$ rpki-client -vvf rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft File: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft (raw, json) Hash identifier: jTla8toouPjTl0x6FYtPPjgjOiAmxZwsUzWbwESpLcY= Subject key identifier: D0:86:57:A2:03:E6:2F:67:69:82:34:74:59:66:4B:FA:27:74:03:3C Authority key identifier: D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD Certificate issuer: /CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Certificate serial: 37BFF75C429E3897C2DAB75B2AE29151E6F7EDC0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:46:51 +0000 Manifest this update: Tue 16 Jun 2026 18:41:51 +0000 Manifest next update: Wed 17 Jun 2026 19:59:51 +0000 Files and hashes: 1: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: tvgNMRKF9YhTkUojezBviQo+Tr5X2S/8TAOF/Ehj41w=) 2: D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl (hash: C7ployKsu/VYRP/JETC2icn4ygD/LznRmvlY0mtK12c=) 3: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: zZwF560CCW8FIsmpm9G6YMYG8iguu4mvO1b/REjgURE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:bf:f7:5c:42:9e:38:97:c2:da:b7:5b:2a:e2:91:51:e6:f7:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D74CD7B87D744D2D301C3F69774A99FBE835EDDD Validity Not Before: Jun 16 18:41:51 2026 GMT Not After : Jun 17 19:59:51 2026 GMT Subject: CN=D08657A203E62F676982347459664BFA2774033C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:80:07:e2:e1:de:20:92:ed:9d:ea:72:82:2e: 01:ff:a7:72:72:a7:a8:b8:5f:f1:18:bb:dc:5f:72: ce:64:7b:bf:7b:b8:22:29:a2:85:26:c5:b9:4a:e1: 3d:93:e2:a9:f3:f1:f0:ef:fb:2b:81:53:8d:df:b8: e4:aa:20:17:ba:e7:4f:f6:15:fc:15:4e:4f:36:1c: f0:fb:ff:48:b8:4d:d6:bd:5d:92:42:2a:74:f2:8a: a9:10:ef:0c:e6:17:89:4e:6e:71:ee:84:a6:be:c8: ff:84:a7:02:7f:37:86:e8:42:14:2c:ac:39:f0:df: 01:44:ef:32:1f:5f:0e:3d:60:09:20:98:f0:92:8f: 8f:30:c5:ca:df:ae:5f:04:20:c7:9b:57:d5:92:3a: 6c:32:b8:e7:3e:12:f8:d1:be:0d:08:1d:65:c5:fc: 9b:ce:b6:0e:63:20:b7:7e:51:98:5c:2b:cd:7a:90: 7c:45:24:fd:34:88:38:4c:06:3a:cb:44:76:bc:59: 98:0d:5b:cb:40:df:30:7e:93:ef:75:76:f9:b1:7b: ac:9b:3b:95:e1:9f:e5:d1:4e:3a:b2:5f:df:84:a0: e1:52:4a:0c:6a:1d:61:12:07:fe:74:fd:c2:33:e9: d5:bc:f7:67:d6:1d:03:6e:0a:3d:b2:74:f5:5a:42: 0d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:86:57:A2:03:E6:2F:67:69:82:34:74:59:66:4B:FA:27:74:03:3C X509v3 Authority Key Identifier: keyid:D7:4C:D7:B8:7D:74:4D:2D:30:1C:3F:69:77:4A:99:FB:E8:35:ED:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/D74CD7B87D744D2D301C3F69774A99FBE835EDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e7:8b:94:33:5a:a7:f4:1b:2f:b4:30:26:60:d3:84:25:58: fe:50:e7:a6:60:d5:05:b1:db:53:3e:7d:1e:7d:83:24:ae:a8: ef:fa:c0:5c:40:08:f2:ce:5c:1a:52:c9:47:68:05:5c:95:f9: 28:44:c9:cc:ab:cd:f4:e7:43:b1:23:87:5b:9a:da:37:fa:08: 96:d6:a2:e0:71:0c:f0:8b:3a:09:66:31:09:b9:c9:05:bc:5f: 16:ba:81:46:9f:17:94:60:46:43:b7:f1:ab:ce:12:d2:5b:5b: 04:ab:6c:79:4b:e5:50:35:a3:6b:4f:0b:ae:0b:cb:e2:bf:6a: bc:e2:9b:5c:6b:7b:8d:de:60:b7:7a:95:39:74:7d:71:62:93: b9:f0:0c:30:f5:4c:ed:15:b1:98:b6:be:fe:e1:50:e0:62:03: 2b:2a:2a:17:a6:7c:64:b3:3b:a2:c6:f3:ee:45:12:69:dd:7a: ae:fe:4e:03:b2:04:23:a2:2a:d4:fe:d1:62:f1:4d:32:95:16: 54:b5:eb:ab:39:a2:96:f4:06:3b:5d:7f:d3:bf:c1:0e:d3:06: e9:78:92:45:4d:0e:d5:01:2e:cd:26:0e:15:b7:93:9c:b3:dc: be:32:46:6a:eb:30:e2:bf:5c:5c:5d:4f:7f:ee:d0:47:85:c1: ad:25:7f:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7/3XEKeOJfC2rdbKuKRUeb37cAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJF ODM1RURERDAeFw0yNjA2MTYxODQxNTFaFw0yNjA2MTcxOTU5NTFaMDMxMTAvBgNV BAMTKEQwODY1N0EyMDNFNjJGNjc2OTgyMzQ3NDU5NjY0QkZBMjc3NDAzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtgAfi4d4gku2d6nKCLgH/p3Jy p6i4X/EYu9xfcs5ke797uCIpooUmxblK4T2T4qnz8fDv+yuBU43fuOSqIBe650/2 FfwVTk82HPD7/0i4Tda9XZJCKnTyiqkQ7wzmF4lObnHuhKa+yP+EpwJ/N4boQhQs rDnw3wFE7zIfXw49YAkgmPCSj48wxcrfrl8EIMebV9WSOmwyuOc+EvjRvg0IHWXF /JvOtg5jILd+UZhcK816kHxFJP00iDhMBjrLRHa8WZgNW8tA3zB+k+91dvmxe6yb O5Xhn+XRTjqyX9+EoOFSSgxqHWESB/50/cIz6dW892fWHQNuCj2ydPVaQg3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0IZXogPmL2dpgjR0WWZL+id0AzwwHwYDVR0j BBgwFoAU10zXuH10TS0wHD9pd0qZ++g17d0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRlZTEyNmYtODE5Mi00ZDI4LWIyNWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3 RDc0NEQyRDMwMUMzRjY5Nzc0QTk5RkJFODM1RURERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzRDRDdCODdENzQ0RDJEMzAxQzNGNjk3NzRBOTlGQkU4MzVF RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvRDc0Q0Q3Qjg3RDc0NEQyRDMwMUMzRjY5Nzc0QTk5 RkJFODM1RURERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPni5QzWqf0Gy+0MCZg04QlWP5Q56Zg1QWx 21M+fR59gySuqO/6wFxACPLOXBpSyUdoBVyV+ShEycyrzfTnQ7Ejh1ua2jf6CJbW ouBxDPCLOglmMQm5yQW8Xxa6gUafF5RgRkO38avOEtJbWwSrbHlL5VA1o2tPC64L y+K/arzim1xre43eYLd6lTl0fXFik7nwDDD1TO0VsZi2vv7hUOBiAysqKhemfGSz O6LG8+5FEmndeq7+TgOyBCOiKtT+0WLxTTKVFlS166s5opb0Bjtdf9O/wQ7TBul4 kkVNDtUBLs0mDhW3k5yz3L4yRmrrMOK/XFxdT3/u0EeFwa0lf6c= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:26 2026 by rpki-client