$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft File: 84D8D73F40AAC54FA5471C49D1B0B26082108594.mft (raw, json) Hash identifier: 339z3smzKTyPRPvw+Sv4mzsZGw0+6BcwFo7KWKcwYWE= Subject key identifier: AC:3A:99:23:C7:40:EB:8B:AA:78:38:BC:BD:C4:68:43:E4:DB:62:9B Authority key identifier: 84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94 Certificate issuer: /CN=84D8D73F40AAC54FA5471C49D1B0B26082108594 Certificate serial: 0F55E1E5FD6CDE74BCCBA3920EC2F7B952B8155D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft Manifest number: 4F Signing time: Tue 30 Jun 2026 10:28:04 +0000 Manifest this update: Tue 30 Jun 2026 10:23:04 +0000 Manifest next update: Wed 01 Jul 2026 10:49:04 +0000 Files and hashes: 1: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: ZTH11IqUBjUloy94Wjo3h3nzkEwNWGDprNQQAIlXj6U=) 2: 84D8D73F40AAC54FA5471C49D1B0B26082108594.crl (hash: alah8WGhN8xnwNyqyUhS2X0/eOOqA4vnYomxy3obaUo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.crl rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 09:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:55:e1:e5:fd:6c:de:74:bc:cb:a3:92:0e:c2:f7:b9:52:b8:15:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D8D73F40AAC54FA5471C49D1B0B26082108594 Validity Not Before: Jun 30 10:23:04 2026 GMT Not After : Jul 1 10:49:04 2026 GMT Subject: CN=AC3A9923C740EB8BAA7838BCBDC46843E4DB629B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:78:11:52:f5:17:e0:7f:67:bc:60:f2:b7:86: 52:ee:4a:67:67:79:12:45:90:e4:9e:96:b3:ee:86: 80:6b:c0:69:90:b5:61:eb:01:02:cb:1d:10:2d:b4: 59:c2:09:2e:e7:a2:c7:30:b0:96:9e:77:d6:9a:88: 35:0b:96:67:73:33:15:86:2a:9a:26:57:ba:f7:76: a4:64:e3:15:c3:de:c4:d0:5a:9c:95:4c:20:3e:28: 8b:cb:ab:d7:cb:32:9e:9f:f7:58:bb:2b:8f:d8:94: 4b:c5:9c:c0:21:40:fb:a2:68:8f:f1:93:7a:12:6a: d5:5d:a8:7a:fa:8d:96:42:06:15:4c:25:9c:45:11: 7c:a6:3b:24:61:c8:6f:3e:9c:48:3c:c8:51:e7:12: 85:05:3f:88:f7:97:80:28:22:50:b9:27:14:a3:6e: 41:7d:3f:ef:c8:40:29:3d:cb:aa:d5:3d:ad:9d:f2: fd:b4:0c:ac:67:5d:b5:46:ef:27:1c:30:d5:e7:c9: ab:8c:66:94:cc:ec:c0:a2:32:7d:c6:90:48:86:7b: 7f:c6:4e:fa:e3:ee:a1:70:d1:84:a6:81:63:9b:f1: 8d:41:1f:90:36:cd:95:5c:32:e1:52:7d:6c:ca:df: 70:50:3e:e9:cc:d8:48:46:c2:5e:a3:62:73:6c:7e: 70:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3A:99:23:C7:40:EB:8B:AA:78:38:BC:BD:C4:68:43:E4:DB:62:9B X509v3 Authority Key Identifier: keyid:84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d4:fb:e6:85:8c:9c:4f:d7:01:24:66:75:4a:39:4a:ed:6c: 86:5d:24:f1:fa:33:2f:99:54:d9:31:c4:f6:01:18:cd:f8:b7: 81:6f:ff:0f:b3:82:fb:a1:40:ad:14:d2:33:fd:b4:18:51:40: 1c:6b:3d:9e:a1:4e:1a:5a:ff:b3:a4:18:02:39:6e:df:cc:07: d4:37:fc:9e:10:5c:c2:00:fb:7c:91:58:2e:9e:97:c0:14:f8: a7:41:4e:31:a8:9b:20:6d:da:14:45:80:91:b4:64:25:71:1b: 6b:3d:17:13:9b:7e:47:30:f0:96:46:bd:63:3e:b7:ec:e3:60: 3f:1e:8c:d2:ca:16:fc:fa:6c:6c:ef:63:15:a5:ed:40:18:de: 61:93:ac:2b:11:10:2d:fb:ea:dd:c3:77:10:a7:25:44:4c:c8: ab:f6:80:d5:95:2a:5a:4f:e2:1e:1f:af:29:e6:32:56:80:12: ec:8e:34:b7:53:61:7b:a4:53:d3:8a:f8:f9:d7:46:a2:d6:e6: fc:5f:c9:23:41:2b:d0:32:3d:42:77:f7:8c:16:92:af:70:94: 8c:4c:39:07:ec:47:a1:82:fe:b3:7b:4c:f2:84:5a:62:49:25: 6d:5f:d1:67:1d:9b:71:4a:bf:21:5e:1f:3e:a8:f1:ca:9a:30: 82:06:f3:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1Xh5f1s3nS8y6OSDsL3uVK4FV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODREOEQ3M0Y0MEFBQzU0RkE1NDcxQzQ5RDFCMEIyNjA4 MjEwODU5NDAeFw0yNjA2MzAxMDIzMDRaFw0yNjA3MDExMDQ5MDRaMDMxMTAvBgNV BAMTKEFDM0E5OTIzQzc0MEVCOEJBQTc4MzhCQ0JEQzQ2ODQzRTREQjYyOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzeBFS9Rfgf2e8YPK3hlLuSmdn eRJFkOSelrPuhoBrwGmQtWHrAQLLHRAttFnCCS7noscwsJaed9aaiDULlmdzMxWG KpomV7r3dqRk4xXD3sTQWpyVTCA+KIvLq9fLMp6f91i7K4/YlEvFnMAhQPuiaI/x k3oSatVdqHr6jZZCBhVMJZxFEXymOyRhyG8+nEg8yFHnEoUFP4j3l4AoIlC5JxSj bkF9P+/IQCk9y6rVPa2d8v20DKxnXbVG7yccMNXnyauMZpTM7MCiMn3GkEiGe3/G Tvrj7qFw0YSmgWOb8Y1BH5A2zZVcMuFSfWzK33BQPunM2EhGwl6jYnNsfnAvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrDqZI8dA64uqeDi8vcRoQ+TbYpswHwYDVR0j BBgwFoAUhNjXP0CqxU+lRxxJ0bCyYIIQhZQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWM4MDQ2N2MtYWViMi00MDk1LThmNTQtODViOTA5MGQzOTA4LzAvODREOEQ3M0Y0 MEFBQzU0RkE1NDcxQzQ5RDFCMEIyNjA4MjEwODU5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NEQ4RDczRjQwQUFDNTRGQTU0NzFDNDlEMUIwQjI2MDgyMTA4 NTk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvODREOEQ3M0Y0MEFBQzU0RkE1NDcxQzQ5RDFCMEIy NjA4MjEwODU5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTU++aFjJxP1wEkZnVKOUrtbIZdJPH6My+Z VNkxxPYBGM34t4Fv/w+zgvuhQK0U0jP9tBhRQBxrPZ6hThpa/7OkGAI5bt/MB9Q3 /J4QXMIA+3yRWC6el8AU+KdBTjGomyBt2hRFgJG0ZCVxG2s9FxObfkcw8JZGvWM+ t+zjYD8ejNLKFvz6bGzvYxWl7UAY3mGTrCsREC376t3DdxCnJURMyKv2gNWVKlpP 4h4frynmMlaAEuyONLdTYXukU9OK+PnXRqLW5vxfySNBK9AyPUJ394wWkq9wlIxM OQfsR6GC/rN7TPKEWmJJJW1f0Wcdm3FKvyFeHz6o8cqaMIIG8+M= -----END CERTIFICATE-----Generated at Tue Jun 30 20:20:32 2026 by rpki-client