$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft File: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft (raw, json) Hash identifier: hnGmVBKQiBI8m3RThSnDyFoDOvyG7nWUNAKQ2jYwL6Y= Subject key identifier: F5:BE:2C:2D:06:F4:B2:3B:19:2D:94:3C:5D:52:E5:38:64:12:DE:1E Authority key identifier: D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 Certificate issuer: /CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Certificate serial: 136C16D91BFD2B9822B1093E9CE263F2D9D61A14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:37:51 +0000 Manifest this update: Tue 16 Jun 2026 19:32:51 +0000 Manifest next update: Wed 17 Jun 2026 20:59:51 +0000 Files and hashes: 1: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: APyKoi1ZG2HKYN+LmPQKEKUBYkJq8d16Zc9c2T01Unc=) 2: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: W9kmi6fSD3hfpz6c4ipA4kZ2ayaTmTarwmo8qVkL32c=) 3: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: pd6OjyzAAcK8uT6naV7NfTNnsjqGHMwbU9/DgsoTtzo=) 4: D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl (hash: M2B0OLQ9xaUB/Xb8XlQ5lDh68p5NMpzkP9oF9wumHM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6c:16:d9:1b:fd:2b:98:22:b1:09:3e:9c:e2:63:f2:d9:d6:1a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3 Validity Not Before: Jun 16 19:32:51 2026 GMT Not After : Jun 17 20:59:51 2026 GMT Subject: CN=F5BE2C2D06F4B23B192D943C5D52E5386412DE1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fc:8f:c0:1d:d4:a5:de:ee:8a:a1:61:2d:a2: a2:b3:fa:76:f1:04:74:25:bd:2d:98:bb:66:40:0d: 23:6f:7d:72:54:0d:00:cf:4d:be:ca:81:d9:10:f5: 99:a6:72:96:6b:d3:4e:a7:8a:ef:5e:d2:b3:0d:33: e3:73:f8:7e:5e:88:42:39:e8:d1:0e:53:8d:5f:10: 8b:2b:bf:29:da:b3:26:16:0b:2d:06:e9:99:a1:e0: e9:36:90:e0:8a:e5:5c:92:d3:1e:2a:a4:db:02:88: 2a:73:e3:fc:69:8e:65:da:22:90:ec:86:5e:dc:c3: 7d:ba:58:b5:0c:d2:bb:fd:7e:ba:63:0a:f2:02:fb: 52:d7:23:5e:16:ab:70:e2:c7:24:63:c5:f7:8e:2e: 68:47:94:d1:68:7b:c7:d8:f6:67:77:55:c7:fa:36: 42:7e:d3:76:54:8b:ad:46:6b:ca:e5:02:02:e3:a3: d6:d9:a6:87:0d:9b:05:b7:df:2e:89:1d:eb:86:4c: 9b:98:d7:83:50:09:ac:27:28:d1:a9:2b:d7:b8:33: ac:1c:68:c0:5b:f4:3e:88:7e:2b:03:0c:8f:2f:ce: 25:b2:fb:7a:f2:64:18:66:4c:a4:34:2e:c3:ff:8c: 4d:1f:27:a6:b1:6d:cf:08:42:65:bb:f9:9b:53:07: 52:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BE:2C:2D:06:F4:B2:3B:19:2D:94:3C:5D:52:E5:38:64:12:DE:1E X509v3 Authority Key Identifier: keyid:D0:CF:CA:6A:1F:D2:34:38:03:3F:81:7E:FD:3B:2A:18:0D:32:C0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/D0CFCA6A1FD23438033F817EFD3B2A180D32C0C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:a0:1c:de:8e:6e:87:b0:1c:56:76:3f:0a:1f:54:45:24:c5: 6d:cf:e0:a9:48:ec:fb:53:c6:82:ae:63:a8:32:a1:3d:02:37: 95:9d:ff:3d:67:3f:dd:f0:1a:0b:57:06:10:ef:c4:cd:c0:34: 84:3a:2a:ee:67:5a:75:fd:33:40:91:46:14:6f:2d:de:c0:90: 62:9b:9c:eb:c0:a7:64:46:06:b1:0b:cb:ba:2f:34:63:9a:f4: 13:e3:24:82:ad:ff:ad:86:23:de:43:e3:73:07:df:8b:63:c8: d8:46:af:b0:5c:2f:90:fb:7f:09:6d:a4:a7:dd:f5:5f:78:cc: 42:7f:68:ec:c8:83:b1:c5:29:49:5d:55:1c:a5:14:ef:a7:af: 02:42:01:6c:36:2e:b3:8b:a9:3f:42:2b:7c:8a:70:78:e7:d8: 5e:a9:6a:cc:16:5d:1a:2f:47:86:02:d3:60:3f:43:5f:3f:25: e1:14:8b:a8:43:f7:1b:89:c8:ed:49:4c:27:ea:2c:b3:8d:e4: c3:e1:5a:2a:30:3c:77:c6:c7:fd:56:fd:79:b6:29:64:e3:7f: 10:95:2e:70:df:3e:9b:03:62:f4:d7:19:5d:9b:e5:72:72:4e: e4:c4:66:55:8b:ce:7e:f3:75:8e:5e:55:10:4e:d6:e2:b6:ed: c7:8a:d3:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2wW2Rv9K5gisQk+nOJj8tnWGhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgw RDMyQzBDMzAeFw0yNjA2MTYxOTMyNTFaFw0yNjA2MTcyMDU5NTFaMDMxMTAvBgNV BAMTKEY1QkUyQzJEMDZGNEIyM0IxOTJEOTQzQzVENTJFNTM4NjQxMkRFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/I/AHdSl3u6KoWEtoqKz+nbx BHQlvS2Yu2ZADSNvfXJUDQDPTb7KgdkQ9ZmmcpZr006niu9e0rMNM+Nz+H5eiEI5 6NEOU41fEIsrvynasyYWCy0G6Zmh4Ok2kOCK5VyS0x4qpNsCiCpz4/xpjmXaIpDs hl7cw326WLUM0rv9frpjCvIC+1LXI14Wq3DixyRjxfeOLmhHlNFoe8fY9md3Vcf6 NkJ+03ZUi61Ga8rlAgLjo9bZpocNmwW33y6JHeuGTJuY14NQCawnKNGpK9e4M6wc aMBb9D6IfisDDI8vziWy+3ryZBhmTKQ0LsP/jE0fJ6axbc8IQmW7+ZtTB1I9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9b4sLQb0sjsZLZQ8XVLlOGQS3h4wHwYDVR0j BBgwFoAU0M/Kah/SNDgDP4F+/TsqGA0ywMMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE0YTIxYjktZjkxMi00MWYzLWI2MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkEx RkQyMzQzODAzM0Y4MTdFRkQzQjJBMTgwRDMyQzBDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMENGQ0E2QTFGRDIzNDM4MDMzRjgxN0VGRDNCMkExODBEMzJD MEMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvRDBDRkNBNkExRkQyMzQzODAzM0Y4MTdFRkQzQjJB MTgwRDMyQzBDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJagHN6OboewHFZ2PwofVEUkxW3P4KlI7PtT xoKuY6gyoT0CN5Wd/z1nP93wGgtXBhDvxM3ANIQ6Ku5nWnX9M0CRRhRvLd7AkGKb nOvAp2RGBrELy7ovNGOa9BPjJIKt/62GI95D43MH34tjyNhGr7BcL5D7fwltpKfd 9V94zEJ/aOzIg7HFKUldVRylFO+nrwJCAWw2LrOLqT9CK3yKcHjn2F6paswWXRov R4YC02A/Q18/JeEUi6hD9xuJyO1JTCfqLLON5MPhWiowPHfGx/1W/Xm2KWTjfxCV LnDfPpsDYvTXGV2b5XJyTuTEZlWLzn7zdY5eVRBO1uK27ceK0yE= -----END CERTIFICATE-----Generated at Wed Jun 17 11:14:06 2026 by rpki-client