44:aa:ea:76:91:42:6b:27:a9:1c:23:ea:19:a4:9a:d3: d8:1d:12:8b:bf:f2:ec:c6:4d:64:a1:9b:7f:8a:47:28:d7:06: c8:7a:4a:62:02:2a:00:e1:9c:2e:dc:44:86:55:6d:31:22:80: 02:db:c8:fc:3f:f6:b3:29:9f:d1:11:d6:0e:15:f8:85:da:57: 96:5f:5b:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6w6GCOP+0oEOyshHuRAf+KExZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMx OUIzMDBGQjAeFw0yNjA2MTcwMDQ5MDVaFw0yNjA2MTgwMTAyMDVaMDMxMTAvBgNV BAMTKDBCMTM4REIzNDQwMUUyQjRDNjJDNkNGM0VEMjI0MDlCQ0I4RkExQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nR3CGCJc/lcca6CD7SUOA49x Du9v7u4g8p8LXx900Ezr40XgJ3q68U/GWGfwWggBLQbb7kYxA3x+Z4QiGQfMy2/G EMEs/vV455ghP8RqZ0auUkRJY6O63gJg7JsJdk6PbHGdhrYxp5qvIZE0MzKhd2Rz OgBMhbXKA+ojhshSK8T3IT67DSCjHeqd669VHZsDRG0c0jZ6V4qP/+a1BcoGj5Sq sVBo4kIbeCm2m2PTTnKRvooUqcgHM+gqIofbtSp74GW0SkVlWZGdiQ5JMu/xDuN1 zKQT9jkznGvMUB06dGZEndqakH89s/+UlMsT+6E4GcV+cWunHMHF9K251Y5lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCxONs0QB4rTGLGzz7SJAm8uPoacwHwYDVR0j BBgwFoAUCNsctHaQ8fZxmnGgay6v/BmzAPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE3Zjc5YjAtYjllMy00YzNkLWExMTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3 NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMxOUIzMDBGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wOERCMUNCNDc2OTBGMUY2NzE5QTcxQTA2QjJFQUZGQzE5QjMw MEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFG RkMxOUIzMDBGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCOb07LX5fCDUtS+6RWF4PEoNPSP+1+93eW ouYmhb3b4vQcL05OCj0MozGb3KLBBsCKX6V1d0yyBQrJvxgz9izOPvGuEmSxjrmf dCjV/8d+uUkRiGZpx5kXvDzUlpwG0sHGkhqOQk2SeAtPWdvNoxG4k8kVSNhdWNlA l1Vb0UY1FSzwuZLbL4WJupdZ7Ky4l1GFt3+/dsfVgA4FpKJ/JSwou9KrssYDpah/ f+aUpZvOHsAWZuEbRKrqdpFCayepHCPqGaSa09gdEou/8uzGTWShm3+KRyjXBsh6 SmICKgDhnC7cRIZVbTEigALbyPw/9rMpn9ER1g4V+IXaV5ZfWxc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:52 2026 by rpki-client