$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft File: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft (raw, json) Hash identifier: 1ZyeMwsvz5HTuPm8DywxOXHX1QH5d+sQgk8lk3GXNZc= Subject key identifier: D4:61:CB:41:0D:F1:D6:EA:86:A8:D5:9E:16:E5:C4:18:F7:EF:45:FF Authority key identifier: 85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E Certificate issuer: /CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Certificate serial: 115825B577115F53D4E6F2EC732786589963D157 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 10:14:36 +0000 Manifest this update: Thu 18 Jun 2026 10:09:36 +0000 Manifest next update: Fri 19 Jun 2026 12:03:36 +0000 Files and hashes: 1: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: b9vSoEj12pKvRl6GFlwGqwDqlYjOzNMwdmXHDB/QoPA=) 2: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: ymv/QzmelT0mY8Z1NXChI2j7830jRvZf9HvAHfEuKp0=) 3: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uYXVOfIT7P6Dr33KoZiS4hHMvBugVDHDvO0rydITSy0=) 4: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl (hash: VxxKbEdqNT0RBAWGoyyJM8Fzn8Sh4quQObQ+RqoOCFU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:58:25:b5:77:11:5f:53:d4:e6:f2:ec:73:27:86:58:99:63:d1:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Validity Not Before: Jun 18 10:09:36 2026 GMT Not After : Jun 19 12:03:36 2026 GMT Subject: CN=D461CB410DF1D6EA86A8D59E16E5C418F7EF45FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:64:9b:3a:8d:e3:35:e8:57:74:6f:8e:10: 5d:87:6f:81:37:c5:48:58:a9:b6:61:84:1a:9d:08: 2e:a7:61:75:bd:55:62:d9:e8:cf:7e:34:9c:73:17: 2c:9d:1e:4a:87:fc:ef:c3:15:48:fd:1c:32:36:bb: 4b:e6:0c:38:33:72:6f:b8:66:84:6d:e0:0e:e7:d7: 2c:9b:f7:f7:24:d1:3c:9b:2d:7b:58:74:ac:1c:16: 26:e3:66:76:10:ee:11:43:86:8f:bd:c2:5d:14:74: 40:ee:3d:63:2c:6d:1f:df:79:f3:8f:9d:27:04:15: e7:73:35:f9:6d:a4:f3:52:11:0e:be:f0:8c:03:1e: 68:b4:4e:bc:c1:2c:5f:ab:2e:88:9a:14:60:fa:4c: 24:09:8a:8e:51:bb:df:39:69:30:36:37:1c:9f:57: 2d:ff:f6:cb:bd:b7:00:83:ef:e1:c3:17:05:7c:8e: 2d:bb:21:93:23:80:b8:3e:7e:d8:d2:f6:9b:3f:c9: bc:66:e9:31:96:6d:06:38:88:ab:50:fe:7b:85:69: 91:e5:9e:78:e6:ce:eb:ca:21:fa:58:94:d9:78:79: cc:c6:dc:d9:de:e8:68:71:24:c9:77:ab:a1:69:af: 28:15:16:39:4c:21:67:f8:73:4b:49:8b:f4:84:66: da:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:61:CB:41:0D:F1:D6:EA:86:A8:D5:9E:16:E5:C4:18:F7:EF:45:FF X509v3 Authority Key Identifier: keyid:85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:75:3e:d7:cf:26:1e:65:05:73:75:3c:f5:99:28:9b:39:19: cb:49:65:b5:22:92:4c:78:7f:6e:83:c8:93:09:3f:57:56:e1: 53:90:82:0f:62:d9:14:fc:1b:ba:32:d9:8f:06:e2:e1:59:d7: 70:17:e0:ac:5d:78:97:fc:e8:c5:9b:b1:3e:c4:ce:c8:ca:90: bb:f5:e6:48:a4:b5:df:a3:1c:d8:d8:10:4a:6f:a4:d7:6c:42: c7:dc:e5:3c:58:27:06:73:57:87:d6:bb:38:29:94:4d:2c:0e: cb:97:5e:18:ba:96:ff:55:47:8d:cf:13:40:86:52:45:4f:c8: 01:c4:13:d0:47:5d:05:4a:32:78:32:82:ac:76:1d:d2:92:6c: 3f:5a:af:d7:6c:73:04:e5:46:9b:bd:5c:f6:b8:ba:f4:59:d3: 5a:78:cd:63:5a:9b:8d:31:52:e6:5c:50:5f:4d:1d:63:d6:7b: f2:8c:72:9c:22:6f:93:85:db:ed:c9:69:2c:c0:91:6a:3e:c0: 37:01:5d:d2:b0:83:e3:3f:a4:5f:97:52:6a:47:75:c9:c9:aa: e7:d1:63:6a:f2:7c:89:1d:fd:ad:8d:00:0b:cc:72:7c:60:d2: fa:42:cd:db:05:6c:69:de:5b:7e:01:4b:11:7c:60:ca:39:77: 8d:1b:e5:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEVgltXcRX1PU5vLscyeGWJlj0VcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRB QzY2QTQwRTAeFw0yNjA2MTgxMDA5MzZaFw0yNjA2MTkxMjAzMzZaMDMxMTAvBgNV BAMTKEQ0NjFDQjQxMERGMUQ2RUE4NkE4RDU5RTE2RTVDNDE4RjdFRjQ1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCWSbOo3jNehXdG+OEF2Hb4E3 xUhYqbZhhBqdCC6nYXW9VWLZ6M9+NJxzFyydHkqH/O/DFUj9HDI2u0vmDDgzcm+4 ZoRt4A7n1yyb9/ck0TybLXtYdKwcFibjZnYQ7hFDho+9wl0UdEDuPWMsbR/fefOP nScEFedzNfltpPNSEQ6+8IwDHmi0TrzBLF+rLoiaFGD6TCQJio5Ru985aTA2Nxyf Vy3/9su9twCD7+HDFwV8ji27IZMjgLg+ftjS9ps/ybxm6TGWbQY4iKtQ/nuFaZHl nnjmzuvKIfpYlNl4eczG3Nne6GhxJMl3q6FprygVFjlMIWf4c0tJi/SEZtolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1GHLQQ3x1uqGqNWeFuXEGPfvRf8wHwYDVR0j BBgwFoAUhXdwLWFMjLgpyizFHCszdKxmpA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU0ODE2MDYtZDVmZC00MTk2LWFiY2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2 MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRBQzY2QTQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NTc3NzAyRDYxNEM4Q0I4MjlDQTJDQzUxQzJCMzM3NEFDNjZB NDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMz NzRBQzY2QTQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADx1PtfPJh5lBXN1PPWZKJs5GctJZbUikkx4 f26DyJMJP1dW4VOQgg9i2RT8G7oy2Y8G4uFZ13AX4KxdeJf86MWbsT7EzsjKkLv1 5kiktd+jHNjYEEpvpNdsQsfc5TxYJwZzV4fWuzgplE0sDsuXXhi6lv9VR43PE0CG UkVPyAHEE9BHXQVKMngygqx2HdKSbD9ar9dscwTlRpu9XPa4uvRZ01p4zWNam40x UuZcUF9NHWPWe/KMcpwib5OF2+3JaSzAkWo+wDcBXdKwg+M/pF+XUmpHdcnJqufR Y2ryfIkd/a2NAAvMcnxg0vpCzdsFbGneW34BSxF8YMo5d40b5b4= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:02 2026 by rpki-client