$ rpki-client -vvf rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft File: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft (raw, json) Hash identifier: aybWWjyrmg7QxtjaTbeJ396IBg6QKfnsw3qv26V0AC8= Subject key identifier: F0:38:8B:7D:4D:97:AA:DF:A5:C2:65:A0:D3:A8:1E:82:78:45:43:22 Authority key identifier: 8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C Certificate issuer: /CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C Certificate serial: 596D043D4A4F108E0E8F8D529535A8C5CD4F02BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 02:09:28 +0000 Manifest this update: Thu 18 Jun 2026 02:04:28 +0000 Manifest next update: Fri 19 Jun 2026 03:03:28 +0000 Files and hashes: 1: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: Bi2PlajLpuJF5Q77N7WIyjkq2NapiUAEv+5ltKF4LBc=) 2: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl (hash: Sxs0wHsmS4Erq2IHrpRVT86JKeBgmeSepK6TTHEUs7w=) 3: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: wesRzy414+ZceFD9/gwocQJzbKqVZ+NX+KTjHeWFakA=) 4: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: HIdPJqjIrOEvu8Fg+POUaS/pAuaPSBpatCRmSscMNd8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 03:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6d:04:3d:4a:4f:10:8e:0e:8f:8d:52:95:35:a8:c5:cd:4f:02:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C Validity Not Before: Jun 18 02:04:28 2026 GMT Not After : Jun 19 03:03:28 2026 GMT Subject: CN=F0388B7D4D97AADFA5C265A0D3A81E8278454322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:48:50:ff:bf:f8:a2:4a:6b:f6:63:d5:f6:df: b0:e8:ff:05:4b:43:32:ee:ed:88:31:d7:09:e8:cb: 6d:9c:d2:72:62:c3:a7:ea:67:5b:ee:a9:1d:d9:d3: 35:5f:51:26:78:ac:d6:ec:66:73:be:10:30:b1:83: 14:e3:65:de:4e:c6:2b:5f:5d:14:78:e5:ac:bc:ab: 5b:33:ff:e6:7a:6b:d2:af:e0:fb:c0:16:0f:6e:bf: f0:4d:d1:ed:d8:ca:eb:0c:b0:71:78:a9:85:30:cf: 5f:91:69:f3:98:4d:f9:d3:de:bb:80:2f:d3:0d:7d: bd:ac:4a:6c:d6:60:79:df:7f:00:8f:fb:0e:ac:ee: 2d:96:68:0d:ee:5c:37:52:eb:9c:35:21:a6:27:90: 54:09:7a:8d:32:36:75:70:f0:4d:69:1f:f3:77:75: db:9d:c7:3a:10:28:46:1e:1a:8d:83:1b:d8:ae:36: d3:e2:30:99:62:36:0e:8f:21:43:5c:26:02:c3:73: 1c:09:15:f3:0c:2e:83:9a:6b:41:3a:38:7d:5f:47: 50:20:01:c1:d9:5e:d1:3a:23:f8:73:fb:3b:4d:74: f5:3d:13:c0:9c:bc:1c:6d:68:fa:9b:2b:64:e6:76: eb:e7:88:c3:20:4e:30:21:87:9a:02:49:63:09:34: 87:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:38:8B:7D:4D:97:AA:DF:A5:C2:65:A0:D3:A8:1E:82:78:45:43:22 X509v3 Authority Key Identifier: keyid:8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:9a:80:e9:44:6a:e0:80:b1:15:09:11:14:c6:33:31:f0:d3: 78:2b:f7:74:f3:4e:ea:38:0c:f1:c7:07:c9:d6:72:c5:95:0e: d7:17:81:f8:f1:a1:62:42:8a:68:86:a8:8c:60:c1:5c:53:b8: 2e:a2:83:00:ad:be:17:ed:3a:1b:3e:77:51:7e:9a:a9:a1:4d: 96:ce:14:0a:9b:4f:2f:7a:41:2b:a9:67:06:bc:c9:27:5a:aa: 26:2d:a9:f3:3f:de:39:0a:e1:4f:f0:bf:da:ce:fd:51:43:8f: 01:72:d9:7e:44:23:34:ef:a9:b9:66:dd:e2:1f:31:1a:cb:08: 22:59:b2:33:95:31:3a:46:32:51:7d:54:07:d7:5e:62:60:fe: 64:45:76:94:36:67:84:28:60:4f:4a:70:c6:bf:82:9d:14:23: 9c:2f:28:4e:33:df:1f:db:df:29:7f:82:89:dc:c6:f4:f1:74: 3d:92:b0:28:01:45:fc:b8:7f:98:7d:b6:88:fd:7b:4e:9a:eb: ab:61:ba:7d:20:53:58:23:4d:0e:37:34:64:ed:94:4f:75:2a: 2e:7d:3c:08:06:cf:9b:71:7e:03:74:cd:74:54:f8:c5:10:a8: f5:17:6a:c3:50:51:cc:49:c3:7e:02:48:b4:88:33:d0:cd:d4: 4e:b8:c5:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWW0EPUpPEI4Oj41SlTWoxc1PArowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQzOUQyMDdBNDlFMkE1QzFEOUZEOEE3QjI3RDM0NDg0 RUYxRTYyQzAeFw0yNjA2MTgwMjA0MjhaFw0yNjA2MTkwMzAzMjhaMDMxMTAvBgNV BAMTKEYwMzg4QjdENEQ5N0FBREZBNUMyNjVBMEQzQTgxRTgyNzg0NTQzMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOSFD/v/iiSmv2Y9X237Do/wVL QzLu7Ygx1wnoy22c0nJiw6fqZ1vuqR3Z0zVfUSZ4rNbsZnO+EDCxgxTjZd5Oxitf XRR45ay8q1sz/+Z6a9Kv4PvAFg9uv/BN0e3YyusMsHF4qYUwz1+RafOYTfnT3ruA L9MNfb2sSmzWYHnffwCP+w6s7i2WaA3uXDdS65w1IaYnkFQJeo0yNnVw8E1pH/N3 ddudxzoQKEYeGo2DG9iuNtPiMJliNg6PIUNcJgLDcxwJFfMMLoOaa0E6OH1fR1Ag AcHZXtE6I/hz+ztNdPU9E8CcvBxtaPqbK2TmduvniMMgTjAhh5oCSWMJNIetAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8DiLfU2Xqt+lwmWg06gegnhFQyIwHwYDVR0j BBgwFoAUjTnSB6SeKlwdn9insn00SE7x5iwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFiNGUxNGQtMDIxZC00MGRjLTkyM2EtYzEyZDFhZjQ0M2I1LzAvOEQzOUQyMDdB NDlFMkE1QzFEOUZEOEE3QjI3RDM0NDg0RUYxRTYyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84RDM5RDIwN0E0OUUyQTVDMUQ5RkQ4QTdCMjdEMzQ0ODRFRjFF NjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvOEQzOUQyMDdBNDlFMkE1QzFEOUZEOEE3QjI3RDM0 NDg0RUYxRTYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmagOlEauCAsRUJERTGMzHw03gr93TzTuo4 DPHHB8nWcsWVDtcXgfjxoWJCimiGqIxgwVxTuC6igwCtvhftOhs+d1F+mqmhTZbO FAqbTy96QSupZwa8ySdaqiYtqfM/3jkK4U/wv9rO/VFDjwFy2X5EIzTvqblm3eIf MRrLCCJZsjOVMTpGMlF9VAfXXmJg/mRFdpQ2Z4QoYE9KcMa/gp0UI5wvKE4z3x/b 3yl/goncxvTxdD2SsCgBRfy4f5h9toj9e06a66thun0gU1gjTQ43NGTtlE91Ki59 PAgGz5txfgN0zXRU+MUQqPUXasNQUcxJw34CSLSIM9DN1E64xU4= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:54 2026 by rpki-client