$ rpki-client -vvf rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft File: 993E93A0664A9D902D978F3596929ADCAC0D2885.mft (raw, json) Hash identifier: S+W9ODak1BVTsvJjH4UPSgG2R3KyaLjQm081BNLTSoU= Subject key identifier: F7:10:FB:CF:00:54:BD:55:79:1C:57:02:03:E0:95:65:1D:35:71:DF Authority key identifier: 99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85 Certificate issuer: /CN=993E93A0664A9D902D978F3596929ADCAC0D2885 Certificate serial: 2E1708E43C0461BA6488FC860C0D27452E87CE01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:04:44 +0000 Manifest this update: Tue 16 Jun 2026 20:59:44 +0000 Manifest next update: Wed 17 Jun 2026 21:26:44 +0000 Files and hashes: 1: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: poDQZ/2rD8eLtkNhMBfgdpUsz7sf37vpupMVDHqtCB8=) 2: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: 5aAX0IVwi9Xgk1AjsNPK5oymgMFcjVvUxV24RP5spu8=) 3: 993E93A0664A9D902D978F3596929ADCAC0D2885.crl (hash: JJD34PzRPYXNwEr8+GvOln2eSqL0F9GPmNOCqI/189E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.crl rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:17:08:e4:3c:04:61:ba:64:88:fc:86:0c:0d:27:45:2e:87:ce:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993E93A0664A9D902D978F3596929ADCAC0D2885 Validity Not Before: Jun 16 20:59:44 2026 GMT Not After : Jun 17 21:26:44 2026 GMT Subject: CN=F710FBCF0054BD55791C570203E095651D3571DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:52:b6:88:3b:3e:bb:b8:e9:4e:bf:46:ef:a6: 76:36:61:a8:26:0e:b7:5d:4b:bd:05:0c:22:4e:24: 0a:9b:8c:ba:e7:b5:01:c4:f3:69:86:08:5f:76:0f: 45:f4:f2:ce:8d:2b:95:40:77:5e:3f:c6:03:eb:6c: d5:30:67:30:ee:60:72:20:70:8f:23:1f:4b:70:96: 46:ea:ea:70:58:16:57:16:d6:07:64:2e:2f:38:3d: 6f:3c:d0:36:b2:fa:10:6c:e6:bf:88:1d:82:fc:cb: 15:00:e0:1e:ce:67:fe:77:b1:ac:e9:87:a1:b3:34: 90:79:f0:72:e5:19:7d:6f:7c:00:96:5d:a8:5c:47: cb:6e:d1:cd:4a:d8:8b:c1:9e:52:dd:e8:43:10:06: 35:68:90:8f:03:f6:d1:81:ac:6a:fd:28:32:e1:84: 0b:8f:6b:f0:31:bd:99:d4:a7:0d:e6:4f:42:1e:f3: f1:a6:c1:93:f7:fd:fc:9b:19:0c:98:08:3f:c7:d5: b1:80:ff:1f:38:ae:b0:f5:68:b0:21:a0:f0:0d:47: 4d:3b:09:c7:ff:61:56:0b:3d:cc:81:f6:fc:be:22: 69:f7:84:3f:d7:16:71:a5:f0:28:4f:65:ae:68:48: 06:c7:b7:f3:3f:eb:3b:5f:d4:83:da:53:93:85:ca: 9d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:10:FB:CF:00:54:BD:55:79:1C:57:02:03:E0:95:65:1D:35:71:DF X509v3 Authority Key Identifier: keyid:99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:96:b6:38:98:9b:6f:97:40:e9:5b:ef:b1:5b:b0:b2:e5:5e: e2:7d:03:a5:f2:99:6e:78:4f:dd:27:1a:20:57:aa:0e:c4:dc: 3d:91:3f:64:a1:08:cd:a7:7b:6d:34:03:97:47:35:41:8c:2e: 28:5e:4a:c0:d9:f4:7b:40:73:e4:42:1e:46:ea:d7:c8:5d:0f: 1e:b0:1e:ce:31:2f:02:e5:01:a6:fd:26:69:6f:79:16:a7:de: c4:55:ea:42:b1:7e:09:de:4a:a8:61:d3:e9:8a:2c:e7:8e:d3: 43:7c:9c:89:8f:43:71:b0:7a:70:0a:39:dc:0c:b8:a8:55:e3: 97:7a:19:67:f6:53:6c:a5:29:09:75:e7:d4:e6:95:61:51:ed: b4:f5:25:bc:c2:50:21:45:7c:65:90:68:47:e2:72:21:c4:76: 81:7b:db:f3:05:09:de:ee:d8:8d:c2:ce:ed:a7:bf:c2:4c:a6: 81:e1:d0:b8:0f:a9:cc:2d:2d:1e:dc:26:d8:37:12:51:04:6b: b1:34:92:6f:8f:d2:ee:70:b0:4c:ee:3b:7b:68:a7:1d:57:ff: 80:f9:88:a0:e8:56:3f:73:3c:85:9e:69:3e:f5:69:8d:e1:78: c1:10:8d:4d:53:be:4a:6c:ec:8b:c5:89:b7:7f:da:de:2b:7f: 48:76:1c:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhcI5DwEYbpkiPyGDA0nRS6HzgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzRTkzQTA2NjRBOUQ5MDJEOTc4RjM1OTY5MjlBRENB QzBEMjg4NTAeFw0yNjA2MTYyMDU5NDRaFw0yNjA2MTcyMTI2NDRaMDMxMTAvBgNV BAMTKEY3MTBGQkNGMDA1NEJENTU3OTFDNTcwMjAzRTA5NTY1MUQzNTcxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUraIOz67uOlOv0bvpnY2Yagm DrddS70FDCJOJAqbjLrntQHE82mGCF92D0X08s6NK5VAd14/xgPrbNUwZzDuYHIg cI8jH0twlkbq6nBYFlcW1gdkLi84PW880Day+hBs5r+IHYL8yxUA4B7OZ/53sazp h6GzNJB58HLlGX1vfACWXahcR8tu0c1K2IvBnlLd6EMQBjVokI8D9tGBrGr9KDLh hAuPa/AxvZnUpw3mT0Ie8/GmwZP3/fybGQyYCD/H1bGA/x84rrD1aLAhoPANR007 Ccf/YVYLPcyB9vy+Imn3hD/XFnGl8ChPZa5oSAbHt/M/6ztf1IPaU5OFyp3rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9xD7zwBUvVV5HFcCA+CVZR01cd8wHwYDVR0j BBgwFoAUmT6ToGZKnZAtl481lpKa3KwNKIUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTBlODg3NzQtODQ0Zi00NjE2LThiZDAtZGMzMTM5Mjg3MzBjLzAvOTkzRTkzQTA2 NjRBOUQ5MDJEOTc4RjM1OTY5MjlBRENBQzBEMjg4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTNFOTNBMDY2NEE5RDkwMkQ5NzhGMzU5NjkyOUFEQ0FDMEQy ODg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBlODg3NzQtODQ0Zi00NjE2LThi ZDAtZGMzMTM5Mjg3MzBjLzAvOTkzRTkzQTA2NjRBOUQ5MDJEOTc4RjM1OTY5MjlB RENBQzBEMjg4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyWtjiYm2+XQOlb77FbsLLlXuJ9A6XymW54 T90nGiBXqg7E3D2RP2ShCM2ne200A5dHNUGMLiheSsDZ9HtAc+RCHkbq18hdDx6w Hs4xLwLlAab9JmlveRan3sRV6kKxfgneSqhh0+mKLOeO00N8nImPQ3GwenAKOdwM uKhV45d6GWf2U2ylKQl159TmlWFR7bT1JbzCUCFFfGWQaEficiHEdoF72/MFCd7u 2I3Czu2nv8JMpoHh0LgPqcwtLR7cJtg3ElEEa7E0km+P0u5wsEzuO3topx1X/4D5 iKDoVj9zPIWeaT71aY3heMEQjU1Tvkps7IvFibd/2t4rf0h2HA0= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:25 2026 by rpki-client