$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft File: 629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft (raw, json) Hash identifier: U57QSYRYyoIDyobUT05tFwvbDv1/DwsYU9hygOGWBeU= Subject key identifier: D6:A1:21:1D:53:99:54:5A:37:03:88:93:1F:3B:07:AC:5C:AF:31:16 Authority key identifier: 62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD Certificate issuer: /CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD Certificate serial: 4B864BBA62DA46A8BB07FA0E32019E100356DE6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:03:46 +0000 Manifest this update: Tue 16 Jun 2026 15:58:46 +0000 Manifest next update: Wed 17 Jun 2026 18:06:46 +0000 Files and hashes: 1: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: CVrUJTlhlyjQcXWYw9mEs6T2cItEcY6BENuMI3nROC0=) 2: 629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl (hash: TKl0GkWJFmPuskJHJC/Xj21SJBFGMjeFQJa6//c+YKQ=) 3: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: QzM90YWTXns1ydz40IJ13wxTQ2LuYS2Sj6cuHqSNNQs=) 4: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: nOhj/KbLK8tB+8fzk/fF8cT34h0xCczJl9qDSLUlcwg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:86:4b:ba:62:da:46:a8:bb:07:fa:0e:32:01:9e:10:03:56:de:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD Validity Not Before: Jun 16 15:58:46 2026 GMT Not After : Jun 17 18:06:46 2026 GMT Subject: CN=D6A1211D5399545A370388931F3B07AC5CAF3116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:4a:96:f3:b5:8a:d1:ac:5c:4c:54:ca:ae: 80:8b:8f:88:6a:81:df:10:8e:38:cb:27:b4:43:5f: 2e:c3:1f:65:cf:7a:ca:79:1a:49:b3:ff:06:53:61: 1e:70:79:1d:42:f2:18:fe:4d:3e:fe:3e:96:25:5e: e9:76:a5:f8:d2:4d:53:f3:e8:02:f5:cd:7f:f2:0c: 53:fd:5a:5f:26:1c:2e:bc:64:7d:a3:3a:b5:f1:ab: 35:55:57:bb:46:90:58:c4:a8:4a:60:93:23:f0:f2: a0:26:14:7a:d3:2d:00:7f:99:c9:0b:d4:0b:8a:69: e5:bd:88:fc:9c:97:93:0f:0e:6b:7b:bc:40:84:22: b1:88:4d:86:d0:65:58:ff:4b:a2:83:37:de:5c:df: 04:3c:ca:99:52:f6:1b:23:f2:f1:22:9f:7c:ff:5e: 97:51:45:a5:bf:99:21:8c:91:6a:11:0b:ab:b1:d5: 0e:d2:15:b4:0a:13:5a:49:89:02:2f:cb:ad:f9:61: ce:a4:01:95:67:5e:16:48:7a:7d:f6:95:87:45:76: da:3d:57:54:83:d8:72:f3:23:00:7e:70:81:0d:c1: a2:4f:fe:8d:91:b0:0a:55:3c:82:f5:7c:df:bd:ec: 5f:b3:fb:38:01:4f:f1:ff:ee:61:e6:8f:b9:4d:99: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A1:21:1D:53:99:54:5A:37:03:88:93:1F:3B:07:AC:5C:AF:31:16 X509v3 Authority Key Identifier: keyid:62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:10:b3:65:5d:65:f4:4c:35:13:77:7b:d5:e9:9a:0c:7f:2b: a6:a2:3b:9b:54:26:29:0d:0c:ea:a4:66:b1:a0:ef:e2:04:18: 36:f4:fe:4c:c2:30:c6:4b:9e:2b:d9:fe:55:77:f8:16:5d:ab: 6d:d8:5c:9b:d5:75:6b:6d:46:5e:a3:b3:5d:9b:58:99:eb:e4: 57:5f:53:0c:be:38:43:ef:e3:e6:30:2c:5a:7d:29:ab:dd:89: 71:06:c8:81:d7:b6:07:43:65:0a:2b:36:65:bf:72:7f:38:8d: 4a:19:7b:9f:2f:c5:33:90:9c:d6:fa:b9:ba:94:97:9b:97:5f: 55:42:c5:3b:cc:8d:d9:82:3d:cc:6f:ef:8e:df:63:01:42:19: f1:bc:01:ec:e0:18:c5:69:46:a5:95:58:aa:e7:a3:02:1e:a0: 7c:87:0e:2d:35:17:f3:57:c3:f4:e4:d2:74:cf:47:63:a6:ed: 99:1d:2c:ff:68:e8:97:9f:d7:e5:cc:70:38:ac:dd:69:a7:49: 4e:df:0b:c3:ab:3c:26:81:b0:17:25:d6:c1:97:98:8e:ce:fc: da:b5:82:a9:9c:37:3b:28:0a:a4:d5:2a:b5:36:ba:3f:94:e8: e7:b2:67:12:26:1c:18:f1:6c:5f:6b:f0:d0:52:1c:96:18:37: 8c:7e:e4:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS4ZLumLaRqi7B/oOMgGeEANW3m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5RTc0QTYwQjUyQUM5RkMyRjdBMTExQTY4Mzc2QkI1 N0MxQ0FCRDAeFw0yNjA2MTYxNTU4NDZaFw0yNjA2MTcxODA2NDZaMDMxMTAvBgNV BAMTKEQ2QTEyMTFENTM5OTU0NUEzNzAzODg5MzFGM0IwN0FDNUNBRjMxMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Y0qW87WK0axcTFTKroCLj4hq gd8QjjjLJ7RDXy7DH2XPesp5Gkmz/wZTYR5weR1C8hj+TT7+PpYlXul2pfjSTVPz 6AL1zX/yDFP9Wl8mHC68ZH2jOrXxqzVVV7tGkFjEqEpgkyPw8qAmFHrTLQB/mckL 1AuKaeW9iPycl5MPDmt7vECEIrGITYbQZVj/S6KDN95c3wQ8yplS9hsj8vEin3z/ XpdRRaW/mSGMkWoRC6ux1Q7SFbQKE1pJiQIvy635Yc6kAZVnXhZIen32lYdFdto9 V1SD2HLzIwB+cIENwaJP/o2RsApVPIL1fN+97F+z+zgBT/H/7mHmj7lNmZ27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1qEhHVOZVFo3A4iTHzsHrFyvMRYwHwYDVR0j BBgwFoAUYp50pgtSrJ/C96ERpoN2u1fByr0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE5N2JjZjQtZTFhYS00N2Q2LWJkZTYtMmU2NjdiOWQ2MTM0LzAvNjI5RTc0QTYw QjUyQUM5RkMyRjdBMTExQTY4Mzc2QkI1N0MxQ0FCRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjlFNzRBNjBCNTJBQzlGQzJGN0ExMTFBNjgzNzZCQjU3QzFD QUJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvNjI5RTc0QTYwQjUyQUM5RkMyRjdBMTExQTY4Mzc2 QkI1N0MxQ0FCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUQs2VdZfRMNRN3e9Xpmgx/K6aiO5tUJikN DOqkZrGg7+IEGDb0/kzCMMZLnivZ/lV3+BZdq23YXJvVdWttRl6js12bWJnr5Fdf Uwy+OEPv4+YwLFp9KavdiXEGyIHXtgdDZQorNmW/cn84jUoZe58vxTOQnNb6ubqU l5uXX1VCxTvMjdmCPcxv747fYwFCGfG8AezgGMVpRqWVWKrnowIeoHyHDi01F/NX w/Tk0nTPR2Om7ZkdLP9o6Jef1+XMcDis3WmnSU7fC8OrPCaBsBcl1sGXmI7O/Nq1 gqmcNzsoCqTVKrU2uj+U6OeyZxImHBjxbF9r8NBSHJYYN4x+5EY= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:26 2026 by rpki-client