$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft File: 387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft (raw, json) Hash identifier: 0S6Nib1KJGQ+iEYGxwTKMi46/3vluxIKPwQCoMq2RYI= Subject key identifier: 5F:18:B7:13:C4:6B:3E:C6:E4:A6:35:5D:9A:64:1B:A8:4E:F3:03:B1 Authority key identifier: 38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 Certificate issuer: /CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Certificate serial: 6D7B4CAC0C3DABE652E60FFAB0633CB5506A617D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:25:11 +0000 Manifest this update: Tue 16 Jun 2026 17:20:11 +0000 Manifest next update: Wed 17 Jun 2026 18:51:11 +0000 Files and hashes: 1: 3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa (hash: S6GOyjGvuJioIHLVuYqgKhP5jh9zLHefQ/VHuPP8g0o=) 2: 387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl (hash: HWZv6u2P6TqtHDe5TcRWk0Yp5ffo/5gym6k98mlvZTg=) 3: 323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa (hash: eZupa4yD5dYmRchDIoQ9Vr1OSpDO1UCvdkhlGFp59RU=) 4: 3130332e39392e3133372e302f32342d3234203d3e20313531353735.roa (hash: WzpVY5ZsxXo9ncFEks5zrp0y9Wobyt/PfJcmMClmLsQ=) 5: 3130332e39392e3133362e302f32332d3233203d3e20313531353735.roa (hash: MxOD/5AuASqElHlVy5TYYuw3oWmINBBbMOjEzQsGf+o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:7b:4c:ac:0c:3d:ab:e6:52:e6:0f:fa:b0:63:3c:b5:50:6a:61:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Validity Not Before: Jun 16 17:20:11 2026 GMT Not After : Jun 17 18:51:11 2026 GMT Subject: CN=5F18B713C46B3EC6E4A6355D9A641BA84EF303B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:45:9b:b5:47:a1:0a:39:e0:9c:d2:7e:33:04: 9e:55:a6:e7:6b:7a:f1:b5:42:49:57:88:fe:8d:64: 2f:1b:78:cc:e1:3d:7a:f6:68:21:01:b6:c8:63:5d: 76:70:f2:4f:e8:a1:33:55:d4:50:80:df:02:21:33: 49:7e:df:e0:f7:ae:b3:6d:96:b1:67:1d:1b:12:76: 15:c1:4b:6d:af:7c:74:a9:30:84:59:7b:90:15:b0: a5:a4:5e:10:6a:57:58:8e:ab:19:f9:f8:42:da:8d: 42:c2:48:7e:4e:cb:d8:ac:40:e8:c7:ae:cd:31:dd: 41:92:8f:c5:14:15:47:9d:b8:67:1c:e6:11:2d:59: 81:02:b7:b2:ec:ad:d6:5a:af:df:47:0b:3c:18:49: 16:0c:9f:64:96:75:41:ed:fb:98:99:1c:6b:4a:0b: eb:3b:96:77:51:02:bb:f7:09:05:da:ce:6c:79:aa: 2f:bc:85:57:2e:f1:4c:cd:88:5b:ed:1e:ff:ee:f0: 46:e4:46:79:00:0b:3a:74:fd:f9:e9:51:b6:0a:b8: a9:2c:38:0c:e7:15:67:20:56:73:36:48:7b:99:15: 9e:a8:5d:b8:48:50:dd:63:f0:57:92:04:cf:10:d1: ed:2e:f7:82:cb:2f:f1:f0:3e:d2:e7:d1:2e:85:b8: ca:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:18:B7:13:C4:6B:3E:C6:E4:A6:35:5D:9A:64:1B:A8:4E:F3:03:B1 X509v3 Authority Key Identifier: keyid:38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:72:25:0f:57:e5:e5:ea:a5:00:06:5d:4d:de:da:34:fa:93: c4:65:f4:3e:59:73:8d:1d:9b:7d:e9:98:bc:a5:83:85:88:a8: ec:9d:56:d2:6e:3a:31:58:51:bd:89:e1:87:7a:e8:33:a8:de: 8a:fd:ce:f7:76:a5:8a:92:ff:05:2f:49:35:a7:b2:6e:b3:c5: e8:14:8d:74:94:5f:7a:02:a0:a5:cc:e4:93:d0:72:dc:07:cc: 3d:df:6c:26:1c:ce:93:0e:ea:b0:62:19:8e:16:0d:a0:a4:91: 7c:0c:de:99:66:fe:3c:85:79:0b:d0:af:cd:d1:8e:43:41:32: c1:22:4b:e1:01:32:c1:5a:dd:e4:de:4d:81:36:f1:c7:56:c6: b1:6b:d4:14:3b:c6:1f:4a:5f:28:be:18:f2:31:51:45:5a:63: 12:bb:ee:92:18:4e:41:cc:60:fe:27:a3:14:c4:22:ac:94:e0: 9f:51:03:7f:70:44:ce:98:98:8d:e4:22:4b:3b:43:ae:ba:e5: fb:00:77:79:b9:ca:bc:b5:db:c0:83:80:a2:bf:f6:35:53:4c: d7:d3:c5:59:2e:41:26:5f:cb:6b:34:e0:7c:40:c9:40:a0:30: 2d:62:76:c5:08:ab:08:85:79:e7:98:fb:6a:04:a0:78:82:97: 24:87:96:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXtMrAw9q+ZS5g/6sGM8tVBqYX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg3REE5NUZGOTlEM0ZDQjJCQkJEMkYzQjIyOUQ5RjMz NzJERDNCODAeFw0yNjA2MTYxNzIwMTFaFw0yNjA2MTcxODUxMTFaMDMxMTAvBgNV BAMTKDVGMThCNzEzQzQ2QjNFQzZFNEE2MzU1RDlBNjQxQkE4NEVGMzAzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARZu1R6EKOeCc0n4zBJ5Vpudr evG1QklXiP6NZC8beMzhPXr2aCEBtshjXXZw8k/ooTNV1FCA3wIhM0l+3+D3rrNt lrFnHRsSdhXBS22vfHSpMIRZe5AVsKWkXhBqV1iOqxn5+ELajULCSH5Oy9isQOjH rs0x3UGSj8UUFUeduGcc5hEtWYECt7LsrdZar99HCzwYSRYMn2SWdUHt+5iZHGtK C+s7lndRArv3CQXazmx5qi+8hVcu8UzNiFvtHv/u8EbkRnkACzp0/fnpUbYKuKks OAznFWcgVnM2SHuZFZ6oXbhIUN1j8FeSBM8Q0e0u94LLL/HwPtLn0S6FuMpPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXxi3E8RrPsbkpjVdmmQbqE7zA7EwHwYDVR0j BBgwFoAUOH2pX/mdP8sru9LzsinZ8zct07gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMyODBhZjMtYWExZC00MjcxLThjMDYtYTNmYTI4ODk4NDI2LzAvMzg3REE5NUZG OTlEM0ZDQjJCQkJEMkYzQjIyOUQ5RjMzNzJERDNCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODdEQTk1RkY5OUQzRkNCMkJCQkQyRjNCMjI5RDlGMzM3MkRE M0I4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMyODBhZjMtYWExZC00MjcxLThj MDYtYTNmYTI4ODk4NDI2LzAvMzg3REE5NUZGOTlEM0ZDQjJCQkJEMkYzQjIyOUQ5 RjMzNzJERDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxyJQ9X5eXqpQAGXU3e2jT6k8Rl9D5Zc40d m33pmLylg4WIqOydVtJuOjFYUb2J4Yd66DOo3or9zvd2pYqS/wUvSTWnsm6zxegU jXSUX3oCoKXM5JPQctwHzD3fbCYczpMO6rBiGY4WDaCkkXwM3plm/jyFeQvQr83R jkNBMsEiS+EBMsFa3eTeTYE28cdWxrFr1BQ7xh9KXyi+GPIxUUVaYxK77pIYTkHM YP4noxTEIqyU4J9RA39wRM6YmI3kIks7Q6665fsAd3m5yry128CDgKK/9jVTTNfT xVkuQSZfy2s04HxAyUCgMC1idsUIqwiFeeeY+2oEoHiClySHlpE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:49 2026 by rpki-client