$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft File: 8B57121B495DA86939D79B7BA261CF6D38C999CF.mft (raw, json) Hash identifier: w/T2Kwog8WYtdWhl0byHx1yNCqc3+vk6W4xyUmj06Oc= Subject key identifier: B2:5A:E6:EC:EB:66:43:A3:8A:B5:36:01:94:28:C0:78:7B:46:BB:10 Authority key identifier: 8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF Certificate issuer: /CN=8B57121B495DA86939D79B7BA261CF6D38C999CF Certificate serial: 532B72D611DADC70C36FA521DFA0EBAE85A5B2A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 06:47:55 +0000 Manifest this update: Sat 20 Jun 2026 06:42:55 +0000 Manifest next update: Sun 21 Jun 2026 09:13:55 +0000 Files and hashes: 1: 8B57121B495DA86939D79B7BA261CF6D38C999CF.crl (hash: VDJ1jhIe4MCUT1Ny+J7Ck42sQv5GfXIDE+3MF1hl8KE=) 2: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: w+XxfdGQbvXdRZjpGQCwUdlhFyEQmevCuv9dcfZGuKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 09:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2b:72:d6:11:da:dc:70:c3:6f:a5:21:df:a0:eb:ae:85:a5:b2:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B57121B495DA86939D79B7BA261CF6D38C999CF Validity Not Before: Jun 20 06:42:55 2026 GMT Not After : Jun 21 09:13:55 2026 GMT Subject: CN=B25AE6ECEB6643A38AB536019428C0787B46BB10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8f:5e:c3:4b:51:3c:05:7f:56:a0:5b:e5:be: 58:16:25:31:d2:1e:0e:24:b1:42:5f:35:ef:d7:25: d3:3b:77:8e:81:c7:85:45:56:a1:2b:29:52:df:bf: 02:52:f1:c8:27:75:06:6e:39:ae:4f:99:66:ac:1c: 97:7a:b1:e2:0b:61:8f:b0:db:2e:91:d6:0a:a4:d9: 3b:c3:9b:88:ae:1a:db:1d:4f:9e:78:90:08:12:90: 71:e8:d1:77:f9:53:c6:f7:e4:b2:9b:61:b4:72:3b: bc:ff:bc:16:ec:0b:32:ed:d6:5f:45:9e:76:0e:79: 80:d2:08:94:9c:2a:c7:75:70:df:4e:fb:9a:af:37: d2:5f:a8:d3:af:f2:2b:c7:0d:7e:45:ab:4b:2d:7d: e8:f4:59:9b:3d:49:b0:19:31:09:68:47:ef:0e:4f: 23:d7:7a:fb:97:a8:cf:a4:ac:68:f9:f6:7f:a4:2c: 18:7a:74:d5:1b:7b:f6:bd:93:e1:a1:da:06:ac:0d: 81:ea:12:81:9f:d0:1a:01:86:cb:3a:ad:d7:de:fa: 30:1f:22:16:31:4a:e2:f1:a7:c8:fc:36:8c:e0:ec: fc:f3:6d:dc:c2:2b:1d:e6:8f:28:03:c4:a1:6a:79: 96:25:9b:64:3b:fb:5f:b7:1c:ae:2f:58:ba:5e:5a: 1d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5A:E6:EC:EB:66:43:A3:8A:B5:36:01:94:28:C0:78:7B:46:BB:10 X509v3 Authority Key Identifier: keyid:8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:05:d8:8d:8d:2d:2d:62:1c:c3:de:c1:e6:ac:02:f3:96:55: 43:fe:b1:14:e9:97:56:67:7a:02:2f:7a:8c:f3:f2:c0:5f:3a: e7:2a:64:25:fe:bf:b6:0d:98:08:2c:2c:09:b9:50:b9:b6:90: d7:60:96:11:fc:29:6b:4e:9a:78:1b:6c:fe:1a:31:6f:21:1a: 8b:23:55:30:14:c9:16:45:04:6f:c7:af:fe:83:b5:28:9f:ab: fe:c8:b9:5f:6e:b6:5a:4e:e2:1c:96:ef:e3:01:2b:92:d2:f9: b7:4a:3c:3e:46:ec:fc:1e:74:e8:f4:3c:ee:e7:a6:73:f9:6e: b0:18:25:a8:90:d2:1a:0a:ff:39:ba:b3:be:7f:cc:61:08:92: 02:ef:05:48:7c:d0:6e:78:37:ea:b5:d7:b5:c6:7c:15:8f:d4: ec:bc:6e:aa:cb:01:40:91:5e:f8:88:6b:20:62:d9:d1:d2:d0: 87:f2:21:d3:44:77:13:72:4a:9d:6d:43:6d:2f:02:69:f8:70: 88:f6:e5:0a:cf:3a:f0:87:71:e2:8e:22:2e:9d:ed:c8:12:1f: 2c:87:f5:a9:bd:ca:4b:c2:16:8a:8c:73:64:f2:bb:13:f5:8c: 6a:9a:bb:8f:c9:1f:e6:a9:2f:c7:97:98:7c:6b:8d:fd:80:5c: e1:21:9e:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUyty1hHa3HDDb6Uh36DrroWlsqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI1NzEyMUI0OTVEQTg2OTM5RDc5QjdCQTI2MUNGNkQz OEM5OTlDRjAeFw0yNjA2MjAwNjQyNTVaFw0yNjA2MjEwOTEzNTVaMDMxMTAvBgNV BAMTKEIyNUFFNkVDRUI2NjQzQTM4QUI1MzYwMTk0MjhDMDc4N0I0NkJCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcj17DS1E8BX9WoFvlvlgWJTHS Hg4ksUJfNe/XJdM7d46Bx4VFVqErKVLfvwJS8cgndQZuOa5PmWasHJd6seILYY+w 2y6R1gqk2TvDm4iuGtsdT554kAgSkHHo0Xf5U8b35LKbYbRyO7z/vBbsCzLt1l9F nnYOeYDSCJScKsd1cN9O+5qvN9JfqNOv8ivHDX5Fq0stfej0WZs9SbAZMQloR+8O TyPXevuXqM+krGj59n+kLBh6dNUbe/a9k+Gh2gasDYHqEoGf0BoBhss6rdfe+jAf IhYxSuLxp8j8Nozg7PzzbdzCKx3mjygDxKFqeZYlm2Q7+1+3HK4vWLpeWh0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUslrm7OtmQ6OKtTYBlCjAeHtGuxAwHwYDVR0j BBgwFoAUi1cSG0ldqGk515t7omHPbTjJmc8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NjNTYwNWQtZjE3YS00MDEwLTkyNTMtMjEwYzY0ZjE0OGJkLzAvOEI1NzEyMUI0 OTVEQTg2OTM5RDc5QjdCQTI2MUNGNkQzOEM5OTlDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjU3MTIxQjQ5NURBODY5MzlENzlCN0JBMjYxQ0Y2RDM4Qzk5 OUNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky NTMtMjEwYzY0ZjE0OGJkLzAvOEI1NzEyMUI0OTVEQTg2OTM5RDc5QjdCQTI2MUNG NkQzOEM5OTlDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0F2I2NLS1iHMPeweasAvOWVUP+sRTpl1Zn egIveozz8sBfOucqZCX+v7YNmAgsLAm5ULm2kNdglhH8KWtOmngbbP4aMW8hGosj VTAUyRZFBG/Hr/6DtSifq/7IuV9utlpO4hyW7+MBK5LS+bdKPD5G7PwedOj0PO7n pnP5brAYJaiQ0hoK/zm6s75/zGEIkgLvBUh80G54N+q117XGfBWP1Oy8bqrLAUCR XviIayBi2dHS0IfyIdNEdxNySp1tQ20vAmn4cIj25QrPOvCHceKOIi6d7cgSHyyH 9am9ykvCFoqMc2TyuxP1jGqau4/JH+apL8eXmHxrjf2AXOEhns0= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:12 2026 by rpki-client