$ rpki-client -vvf rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft File: C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft (raw, json) Hash identifier: bEAYLYgm78dqecn39jso39MrFfTIwM15ejw04qyoBMA= Subject key identifier: 3B:A8:D8:E8:2D:DD:53:0C:B3:5B:78:10:E8:DC:58:C4:93:2F:42:3A Authority key identifier: C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14 Certificate issuer: /CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14 Certificate serial: 18060A3BCAB5DBB1B202DACDACBF39ACC60466D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:13:13 +0000 Manifest this update: Tue 02 Jun 2026 19:08:13 +0000 Manifest next update: Wed 03 Jun 2026 20:47:13 +0000 Files and hashes: 1: C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl (hash: p7bhFB5MBoEQg9+oPuXyUJvDD5hiMmDzD/pey+L4tDY=) 2: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: pBKVlpjSQfisARzQp/uCxR6vxT0fT2aUvnTqNxA3JGc=) 3: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: oRViKlwXLb62v1XHH/P9v9PE35BuLaTpbEgB9nVLGXo=) 4: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: 1Jb72gV9Cql494HOmw4p+CcUceiPzhX48HtoigKm8xc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 20:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:06:0a:3b:ca:b5:db:b1:b2:02:da:cd:ac:bf:39:ac:c6:04:66:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14 Validity Not Before: Jun 2 19:08:13 2026 GMT Not After : Jun 3 20:47:13 2026 GMT Subject: CN=3BA8D8E82DDD530CB35B7810E8DC58C4932F423A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5f:84:6f:35:bb:12:6b:a4:42:66:22:98:d3: 34:96:40:fa:1a:ca:74:78:f7:50:0e:d0:07:93:74: 6e:24:57:ae:2f:78:c4:29:dc:66:12:0b:87:25:00: 2a:59:58:9f:dc:8e:b3:ef:36:4f:d8:c7:a4:f1:34: 39:a4:b0:8c:f0:cd:56:c7:c4:db:68:d8:12:39:62: 8d:c0:33:82:b8:31:0f:0b:fe:0d:f9:37:1c:82:89: a7:b0:88:e1:3d:2e:f3:ca:04:97:27:74:d7:03:af: 29:ac:8c:c9:7a:52:9e:98:07:d3:97:01:71:e2:5d: 38:2c:0c:ca:47:47:09:fc:ad:0f:9d:0d:47:4b:42: 89:38:83:2b:5e:b3:0f:06:54:c4:76:b5:f2:75:50: 16:62:98:cf:bf:2c:10:46:8f:29:f3:58:f0:83:49: 01:fb:dd:0d:eb:db:80:27:5f:1e:09:72:4b:a4:ea: d3:2b:13:60:2c:91:7d:74:f9:f5:8b:8b:96:8f:5f: 3e:c1:c3:84:d0:2e:74:21:34:bb:10:6d:6c:30:bf: 44:0d:5a:49:d6:b6:fd:ab:a4:d4:00:cf:f4:81:9a: e7:93:11:8b:00:b1:b5:2c:cc:6d:48:e5:39:bf:1c: b9:28:06:af:c2:37:a7:32:86:81:6e:85:26:87:c3: a6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A8:D8:E8:2D:DD:53:0C:B3:5B:78:10:E8:DC:58:C4:93:2F:42:3A X509v3 Authority Key Identifier: keyid:C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:dc:05:dc:95:3d:01:e9:e9:da:70:1f:1b:41:38:a4:64:2d: 3c:b7:83:41:71:f9:b6:87:2c:69:04:c2:cc:83:31:47:d9:18: 64:13:fd:09:fe:cf:26:de:d0:c7:3e:86:42:82:a6:8c:22:5e: c4:3b:54:25:88:16:b7:14:fd:e7:be:47:d0:4f:46:55:0c:6c: b8:11:23:aa:c1:c3:5a:8e:85:ed:e7:7c:ac:23:a2:03:25:de: a6:e3:51:d8:62:2b:95:56:73:01:16:99:61:d1:6a:a0:e6:13: cc:c4:92:12:6c:a5:35:50:d1:65:85:3e:a4:e2:43:34:89:52: 82:b4:09:19:78:24:05:fa:75:ea:e6:91:72:22:cc:19:62:9b: be:5b:50:4b:82:6f:0b:04:7d:cc:ee:3a:71:29:e7:2f:9a:25: 7f:3a:c0:fa:c9:b7:e2:61:61:41:d6:61:4d:46:02:5d:fd:61: 50:32:1f:68:ba:48:ec:f1:a5:ee:83:89:81:b3:49:cb:b3:8a: 42:bf:b9:11:b2:08:3a:46:bf:64:3a:a1:b0:b8:87:e2:c2:72: 6f:6c:c7:ab:60:2c:1d:9e:30:df:8a:8a:1a:e5:0b:f7:68:60: 49:a5:a8:99:8f:22:47:9e:2f:87:8b:91:c8:08:ca:17:56:85: c6:bc:93:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGAYKO8q127GyAtrNrL85rMYEZtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2NDdFREY1RUZERTk3MTIyOUY1RDc2ODE4QjM5NTdB QTZEOEExNDAeFw0yNjA2MDIxOTA4MTNaFw0yNjA2MDMyMDQ3MTNaMDMxMTAvBgNV BAMTKDNCQThEOEU4MkRERDUzMENCMzVCNzgxMEU4REM1OEM0OTMyRjQyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGX4RvNbsSa6RCZiKY0zSWQPoa ynR491AO0AeTdG4kV64veMQp3GYSC4clACpZWJ/cjrPvNk/Yx6TxNDmksIzwzVbH xNto2BI5Yo3AM4K4MQ8L/g35NxyCiaewiOE9LvPKBJcndNcDrymsjMl6Up6YB9OX AXHiXTgsDMpHRwn8rQ+dDUdLQok4gytesw8GVMR2tfJ1UBZimM+/LBBGjynzWPCD SQH73Q3r24AnXx4Jckuk6tMrE2AskX10+fWLi5aPXz7Bw4TQLnQhNLsQbWwwv0QN WknWtv2rpNQAz/SBmueTEYsAsbUszG1I5Tm/HLkoBq/CN6cyhoFuhSaHw6bBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO6jY6C3dUwyzW3gQ6NxYxJMvQjowHwYDVR0j BBgwFoAUyGR+31796XEin112gYs5V6ptihQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVkMzhiNDItYjdjMi00MmI2LWEyZmMtNjc1ZGEyNTRjNzc2LzAvQzg2NDdFREY1 RUZERTk3MTIyOUY1RDc2ODE4QjM5NTdBQTZEOEExNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODY0N0VERjVFRkRFOTcxMjI5RjVENzY4MThCMzk1N0FBNkQ4 QTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzg2NDdFREY1RUZERTk3MTIyOUY1RDc2ODE4QjM5 NTdBQTZEOEExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHcBdyVPQHp6dpwHxtBOKRkLTy3g0Fx+baH LGkEwsyDMUfZGGQT/Qn+zybe0Mc+hkKCpowiXsQ7VCWIFrcU/ee+R9BPRlUMbLgR I6rBw1qOhe3nfKwjogMl3qbjUdhiK5VWcwEWmWHRaqDmE8zEkhJspTVQ0WWFPqTi QzSJUoK0CRl4JAX6dermkXIizBlim75bUEuCbwsEfczuOnEp5y+aJX86wPrJt+Jh YUHWYU1GAl39YVAyH2i6SOzxpe6DiYGzScuzikK/uRGyCDpGv2Q6obC4h+LCcm9s x6tgLB2eMN+KihrlC/doYEmlqJmPIkeeL4eLkcgIyhdWhca8k+Y= -----END CERTIFICATE-----Generated at Wed Jun 3 04:45:05 2026 by rpki-client