$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft File: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft (raw, json) Hash identifier: ArOnGwRY5iBMGL7bOFsrEeeMeFjb3AW98a2GTFJX8SE= Subject key identifier: EF:E4:65:58:68:35:CC:6D:B3:2A:D2:CD:E2:83:80:D5:56:B3:1F:BC Authority key identifier: 8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 Certificate issuer: /CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Certificate serial: 3EE73D31089A17161A79AC73C47870EBBCB50ECD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:25:40 +0000 Manifest this update: Wed 17 Jun 2026 06:20:40 +0000 Manifest next update: Thu 18 Jun 2026 10:17:40 +0000 Files and hashes: 1: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl (hash: T3u4XUIP6KiJ+eUTTBzN1ZxlE6JGGXjabCAnEmly+Bc=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: WXHF3ztWLcHGSe6MPgiYVl8CmUEe+OPjuifFRIwvCro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e7:3d:31:08:9a:17:16:1a:79:ac:73:c4:78:70:eb:bc:b5:0e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Validity Not Before: Jun 17 06:20:40 2026 GMT Not After : Jun 18 10:17:40 2026 GMT Subject: CN=EFE465586835CC6DB32AD2CDE28380D556B31FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:71:78:fa:dd:8b:19:37:d2:4c:38:bf:c7:8f: cc:36:0e:e7:9e:9b:f7:fc:1b:d9:fd:21:e1:b7:9a: 99:63:61:f7:ab:93:33:b8:74:48:43:58:b9:98:a1: 2c:c2:de:75:8e:8b:c5:b7:ac:2e:56:c8:25:32:95: 8c:11:7b:94:9f:19:ab:62:4b:52:f1:8e:c0:9a:3f: 5c:23:b1:b2:cf:94:34:19:7b:4b:40:78:ba:38:a2: 52:4b:3e:5a:12:c9:10:47:d0:4d:29:ba:77:f2:fb: 0a:96:f1:5a:d5:d5:9a:dd:cb:bd:b8:33:a7:23:df: 5d:81:66:ff:ff:69:01:a1:d2:db:46:a7:29:e3:7d: 46:e8:98:9f:03:ee:10:e6:48:bb:3d:59:03:40:2c: 32:15:52:0e:43:92:3d:e8:57:94:84:27:fa:52:4c: 75:62:62:9f:7d:d2:7a:ba:25:39:6a:e2:5a:ca:c9: 55:6a:06:51:2d:41:63:99:69:12:13:da:52:0b:c7: a5:27:48:ff:7c:00:f6:88:e8:0d:4f:45:13:72:04: cd:94:8c:2d:b7:19:69:a7:6b:22:92:86:e3:6d:a3: ad:41:48:4e:54:96:3e:73:bf:be:d6:a2:00:01:6a: a6:08:48:43:79:e5:19:86:89:a3:66:c4:c3:3f:4e: 7a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E4:65:58:68:35:CC:6D:B3:2A:D2:CD:E2:83:80:D5:56:B3:1F:BC X509v3 Authority Key Identifier: keyid:8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:b4:ce:c7:19:75:cd:eb:35:d0:d4:68:44:6b:fc:03:2c:35: ff:e0:b4:cd:56:90:c6:21:8b:72:de:23:c0:99:cb:6e:ae:75: ac:54:32:46:ab:80:a6:a9:e2:4e:d0:60:c0:f9:7c:19:27:0e: f2:74:ea:f4:b0:e2:ec:00:34:46:54:5a:2c:97:98:53:fc:53: 18:16:b1:5f:b6:9c:b9:83:64:1b:f3:f7:4d:f2:6e:5b:65:49: 7d:95:ec:6a:11:8f:87:3f:fb:97:2f:0c:fe:8c:2c:d7:5c:a1: 47:bd:c7:b5:86:28:ff:fb:60:9f:9f:aa:32:fc:cc:2b:b6:9e: b9:1c:1c:1d:f4:0e:32:80:fd:84:be:32:e2:dc:b3:1f:5c:18: 9d:0c:bd:c5:83:98:5f:fd:10:ac:62:44:1d:0f:8f:3e:ae:7e: e3:7d:86:76:ea:ca:04:95:a3:1f:04:16:8f:9d:02:44:c5:5a: ea:cf:42:bb:41:81:c6:c4:25:26:7d:6c:b4:fd:e3:d4:27:b7: e0:5f:45:59:18:46:13:e8:a3:8f:5e:73:2e:62:25:e1:33:43: 82:dd:f4:68:c4:7f:43:c3:c7:18:6f:39:8d:af:cd:d7:0b:86: 13:1d:44:e2:d7:c6:c5:bc:36:9a:e5:72:e1:48:5f:9a:97:35: 20:f7:b4:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPuc9MQiaFxYaeaxzxHhw67y1Ds0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2 MURCNzhBNjAeFw0yNjA2MTcwNjIwNDBaFw0yNjA2MTgxMDE3NDBaMDMxMTAvBgNV BAMTKEVGRTQ2NTU4NjgzNUNDNkRCMzJBRDJDREUyODM4MEQ1NTZCMzFGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCScXj63YsZN9JMOL/Hj8w2Duee m/f8G9n9IeG3mpljYferkzO4dEhDWLmYoSzC3nWOi8W3rC5WyCUylYwRe5SfGati S1LxjsCaP1wjsbLPlDQZe0tAeLo4olJLPloSyRBH0E0punfy+wqW8VrV1Zrdy724 M6cj312BZv//aQGh0ttGpynjfUbomJ8D7hDmSLs9WQNALDIVUg5Dkj3oV5SEJ/pS THViYp990nq6JTlq4lrKyVVqBlEtQWOZaRIT2lILx6UnSP98APaI6A1PRRNyBM2U jC23GWmnayKShuNto61BSE5Ulj5zv77WogABaqYISEN55RmGiaNmxMM/TnprAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7+RlWGg1zG2zKtLN4oOA1VazH7wwHwYDVR0j BBgwFoAUiqUttdtx9jjpQSVKawzmg2HbeKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmUxY2JkNzktOGYyNi00YjBlLThiM2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVE QjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2MURCNzhBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUE1MkRCNURCNzFGNjM4RTk0MTI1NEE2QjBDRTY4MzYxREI3 OEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2 ODM2MURCNzhBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALC0zscZdc3rNdDUaERr/AMsNf/gtM1WkMYh i3LeI8CZy26udaxUMkargKap4k7QYMD5fBknDvJ06vSw4uwANEZUWiyXmFP8UxgW sV+2nLmDZBvz903ybltlSX2V7GoRj4c/+5cvDP6MLNdcoUe9x7WGKP/7YJ+fqjL8 zCu2nrkcHB30DjKA/YS+MuLcsx9cGJ0MvcWDmF/9EKxiRB0Pjz6ufuN9hnbqygSV ox8EFo+dAkTFWurPQrtBgcbEJSZ9bLT949Qnt+BfRVkYRhPoo49ecy5iJeEzQ4Ld 9GjEf0PDxxhvOY2vzdcLhhMdROLXxsW8NprlcuFIX5qXNSD3tAk= -----END CERTIFICATE-----Generated at Wed Jun 17 12:50:18 2026 by rpki-client