$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft File: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft (raw, json) Hash identifier: m2ZFi9/hclY9jYzx/CAdmnJ+2cjb4ZzqrH3+Fuybte4= Subject key identifier: A8:D9:E9:48:EE:41:CA:69:B9:21:7F:DB:CC:5E:26:CB:6B:32:BE:6F Authority key identifier: A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC Certificate issuer: /CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC Certificate serial: 2335454D34C62B8F9A084B6282F4B82D90CE161B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 12:00:25 +0000 Manifest this update: Fri 19 Jun 2026 11:55:25 +0000 Manifest next update: Sat 20 Jun 2026 15:30:25 +0000 Files and hashes: 1: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: UJ/To0XTouVSFOn7NWj23fxNZAouQWAqvBpnkIJXRFM=) 2: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: Zeaoa8MH2HdVHd5TglLIUEl41Yo/QcdVaZotZEH8Cts=) 3: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: Avv7/9ccLlQ1aIPCfbfxFrVouBultgrgCwZuIM827ow=) 4: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl (hash: GktlbdIGqDz/FjoAX7a8Dl+Htt8KsIHwiMVhzbyF9CU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 15:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:35:45:4d:34:c6:2b:8f:9a:08:4b:62:82:f4:b8:2d:90:ce:16:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC Validity Not Before: Jun 19 11:55:25 2026 GMT Not After : Jun 20 15:30:25 2026 GMT Subject: CN=A8D9E948EE41CA69B9217FDBCC5E26CB6B32BE6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a0:bb:a4:b7:42:70:af:79:40:90:7f:a8:cd: 47:32:db:84:57:df:bd:e6:e5:d0:32:97:a3:47:b7: ac:f2:4a:a7:9a:9c:f5:d8:f1:4c:e5:67:60:2e:c5: 3b:11:6a:97:ef:5f:b7:c4:96:66:9c:85:9f:ea:0f: 6f:fe:0e:32:85:82:02:d0:00:20:e2:b7:20:0b:65: 27:90:3a:81:c2:c5:7b:1d:06:47:a9:85:eb:8f:0a: 82:fc:88:a8:64:e0:c8:76:0f:48:66:bf:37:01:4d: a5:bb:95:5b:31:32:49:34:a4:37:68:ce:24:17:38: 00:97:bc:95:33:a1:b6:9f:6e:ad:2d:8a:68:19:47: 63:f7:6e:97:73:57:bf:f9:f7:3e:61:75:08:16:49: 7e:8e:a4:73:18:f3:51:3f:ce:93:53:f2:f0:5a:cc: 99:23:40:12:78:c6:bc:69:95:f3:2a:be:66:14:23: b9:22:3f:90:ad:84:7c:8e:d3:34:4c:25:0c:fc:02: 7f:a1:d8:5d:ff:62:b6:f8:05:d6:be:5e:07:fd:b8: 6b:c0:e3:04:5d:ba:11:34:c2:76:eb:56:19:f1:40: 1a:42:19:bb:6a:24:86:38:72:2a:ee:11:e4:4b:d4: f6:61:38:e4:cc:1a:c0:6a:80:4f:06:eb:9e:eb:ad: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D9:E9:48:EE:41:CA:69:B9:21:7F:DB:CC:5E:26:CB:6B:32:BE:6F X509v3 Authority Key Identifier: keyid:A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:10:88:12:a5:33:bb:4a:e8:2d:c2:25:36:27:45:ee:da:89: 03:db:2e:e8:42:8d:38:42:61:2d:47:a5:f9:23:7a:08:62:c6: 54:92:25:ce:ed:77:5c:bc:a3:ce:f1:4e:63:fc:01:d4:2c:a3: b7:fc:a8:bb:31:9f:ce:90:ac:08:8b:dc:30:90:c5:e9:25:28: 3c:c9:6c:76:39:db:9b:ed:3b:cc:fe:07:4e:5f:5a:cd:a1:26: d4:7f:4d:96:89:3d:fb:a0:8c:82:d1:d8:7d:2a:4f:82:1b:0e: db:1e:ae:cf:b8:24:fa:f1:1d:37:14:63:fb:c2:af:14:8c:c7: 31:84:29:91:9e:51:d2:0e:05:18:26:b6:cd:cf:9c:f6:20:8d: 6b:1d:04:0f:db:f2:ec:cf:63:80:4e:2e:0f:1f:1d:03:ea:1c: aa:95:af:91:30:bf:ee:7f:1d:38:b0:94:cc:23:f7:8a:3c:fa: 4e:5e:f9:9f:80:54:3f:11:ac:2f:40:6c:d3:47:a7:4a:52:3c: c6:df:a7:fd:9f:d8:30:e8:21:77:42:d6:bd:0e:f5:cb:56:bf: 63:3c:6a:75:1f:c0:04:39:39:8e:b6:28:77:11:2c:58:8f:6d: fb:91:c0:85:b5:b4:9c:f6:1d:bc:41:1f:b0:8b:f2:a8:eb:46: d7:76:1f:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIzVFTTTGK4+aCEtigvS4LZDOFhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThENjAyMTczODhEQ0VFNjg5N0JEQTVCQzZENTE5MDMx N0NFQzBFQzAeFw0yNjA2MTkxMTU1MjVaFw0yNjA2MjAxNTMwMjVaMDMxMTAvBgNV BAMTKEE4RDlFOTQ4RUU0MUNBNjlCOTIxN0ZEQkNDNUUyNkNCNkIzMkJFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCoLukt0Jwr3lAkH+ozUcy24RX 373m5dAyl6NHt6zySqeanPXY8UzlZ2AuxTsRapfvX7fElmachZ/qD2/+DjKFggLQ ACDityALZSeQOoHCxXsdBkepheuPCoL8iKhk4Mh2D0hmvzcBTaW7lVsxMkk0pDdo ziQXOACXvJUzobafbq0timgZR2P3bpdzV7/59z5hdQgWSX6OpHMY81E/zpNT8vBa zJkjQBJ4xrxplfMqvmYUI7kiP5CthHyO0zRMJQz8An+h2F3/Yrb4Bda+Xgf9uGvA 4wRduhE0wnbrVhnxQBpCGbtqJIY4ciruEeRL1PZhOOTMGsBqgE8G657rraOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqNnpSO5Bymm5IX/bzF4my2syvm8wHwYDVR0j BBgwFoAUqNYCFziNzuaJe9pbxtUZAxfOwOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk1NzdjM2MtNjZjZC00MGE0LWFmYzUtNmM2ZjhiNjY0YTUxLzAvQThENjAyMTcz ODhEQ0VFNjg5N0JEQTVCQzZENTE5MDMxN0NFQzBFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEQ2MDIxNzM4OERDRUU2ODk3QkRBNUJDNkQ1MTkwMzE3Q0VD MEVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQThENjAyMTczODhEQ0VFNjg5N0JEQTVCQzZENTE5 MDMxN0NFQzBFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkQiBKlM7tK6C3CJTYnRe7aiQPbLuhCjThC YS1HpfkjeghixlSSJc7td1y8o87xTmP8AdQso7f8qLsxn86QrAiL3DCQxeklKDzJ bHY525vtO8z+B05fWs2hJtR/TZaJPfugjILR2H0qT4IbDtsers+4JPrxHTcUY/vC rxSMxzGEKZGeUdIOBRgmts3PnPYgjWsdBA/b8uzPY4BOLg8fHQPqHKqVr5Ewv+5/ HTiwlMwj94o8+k5e+Z+AVD8RrC9AbNNHp0pSPMbfp/2f2DDoIXdC1r0O9ctWv2M8 anUfwAQ5OY62KHcRLFiPbfuRwIW1tJz2HbxBH7CL8qjrRtd2H7w= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:46 2026 by rpki-client