$ rpki-client -vvf rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft File: 01D21CF844B21F1A9486A445F946566129AD4A58.mft (raw, json) Hash identifier: YdXgyvkQ7m9h5ZLySQhHwGoHJWs9zAqrnda4N0HCV14= Subject key identifier: AE:39:9F:94:82:11:B2:63:4E:78:79:82:C4:41:72:32:C6:1C:A3:57 Authority key identifier: 01:D2:1C:F8:44:B2:1F:1A:94:86:A4:45:F9:46:56:61:29:AD:4A:58 Certificate issuer: /CN=01D21CF844B21F1A9486A445F946566129AD4A58 Certificate serial: 68E4B91AB4207F274998E1F34DCF41BDE495092D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 17:50:41 +0000 Manifest this update: Tue 16 Jun 2026 17:45:41 +0000 Manifest next update: Wed 17 Jun 2026 18:04:41 +0000 Files and hashes: 1: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: ufsOCUOJb9bQMTjSTFriIXnfAAEVhWffzH9OME9bvBM=) 2: 01D21CF844B21F1A9486A445F946566129AD4A58.crl (hash: /LFY4L4gf2JAcEYSGsquCTJAo6Z6q0DdiNa9oSyOOoM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.crl rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e4:b9:1a:b4:20:7f:27:49:98:e1:f3:4d:cf:41:bd:e4:95:09:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01D21CF844B21F1A9486A445F946566129AD4A58 Validity Not Before: Jun 16 17:45:41 2026 GMT Not After : Jun 17 18:04:41 2026 GMT Subject: CN=AE399F948211B2634E787982C4417232C61CA357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:6b:15:c8:9f:e5:bd:cb:95:ae:dc:7d:62: 82:95:91:ce:8a:0b:f5:0b:da:95:e5:d3:5b:3c:39: 0e:dd:62:d5:0b:2e:8d:22:1d:ac:78:7a:c9:77:bf: 08:8f:90:37:32:96:f1:f0:21:89:cc:4a:83:5d:01: 2c:c7:54:35:e6:eb:07:10:fb:fa:95:94:92:19:61: bf:e0:15:1d:cc:e1:f2:6f:e6:98:10:9c:b5:f7:81: 00:1d:94:77:86:38:c8:fe:4f:2a:55:a9:a4:bf:fa: f4:0f:ac:80:49:5b:38:66:86:6c:67:fa:44:33:99: e2:70:b2:84:ff:11:8c:26:33:f2:9f:d5:ca:8e:e9: c8:fd:f2:a1:07:d4:b4:e5:ae:6e:39:99:aa:07:f7: fb:a6:f4:8c:0d:17:f8:e2:e6:12:35:63:a0:b7:f7: bf:f8:d5:65:a3:1b:b3:3d:6a:6f:72:dc:a5:ce:1c: 84:53:cd:d3:1a:2e:9c:39:a2:ec:f0:f3:d9:62:7b: 2b:f3:ed:2b:3a:3b:e9:1d:52:0e:a7:c9:ab:9e:a9: 56:5f:c0:43:74:af:a8:57:b6:06:0d:44:b3:46:b8: 14:9b:80:f3:fd:2a:b2:6a:3c:6c:12:b6:53:00:e8: 08:84:8d:ad:2d:a9:29:29:39:be:2c:ae:03:f0:3a: 88:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:39:9F:94:82:11:B2:63:4E:78:79:82:C4:41:72:32:C6:1C:A3:57 X509v3 Authority Key Identifier: keyid:01:D2:1C:F8:44:B2:1F:1A:94:86:A4:45:F9:46:56:61:29:AD:4A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:c6:31:63:f8:8d:ae:c9:df:c4:af:07:d7:4c:49:73:86:d3: 91:25:7a:fd:b6:46:0d:0c:1f:6b:c8:33:2b:bd:61:1c:9f:eb: bd:43:2c:5d:1b:f5:fc:f2:4a:3a:77:7d:0b:3b:e1:f7:eb:19: d1:1f:ea:04:ae:2a:31:29:a4:0c:0b:a7:65:75:f5:a5:49:35: 20:6d:de:3d:2f:69:72:6f:61:ca:11:60:ce:5e:76:32:8f:2f: 98:8f:bf:6e:02:65:9f:a9:ee:0d:e8:38:67:73:0a:fe:05:e7: fb:1c:23:d2:0e:30:a3:78:08:ee:92:6a:ff:3d:2e:64:5d:b8: 60:26:f6:f5:3d:66:48:f5:74:6b:6e:a7:23:9c:31:18:fc:4b: e5:34:44:6f:6c:fe:5f:75:5c:7f:1f:fd:fc:6b:70:85:53:09: 9a:f1:42:80:6c:02:cf:a1:f2:69:fd:6f:7b:44:33:cf:bc:14: 70:ae:4f:ee:b5:41:ea:db:20:df:d9:64:53:cd:bd:43:de:92: e6:e4:c4:2a:d2:da:60:fd:dc:79:6d:68:82:db:8b:00:13:4f: f3:57:10:3d:f9:b3:c8:c7:50:66:b1:60:a0:25:96:5a:53:48: c5:46:99:e1:8a:0e:95:60:c7:d1:1b:34:99:6f:c5:a2:f2:2c: 47:ec:13:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaOS5GrQgfydJmOHzTc9BveSVCS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFEMjFDRjg0NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2NjEy OUFENEE1ODAeFw0yNjA2MTYxNzQ1NDFaFw0yNjA2MTcxODA0NDFaMDMxMTAvBgNV BAMTKEFFMzk5Rjk0ODIxMUIyNjM0RTc4Nzk4MkM0NDE3MjMyQzYxQ0EzNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSv2sVyJ/lvcuVrtx9YoKVkc6K C/UL2pXl01s8OQ7dYtULLo0iHax4esl3vwiPkDcylvHwIYnMSoNdASzHVDXm6wcQ +/qVlJIZYb/gFR3M4fJv5pgQnLX3gQAdlHeGOMj+TypVqaS/+vQPrIBJWzhmhmxn +kQzmeJwsoT/EYwmM/Kf1cqO6cj98qEH1LTlrm45maoH9/um9IwNF/ji5hI1Y6C3 97/41WWjG7M9am9y3KXOHIRTzdMaLpw5ouzw89lieyvz7Ss6O+kdUg6nyaueqVZf wEN0r6hXtgYNRLNGuBSbgPP9KrJqPGwStlMA6AiEja0tqSkpOb4srgPwOoi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrjmflIIRsmNOeHmCxEFyMsYco1cwHwYDVR0j BBgwFoAUAdIc+ESyHxqUhqRF+UZWYSmtSlgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTM0ZDgyNzctMjkxMC00MDc1LWI5MzctNjZmOTQzNTE4ZTI5LzAvMDFEMjFDRjg0 NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2NjEyOUFENEE1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUQyMUNGODQ0QjIxRjFBOTQ4NkE0NDVGOTQ2NTY2MTI5QUQ0 QTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTM0ZDgyNzctMjkxMC00MDc1LWI5 MzctNjZmOTQzNTE4ZTI5LzAvMDFEMjFDRjg0NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2 NjEyOUFENEE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXGMWP4ja7J38SvB9dMSXOG05Elev22Rg0M H2vIMyu9YRyf671DLF0b9fzySjp3fQs74ffrGdEf6gSuKjEppAwLp2V19aVJNSBt 3j0vaXJvYcoRYM5edjKPL5iPv24CZZ+p7g3oOGdzCv4F5/scI9IOMKN4CO6Sav89 LmRduGAm9vU9Zkj1dGtupyOcMRj8S+U0RG9s/l91XH8f/fxrcIVTCZrxQoBsAs+h 8mn9b3tEM8+8FHCuT+61QerbIN/ZZFPNvUPekubkxCrS2mD93HltaILbiwATT/NX ED35s8jHUGaxYKAlllpTSMVGmeGKDpVgx9EbNJlvxaLyLEfsE5U= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:28 2026 by rpki-client