$ rpki-client -vvf rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft File: C717817244AB088EAD0E4D76165AD606C58B6BDE.mft (raw, json) Hash identifier: xSYd6SSKcH0NtiP+wunjBFQ/WEEC2v0ezL24SbSvtr0= Subject key identifier: D3:05:9A:87:67:CC:B7:64:0E:59:0E:21:5C:9C:2C:5C:09:02:96:57 Authority key identifier: C7:17:81:72:44:AB:08:8E:AD:0E:4D:76:16:5A:D6:06:C5:8B:6B:DE Certificate issuer: /CN=C717817244AB088EAD0E4D76165AD606C58B6BDE Certificate serial: 79176CC247BD7D4925385DE6EA7A96C03200A3DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 18:42:03 +0000 Manifest this update: Sat 13 Jun 2026 18:37:03 +0000 Manifest next update: Sun 14 Jun 2026 19:53:03 +0000 Files and hashes: 1: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: ibsq14pTeQS2Mg9IUw2PKfJ3Jza0sBMhcbU4/kSfoSc=) 2: C717817244AB088EAD0E4D76165AD606C58B6BDE.crl (hash: 1Qq/CmGnVU1ESo4uZ9xH2dVnn9sSlx8S9dn8iifK2Zc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.crl rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:17:6c:c2:47:bd:7d:49:25:38:5d:e6:ea:7a:96:c0:32:00:a3:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C717817244AB088EAD0E4D76165AD606C58B6BDE Validity Not Before: Jun 13 18:37:03 2026 GMT Not After : Jun 14 19:53:03 2026 GMT Subject: CN=D3059A8767CCB7640E590E215C9C2C5C09029657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a4:a6:7a:ae:7e:52:56:3d:ca:7b:94:73:f0: ed:f8:18:64:54:b2:e0:9e:47:27:6d:a9:dc:76:44: f0:ee:d9:89:b3:43:4a:01:1a:82:07:68:6d:4f:fb: fa:35:0e:5c:7e:b7:a2:bc:01:0b:16:60:73:b1:2e: 18:8d:8f:8c:09:85:59:1f:18:11:ed:c0:fc:8e:68: 5a:71:9e:a4:e3:52:d5:0c:a2:2b:0a:b8:cd:7c:2a: c3:a5:53:f7:53:f1:9e:76:da:35:8a:56:8a:87:d5: 09:9d:48:74:eb:cc:b0:3b:61:a4:0a:0a:fd:55:f4: 68:65:70:7f:bc:c7:67:f9:74:ae:ee:a7:cc:ea:56: e6:71:4b:31:e3:bd:ee:0b:57:a8:36:36:ce:b6:84: 06:32:26:b3:62:e6:56:6b:b6:ff:be:79:d5:e7:ce: c1:40:d9:4f:a2:28:f5:fa:f3:0d:45:04:3b:18:70: 87:62:98:70:ff:e2:a9:27:9e:dc:dd:a8:08:4d:12: a1:a6:49:c7:1f:6b:aa:27:aa:4b:ac:50:54:ca:cf: 4b:49:03:6c:c3:f0:b9:c6:87:cc:b0:c7:95:0c:f7: 38:b1:26:f0:82:1b:4e:10:ba:30:74:f3:be:a2:3a: 3f:3b:eb:47:bf:13:11:44:20:75:e1:4d:a9:71:af: 38:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:05:9A:87:67:CC:B7:64:0E:59:0E:21:5C:9C:2C:5C:09:02:96:57 X509v3 Authority Key Identifier: keyid:C7:17:81:72:44:AB:08:8E:AD:0E:4D:76:16:5A:D6:06:C5:8B:6B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C717817244AB088EAD0E4D76165AD606C58B6BDE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/C717817244AB088EAD0E4D76165AD606C58B6BDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9a:19:c8:e4:2e:2b:40:90:7c:70:28:2a:d9:27:be:44:8a: ee:47:e3:bc:d2:10:dd:5a:29:ae:41:91:b7:dc:a5:1e:9b:d3: cb:ce:0d:f6:2b:c5:8a:58:db:b9:5a:c7:3a:5f:e6:ea:c2:79: 3a:95:fd:46:0e:17:06:d2:91:2b:8c:1f:49:43:ac:19:0f:67: 7b:68:bf:f3:19:22:1a:65:0b:33:db:d5:6e:16:5a:3a:fe:de: ed:9b:91:3d:e4:1a:32:9a:1e:df:60:58:70:34:ca:e5:fe:76: 74:5a:9a:ff:4e:5c:93:58:99:f1:1d:c2:88:4c:c3:d3:a5:60: ce:63:ed:57:b4:fc:47:50:b3:2a:23:0f:7d:b2:05:1a:ee:79: 62:38:f8:d1:d1:f5:7b:b1:17:cb:0c:36:89:0c:70:b1:58:5e: 8c:cc:6e:32:9f:ed:eb:bd:02:18:74:80:6e:c8:b2:ec:35:6b: 13:ea:ad:42:e8:a6:37:13:66:f7:d5:09:c4:26:1b:db:6d:4b: 7a:24:cf:0f:fc:8d:d2:bf:f9:48:25:cf:fe:68:17:f2:be:7a: 22:04:e3:71:e9:e1:53:03:79:be:3a:af:a9:7d:74:29:9a:20: 7e:8b:b7:9f:a1:00:03:bc:a9:40:f0:3e:db:61:4f:09:ca:4f: e5:96:1c:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeRdswke9fUklOF3m6nqWwDIAo9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxNzgxNzI0NEFCMDg4RUFEMEU0RDc2MTY1QUQ2MDZD NThCNkJERTAeFw0yNjA2MTMxODM3MDNaFw0yNjA2MTQxOTUzMDNaMDMxMTAvBgNV BAMTKEQzMDU5QTg3NjdDQ0I3NjQwRTU5MEUyMTVDOUMyQzVDMDkwMjk2NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLpKZ6rn5SVj3Ke5Rz8O34GGRU suCeRydtqdx2RPDu2YmzQ0oBGoIHaG1P+/o1Dlx+t6K8AQsWYHOxLhiNj4wJhVkf GBHtwPyOaFpxnqTjUtUMoisKuM18KsOlU/dT8Z522jWKVoqH1QmdSHTrzLA7YaQK Cv1V9GhlcH+8x2f5dK7up8zqVuZxSzHjve4LV6g2Ns62hAYyJrNi5lZrtv++edXn zsFA2U+iKPX68w1FBDsYcIdimHD/4qknntzdqAhNEqGmSccfa6onqkusUFTKz0tJ A2zD8LnGh8ywx5UM9zixJvCCG04QujB0876iOj8760e/ExFEIHXhTalxrziHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0wWah2fMt2QOWQ4hXJwsXAkCllcwHwYDVR0j BBgwFoAUxxeBckSrCI6tDk12FlrWBsWLa94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVjMWUyZjMtNGZiZC00NGJiLTgzZjAtYmI1YWZlNjQ1NzVlLzAvQzcxNzgxNzI0 NEFCMDg4RUFEMEU0RDc2MTY1QUQ2MDZDNThCNkJERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzE3ODE3MjQ0QUIwODhFQUQwRTRENzYxNjVBRDYwNkM1OEI2 QkRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvQzcxNzgxNzI0NEFCMDg4RUFEMEU0RDc2MTY1QUQ2 MDZDNThCNkJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOaGcjkLitAkHxwKCrZJ75Eiu5H47zSEN1a Ka5BkbfcpR6b08vODfYrxYpY27laxzpf5urCeTqV/UYOFwbSkSuMH0lDrBkPZ3to v/MZIhplCzPb1W4WWjr+3u2bkT3kGjKaHt9gWHA0yuX+dnRamv9OXJNYmfEdwohM w9OlYM5j7Ve0/EdQsyojD32yBRrueWI4+NHR9XuxF8sMNokMcLFYXozMbjKf7eu9 Ahh0gG7Isuw1axPqrULopjcTZvfVCcQmG9ttS3okzw/8jdK/+Uglz/5oF/K+eiIE 43Hp4VMDeb46r6l9dCmaIH6Lt5+hAAO8qUDwPtthTwnKT+WWHJ0= -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:09 2026 by rpki-client