$ rpki-client -vvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft File: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft (raw, json) Hash identifier: wNW1jygnZo3afLvic5dcpWJmLRuaD4IIfNc6EXAhYvo= Subject key identifier: 6E:B0:1E:57:6C:84:93:4E:CA:D8:F4:39:C5:FB:81:30:7C:A7:AD:46 Authority key identifier: D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 Certificate issuer: /CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Certificate serial: 0FF0DFDE8DD9E00A4EEDA2BF21574FAB0B120B54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 19:31:21 +0000 Manifest this update: Wed 17 Jun 2026 19:26:21 +0000 Manifest next update: Thu 18 Jun 2026 23:22:21 +0000 Files and hashes: 1: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: eXGHZrGd4sU2DLSEdy3de330+Fw4LKj8QHf1Kk8jl8M=) 2: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: JFK4m68zG0lJAd7+KDHHharwdbO7qzWlnuoWt7ljQFI=) 3: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl (hash: 2L6xrXUxoRdSKu0KqIQ0KqGZn16xs+dVKlbXTHR/GRc=) 4: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: JFxGecPe7UA2eaCg+ZKJcplW/KcDw+sS4WqX6uOvlVg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 23:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f0:df:de:8d:d9:e0:0a:4e:ed:a2:bf:21:57:4f:ab:0b:12:0b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Validity Not Before: Jun 17 19:26:21 2026 GMT Not After : Jun 18 23:22:21 2026 GMT Subject: CN=6EB01E576C84934ECAD8F439C5FB81307CA7AD46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:c7:86:39:d4:bc:46:cd:41:c6:e9:11:85: 83:1c:b8:c5:db:9e:33:a3:51:85:e4:4d:9d:87:c8: 09:8a:ea:98:18:a7:ef:1f:f3:c6:29:1e:93:63:25: 8d:46:19:24:38:bf:e6:51:11:db:06:ca:af:6d:1d: e6:bb:e0:5e:2c:b1:55:a7:df:4d:5a:3b:d4:73:7a: 7e:da:39:19:74:de:90:58:53:4e:df:d3:4c:a6:99: 48:69:a5:5e:ff:64:a7:5a:d0:df:0a:3e:a8:85:31: 15:a9:de:a0:26:0d:86:cd:e0:08:f1:f4:c1:10:ba: 18:48:f5:05:1f:1d:8c:92:24:a8:25:1b:2a:d2:95: 65:8e:3f:08:84:3a:8e:b6:62:40:63:65:ef:e5:0e: c1:e2:e5:46:d2:1a:64:03:06:4d:33:4d:68:1d:b7: 82:31:b1:ce:99:85:a4:13:6e:29:00:51:9d:5f:dd: 20:75:d8:51:4f:f0:20:5f:1f:0c:11:2a:19:b2:93: 8e:ac:88:97:49:e5:91:f5:8b:09:8c:25:ef:d8:e9: 8f:0b:63:5a:97:61:d9:06:75:9f:0c:50:fb:60:c5: 44:ca:dd:6c:39:26:fa:25:be:79:6e:36:4e:e9:88: 6c:ab:57:0c:87:9c:10:f0:6a:2a:66:20:d1:84:74: a6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B0:1E:57:6C:84:93:4E:CA:D8:F4:39:C5:FB:81:30:7C:A7:AD:46 X509v3 Authority Key Identifier: keyid:D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7e:23:a3:a2:b4:2a:9c:c0:e2:af:d5:c6:e8:7e:e5:88:ff: f5:ce:0a:22:f1:26:3e:c0:00:8a:21:a4:85:d2:72:f7:16:a0: 51:bb:f1:08:34:c9:b7:c6:07:db:b1:a2:a8:c1:3c:50:d8:2b: 83:60:4c:5f:73:70:95:c9:5d:fb:1b:66:a3:42:77:d7:dd:c7: 07:2e:05:e5:0c:b6:51:02:64:b5:ba:e7:9a:17:38:86:a3:be: a4:a2:86:6b:4a:4b:9f:25:6f:62:c1:2b:19:1d:6c:ff:41:60: e6:b4:9c:b4:8a:60:ee:bf:1c:79:4d:96:9e:9b:23:03:bd:76: 88:54:85:a1:f1:5d:ad:16:ef:8b:05:c8:26:83:7a:bb:1f:4c: d1:ab:c0:c5:f5:bf:fe:b2:76:73:00:79:c1:68:72:22:e8:3a: 7e:07:d7:b2:ad:23:50:d9:0d:9d:ef:b7:fc:0f:db:77:b8:d7: ec:8f:df:12:df:e1:05:c8:7e:f8:ac:16:3e:ea:1a:10:bb:c2: 1b:ea:53:67:fb:5f:8f:8e:55:df:a1:d3:7d:76:af:62:cf:0f: 2c:74:0d:1c:5f:2c:11:7d:be:47:ff:7b:ef:0c:00:40:21:e3: d3:47:10:fd:5f:a9:c5:b7:9e:b0:f1:75:fe:9c:b4:88:d2:25: 89:84:bd:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/Df3o3Z4ApO7aK/IVdPqwsSC1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdCRURB NDMwODJDMzAeFw0yNjA2MTcxOTI2MjFaFw0yNjA2MTgyMzIyMjFaMDMxMTAvBgNV BAMTKDZFQjAxRTU3NkM4NDkzNEVDQUQ4RjQzOUM1RkI4MTMwN0NBN0FENDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI18eGOdS8Rs1BxukRhYMcuMXb njOjUYXkTZ2HyAmK6pgYp+8f88YpHpNjJY1GGSQ4v+ZREdsGyq9tHea74F4ssVWn 301aO9Rzen7aORl03pBYU07f00ymmUhppV7/ZKda0N8KPqiFMRWp3qAmDYbN4Ajx 9MEQuhhI9QUfHYySJKglGyrSlWWOPwiEOo62YkBjZe/lDsHi5UbSGmQDBk0zTWgd t4Ixsc6ZhaQTbikAUZ1f3SB12FFP8CBfHwwRKhmyk46siJdJ5ZH1iwmMJe/Y6Y8L Y1qXYdkGdZ8MUPtgxUTK3Ww5JvolvnluNk7piGyrVwyHnBDwaipmINGEdKbvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbrAeV2yEk07K2PQ5xfuBMHynrUYwHwYDVR0j BBgwFoAU2L91kMQN5zFvUqHe58577aQwgsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBD NDBERTczMTZGNTJBMURFRTdDRTdCRURBNDMwODJDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOEJGNzU5MEM0MERFNzMxNkY1MkExREVFN0NFN0JFREE0MzA4 MkMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdC RURBNDMwODJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ+I6OitCqcwOKv1cbofuWI//XOCiLxJj7A AIohpIXScvcWoFG78Qg0ybfGB9uxoqjBPFDYK4NgTF9zcJXJXfsbZqNCd9fdxwcu BeUMtlECZLW655oXOIajvqSihmtKS58lb2LBKxkdbP9BYOa0nLSKYO6/HHlNlp6b IwO9dohUhaHxXa0W74sFyCaDersfTNGrwMX1v/6ydnMAecFociLoOn4H17KtI1DZ DZ3vt/wP23e41+yP3xLf4QXIfvisFj7qGhC7whvqU2f7X4+OVd+h0312r2LPDyx0 DRxfLBF9vkf/e+8MAEAh49NHEP1fqcW3nrDxdf6ctIjSJYmEvQo= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:52 2026 by rpki-client