$ rpki-client -vvf rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft File: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft (raw, json) Hash identifier: c7NDKgz7WnJMVnSa1MJ6z30NWoHncor0WL07RjZUEw0= Subject key identifier: 80:1F:4E:8F:41:98:B0:45:4D:AC:21:8D:45:04:D4:09:49:28:50:BA Authority key identifier: 08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB Certificate issuer: /CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Certificate serial: 149891FADB7CF2804696A60CFE8F79B0BABA8D01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 11:36:08 +0000 Manifest this update: Thu 18 Jun 2026 11:31:08 +0000 Manifest next update: Fri 19 Jun 2026 13:29:08 +0000 Files and hashes: 1: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl (hash: ucBBV6o/EQ+QL5UWwaYUDv3rOP7JnhfllhWbsuU4Xvo=) 2: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: Mcg9nbFeFqcbrXtsnWz+m6gsNfmlAcJQ2rPda7V7VVk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:98:91:fa:db:7c:f2:80:46:96:a6:0c:fe:8f:79:b0:ba:ba:8d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Validity Not Before: Jun 18 11:31:08 2026 GMT Not After : Jun 19 13:29:08 2026 GMT Subject: CN=801F4E8F4198B0454DAC218D4504D409492850BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:b5:47:be:49:9a:04:df:1a:ba:39:67:9f: 5f:50:de:58:bb:91:dc:87:6d:03:ad:88:8f:65:e9: 88:4f:97:08:af:76:cd:9c:fa:d8:cf:87:78:7a:b6: c9:f9:7e:31:9d:00:e2:36:4c:42:74:43:67:ad:b4: 32:f3:f8:26:6f:48:56:9d:41:11:d7:5a:c0:a3:39: dd:23:c7:7b:79:ae:50:b5:d7:c8:3b:d6:0d:b6:83: 0d:7d:22:fd:19:86:74:91:45:f0:a0:84:8d:62:6d: 3c:1a:5f:8d:b8:01:06:63:e7:37:a3:4e:43:62:14: 67:22:75:f4:c2:ce:10:18:4d:84:b6:59:36:3a:e7: 3a:ab:54:b4:0f:ab:87:f2:4c:b2:74:22:03:8e:69: 12:3f:3a:30:56:c5:dd:7f:f6:b7:47:ae:23:17:c0: 65:3e:73:da:84:66:90:7a:7f:8c:7a:b9:0d:a6:93: 39:a4:02:96:8c:0d:d4:1d:88:e6:73:92:21:9d:f7: 86:10:ee:86:5d:1e:bf:ce:7e:5d:e7:d0:16:16:f7: 73:63:1e:ff:63:19:d5:80:d1:3f:cd:58:95:b4:19: b4:83:29:1a:6e:f2:fd:a7:e3:1b:8a:77:53:00:10: e2:01:59:6e:24:0b:45:80:9c:ef:ea:fc:27:c4:9e: 2c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1F:4E:8F:41:98:B0:45:4D:AC:21:8D:45:04:D4:09:49:28:50:BA X509v3 Authority Key Identifier: keyid:08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:fd:35:3c:55:04:e6:b1:04:47:3b:dd:1a:33:3d:b0:9a:6d: 18:97:37:21:e6:59:3b:2f:3c:22:6a:61:11:89:43:79:a4:61: 4b:68:9b:36:8c:9a:1d:ff:ce:27:f9:c5:0e:03:63:60:d1:41: e7:c7:f3:32:51:5d:5e:67:8d:9e:8f:67:ef:fd:31:4a:d5:fe: ed:73:80:61:d4:db:31:5d:f8:48:23:c6:18:fc:e6:e5:5f:6e: 0a:9a:21:94:03:0b:9a:e3:69:42:d8:e6:1d:66:5a:14:67:ed: fb:29:cf:c4:5f:61:8d:dd:91:28:22:00:25:cf:33:cc:aa:01: 61:25:ba:a6:aa:78:23:df:a5:98:b7:df:c6:8a:7b:6d:54:ad: 89:ea:11:bb:17:ec:d9:d8:f3:2d:38:0e:f2:55:e7:d1:86:d5: ec:8f:d8:5a:91:5e:0a:16:f6:ae:10:4a:b0:2f:d7:3b:9d:72: c5:6e:b8:19:45:77:01:71:d2:00:01:5c:6b:3e:47:50:b7:97: b1:ab:d8:eb:a5:4d:c4:53:6a:d6:23:15:71:50:be:21:80:13: f2:ec:67:73:d7:90:c5:49:a2:fc:d5:04:4c:d2:94:2c:b2:b0: ee:83:a9:ac:66:51:b4:72:37:a5:33:df:8d:47:f1:cd:68:87: 71:09:01:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJiR+tt88oBGlqYM/o95sLq6jQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMx OUIzMDBGQjAeFw0yNjA2MTgxMTMxMDhaFw0yNjA2MTkxMzI5MDhaMDMxMTAvBgNV BAMTKDgwMUY0RThGNDE5OEIwNDU0REFDMjE4RDQ1MDRENDA5NDkyODUwQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVLVHvkmaBN8aujlnn19Q3li7 kdyHbQOtiI9l6YhPlwivds2c+tjPh3h6tsn5fjGdAOI2TEJ0Q2ettDLz+CZvSFad QRHXWsCjOd0jx3t5rlC118g71g22gw19Iv0ZhnSRRfCghI1ibTwaX424AQZj5zej TkNiFGcidfTCzhAYTYS2WTY65zqrVLQPq4fyTLJ0IgOOaRI/OjBWxd1/9rdHriMX wGU+c9qEZpB6f4x6uQ2mkzmkApaMDdQdiOZzkiGd94YQ7oZdHr/Ofl3n0BYW93Nj Hv9jGdWA0T/NWJW0GbSDKRpu8v2n4xuKd1MAEOIBWW4kC0WAnO/q/CfEnizDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgB9Oj0GYsEVNrCGNRQTUCUkoULowHwYDVR0j BBgwFoAUCNsctHaQ8fZxmnGgay6v/BmzAPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE3Zjc5YjAtYjllMy00YzNkLWExMTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3 NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMxOUIzMDBGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wOERCMUNCNDc2OTBGMUY2NzE5QTcxQTA2QjJFQUZGQzE5QjMw MEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFG RkMxOUIzMDBGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKj9NTxVBOaxBEc73RozPbCabRiXNyHmWTsv PCJqYRGJQ3mkYUtomzaMmh3/zif5xQ4DY2DRQefH8zJRXV5njZ6PZ+/9MUrV/u1z gGHU2zFd+Egjxhj85uVfbgqaIZQDC5rjaULY5h1mWhRn7fspz8RfYY3dkSgiACXP M8yqAWEluqaqeCPfpZi338aKe21UrYnqEbsX7NnY8y04DvJV59GG1eyP2FqRXgoW 9q4QSrAv1zudcsVuuBlFdwFx0gABXGs+R1C3l7Gr2OulTcRTatYjFXFQviGAE/Ls Z3PXkMVJovzVBEzSlCyysO6DqaxmUbRyN6Uz341H8c1oh3EJAeM= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:57 2026 by rpki-client