$ rpki-client -vvf rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft File: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft (raw, json) Hash identifier: B1XoBCUHqxMXbGnadRw21WfFWW+Euzr0uCR73LvyjWA= Subject key identifier: 02:EF:1F:55:5E:A1:56:A6:F2:96:15:8C:5C:D1:4F:25:D9:88:43:DA Authority key identifier: 05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB Certificate issuer: /CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Certificate serial: 0E4C6F67721C7DEF04B1E89709CE89DB71B03D35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 17:09:57 +0000 Manifest this update: Tue 16 Jun 2026 17:04:57 +0000 Manifest next update: Wed 17 Jun 2026 19:52:57 +0000 Files and hashes: 1: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: z6kI94sxzHsqlH3E/LSFr36Xmy4KrSkD+IFv+WC4jTo=) 2: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: Fdccteawm8p+b48M0aaG/VtbesmEvdRHnNtrJ03BLvI=) 3: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl (hash: Q+SWiBKtf4qk6NDrOJPBghtSgtfc+ZdoVyUytvGwwGc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4c:6f:67:72:1c:7d:ef:04:b1:e8:97:09:ce:89:db:71:b0:3d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Validity Not Before: Jun 16 17:04:57 2026 GMT Not After : Jun 17 19:52:57 2026 GMT Subject: CN=02EF1F555EA156A6F296158C5CD14F25D98843DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:72:99:ec:21:06:a4:55:e5:0c:c0:20:1f:c6: 1b:67:3c:b2:0f:de:14:9d:24:dc:bf:52:55:8a:cc: 2a:5e:b1:64:94:0e:b9:af:a3:64:7e:ae:ed:0e:a1: c1:3c:01:d4:25:a8:e2:5b:4b:98:07:d6:40:42:f8: 49:e9:a3:06:ea:c3:f6:91:0c:66:04:12:b4:28:5a: 5a:e7:54:e1:b9:72:7a:5c:88:d0:6e:de:58:62:e2: bd:0b:67:1c:bc:1d:de:be:ad:7e:4a:f8:2b:74:fb: 83:10:bd:81:a5:dd:b8:a3:22:33:a3:33:9c:07:04: f5:fe:a6:d1:16:d7:bd:2b:02:58:5b:c0:53:9f:f6: 48:86:5f:30:b6:3f:c4:23:b7:3a:87:9f:c5:29:e1: 3e:62:0a:ac:39:d3:4e:c6:a4:f0:64:49:66:05:1e: f2:8e:25:58:7f:19:b0:95:ec:0a:5c:c7:cb:c5:2e: 0b:63:ed:d6:f2:4b:bb:0a:0c:2b:13:db:9a:86:93: 9b:5b:c1:2c:4e:3a:d7:c8:92:d6:cc:bc:6c:18:bc: 63:64:16:48:28:30:fc:04:16:5d:2f:45:07:48:20: 54:05:65:47:ef:5b:9a:e5:8e:24:cd:06:7b:7e:24: a3:db:6d:37:6c:83:80:e2:97:33:4c:89:ad:b1:72: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EF:1F:55:5E:A1:56:A6:F2:96:15:8C:5C:D1:4F:25:D9:88:43:DA X509v3 Authority Key Identifier: keyid:05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:22:d1:47:f8:4e:46:dc:c5:09:1f:d2:c6:ad:78:39:38:7a: 87:2e:51:8c:49:a4:3a:0a:c0:76:1b:5e:17:11:94:6b:f8:4b: d5:3f:39:4c:33:75:9d:29:63:83:55:12:d9:e9:73:ce:5f:bb: 75:8d:f5:db:df:e8:93:d3:da:8e:59:49:b5:00:fe:16:ac:f9: da:96:67:25:12:dc:ce:13:b0:fe:e7:22:4f:24:e7:f3:53:b3: 6a:4c:56:e8:2d:0b:32:89:34:c2:73:11:f5:20:ad:89:b4:20: e5:38:b9:42:04:7f:d3:d8:e9:5b:8e:fd:aa:98:db:b0:26:74: 20:f6:b8:20:e5:77:ca:b0:b2:6f:cf:61:7d:51:5c:c3:26:d9: 9b:01:1f:22:4b:31:d8:56:a3:b9:b6:d0:0c:f4:24:ed:3e:e5: da:55:49:bc:8d:b0:2f:38:d3:e8:59:ab:f5:bb:e9:45:c5:19: e2:41:36:f7:2c:fb:65:12:22:93:e2:d2:68:e2:8a:21:23:66: c5:4f:2a:72:f9:ed:6a:a8:20:ca:08:71:ed:e3:d0:44:21:5c: ea:2e:9f:71:1a:9b:74:ba:ff:51:2d:e3:b3:df:74:3d:7e:97: 1d:3a:13:28:8e:06:99:a5:05:d5:e3:d5:e0:ce:9c:8f:a8:b6: 36:6c:24:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDkxvZ3Icfe8EseiXCc6J23GwPTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNBODYy QTJCMjBFQjAeFw0yNjA2MTYxNzA0NTdaFw0yNjA2MTcxOTUyNTdaMDMxMTAvBgNV BAMTKDAyRUYxRjU1NUVBMTU2QTZGMjk2MTU4QzVDRDE0RjI1RDk4ODQzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUcpnsIQakVeUMwCAfxhtnPLIP 3hSdJNy/UlWKzCpesWSUDrmvo2R+ru0OocE8AdQlqOJbS5gH1kBC+Enpowbqw/aR DGYEErQoWlrnVOG5cnpciNBu3lhi4r0LZxy8Hd6+rX5K+Ct0+4MQvYGl3bijIjOj M5wHBPX+ptEW170rAlhbwFOf9kiGXzC2P8QjtzqHn8Up4T5iCqw5007GpPBkSWYF HvKOJVh/GbCV7Apcx8vFLgtj7dbyS7sKDCsT25qGk5tbwSxOOtfIktbMvGwYvGNk FkgoMPwEFl0vRQdIIFQFZUfvW5rljiTNBnt+JKPbbTdsg4DilzNMia2xctLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAu8fVV6hVqbylhWMXNFPJdmIQ9owHwYDVR0j BBgwFoAUBc+eFhfs+L4C8v36J/E6hiorIOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmZDQyMzQtMTMyMy00ZjBlLWI2ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYx N0VDRjhCRTAyRjJGREZBMjdGMTNBODYyQTJCMjBFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNUNGOUUxNjE3RUNGOEJFMDJGMkZERkEyN0YxM0E4NjJBMkIy MEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2 ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNB ODYyQTJCMjBFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwi0Uf4TkbcxQkf0sateDk4eocuUYxJpDoK wHYbXhcRlGv4S9U/OUwzdZ0pY4NVEtnpc85fu3WN9dvf6JPT2o5ZSbUA/has+dqW ZyUS3M4TsP7nIk8k5/NTs2pMVugtCzKJNMJzEfUgrYm0IOU4uUIEf9PY6VuO/aqY 27AmdCD2uCDld8qwsm/PYX1RXMMm2ZsBHyJLMdhWo7m20Az0JO0+5dpVSbyNsC84 0+hZq/W76UXFGeJBNvcs+2USIpPi0mjiiiEjZsVPKnL57WqoIMoIce3j0EQhXOou n3Eam3S6/1Et47PfdD1+lx06EyiOBpmlBdXj1eDOnI+otjZsJLY= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:12 2026 by rpki-client