$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft File: 8638D28E3BD2280125963C7B30C34A226398A39F.mft (raw, json) Hash identifier: SMawRrd+WKoNZTi4XW66PEohWpJB3uFOlWWXHCMPMC0= Subject key identifier: 64:5F:A5:D5:83:6E:DC:48:2A:73:DB:1C:56:E2:7F:48:81:E3:5B:6A Authority key identifier: 86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F Certificate issuer: /CN=8638D28E3BD2280125963C7B30C34A226398A39F Certificate serial: 0C37E2017511C594D1E81A81B3FC22E7172E23D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:02:57 +0000 Manifest this update: Tue 02 Jun 2026 18:57:57 +0000 Manifest next update: Wed 03 Jun 2026 19:54:57 +0000 Files and hashes: 1: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: 7CUUFxXBF00bkdoTMxFKQ2ao9fNDKa33JZ3nwQoI/v0=) 2: 8638D28E3BD2280125963C7B30C34A226398A39F.crl (hash: bGlIE/9HvWZaN9QrXjHTU3Ff6pu+zHVbczy3ImwQ+a8=) 3: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 9/PIsC2XMlKZxB7OIm0Zr26jWW2WY5JodvXs3A+orYA=) 4: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: K8RuD4iVWNDoq5/nKnK+l+BvrNOPQLNp6COtNPtCMfY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:37:e2:01:75:11:c5:94:d1:e8:1a:81:b3:fc:22:e7:17:2e:23:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8638D28E3BD2280125963C7B30C34A226398A39F Validity Not Before: Jun 2 18:57:57 2026 GMT Not After : Jun 3 19:54:57 2026 GMT Subject: CN=645FA5D5836EDC482A73DB1C56E27F4881E35B6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:d5:b8:4d:5f:b2:34:02:e8:88:5b:20:0c: 5d:9a:99:ab:68:3b:a7:eb:81:40:fb:04:c6:f0:79: 42:40:c2:4f:06:42:65:4a:85:1e:4a:70:a5:fd:09: b8:37:3c:4c:e0:1e:fb:03:38:6d:f9:be:4a:fb:14: 33:94:24:9d:f9:ec:35:5d:2c:a7:1f:9e:6b:c5:ac: a7:b9:1e:53:8b:ba:17:bc:c4:bd:d8:91:f9:00:19: 23:64:30:30:7c:51:8b:17:c8:a4:0c:04:17:b9:3a: 6b:f4:6f:eb:7a:5c:4f:d6:09:dd:48:96:c7:20:1d: b4:22:9e:d4:6f:b1:b3:75:f1:fe:46:9b:74:66:68: 5d:42:cf:e8:10:41:4b:82:26:d0:39:f0:06:2b:6f: 69:3c:f8:5c:19:1b:36:48:49:9d:92:5c:b1:e4:e2: 07:2a:fb:c5:2a:83:b1:59:14:4d:eb:cb:e7:e5:bb: 23:e8:7e:34:62:7c:78:44:0e:eb:66:8d:21:52:f5: e8:15:57:d1:40:4e:fc:16:c3:62:57:9a:a4:29:88: 07:44:ee:92:c9:d1:99:3c:4c:58:d4:db:8c:7e:32: 5e:f1:0a:7a:56:fe:1a:6d:09:f5:6c:b3:f6:dd:c7: 6d:8b:98:71:fa:b3:d3:3d:f4:86:a3:c4:d4:6e:f9: 13:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5F:A5:D5:83:6E:DC:48:2A:73:DB:1C:56:E2:7F:48:81:E3:5B:6A X509v3 Authority Key Identifier: keyid:86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:67:87:53:fb:86:53:e7:37:6a:6a:32:7d:d4:2c:67:99:2d: 56:ee:bb:d3:0a:00:54:4f:ea:0c:26:29:08:34:b4:e8:c0:fb: a3:0c:23:c9:bf:07:71:ef:e1:81:cc:54:b8:06:98:ed:03:49: fa:80:73:85:13:de:1a:27:c2:91:33:64:49:5f:ce:0e:f4:e4: 05:f7:48:0a:54:47:ee:ee:4c:3c:10:4b:df:0b:27:3e:8b:35: 87:0c:83:c8:2e:86:45:a0:d2:27:c9:8c:8c:4a:54:f7:57:6b: f4:ee:78:1a:4e:4f:95:06:5c:ea:06:c8:3c:cd:0e:8f:02:7c: 78:fb:7b:45:7f:fe:6e:b4:d2:b7:53:3d:2d:1d:31:18:24:0d: f4:07:26:ea:68:fb:c6:08:84:1d:f9:d9:25:f3:92:83:e5:51: 3c:26:a7:f5:6b:2a:c6:02:f6:3a:81:c9:ab:bd:fc:34:ac:d5: bc:03:b3:1b:8f:99:90:4c:8b:9d:b5:dc:6c:ee:9f:d4:d9:d8: 36:83:f3:e2:63:3f:94:9a:18:13:47:5b:5b:08:62:da:7e:61: 16:30:07:f9:42:71:4d:0a:5b:de:79:e5:a0:c9:eb:b1:8c:95: 30:b4:ff:01:f4:0d:ba:00:97:d6:f7:b7:b7:2d:99:6b:c4:ae: 90:a4:56:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDfiAXURxZTR6BqBs/wi5xcuI9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2 Mzk4QTM5RjAeFw0yNjA2MDIxODU3NTdaFw0yNjA2MDMxOTU0NTdaMDMxMTAvBgNV BAMTKDY0NUZBNUQ1ODM2RURDNDgyQTczREIxQzU2RTI3RjQ4ODFFMzVCNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RNW4TV+yNALoiFsgDF2amato O6frgUD7BMbweUJAwk8GQmVKhR5KcKX9Cbg3PEzgHvsDOG35vkr7FDOUJJ357DVd LKcfnmvFrKe5HlOLuhe8xL3YkfkAGSNkMDB8UYsXyKQMBBe5Omv0b+t6XE/WCd1I lscgHbQintRvsbN18f5Gm3RmaF1Cz+gQQUuCJtA58AYrb2k8+FwZGzZISZ2SXLHk 4gcq+8Uqg7FZFE3ry+fluyPofjRifHhEDutmjSFS9egVV9FATvwWw2JXmqQpiAdE 7pLJ0Zk8TFjU24x+Ml7xCnpW/hptCfVss/bdx22LmHH6s9M99IajxNRu+RMVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZF+l1YNu3Egqc9scVuJ/SIHjW2owHwYDVR0j BBgwFoAUhjjSjjvSKAElljx7MMNKImOYo58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdmZjAxZDAtMjZmOS00YjIwLWEzMTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUz QkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2Mzk4QTM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjM4RDI4RTNCRDIyODAxMjU5NjNDN0IzMEMzNEEyMjYzOThB MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRB MjI2Mzk4QTM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5nh1P7hlPnN2pqMn3ULGeZLVbuu9MKAFRP 6gwmKQg0tOjA+6MMI8m/B3Hv4YHMVLgGmO0DSfqAc4UT3honwpEzZElfzg705AX3 SApUR+7uTDwQS98LJz6LNYcMg8guhkWg0ifJjIxKVPdXa/TueBpOT5UGXOoGyDzN Do8CfHj7e0V//m600rdTPS0dMRgkDfQHJupo+8YIhB352SXzkoPlUTwmp/VrKsYC 9jqByau9/DSs1bwDsxuPmZBMi5213Gzun9TZ2DaD8+JjP5SaGBNHW1sIYtp+YRYw B/lCcU0KW9555aDJ67GMlTC0/wH0DboAl9b3t7ctmWvErpCkVuk= -----END CERTIFICATE-----Generated at Wed Jun 3 04:24:40 2026 by rpki-client