$ rpki-client -vvf rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft File: A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft (raw, json) Hash identifier: SdWLe5O8v9p7upbvt1PBV2k8N+pmYjp/enxm2pT1inw= Subject key identifier: 09:E9:71:EB:35:5F:D2:71:56:16:8D:15:53:DB:AA:30:40:F0:E8:C6 Authority key identifier: A8:B7:FD:04:F9:C2:A7:D6:EF:8E:53:27:92:F9:C8:03:D1:2F:A1:AA Certificate issuer: /CN=A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA Certificate serial: 0CF5BCE06EDADCF61CB175604C158A6C769AE615 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 22:23:00 +0000 Manifest this update: Fri 19 Jun 2026 22:18:00 +0000 Manifest next update: Sun 21 Jun 2026 00:52:00 +0000 Files and hashes: 1: 3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa (hash: 6SPqfWofEqX1QD5UAEMH2hqU1phhUwtiErMkzEVth0s=) 2: A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl (hash: tG1e6U+u6OTdOnyuVxfpRIYvU1dPrnLG8dgFAgQ6LdM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f5:bc:e0:6e:da:dc:f6:1c:b1:75:60:4c:15:8a:6c:76:9a:e6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA Validity Not Before: Jun 19 22:18:00 2026 GMT Not After : Jun 21 00:52:00 2026 GMT Subject: CN=09E971EB355FD27156168D1553DBAA3040F0E8C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ef:b2:ce:5e:28:0b:f3:d9:88:82:fd:62:ad: 5c:fc:fe:a2:c2:35:49:8d:1d:e7:aa:5d:d7:e0:f7: cb:4d:ee:90:81:31:ed:ba:16:b2:91:e6:8c:e5:08: 06:5a:8b:d4:1c:83:41:be:3f:1e:8b:20:86:bf:04: 63:7b:25:7b:3d:96:4d:63:7a:3d:25:64:ac:bb:e1: fd:09:d9:5b:4e:dd:67:60:86:4a:82:84:93:ab:35: 24:66:9a:d6:1a:9a:c4:ff:d4:23:93:2d:aa:e3:ef: ef:49:d4:e3:52:00:a1:06:f7:77:85:ce:5a:35:1d: d7:a7:3b:29:81:92:8f:94:80:61:db:33:bc:a6:b9: e4:82:0b:66:73:5d:dd:c4:7c:41:32:5c:cd:81:2b: eb:bd:c0:94:e1:ef:81:b0:3d:09:f9:3a:d4:cf:7c: 3c:cb:1f:bc:0c:5e:1d:eb:1c:f6:4e:0f:01:27:15: ae:0b:a4:9b:92:06:85:92:1a:81:37:05:96:fd:43: d4:04:1a:53:b0:66:c8:f4:fe:1a:1f:8e:3d:e6:e1: 0e:b6:b8:25:c0:ec:35:7a:10:31:a6:fe:74:c4:b5: 2f:87:a4:62:79:93:8f:fc:ab:f3:e6:7f:79:32:5f: 11:47:47:a3:73:72:49:8b:81:a7:45:1c:65:8c:95: f6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E9:71:EB:35:5F:D2:71:56:16:8D:15:53:DB:AA:30:40:F0:E8:C6 X509v3 Authority Key Identifier: keyid:A8:B7:FD:04:F9:C2:A7:D6:EF:8E:53:27:92:F9:C8:03:D1:2F:A1:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:6e:be:a4:7c:db:93:88:5c:40:46:64:8d:87:9e:78:fb:16: a2:2c:24:c4:f0:85:db:07:f3:bd:12:89:3d:7e:9a:72:59:99: 13:9c:8f:ac:3d:48:65:3f:73:4f:15:8d:b4:de:3b:b5:a9:a7: a0:58:0f:58:95:1f:b7:c7:f7:f7:f2:2a:77:8f:2f:2f:13:12: d4:2f:3b:a0:7a:e4:1e:cb:27:74:80:3b:bd:ab:96:04:d9:7f: 4a:1f:ea:73:ea:85:d8:17:5b:f6:21:04:fe:37:8a:51:58:3b: 72:22:e6:44:cc:21:cc:8a:21:73:b4:22:4d:43:01:ef:68:3e: 59:35:da:d5:ae:5e:85:1e:f7:2c:76:d3:dd:1c:60:0d:34:49: 27:7d:f9:10:a4:b7:6f:25:36:b8:4f:44:88:d6:7b:c9:7b:31: 61:4e:28:14:2c:13:16:82:0c:3c:85:86:73:25:00:9a:a1:86: ca:52:25:65:b7:81:ac:50:4a:4a:24:6c:69:8d:38:47:7f:33: d2:cf:f7:35:fd:25:72:9c:3b:74:a1:ec:44:85:82:57:77:98: 74:56:c9:81:a4:db:23:cb:2d:a9:93:0f:64:1f:83:7a:83:f9: 55:eb:f8:1b:c1:a4:3a:0c:e0:77:68:d4:71:e5:d8:ee:60:7e: 1d:3d:92:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPW84G7a3PYcsXVgTBWKbHaa5hUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCN0ZEMDRGOUMyQTdENkVGOEU1MzI3OTJGOUM4MDNE MTJGQTFBQTAeFw0yNjA2MTkyMjE4MDBaFw0yNjA2MjEwMDUyMDBaMDMxMTAvBgNV BAMTKDA5RTk3MUVCMzU1RkQyNzE1NjE2OEQxNTUzREJBQTMwNDBGMEU4QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy77LOXigL89mIgv1irVz8/qLC NUmNHeeqXdfg98tN7pCBMe26FrKR5ozlCAZai9Qcg0G+Px6LIIa/BGN7JXs9lk1j ej0lZKy74f0J2VtO3WdghkqChJOrNSRmmtYamsT/1COTLarj7+9J1ONSAKEG93eF zlo1HdenOymBko+UgGHbM7ymueSCC2ZzXd3EfEEyXM2BK+u9wJTh74GwPQn5OtTP fDzLH7wMXh3rHPZODwEnFa4LpJuSBoWSGoE3BZb9Q9QEGlOwZsj0/hofjj3m4Q62 uCXA7DV6EDGm/nTEtS+HpGJ5k4/8q/Pmf3kyXxFHR6NzckmLgadFHGWMlfbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCelx6zVf0nFWFo0VU9uqMEDw6MYwHwYDVR0j BBgwFoAUqLf9BPnCp9bvjlMnkvnIA9EvoaowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDc2ODBkMGQtZTI0MC00YWFmLWJjMjMtMjgyMzU5MzczMjg5LzAvQThCN0ZEMDRG OUMyQTdENkVGOEU1MzI3OTJGOUM4MDNEMTJGQTFBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI3RkQwNEY5QzJBN0Q2RUY4RTUzMjc5MkY5QzgwM0QxMkZB MUFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDc2ODBkMGQtZTI0MC00YWFmLWJj MjMtMjgyMzU5MzczMjg5LzAvQThCN0ZEMDRGOUMyQTdENkVGOEU1MzI3OTJGOUM4 MDNEMTJGQTFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFuvqR825OIXEBGZI2Hnnj7FqIsJMTwhdsH 870SiT1+mnJZmROcj6w9SGU/c08VjbTeO7Wpp6BYD1iVH7fH9/fyKnePLy8TEtQv O6B65B7LJ3SAO72rlgTZf0of6nPqhdgXW/YhBP43ilFYO3Ii5kTMIcyKIXO0Ik1D Ae9oPlk12tWuXoUe9yx2090cYA00SSd9+RCkt28lNrhPRIjWe8l7MWFOKBQsExaC DDyFhnMlAJqhhspSJWW3gaxQSkokbGmNOEd/M9LP9zX9JXKcO3Sh7ESFgld3mHRW yYGk2yPLLamTD2Qfg3qD+VXr+BvBpDoM4Hdo1HHl2O5gfh09ktA= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:16 2026 by rpki-client