$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft File: 84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft (raw, json) Hash identifier: 8e6sCHKKIDO+DRfSF+tEfpVhvPq6AkXgI+ZT6FdiNOo= Subject key identifier: AE:8C:36:90:3C:4D:82:8F:80:4D:C1:D0:00:DA:ED:D4:9B:45:3C:A1 Authority key identifier: 84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1 Certificate issuer: /CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1 Certificate serial: 73F8396DA95855DBEE7AE90AF0C3E51424DCF0A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 06:42:51 +0000 Manifest this update: Sat 20 Jun 2026 06:37:51 +0000 Manifest next update: Sun 21 Jun 2026 09:08:51 +0000 Files and hashes: 1: 84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl (hash: Rfrhb6Wx12IXleWbwWqygX1vbgMuKkOzMNMhdLFDnoU=) 2: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: WmY+n1lGNZlUUH5ZggQpvj8af92oWZ8YbeF8/QwNgtQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 09:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f8:39:6d:a9:58:55:db:ee:7a:e9:0a:f0:c3:e5:14:24:dc:f0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1 Validity Not Before: Jun 20 06:37:51 2026 GMT Not After : Jun 21 09:08:51 2026 GMT Subject: CN=AE8C36903C4D828F804DC1D000DAEDD49B453CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:ac:2e:5c:09:5c:8a:82:74:37:19:72:a5: 11:a2:b8:1f:45:09:59:2a:d7:40:04:63:af:39:4d: c7:91:84:04:bc:db:dc:ad:42:79:9a:fe:f7:3e:33: 77:50:44:fc:2a:38:1a:e7:03:44:0b:f9:9e:d0:93: 97:a0:e0:8e:19:92:5e:d6:31:81:ed:db:0b:d4:73: cc:97:72:c8:e9:38:b1:7e:a1:19:af:2b:ac:a1:28: 9a:ac:14:2f:23:c9:a7:52:ab:be:af:7d:73:aa:f2: 85:d5:0c:70:cc:67:1c:a9:23:4e:51:3f:1b:e2:ff: 46:ff:d3:f8:55:95:7e:03:cd:47:cb:45:23:b2:95: e7:f0:9e:bc:66:af:10:33:33:e2:2e:c1:38:9e:1b: 35:f9:f6:71:9b:fb:8d:9d:28:67:5d:96:7e:7c:eb: 19:a9:e4:2b:ce:58:31:74:96:2b:aa:bd:ef:0c:21: 0b:da:4e:d3:42:7f:2a:94:1a:df:2f:49:db:2a:81: 80:ce:12:a6:86:80:0f:11:48:0c:65:be:3b:ad:f2: b4:7d:de:1e:5f:7c:0c:fe:5a:52:75:82:16:93:c3: 8a:06:32:3d:6f:5a:7a:69:bf:73:32:e7:ee:0b:49: eb:89:a3:9c:a6:54:56:a1:f9:74:6c:bd:29:be:62: 84:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8C:36:90:3C:4D:82:8F:80:4D:C1:D0:00:DA:ED:D4:9B:45:3C:A1 X509v3 Authority Key Identifier: keyid:84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:46:5d:d6:10:36:35:1c:8e:6b:c7:3d:07:56:c5:e2:8c:d2: cd:f9:94:a8:31:82:97:c4:97:03:3a:3b:4c:73:da:99:5d:4f: 67:c4:0f:7d:f9:8b:35:78:18:f5:20:67:19:a5:30:98:23:b0: 69:e3:c0:29:85:20:ba:f5:c2:0d:4d:50:57:19:9b:5f:59:f8: 2f:4d:77:f3:44:84:bc:70:e9:e6:fd:51:71:3c:f4:38:21:4c: 7e:6d:32:7b:f3:11:a1:c2:22:81:ab:d4:e5:13:d0:72:98:1d: f8:a1:30:8c:1b:ed:e2:80:5d:20:79:99:12:ef:43:53:94:3e: a0:4c:51:90:fa:0d:4e:e6:dd:47:5a:99:db:fd:2f:e0:b9:0e: 6e:17:2a:2a:c4:44:20:98:15:25:0c:94:d3:36:e3:6a:ff:59: a0:af:21:3f:0a:67:16:95:95:bd:65:dc:af:89:7f:07:0e:21: a0:8a:c0:01:f7:09:85:0c:e9:cc:2a:b1:cb:06:74:84:1c:9b: 11:ed:85:cc:f3:41:e9:23:cc:36:e8:31:03:62:66:67:fe:64: 12:73:8f:bd:6e:e0:f0:d4:05:34:f7:b9:40:8f:e6:3c:6a:69: 5c:e9:98:7b:91:90:7c:a7:b6:e3:01:d5:2f:62:ec:dc:14:8f: a6:2e:f0:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc/g5balYVdvueukK8MPlFCTc8KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRFRTY0REE1MTA4MkIzMDk0OEQxMkY2RTE0QjhFQkNG MUQ2NThEMTAeFw0yNjA2MjAwNjM3NTFaFw0yNjA2MjEwOTA4NTFaMDMxMTAvBgNV BAMTKEFFOEMzNjkwM0M0RDgyOEY4MDREQzFEMDAwREFFREQ0OUI0NTNDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dKwuXAlcioJ0NxlypRGiuB9F CVkq10AEY685TceRhAS829ytQnma/vc+M3dQRPwqOBrnA0QL+Z7Qk5eg4I4Zkl7W MYHt2wvUc8yXcsjpOLF+oRmvK6yhKJqsFC8jyadSq76vfXOq8oXVDHDMZxypI05R Pxvi/0b/0/hVlX4DzUfLRSOylefwnrxmrxAzM+IuwTieGzX59nGb+42dKGddln58 6xmp5CvOWDF0liuqve8MIQvaTtNCfyqUGt8vSdsqgYDOEqaGgA8RSAxlvjut8rR9 3h5ffAz+WlJ1ghaTw4oGMj1vWnppv3My5+4LSeuJo5ymVFah+XRsvSm+YoTnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrow2kDxNgo+ATcHQANrt1JtFPKEwHwYDVR0j BBgwFoAUhO5k2lEIKzCUjRL24UuOvPHWWNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ3ZjllZjQtZjk5Zi00NGZmLWI5NjgtNzBkNDUyNGQ3MjA3LzAvODRFRTY0REE1 MTA4MkIzMDk0OEQxMkY2RTE0QjhFQkNGMUQ2NThEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NEVFNjREQTUxMDgyQjMwOTQ4RDEyRjZFMTRCOEVCQ0YxRDY1 OEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ3ZjllZjQtZjk5Zi00NGZmLWI5 NjgtNzBkNDUyNGQ3MjA3LzAvODRFRTY0REE1MTA4MkIzMDk0OEQxMkY2RTE0QjhF QkNGMUQ2NThEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9GXdYQNjUcjmvHPQdWxeKM0s35lKgxgpfE lwM6O0xz2pldT2fED335izV4GPUgZxmlMJgjsGnjwCmFILr1wg1NUFcZm19Z+C9N d/NEhLxw6eb9UXE89DghTH5tMnvzEaHCIoGr1OUT0HKYHfihMIwb7eKAXSB5mRLv Q1OUPqBMUZD6DU7m3Udamdv9L+C5Dm4XKirERCCYFSUMlNM242r/WaCvIT8KZxaV lb1l3K+JfwcOIaCKwAH3CYUM6cwqscsGdIQcmxHthczzQekjzDboMQNiZmf+ZBJz j71u4PDUBTT3uUCP5jxqaVzpmHuRkHyntuMB1S9i7NwUj6Yu8JY= -----END CERTIFICATE-----Generated at Sat Jun 20 16:05:18 2026 by rpki-client