$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft File: F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft (raw, json) Hash identifier: P7RID6k3Zc0d2CwrpAtcqdQgMaoT6lfO26OvooNnRZI= Subject key identifier: 91:FD:53:D5:75:AA:BB:02:4E:9B:A9:B6:E1:3F:1D:9C:6E:D6:A5:68 Authority key identifier: F6:4D:06:FB:29:DD:7C:63:FD:12:E0:D2:83:1D:00:CF:CC:9D:3B:CA Certificate issuer: /CN=F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA Certificate serial: 1FB31185C73969E66AAF953F43DDA2AA83C0B1B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:06:01 +0000 Manifest this update: Tue 16 Jun 2026 22:01:01 +0000 Manifest next update: Thu 18 Jun 2026 02:01:01 +0000 Files and hashes: 1: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: BZY0+bJnzvWTGl0me+IsT0sdxq8LsPOVFzv3Xd1pRAM=) 2: F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.crl (hash: TbtABEy7uXXa93GtJ8qbIkSolpQe4A+GUwgZfi3EaSs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.crl rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b3:11:85:c7:39:69:e6:6a:af:95:3f:43:dd:a2:aa:83:c0:b1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA Validity Not Before: Jun 16 22:01:01 2026 GMT Not After : Jun 18 02:01:01 2026 GMT Subject: CN=91FD53D575AABB024E9BA9B6E13F1D9C6ED6A568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:9c:6e:bc:8f:5c:24:1f:6f:24:79:26:4f: 34:9c:ab:d5:9e:55:13:ae:c1:0c:9f:61:a1:d6:23: cf:7f:b7:e7:a6:06:8d:6d:bd:8d:7b:1c:5d:08:fa: 5f:78:3a:f8:e4:ce:aa:fc:ac:78:dd:90:66:93:a8: 68:68:56:34:89:2f:14:fe:3d:64:fb:a8:e0:f9:d1: f5:da:1a:62:f4:42:fc:d8:1e:cb:94:ea:e8:7d:15: d4:85:bd:fc:7d:fe:e7:6e:8f:45:7c:68:65:61:25: e6:28:d8:6b:48:3b:dc:bc:10:ad:6f:f5:44:d1:49: 33:df:73:b3:cb:99:d9:fb:50:af:25:40:d0:e4:1b: 3f:7e:22:21:f0:ee:3b:2b:36:1e:71:40:cf:b3:32: 88:38:af:3f:63:62:78:f8:46:99:34:57:b0:64:ae: a9:d4:d2:06:29:c7:12:ac:5b:69:02:4e:5e:18:ea: 7e:21:a9:26:c8:64:9a:65:e5:78:ed:c3:53:b1:b4: 26:4f:27:ce:87:f7:9f:0c:a3:c0:8a:1c:ff:5e:a8: a0:b8:f3:65:5d:f6:03:3d:f8:38:da:25:ad:fe:4a: 66:c0:54:4c:a5:3b:c9:56:96:c9:8c:fe:0e:87:13: 46:61:cc:05:41:17:58:7f:ac:f2:cf:b0:33:57:67: 99:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FD:53:D5:75:AA:BB:02:4E:9B:A9:B6:E1:3F:1D:9C:6E:D6:A5:68 X509v3 Authority Key Identifier: keyid:F6:4D:06:FB:29:DD:7C:63:FD:12:E0:D2:83:1D:00:CF:CC:9D:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4d:13:08:fd:5e:88:f3:0f:d9:4b:a7:5b:9b:03:30:64:0b: a6:11:e8:81:c2:06:7b:02:79:a3:2d:5c:f9:bd:3f:f5:90:6c: b8:4e:bb:2c:64:1d:82:5c:ea:6c:94:da:94:fa:3f:a8:70:5b: b6:2d:67:36:ff:6a:56:58:0d:25:4e:ca:50:c9:00:29:22:f4: 33:94:04:f7:ce:e9:ee:8c:ba:06:58:33:45:29:9d:9d:ee:52: e9:28:ee:8a:8c:31:24:76:21:00:29:1e:dd:20:9b:32:b2:d6: 42:7f:d5:fa:9d:ad:9c:a8:f1:04:9f:10:33:53:a4:f2:e4:99: e1:ea:c9:2a:dc:e3:4d:a8:f6:0c:f3:f7:97:4d:69:18:78:4d: 34:12:8f:b3:46:e2:06:48:f3:67:b7:ee:9f:e2:74:c3:bb:9b: 0f:86:5b:09:31:2c:cd:e9:e0:91:2c:b7:7c:b5:2c:2d:60:88: 37:54:f3:75:66:8f:be:3b:eb:ac:02:1f:c5:b8:25:66:02:7c: 83:3d:b0:a7:fd:de:f6:54:7e:6b:90:52:06:d3:36:c2:b5:95: a9:81:50:b6:75:64:4d:59:3e:c3:1a:a7:c9:bf:8d:e9:b5:14: 84:ea:ed:26:b2:df:93:72:77:1f:07:3c:ba:2d:11:83:e3:2f: c5:06:73:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7MRhcc5aeZqr5U/Q92iqoPAsbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY0RDA2RkIyOUREN0M2M0ZEMTJFMEQyODMxRDAwQ0ZD QzlEM0JDQTAeFw0yNjA2MTYyMjAxMDFaFw0yNjA2MTgwMjAxMDFaMDMxMTAvBgNV BAMTKDkxRkQ1M0Q1NzVBQUJCMDI0RTlCQTlCNkUxM0YxRDlDNkVENkE1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUbpxuvI9cJB9vJHkmTzScq9We VROuwQyfYaHWI89/t+emBo1tvY17HF0I+l94Ovjkzqr8rHjdkGaTqGhoVjSJLxT+ PWT7qOD50fXaGmL0QvzYHsuU6uh9FdSFvfx9/uduj0V8aGVhJeYo2GtIO9y8EK1v 9UTRSTPfc7PLmdn7UK8lQNDkGz9+IiHw7jsrNh5xQM+zMog4rz9jYnj4Rpk0V7Bk rqnU0gYpxxKsW2kCTl4Y6n4hqSbIZJpl5Xjtw1OxtCZPJ86H958Mo8CKHP9eqKC4 82Vd9gM9+DjaJa3+SmbAVEylO8lWlsmM/g6HE0ZhzAVBF1h/rPLPsDNXZ5khAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkf1T1XWquwJOm6m24T8dnG7WpWgwHwYDVR0j BBgwFoAU9k0G+yndfGP9EuDSgx0Az8ydO8owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTdlOGRkNDAtYmI5NC00ZDQzLWI4ODktOGEwOThkN2Y0NWFjLzAvRjY0RDA2RkIy OUREN0M2M0ZEMTJFMEQyODMxRDAwQ0ZDQzlEM0JDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNjREMDZGQjI5REQ3QzYzRkQxMkUwRDI4MzFEMDBDRkNDOUQz QkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvRjY0RDA2RkIyOUREN0M2M0ZEMTJFMEQyODMxRDAw Q0ZDQzlEM0JDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtNEwj9XojzD9lLp1ubAzBkC6YR6IHCBnsC eaMtXPm9P/WQbLhOuyxkHYJc6myU2pT6P6hwW7YtZzb/alZYDSVOylDJACki9DOU BPfO6e6MugZYM0UpnZ3uUuko7oqMMSR2IQApHt0gmzKy1kJ/1fqdrZyo8QSfEDNT pPLkmeHqySrc402o9gzz95dNaRh4TTQSj7NG4gZI82e37p/idMO7mw+GWwkxLM3p 4JEst3y1LC1giDdU83Vmj74766wCH8W4JWYCfIM9sKf93vZUfmuQUgbTNsK1lamB ULZ1ZE1ZPsMap8m/jem1FITq7Say35Nydx8HPLotEYPjL8UGcyI= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:08 2026 by rpki-client