$ rpki-client -vvf rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft File: 12215616BDEA90F45AB43FFCB676AA254601358F.mft (raw, json) Hash identifier: rRtxLH/u5DQ2Cha8IfDm/Sc7A8N6KUdzJNIKVAK36dY= Subject key identifier: 82:67:1F:92:6D:5E:FD:6A:11:FB:16:02:EA:12:65:A1:24:C4:B7:D7 Authority key identifier: 12:21:56:16:BD:EA:90:F4:5A:B4:3F:FC:B6:76:AA:25:46:01:35:8F Certificate issuer: /CN=12215616BDEA90F45AB43FFCB676AA254601358F Certificate serial: 11124C53054B8235AF40B70EC06F3C72CF3CEE1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:58:22 +0000 Manifest this update: Tue 16 Jun 2026 19:53:22 +0000 Manifest next update: Wed 17 Jun 2026 21:40:22 +0000 Files and hashes: 1: 12215616BDEA90F45AB43FFCB676AA254601358F.crl (hash: VMvQaYOnwbYbdXfpB9ywpaMN4IuEyjCwP++P2EPfyC0=) 2: 3130332e3137342e3132322e302f32332d3233203d3e20313437303936.roa (hash: gTzJVLzwHZfB2XlD0ZDAGkf7sC4mGSUZJV6Nnni5S1g=) 3: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: 19Gxe0C+BqrJZYT7+O9ydX/09JgmXPG6bcNyUMxys/Q=) 4: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: BIL+aGZm0f2cNvuuhG7zFnc4Iz00ZUgKA3IGqeW+Vp0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.crl rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:12:4c:53:05:4b:82:35:af:40:b7:0e:c0:6f:3c:72:cf:3c:ee:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12215616BDEA90F45AB43FFCB676AA254601358F Validity Not Before: Jun 16 19:53:22 2026 GMT Not After : Jun 17 21:40:22 2026 GMT Subject: CN=82671F926D5EFD6A11FB1602EA1265A124C4B7D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:38:bf:e9:42:dd:ba:d2:85:58:64:c7:9c: 10:39:7a:30:8b:22:c3:5b:81:87:9f:71:32:59:ba: 81:9f:1a:86:63:d9:8c:4a:ab:95:e1:ac:2d:99:7b: 3b:bf:fa:0b:12:f3:bd:01:34:3a:4d:8a:c4:4b:ed: 71:3c:8c:c0:54:07:94:af:a9:d8:33:42:cd:38:bb: ed:fa:a2:e2:51:91:43:01:c6:d0:f2:08:d0:bc:e2: a7:e4:0e:f8:c7:4c:64:d9:7d:b9:cd:c6:ac:74:53: e5:d3:28:f3:77:0d:83:eb:e1:c7:4e:14:8b:0d:5b: 4b:53:aa:14:89:20:62:6c:49:72:a5:e1:51:45:b3: 2c:7d:59:9c:d6:e8:f7:d0:be:17:6e:64:72:a3:d9: 7f:8a:a6:e8:9a:cc:f1:bd:d0:95:a1:30:2d:63:d0: 7d:e2:15:90:25:29:01:c1:94:cf:99:e7:b4:84:6c: 51:c6:af:26:d2:4d:fa:d8:ce:c0:b7:a3:ba:59:c0: 1e:28:05:d3:b1:fb:1b:ed:bd:2b:e6:ea:66:7c:52: bc:06:78:88:b6:8d:12:d5:bd:cb:62:f0:72:c5:9c: 7d:65:2c:42:da:99:b0:8c:66:7f:38:e5:6c:f5:dd: 75:51:1c:61:80:26:63:a4:2e:02:44:af:b2:bd:68: e2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:67:1F:92:6D:5E:FD:6A:11:FB:16:02:EA:12:65:A1:24:C4:B7:D7 X509v3 Authority Key Identifier: keyid:12:21:56:16:BD:EA:90:F4:5A:B4:3F:FC:B6:76:AA:25:46:01:35:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:49:57:28:9b:78:f7:22:8f:3b:48:a6:5d:53:5c:a0:b2:58: 04:c3:36:e3:cd:29:1f:08:e9:3d:79:2f:a1:d0:3c:5d:8e:18: 4d:bc:71:4f:56:b1:c6:0e:ad:06:74:4a:72:7a:1b:7c:d0:ea: 58:fe:2b:9b:17:55:17:c0:5a:59:72:99:13:37:01:56:3c:d5: 22:05:12:f8:08:39:e5:fa:2d:9a:51:fe:94:bc:7f:e2:88:5f: f1:04:ec:ec:38:86:68:3b:31:06:f9:c9:8b:c7:d0:db:02:44: 5d:52:1a:74:39:b7:16:01:1e:4e:ee:81:40:67:68:df:51:25: 44:4b:ca:9a:32:a4:d5:0e:ef:09:25:fd:36:50:2c:f1:1b:c5: 2d:5d:07:f5:03:d0:38:67:d2:d4:c8:24:4a:9b:93:24:bb:72: ee:1e:90:33:ba:e1:57:86:4f:9b:17:a4:45:fd:7c:95:2e:45: c6:41:30:df:dc:b7:f1:a1:f1:de:1a:ec:a0:35:77:cb:a2:52: 37:a6:a8:30:12:df:7d:5f:8d:03:7b:d0:0e:5a:6d:33:4c:40: 19:27:41:d8:e5:7d:e6:9c:e6:19:e6:a0:78:60:cf:14:31:78: dd:33:f3:09:9d:f4:f7:22:91:6b:0c:db:1f:24:de:59:16:ea: ad:3a:2f:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUERJMUwVLgjWvQLcOwG88cs887hswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyMTU2MTZCREVBOTBGNDVBQjQzRkZDQjY3NkFBMjU0 NjAxMzU4RjAeFw0yNjA2MTYxOTUzMjJaFw0yNjA2MTcyMTQwMjJaMDMxMTAvBgNV BAMTKDgyNjcxRjkyNkQ1RUZENkExMUZCMTYwMkVBMTI2NUExMjRDNEI3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0Ti/6ULdutKFWGTHnBA5ejCL IsNbgYefcTJZuoGfGoZj2YxKq5XhrC2Zezu/+gsS870BNDpNisRL7XE8jMBUB5Sv qdgzQs04u+36ouJRkUMBxtDyCNC84qfkDvjHTGTZfbnNxqx0U+XTKPN3DYPr4cdO FIsNW0tTqhSJIGJsSXKl4VFFsyx9WZzW6PfQvhduZHKj2X+KpuiazPG90JWhMC1j 0H3iFZAlKQHBlM+Z57SEbFHGrybSTfrYzsC3o7pZwB4oBdOx+xvtvSvm6mZ8UrwG eIi2jRLVvcti8HLFnH1lLELambCMZn845Wz13XVRHGGAJmOkLgJEr7K9aOIvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgmcfkm1e/WoR+xYC6hJloSTEt9cwHwYDVR0j BBgwFoAUEiFWFr3qkPRatD/8tnaqJUYBNY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI3MzAyN2EtMDk2Yi00ZTk1LWE2NTYtZGFiZTk4YWM2ZjZkLzAvMTIyMTU2MTZC REVBOTBGNDVBQjQzRkZDQjY3NkFBMjU0NjAxMzU4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjIxNTYxNkJERUE5MEY0NUFCNDNGRkNCNjc2QUEyNTQ2MDEz NThGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMTIyMTU2MTZCREVBOTBGNDVBQjQzRkZDQjY3NkFB MjU0NjAxMzU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN5JVyibePcijztIpl1TXKCyWATDNuPNKR8I 6T15L6HQPF2OGE28cU9WscYOrQZ0SnJ6G3zQ6lj+K5sXVRfAWllymRM3AVY81SIF EvgIOeX6LZpR/pS8f+KIX/EE7Ow4hmg7MQb5yYvH0NsCRF1SGnQ5txYBHk7ugUBn aN9RJURLypoypNUO7wkl/TZQLPEbxS1dB/UD0Dhn0tTIJEqbkyS7cu4ekDO64VeG T5sXpEX9fJUuRcZBMN/ct/Gh8d4a7KA1d8uiUjemqDAS331fjQN70A5abTNMQBkn Qdjlfeac5hnmoHhgzxQxeN0z8wmd9PcikWsM2x8k3lkW6q06L0I= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:47 2026 by rpki-client