$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft File: 996D7371455A834C9B196DACD041DB7C6E779021.mft (raw, json) Hash identifier: 3+0RLsrx2zNa/sgUyp0aqTmdhAF6Kv6zDOxgV4ToYfc= Subject key identifier: 0E:7B:4F:BD:73:86:C7:6D:3E:55:61:62:22:39:7D:3D:BE:87:C1:0F Authority key identifier: 99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 Certificate issuer: /CN=996D7371455A834C9B196DACD041DB7C6E779021 Certificate serial: 0C784F03E4EA1ECE1731B904CFA81EDBB14997BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:57:38 +0000 Manifest this update: Wed 17 Jun 2026 03:52:38 +0000 Manifest next update: Thu 18 Jun 2026 07:13:38 +0000 Files and hashes: 1: 996D7371455A834C9B196DACD041DB7C6E779021.crl (hash: +j7g+joiUR8m5Ex4i2M5uOSspjXH9jfTiQbOwpA28Ho=) 2: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: y81kh0KeqX5r1jHre6tsGWtKJonbTr6cZ5My00O1C1k=) 3: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: CbnjGUXd5+J6hJMKbj+3ua0RtVbeM/SLewiagXzRFOs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:78:4f:03:e4:ea:1e:ce:17:31:b9:04:cf:a8:1e:db:b1:49:97:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996D7371455A834C9B196DACD041DB7C6E779021 Validity Not Before: Jun 17 03:52:38 2026 GMT Not After : Jun 18 07:13:38 2026 GMT Subject: CN=0E7B4FBD7386C76D3E55616222397D3DBE87C10F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1f:01:74:42:cd:fa:bb:40:0f:54:28:4b:ae: 00:3b:1c:76:b7:38:6a:fe:f3:a8:27:66:ee:35:b5: b5:66:3f:95:66:1f:c2:a8:21:2e:b8:94:41:ce:f1: 27:dc:45:18:a0:11:73:a9:a3:cb:9f:f7:4a:0e:b2: 29:f4:9e:7f:df:9d:79:e2:be:e6:10:96:4f:ce:97: ed:ba:06:3c:7f:72:00:a7:44:d7:de:14:71:ce:30: 31:01:5c:ad:ad:89:e7:34:29:32:11:77:12:c9:4f: b9:1b:96:75:28:5c:2e:e1:63:ac:10:bd:47:84:19: 0d:fe:c2:63:48:be:46:6c:4f:00:f4:bf:93:f2:5c: 38:ef:ec:17:74:ee:64:b9:85:08:f7:06:08:e3:79: a4:36:32:11:c6:2a:b8:c2:91:2a:c2:fc:da:86:11: 21:1f:6e:bc:f6:2d:7e:93:0e:a7:96:ba:6a:f6:96: 3c:46:98:84:0c:dd:3e:19:0f:3f:93:34:63:21:ef: 40:d1:88:37:7c:da:4e:67:5e:34:66:f7:0b:08:2f: 9d:7e:55:d4:01:49:dc:6b:9d:cb:72:d2:db:bf:83: 28:3e:08:a7:c8:a8:1e:57:b6:bd:5e:5c:d4:2b:45: b8:88:a3:0f:35:5a:99:3a:04:20:f9:21:fe:1d:59: 96:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7B:4F:BD:73:86:C7:6D:3E:55:61:62:22:39:7D:3D:BE:87:C1:0F X509v3 Authority Key Identifier: keyid:99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:93:e6:67:49:a0:08:74:1f:69:82:d9:40:28:be:56:06:4a: 55:c2:da:31:c4:12:f1:a6:c9:b8:e6:9c:19:f7:a2:3c:3f:4f: b1:35:56:f1:5b:5b:d1:68:e8:da:df:e6:50:d9:dd:71:1d:41: 75:59:66:16:c7:b9:70:e7:71:63:c5:69:ab:65:8f:1f:fb:43: 86:66:5b:09:67:d5:04:58:a8:e0:08:b8:d9:3c:15:75:59:b3: 81:9d:bc:f3:dd:11:4f:8d:eb:13:f0:2d:fb:a9:ba:e0:d3:ed: 9e:6f:27:d1:a3:1e:33:89:06:eb:91:a1:66:4e:dc:69:d0:a2: 19:34:61:68:63:59:8a:28:12:2d:1a:5d:e9:f2:5d:1a:d6:3e: 49:42:50:00:2e:36:42:5f:8b:86:9a:92:56:ae:7e:01:06:c6: e7:da:c9:d2:2e:c8:11:de:9e:7e:e5:89:c4:9d:1a:7b:97:c4: 7c:d5:8f:48:d6:9b:42:21:2a:45:5a:4b:56:ec:b6:3a:24:97: 8e:90:a6:5a:24:1e:d3:fe:cd:c9:bf:1f:fb:25:ec:b5:30:52: 83:5d:b5:67:8a:3c:be:f6:77:14:f3:b5:17:31:4a:25:c3:16: 96:71:ae:93:71:b4:c8:67:85:0d:02:d7:e4:eb:e8:51:d5:78: 12:88:cb:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDHhPA+TqHs4XMbkEz6ge27FJl7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURCN0M2 RTc3OTAyMTAeFw0yNjA2MTcwMzUyMzhaFw0yNjA2MTgwNzEzMzhaMDMxMTAvBgNV BAMTKDBFN0I0RkJENzM4NkM3NkQzRTU1NjE2MjIyMzk3RDNEQkU4N0MxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuHwF0Qs36u0APVChLrgA7HHa3 OGr+86gnZu41tbVmP5VmH8KoIS64lEHO8SfcRRigEXOpo8uf90oOsin0nn/fnXni vuYQlk/Ol+26Bjx/cgCnRNfeFHHOMDEBXK2tiec0KTIRdxLJT7kblnUoXC7hY6wQ vUeEGQ3+wmNIvkZsTwD0v5PyXDjv7Bd07mS5hQj3BgjjeaQ2MhHGKrjCkSrC/NqG ESEfbrz2LX6TDqeWumr2ljxGmIQM3T4ZDz+TNGMh70DRiDd82k5nXjRm9wsIL51+ VdQBSdxrncty0tu/gyg+CKfIqB5Xtr1eXNQrRbiIow81Wpk6BCD5If4dWZZ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDntPvXOGx20+VWFiIjl9Pb6HwQ8wHwYDVR0j BBgwFoAUmW1zcUVag0ybGW2s0EHbfG53kCEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2YzYxNGYtZDBmZi00MWE5LTkyZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0 NTVBODM0QzlCMTk2REFDRDA0MURCN0M2RTc3OTAyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTZENzM3MTQ1NUE4MzRDOUIxOTZEQUNEMDQxREI3QzZFNzc5 MDIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURC N0M2RTc3OTAyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOT5mdJoAh0H2mC2UAovlYGSlXC2jHEEvGm ybjmnBn3ojw/T7E1VvFbW9Fo6Nrf5lDZ3XEdQXVZZhbHuXDncWPFaatljx/7Q4Zm Wwln1QRYqOAIuNk8FXVZs4GdvPPdEU+N6xPwLfupuuDT7Z5vJ9GjHjOJBuuRoWZO 3GnQohk0YWhjWYooEi0aXenyXRrWPklCUAAuNkJfi4aaklaufgEGxufaydIuyBHe nn7licSdGnuXxHzVj0jWm0IhKkVaS1bstjokl46QplokHtP+zcm/H/sl7LUwUoNd tWeKPL72dxTztRcxSiXDFpZxrpNxtMhnhQ0C1+Tr6FHVeBKIyyM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:32 2026 by rpki-client