$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft File: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft (raw, json) Hash identifier: 3KZtk71O66Hd66IEqQi7V4xr+d4TlX310jl8uQdintU= Subject key identifier: 22:5D:C4:95:75:F3:D3:72:0E:12:D4:E5:17:BD:DD:63:90:14:20:1F Authority key identifier: 8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 Certificate issuer: /CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Certificate serial: 29C508C0B95CD502801B4818E90B737C2E93037A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 02:19:41 +0000 Manifest this update: Thu 18 Jun 2026 02:14:41 +0000 Manifest next update: Fri 19 Jun 2026 04:28:41 +0000 Files and hashes: 1: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl (hash: 8qXG99s9zoV/kGuPCfEUeh/qXYxDzsuN2faEIqJdxBI=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: WXHF3ztWLcHGSe6MPgiYVl8CmUEe+OPjuifFRIwvCro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 04:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c5:08:c0:b9:5c:d5:02:80:1b:48:18:e9:0b:73:7c:2e:93:03:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Validity Not Before: Jun 18 02:14:41 2026 GMT Not After : Jun 19 04:28:41 2026 GMT Subject: CN=225DC49575F3D3720E12D4E517BDDD639014201F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8e:4f:25:37:89:1b:38:d7:57:f5:c9:7a:d4: 1c:25:b1:70:6d:25:e5:ef:39:e9:05:44:c8:4b:67: 2a:4f:cd:c6:6d:0a:9a:08:36:dc:c1:e2:5f:89:b2: 43:2d:bd:fb:52:9e:bf:4f:ea:d0:b5:92:96:67:c0: 79:e4:1b:0b:39:d8:ad:5e:bc:2e:67:30:4e:5b:66: 13:73:45:1a:d8:2d:90:4e:90:7c:3c:b4:44:a5:86: 89:60:21:ef:a6:5e:a9:74:80:68:ef:1c:19:71:32: ce:bd:78:94:07:c1:d0:d1:e9:5f:f7:9c:2e:ae:59: 05:50:87:27:08:fb:bf:5b:6d:74:2f:12:50:cf:f1: 11:8c:7f:60:ef:31:09:48:a3:b8:35:53:b9:95:e7: a1:4f:10:89:af:a3:85:72:51:71:08:c3:f0:9b:8d: fa:12:46:2d:c2:02:4e:98:50:dd:b2:35:19:9d:ea: 39:c4:a8:e1:8c:3d:77:d1:a8:fc:22:db:6b:73:b8: d1:57:3d:15:c8:57:e8:70:fb:d3:99:d7:dc:26:ba: 68:35:a9:c9:fe:3f:1a:87:94:85:59:b8:ea:88:c9: 23:4e:4d:e3:68:fa:de:ca:22:7f:f8:cd:b5:b1:59: ea:e6:72:ee:e1:67:a4:90:ae:97:1b:78:6f:4d:70: fd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5D:C4:95:75:F3:D3:72:0E:12:D4:E5:17:BD:DD:63:90:14:20:1F X509v3 Authority Key Identifier: keyid:8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b1:4b:91:63:3c:41:2c:e8:d2:65:4b:ef:23:33:98:f2:09: 87:21:e2:06:cf:83:7b:a3:99:a3:06:92:41:f2:6c:a4:65:d1: 5e:01:1a:34:50:9e:ce:9e:ee:1b:15:37:a4:1e:3b:f7:40:fd: be:f4:eb:2c:ac:f7:30:e8:4e:e0:34:47:2d:da:91:09:11:65: 8c:3a:e1:b1:83:4b:2a:f8:15:13:19:0e:0f:ab:47:6f:a7:0c: 42:1e:a4:bf:6b:14:00:36:72:c3:4f:38:f2:21:3f:1a:06:9c: ad:f1:5d:0e:32:ad:38:47:51:84:ab:43:14:e4:80:3e:ae:0f: 7f:72:8f:85:92:65:ff:2e:03:58:15:d2:92:1a:25:fb:58:2b: d4:45:41:36:f0:f0:88:72:6b:5e:5a:b7:24:59:bf:4a:83:70: 06:0d:f5:a0:69:5d:9a:f3:88:30:9a:9f:df:41:2e:b6:57:9e: 2b:3c:7b:2e:8d:aa:ec:c3:d2:b3:09:be:ec:31:43:ff:0e:8b: 3d:64:b9:c1:05:d3:b5:60:c0:d6:0a:b6:0c:01:1a:cb:07:07: fc:5b:44:3a:64:1e:e3:1f:d6:4a:40:bd:e1:cb:b0:c4:e2:c0: d9:bb:b2:37:98:3f:5b:87:cc:e6:e8:c3:bf:a4:79:e8:bc:4e: 5f:58:ac:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKcUIwLlc1QKAG0gY6QtzfC6TA3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2 MURCNzhBNjAeFw0yNjA2MTgwMjE0NDFaFw0yNjA2MTkwNDI4NDFaMDMxMTAvBgNV BAMTKDIyNURDNDk1NzVGM0QzNzIwRTEyRDRFNTE3QkRERDYzOTAxNDIwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCojk8lN4kbONdX9cl61BwlsXBt JeXvOekFRMhLZypPzcZtCpoINtzB4l+JskMtvftSnr9P6tC1kpZnwHnkGws52K1e vC5nME5bZhNzRRrYLZBOkHw8tESlholgIe+mXql0gGjvHBlxMs69eJQHwdDR6V/3 nC6uWQVQhycI+79bbXQvElDP8RGMf2DvMQlIo7g1U7mV56FPEImvo4VyUXEIw/Cb jfoSRi3CAk6YUN2yNRmd6jnEqOGMPXfRqPwi22tzuNFXPRXIV+hw+9OZ19wmumg1 qcn+PxqHlIVZuOqIySNOTeNo+t7KIn/4zbWxWermcu7hZ6SQrpcbeG9NcP3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIl3ElXXz03IOEtTlF73dY5AUIB8wHwYDVR0j BBgwFoAUiqUttdtx9jjpQSVKawzmg2HbeKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmUxY2JkNzktOGYyNi00YjBlLThiM2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVE QjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2MURCNzhBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUE1MkRCNURCNzFGNjM4RTk0MTI1NEE2QjBDRTY4MzYxREI3 OEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2 ODM2MURCNzhBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaxS5FjPEEs6NJlS+8jM5jyCYch4gbPg3uj maMGkkHybKRl0V4BGjRQns6e7hsVN6QeO/dA/b706yys9zDoTuA0Ry3akQkRZYw6 4bGDSyr4FRMZDg+rR2+nDEIepL9rFAA2csNPOPIhPxoGnK3xXQ4yrThHUYSrQxTk gD6uD39yj4WSZf8uA1gV0pIaJftYK9RFQTbw8Ihya15atyRZv0qDcAYN9aBpXZrz iDCan99BLrZXnis8ey6NquzD0rMJvuwxQ/8Oiz1kucEF07VgwNYKtgwBGssHB/xb RDpkHuMf1kpAveHLsMTiwNm7sjeYP1uHzObow7+keei8Tl9YrAI= -----END CERTIFICATE-----Generated at Thu Jun 18 19:03:01 2026 by rpki-client