$ rpki-client -vvf rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft File: 2677581645A49D82B36AA830484865F4B9D0FC43.mft (raw, json) Hash identifier: JFpAbGVNnhthm49UXY9ZFAnOZ6loeGHMKrJp3IEaEJ0= Subject key identifier: 84:9E:97:51:48:FE:87:5E:52:56:1E:68:80:23:81:2C:3F:05:97:D4 Authority key identifier: 26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43 Certificate issuer: /CN=2677581645A49D82B36AA830484865F4B9D0FC43 Certificate serial: 4283BA029C6621366F9F878A63C6A224F6552ABD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:46:48 +0000 Manifest this update: Tue 16 Jun 2026 18:41:48 +0000 Manifest next update: Wed 17 Jun 2026 18:55:48 +0000 Files and hashes: 1: 2677581645A49D82B36AA830484865F4B9D0FC43.crl (hash: neMfqa+q8o1Vus0fIVGQnPkLlQ7nYsIKxgJ6SLsB0Ig=) 2: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zMOWhJqH1J6fUN/OnJAxp19ayumIrg3uRIfyARwlsqI=) 3: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: 5qL4Akm0PbHI3eo3BSoRkovQkTSvAIBUTKI6uUAYPHA=) 4: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: ePHUQHjUtQqmubSQINVLXHx5bVCNeo3QJkNOBue6jYg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:83:ba:02:9c:66:21:36:6f:9f:87:8a:63:c6:a2:24:f6:55:2a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2677581645A49D82B36AA830484865F4B9D0FC43 Validity Not Before: Jun 16 18:41:48 2026 GMT Not After : Jun 17 18:55:48 2026 GMT Subject: CN=849E975148FE875E52561E688023812C3F0597D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:73:8a:fe:b7:64:66:fd:8a:03:f8:aa:0b:30: ff:0c:ac:6f:84:df:01:e1:e3:f7:2b:6d:cf:9b:07: a2:ae:3b:2b:24:04:13:f1:d9:b7:0a:3c:40:bb:08: 8a:e4:e1:7c:42:9a:66:23:c6:ac:2c:21:d8:37:73: 89:b5:d6:d1:f6:2d:e2:69:cc:0f:f0:1f:69:c3:73: 6f:2f:8b:01:1f:ef:cb:a1:05:ea:b9:58:61:df:fc: ce:ee:c3:2f:5d:71:1c:bf:52:79:8d:01:a2:ac:74: bb:fe:db:48:3d:0b:69:e2:92:86:c3:68:bc:75:27: fb:03:89:a4:2e:66:4e:a2:01:db:ce:81:31:b5:69: 96:60:b8:59:92:23:50:d2:b0:12:e6:24:bd:9b:cf: 31:8c:63:3e:e3:0d:bf:1f:49:fb:bb:95:96:e6:68: 35:ee:ef:ac:b9:be:91:45:a5:1e:ad:33:cd:d1:33: b2:34:87:5f:d2:06:bf:c5:6c:92:ee:12:10:87:3b: 26:ed:ef:a0:55:47:b4:07:da:71:46:61:29:74:f9: d5:91:01:8e:1c:6b:01:be:ff:5a:fa:09:2d:87:87: 74:93:de:99:04:d3:92:34:78:eb:de:bf:cd:f0:ea: 97:10:d7:a6:10:0b:4c:b6:ff:ab:d5:b6:7c:85:12: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9E:97:51:48:FE:87:5E:52:56:1E:68:80:23:81:2C:3F:05:97:D4 X509v3 Authority Key Identifier: keyid:26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:52:36:d6:63:32:5f:03:d9:49:80:d0:0a:2e:79:21:19:89: 8b:96:1a:b5:d7:3b:38:8f:05:0e:92:b9:f6:ff:d0:f2:07:51: 09:b3:5f:c9:ef:3f:68:00:19:13:b6:fe:89:9f:f2:76:86:b0: 1f:97:cc:34:0f:95:0a:d1:f8:e3:2f:01:a1:6b:c0:8e:bd:d5: 4f:61:34:3c:c3:0a:d7:24:11:97:87:2f:6d:40:1b:7a:3a:70: fe:bc:41:96:d2:4b:58:a4:d2:ec:a9:23:15:d2:38:59:a4:98: cb:85:26:60:ca:11:99:7f:dd:e0:e0:30:05:c7:b7:4f:03:d4: 4a:eb:ff:0e:bb:4a:92:9f:74:8f:0b:95:f3:b0:3a:89:e3:62: 4e:77:4f:50:22:0d:21:56:41:31:03:3a:57:b5:25:0d:12:ec: 4b:e1:2b:3d:a3:0e:4b:e2:43:29:dc:c4:0f:9d:a2:9f:dd:00: 26:9a:b9:be:fd:1e:e4:87:6f:67:18:04:cc:3c:6f:cf:58:97: 4d:0b:df:b5:4a:b6:e0:bc:e7:39:35:af:fc:46:60:4b:70:e2: 96:f0:a3:98:85:db:9e:ab:e2:dc:9e:dd:55:d7:15:5e:3c:1d: 31:0b:3c:37:48:6c:13:bd:b9:d3:30:df:9b:c3:f6:d5:1f:1d: 08:77:b2:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQoO6ApxmITZvn4eKY8aiJPZVKr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY3NzU4MTY0NUE0OUQ4MkIzNkFBODMwNDg0ODY1RjRC OUQwRkM0MzAeFw0yNjA2MTYxODQxNDhaFw0yNjA2MTcxODU1NDhaMDMxMTAvBgNV BAMTKDg0OUU5NzUxNDhGRTg3NUU1MjU2MUU2ODgwMjM4MTJDM0YwNTk3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhc4r+t2Rm/YoD+KoLMP8MrG+E 3wHh4/crbc+bB6KuOyskBBPx2bcKPEC7CIrk4XxCmmYjxqwsIdg3c4m11tH2LeJp zA/wH2nDc28viwEf78uhBeq5WGHf/M7uwy9dcRy/UnmNAaKsdLv+20g9C2nikobD aLx1J/sDiaQuZk6iAdvOgTG1aZZguFmSI1DSsBLmJL2bzzGMYz7jDb8fSfu7lZbm aDXu76y5vpFFpR6tM83RM7I0h1/SBr/FbJLuEhCHOybt76BVR7QH2nFGYSl0+dWR AY4cawG+/1r6CS2Hh3ST3pkE05I0eOvev83w6pcQ16YQC0y2/6vVtnyFErjjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhJ6XUUj+h15SVh5ogCOBLD8Fl9QwHwYDVR0j BBgwFoAUJndYFkWknYKzaqgwSEhl9LnQ/EMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGFmMzE1OTktOGIwOC00ZmZkLWEwNTYtNzk1ZThhYTBhNTg2LzAvMjY3NzU4MTY0 NUE0OUQ4MkIzNkFBODMwNDg0ODY1RjRCOUQwRkM0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNjc3NTgxNjQ1QTQ5RDgyQjM2QUE4MzA0ODQ4NjVGNEI5RDBG QzQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvMjY3NzU4MTY0NUE0OUQ4MkIzNkFBODMwNDg0ODY1 RjRCOUQwRkM0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1SNtZjMl8D2UmA0AoueSEZiYuWGrXXOziP BQ6Sufb/0PIHUQmzX8nvP2gAGRO2/omf8naGsB+XzDQPlQrR+OMvAaFrwI691U9h NDzDCtckEZeHL21AG3o6cP68QZbSS1ik0uypIxXSOFmkmMuFJmDKEZl/3eDgMAXH t08D1Err/w67SpKfdI8LlfOwOonjYk53T1AiDSFWQTEDOle1JQ0S7EvhKz2jDkvi QyncxA+dop/dACaaub79HuSHb2cYBMw8b89Yl00L37VKtuC85zk1r/xGYEtw4pbw o5iF256r4tye3VXXFV48HTELPDdIbBO9udMw35vD9tUfHQh3sh0= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:04 2026 by rpki-client