$ rpki-client -vvf rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft File: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft (raw, json) Hash identifier: 2LCI1G3QeP4f9FRDKKK77u2yZx6dhwUU9L2CYFE7UBU= Subject key identifier: 3A:B3:AC:FF:16:48:EA:E2:E7:F0:BF:FC:25:D6:CC:C0:2C:1D:BE:43 Authority key identifier: B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 Certificate issuer: /CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Certificate serial: 4FFBC679C56D903BB33BCB1272DAF9FF0469150A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 16:56:12 +0000 Manifest this update: Fri 19 Jun 2026 16:51:12 +0000 Manifest next update: Sat 20 Jun 2026 20:27:12 +0000 Files and hashes: 1: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl (hash: BF151UbGOOPAtj7j5xFyOFvLkypi2o3ox1ndnIomQs0=) 2: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: g5c7Nq+6t4kiF6CKiothKoqaQ8v25zT/n7Wj9Q/sxEQ=) 3: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: 9VWfd5KMgyw5xyqB55UR/HJrZNws4qzcvTj6ecqQ/Qk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fb:c6:79:c5:6d:90:3b:b3:3b:cb:12:72:da:f9:ff:04:69:15:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Validity Not Before: Jun 19 16:51:12 2026 GMT Not After : Jun 20 20:27:12 2026 GMT Subject: CN=3AB3ACFF1648EAE2E7F0BFFC25D6CCC02C1DBE43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:01:a3:ff:cd:64:bc:12:0e:98:c0:c7:19: 96:74:de:49:cc:30:e6:89:0f:99:74:d9:e5:0d:de: c6:9b:86:1e:19:f4:a2:ae:f7:bc:13:82:d6:84:85: 91:58:e2:11:7e:53:9f:d4:01:4a:df:d3:46:2e:f3: d8:87:f1:25:67:77:a8:55:df:4c:29:2f:5b:c0:ee: d2:70:62:11:19:72:e7:33:71:a7:96:5f:1d:24:49: 02:cd:2f:d7:c9:6e:8f:17:66:01:f6:3a:d6:c4:c7: be:e7:f6:8f:b3:ed:7f:ce:48:07:dc:a5:52:34:a4: f8:64:a2:e2:3a:30:24:b6:d0:eb:c0:65:63:46:80: 2c:06:36:91:b0:f7:92:d9:36:df:4f:dd:fa:27:1c: 12:bf:4c:97:2f:0f:3a:e1:67:f6:d3:19:c6:8c:59: 1c:8e:8c:bd:70:22:28:0d:98:ff:bf:75:1c:c0:bf: 32:ce:45:63:95:19:16:88:81:e7:a4:48:cc:d0:fb: a0:e2:9c:d1:8e:00:db:c8:db:b0:8f:19:7e:c9:be: ca:66:00:00:90:ea:1a:6c:be:51:9f:d3:be:c0:f3: bf:02:3a:6e:e2:aa:b0:09:e1:a7:92:7c:e0:15:14: 79:5f:c3:d2:63:ea:bb:31:c1:37:19:d6:78:bb:bd: a4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B3:AC:FF:16:48:EA:E2:E7:F0:BF:FC:25:D6:CC:C0:2C:1D:BE:43 X509v3 Authority Key Identifier: keyid:B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:1a:42:b9:8b:8d:6e:47:52:4c:4a:18:2c:10:bb:fc:95:d4: 8a:df:94:ed:88:22:29:b8:c6:fd:b0:91:ac:f1:18:88:e3:b5: d0:00:f0:a3:dc:3c:36:31:d5:ea:04:9f:93:49:48:f3:29:09: dd:85:91:b2:ff:3f:a8:05:8e:ce:27:76:63:ea:97:14:7d:67: 19:d1:e0:f8:2f:f6:7c:23:75:77:27:c5:39:c3:a8:26:c5:ea: 67:4e:de:a3:4a:7e:c5:c0:58:de:ff:8d:4a:68:72:79:1a:9c: d0:67:9a:f2:52:6e:82:03:9e:31:de:6c:26:1e:94:c0:ba:ce: 1b:e1:35:b5:ce:76:f5:59:81:ed:30:da:cd:00:1e:a6:92:51: b7:94:05:9a:22:07:15:6b:83:15:d9:b2:b4:d9:2c:e8:80:c8: c1:ca:a0:fb:4c:28:06:e8:39:28:ee:73:7f:ad:11:a7:9c:d2: fa:11:69:33:a6:e1:5f:66:f9:a2:d7:6b:1c:62:3e:7d:47:5c: 57:09:d8:2b:a5:a7:11:cb:23:98:fa:dd:3a:b7:71:d0:6d:70: 29:3e:9e:e2:68:85:a3:59:a8:4d:fe:73:be:f4:01:c4:fa:c7: aa:b4:ab:59:fb:6f:fe:9d:d5:47:e7:ec:e7:0f:3c:2c:ac:44: ea:82:a3:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/vGecVtkDuzO8sSctr5/wRpFQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzExMUJB QjcwOTQwNjAeFw0yNjA2MTkxNjUxMTJaFw0yNjA2MjAyMDI3MTJaMDMxMTAvBgNV BAMTKDNBQjNBQ0ZGMTY0OEVBRTJFN0YwQkZGQzI1RDZDQ0MwMkMxREJFNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nwGj/81kvBIOmMDHGZZ03knM MOaJD5l02eUN3sabhh4Z9KKu97wTgtaEhZFY4hF+U5/UAUrf00Yu89iH8SVnd6hV 30wpL1vA7tJwYhEZcuczcaeWXx0kSQLNL9fJbo8XZgH2OtbEx77n9o+z7X/OSAfc pVI0pPhkouI6MCS20OvAZWNGgCwGNpGw95LZNt9P3fonHBK/TJcvDzrhZ/bTGcaM WRyOjL1wIigNmP+/dRzAvzLORWOVGRaIgeekSMzQ+6DinNGOANvI27CPGX7Jvspm AACQ6hpsvlGf077A878COm7iqrAJ4aeSfOAVFHlfw9Jj6rsxwTcZ1ni7vaSzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOrOs/xZI6uLn8L/8JdbMwCwdvkMwHwYDVR0j BBgwFoAUuBCMf76kK1mksA20otwRG6twlAYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjNzlmYmUtNDc5MC00NmJlLWI5YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZC RUE0MkI1OUE0QjAwREI0QTJEQzExMUJBQjcwOTQwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODEwOEM3RkJFQTQyQjU5QTRCMDBEQjRBMkRDMTExQkFCNzA5 NDA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzEx MUJBQjcwOTQwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsaQrmLjW5HUkxKGCwQu/yV1IrflO2IIim4 xv2wkazxGIjjtdAA8KPcPDYx1eoEn5NJSPMpCd2FkbL/P6gFjs4ndmPqlxR9ZxnR 4Pgv9nwjdXcnxTnDqCbF6mdO3qNKfsXAWN7/jUpocnkanNBnmvJSboIDnjHebCYe lMC6zhvhNbXOdvVZge0w2s0AHqaSUbeUBZoiBxVrgxXZsrTZLOiAyMHKoPtMKAbo OSjuc3+tEaec0voRaTOm4V9m+aLXaxxiPn1HXFcJ2CulpxHLI5j63Tq3cdBtcCk+ nuJohaNZqE3+c770AcT6x6q0q1n7b/6d1Ufn7OcPPCysROqCo+A= -----END CERTIFICATE-----Generated at Sat Jun 20 11:42:10 2026 by rpki-client