$ rpki-client -vvf rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft File: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft (raw, json) Hash identifier: AN3/621o25V4DWiZWCmheuD+U7vflUdyx7WbCgSSQNU= Subject key identifier: C3:A5:94:AD:9B:85:B4:83:C3:41:82:27:D3:BE:15:DE:D0:7A:77:41 Authority key identifier: 20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 Certificate issuer: /CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Certificate serial: 42A45B8F0FA8F1C1E6EBB2918775675F5A4A8976 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 05:04:07 +0000 Manifest this update: Wed 17 Jun 2026 04:59:07 +0000 Manifest next update: Thu 18 Jun 2026 08:52:07 +0000 Files and hashes: 1: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl (hash: hHw0TydDNPAAG91Qw/fqBRzw1jkqR9HdKHDbswNnZjQ=) 2: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: tatwrYHu7JXRVNAEJ7zvfFLaGPSecYMyGR6xa2Isi2s=) 3: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: DmkUsE6kINSF6XD/3Zq+sJqW+TGuGAU9gHKB12XCOEU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a4:5b:8f:0f:a8:f1:c1:e6:eb:b2:91:87:75:67:5f:5a:4a:89:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Validity Not Before: Jun 17 04:59:07 2026 GMT Not After : Jun 18 08:52:07 2026 GMT Subject: CN=C3A594AD9B85B483C3418227D3BE15DED07A7741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3a:7f:ad:bf:e8:32:e7:e8:29:83:f1:d3:22: 80:5c:cf:94:b7:be:07:c3:ff:19:e0:e6:bc:ca:98: 15:40:06:62:dc:dc:ca:1e:c0:43:c5:0f:19:cc:5d: d2:a8:68:8c:39:6d:05:03:33:1a:75:6c:76:19:b2: fb:7f:f4:67:07:35:b4:0c:d5:e2:47:61:ea:ba:c8: 13:e2:b9:b7:06:b6:da:94:82:46:dc:7b:d6:db:48: 68:48:ee:4f:1b:69:f4:74:6c:25:b9:2d:7d:83:0c: 40:29:1a:48:19:98:d3:31:49:0f:e9:09:6a:e1:a4: 9b:9c:83:df:ae:13:42:9a:e2:2e:2c:cb:78:26:51: d2:b9:41:a0:81:9f:90:5d:28:cc:da:e7:4f:37:0c: 82:04:b9:6b:02:22:ac:d7:4c:72:d0:dc:aa:56:36: 12:3c:1b:31:03:33:86:07:cb:01:d8:b8:26:31:f8: 2a:79:56:c2:5e:7e:0c:79:7c:05:c5:2b:47:d0:dd: 86:af:e0:f2:9b:0a:5b:e8:50:af:6c:12:87:ef:1c: a1:70:9a:2e:d9:97:be:a0:5f:6a:14:c8:ce:4c:ca: 05:48:8e:ff:9b:f4:09:6c:e7:ca:ae:fd:02:6d:23: 6a:94:7c:92:7b:37:b3:ce:ff:95:a0:a4:ad:f7:bf: b5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A5:94:AD:9B:85:B4:83:C3:41:82:27:D3:BE:15:DE:D0:7A:77:41 X509v3 Authority Key Identifier: keyid:20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:83:57:f5:9f:9f:22:20:58:c9:3a:60:16:a5:f0:68:68:55: e9:2a:18:57:55:78:ed:61:23:dc:bd:6c:34:31:e3:f4:3e:6c: 42:d3:65:f7:16:df:63:70:96:5d:df:92:20:1f:d4:a4:8b:e4: 6f:79:ce:46:d5:19:bc:c3:25:0f:55:3c:38:97:e8:85:3d:5b: 29:41:7e:36:31:82:0e:54:47:43:f5:23:d4:bd:0e:a8:e9:2e: cb:c6:66:b8:d7:44:0f:83:68:65:b1:3b:79:0a:73:7a:c5:1f: c0:85:01:57:ae:90:f2:55:94:04:f2:db:bb:e9:73:ed:a3:40: 05:a4:ad:71:db:5c:2a:58:2f:14:00:a0:a0:1d:6a:18:9a:83: 51:ee:13:d9:a6:e8:e5:c7:32:ab:bf:29:e6:dd:b4:08:a9:0e: 0e:70:93:d3:4b:2f:62:e7:c3:c6:80:85:e8:dd:7d:9e:a5:e4: 2e:ec:1d:b2:58:de:6a:fe:cb:ca:ae:9a:f5:92:ee:6d:b6:eb: 87:3c:4b:05:6d:f6:48:75:37:82:34:7a:83:d8:9d:fc:74:e5: 15:8d:3d:48:1f:49:13:62:b6:92:97:8b:a8:95:49:e2:65:68: eb:20:b0:ff:89:e3:5d:b4:f6:8e:fe:08:50:37:20:c9:41:a9: eb:cb:c5:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqRbjw+o8cHm67KRh3VnX1pKiXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIy RTU3N0RFMjAeFw0yNjA2MTcwNDU5MDdaFw0yNjA2MTgwODUyMDdaMDMxMTAvBgNV BAMTKEMzQTU5NEFEOUI4NUI0ODNDMzQxODIyN0QzQkUxNURFRDA3QTc3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbOn+tv+gy5+gpg/HTIoBcz5S3 vgfD/xng5rzKmBVABmLc3MoewEPFDxnMXdKoaIw5bQUDMxp1bHYZsvt/9GcHNbQM 1eJHYeq6yBPiubcGttqUgkbce9bbSGhI7k8bafR0bCW5LX2DDEApGkgZmNMxSQ/p CWrhpJucg9+uE0Ka4i4sy3gmUdK5QaCBn5BdKMza5083DIIEuWsCIqzXTHLQ3KpW NhI8GzEDM4YHywHYuCYx+Cp5VsJefgx5fAXFK0fQ3Yav4PKbClvoUK9sEofvHKFw mi7Zl76gX2oUyM5MygVIjv+b9Als58qu/QJtI2qUfJJ7N7PO/5WgpK33v7WhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw6WUrZuFtIPDQYIn074V3tB6d0EwHwYDVR0j BBgwFoAUIG69BK4zKpg/1etJuLnAAi5XfeIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmNDE2NGUtNzRlNS00MGQ2LTlhMzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRB RTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIyRTU3N0RFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDZFQkQwNEFFMzMyQTk4M0ZENUVCNDlCOEI5QzAwMjJFNTc3 REUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMw MDIyRTU3N0RFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6DV/WfnyIgWMk6YBal8GhoVekqGFdVeO1h I9y9bDQx4/Q+bELTZfcW32Nwll3fkiAf1KSL5G95zkbVGbzDJQ9VPDiX6IU9WylB fjYxgg5UR0P1I9S9DqjpLsvGZrjXRA+DaGWxO3kKc3rFH8CFAVeukPJVlATy27vp c+2jQAWkrXHbXCpYLxQAoKAdahiag1HuE9mm6OXHMqu/KebdtAipDg5wk9NLL2Ln w8aAhejdfZ6l5C7sHbJY3mr+y8qumvWS7m2264c8SwVt9kh1N4I0eoPYnfx05RWN PUgfSRNitpKXi6iVSeJlaOsgsP+J41209o7+CFA3IMlBqevLxcI= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:48 2026 by rpki-client