$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft File: 8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft (raw, json) Hash identifier: mDFlqNKrYCPjdH4F9k4XAxRLnt6FVVtpKxwKCEdOrRE= Subject key identifier: C4:E9:7D:A1:3F:A2:AE:DD:E1:B1:EA:A0:8B:69:EE:15:83:95:45:BD Authority key identifier: 8A:7F:3E:F8:5C:F3:AF:D7:26:AC:A3:1F:35:E7:09:D8:EF:F0:C1:3C Certificate issuer: /CN=8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C Certificate serial: 1BA7B51E21EABF6FC6FDD4F55CDC8BAC2A72847C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 23:44:39 +0000 Manifest this update: Fri 19 Jun 2026 23:39:39 +0000 Manifest next update: Sun 21 Jun 2026 01:01:39 +0000 Files and hashes: 1: 8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl (hash: vlm7iHwn+Tj/1tqRisNSI4+FJr/2CFWaWKm5pTtjGVM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a7:b5:1e:21:ea:bf:6f:c6:fd:d4:f5:5c:dc:8b:ac:2a:72:84:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C Validity Not Before: Jun 19 23:39:39 2026 GMT Not After : Jun 21 01:01:39 2026 GMT Subject: CN=C4E97DA13FA2AEDDE1B1EAA08B69EE15839545BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5b:b1:50:d3:b4:f9:7f:d1:fd:a6:ac:7a:39: f9:3f:2c:82:3a:1b:94:c9:be:c5:61:40:e9:6c:8d: 46:e0:83:48:2a:e3:07:5a:dd:46:1c:f9:0b:13:25: 6d:6a:3a:05:7a:e8:28:c0:88:93:88:47:13:b5:16: 4e:a4:7d:12:58:7d:4b:97:ee:a9:99:3d:cb:16:8d: 42:e2:61:9c:84:db:54:c8:be:f9:e0:0a:df:21:a7: f2:7b:d4:12:31:5c:2f:a1:c5:30:12:72:bc:33:cb: fd:65:b4:bb:b8:53:7e:14:21:b2:88:ae:c3:1a:5b: 43:33:c4:52:db:60:1a:66:68:b8:55:57:1f:19:64: 11:92:2e:7f:7b:03:15:dd:67:6e:cb:83:b8:99:fe: 9d:50:eb:ed:33:3b:8c:72:08:df:81:bf:f1:9d:e8: 94:97:a7:86:de:c0:06:ae:dd:98:02:a6:e1:4f:d9: 48:5c:41:bb:48:49:08:a1:45:c7:cd:99:60:55:e8: 7b:ab:3c:95:5d:4c:3a:22:c3:fe:0b:63:c1:98:9b: 36:74:ee:28:f5:64:fc:ed:51:44:79:d1:d4:99:40: f3:33:f5:80:e9:54:8d:a8:fb:5a:9c:e9:22:8a:1d: 5f:ac:cc:22:55:a8:8b:8a:2c:66:29:f1:65:91:aa: 25:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E9:7D:A1:3F:A2:AE:DD:E1:B1:EA:A0:8B:69:EE:15:83:95:45:BD X509v3 Authority Key Identifier: keyid:8A:7F:3E:F8:5C:F3:AF:D7:26:AC:A3:1F:35:E7:09:D8:EF:F0:C1:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:b4:17:db:77:ed:c6:ac:55:df:44:53:3b:8d:3a:b6:cd:42: 05:07:4e:9a:79:7d:ea:18:82:b1:2f:bb:7e:0a:30:63:bc:74: fa:10:1d:7b:b7:19:68:3c:5b:6f:08:6b:9c:1a:6a:75:25:96: 44:5f:06:34:3b:1b:87:db:b4:23:df:e7:83:be:7f:1f:ff:6a: 59:5d:0c:aa:19:75:54:c7:01:4a:c0:92:b8:83:45:4e:b3:50: 9b:05:f0:b4:28:0f:1f:18:de:32:b1:a6:45:f3:c7:cb:1b:ad: f0:fa:df:2f:49:fc:f2:73:93:f6:df:2e:4b:6e:a9:4b:1d:f6: 6a:96:c2:26:d6:ce:76:a8:27:dd:b6:c6:62:de:76:dc:5c:2d: d8:80:00:26:48:dc:17:fd:c1:1c:00:54:02:ce:e6:7c:c1:02: d0:4d:4d:53:78:36:6c:55:5c:c8:1c:09:10:73:11:c3:cb:12: 11:7c:46:d1:8b:ad:7a:2c:ca:97:79:45:7a:84:ec:98:d4:77: 53:b0:9f:45:ac:6a:2c:6c:a5:4f:54:af:24:1a:79:1f:94:e5: ce:f7:1e:93:46:4c:20:ce:de:5b:25:22:c9:52:fe:39:19:2c: 10:78:30:f5:74:f4:cf:36:fa:7c:0c:f2:be:cf:0c:af:7a:c2: 4a:a7:a3:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6e1HiHqv2/G/dT1XNyLrCpyhHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3RjNFRjg1Q0YzQUZENzI2QUNBMzFGMzVFNzA5RDhF RkYwQzEzQzAeFw0yNjA2MTkyMzM5MzlaFw0yNjA2MjEwMTAxMzlaMDMxMTAvBgNV BAMTKEM0RTk3REExM0ZBMkFFRERFMUIxRUFBMDhCNjlFRTE1ODM5NTQ1QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhW7FQ07T5f9H9pqx6Ofk/LII6 G5TJvsVhQOlsjUbgg0gq4wda3UYc+QsTJW1qOgV66CjAiJOIRxO1Fk6kfRJYfUuX 7qmZPcsWjULiYZyE21TIvvngCt8hp/J71BIxXC+hxTAScrwzy/1ltLu4U34UIbKI rsMaW0MzxFLbYBpmaLhVVx8ZZBGSLn97AxXdZ27Lg7iZ/p1Q6+0zO4xyCN+Bv/Gd 6JSXp4bewAau3ZgCpuFP2UhcQbtISQihRcfNmWBV6HurPJVdTDoiw/4LY8GYmzZ0 7ij1ZPztUUR50dSZQPMz9YDpVI2o+1qc6SKKHV+szCJVqIuKLGYp8WWRqiU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxOl9oT+irt3hseqgi2nuFYOVRb0wHwYDVR0j BBgwFoAUin8++Fzzr9cmrKMfNecJ2O/wwTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NlNjhiNTAtMGU5ZS00YWU2LTgyNTMtNWJjMmNkMTIxMzczLzAvOEE3RjNFRjg1 Q0YzQUZENzI2QUNBMzFGMzVFNzA5RDhFRkYwQzEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QTdGM0VGODVDRjNBRkQ3MjZBQ0EzMUYzNUU3MDlEOEVGRjBD MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NlNjhiNTAtMGU5ZS00YWU2LTgy NTMtNWJjMmNkMTIxMzczLzAvOEE3RjNFRjg1Q0YzQUZENzI2QUNBMzFGMzVFNzA5 RDhFRkYwQzEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJG0F9t37casVd9EUzuNOrbNQgUHTpp5feoY grEvu34KMGO8dPoQHXu3GWg8W28Ia5waanUllkRfBjQ7G4fbtCPf54O+fx//alld DKoZdVTHAUrAkriDRU6zUJsF8LQoDx8Y3jKxpkXzx8sbrfD63y9J/PJzk/bfLktu qUsd9mqWwibWznaoJ922xmLedtxcLdiAACZI3Bf9wRwAVALO5nzBAtBNTVN4NmxV XMgcCRBzEcPLEhF8RtGLrXosypd5RXqE7JjUd1Own0WsaixspU9UryQaeR+U5c73 HpNGTCDO3lslIslS/jkZLBB4MPV09M82+nwM8r7PDK96wkqno7c= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:35 2026 by rpki-client