$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft File: 647AC2310971579801DD46D3B271B994E9E436B8.mft (raw, json) Hash identifier: 6gS66wT/NN+bE/4U8SAoij4TAelmir8uY5Bsa89I7Rw= Subject key identifier: CB:E7:39:8B:7C:4D:BE:F4:FE:3F:63:A8:15:5E:69:8B:C5:CD:75:36 Authority key identifier: 64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8 Certificate issuer: /CN=647AC2310971579801DD46D3B271B994E9E436B8 Certificate serial: 168B5C241D24283B48DF27113E6EC9281BF8134D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 03:48:39 +0000 Manifest this update: Sat 13 Jun 2026 03:43:39 +0000 Manifest next update: Sun 14 Jun 2026 06:48:39 +0000 Files and hashes: 1: 647AC2310971579801DD46D3B271B994E9E436B8.crl (hash: K78aUiVEIRVBssNftXu0cIS6U0GNxG8Lfk1QgV/VUa8=) 2: 3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa (hash: yku2OKFmq6fXhF7DFYEYGMGLBbIVUHGQwGNi4OKZMJU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 06:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:8b:5c:24:1d:24:28:3b:48:df:27:11:3e:6e:c9:28:1b:f8:13:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647AC2310971579801DD46D3B271B994E9E436B8 Validity Not Before: Jun 13 03:43:39 2026 GMT Not After : Jun 14 06:48:39 2026 GMT Subject: CN=CBE7398B7C4DBEF4FE3F63A8155E698BC5CD7536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:bc:a0:e1:55:52:7f:9f:43:b5:e7:ba:b4: cf:b3:d2:2e:2b:c3:a3:61:80:02:af:f5:e1:43:07: f6:a8:e1:c8:17:c4:1c:23:84:b0:eb:dc:62:d6:b7: f0:90:c4:3c:62:90:ef:08:24:97:92:ed:5b:39:91: 20:a7:4c:48:a0:22:60:77:4d:a4:43:33:e3:19:1a: 1f:f1:24:94:ba:05:a8:99:56:94:ea:4e:03:5d:dc: ad:fa:6d:9e:f1:ef:2c:06:6c:c2:cc:94:73:14:85: 16:65:c5:97:34:79:39:5f:dd:bc:43:5a:2c:8e:89: 61:6e:30:b9:a0:b8:fa:58:ef:5c:e7:2f:e5:d6:a1: 63:49:c3:b7:aa:d1:37:ca:02:da:a8:d2:e0:a9:86: d3:b6:18:52:e1:ed:4d:1d:46:04:a2:f9:93:92:76: a7:b4:89:a5:ad:ad:49:d5:97:d3:a1:42:80:39:7a: 6f:cb:55:e2:bd:94:c8:4e:d1:74:fd:8e:95:9f:0a: 6a:df:3d:52:d1:8c:89:4e:0b:99:32:23:61:7e:da: f2:d7:53:24:ea:17:08:35:67:21:cd:17:d7:57:e6: 05:fe:42:35:a7:40:a8:0a:7d:21:6d:b2:97:5a:9a: 7c:d1:ce:d9:70:0e:4e:0f:5b:4b:06:f2:60:2e:48: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E7:39:8B:7C:4D:BE:F4:FE:3F:63:A8:15:5E:69:8B:C5:CD:75:36 X509v3 Authority Key Identifier: keyid:64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f4:66:0e:a3:8c:0a:7f:5e:a4:0b:7c:f1:75:ea:0b:64:32: 50:e7:79:ca:56:e3:87:6d:ee:5b:b1:3f:c8:58:72:49:9c:ad: 30:3f:d6:ee:ab:74:cc:f9:b2:e0:21:e9:b4:5c:44:da:0d:00: 4e:9a:3d:1f:04:4c:1b:2c:98:79:b7:c9:6b:99:d7:f3:c9:dc: 28:d4:17:3a:06:87:d7:b6:10:e5:b9:6b:8a:68:bc:8a:1c:cb: e1:78:21:4e:5f:7d:cd:ed:2a:65:68:6c:7c:3c:16:ad:0e:5a: 17:cf:12:55:42:12:f9:ea:8e:bd:62:be:eb:b2:90:5e:56:fb: cc:c1:c5:f8:a5:52:0d:8b:75:43:9d:3f:29:76:ee:50:d1:7a: 68:e3:83:e9:a9:8a:ee:82:8d:76:30:07:74:7f:a8:c8:e5:49: 9c:db:bb:0c:d0:e1:db:c1:d5:69:26:a3:83:23:e9:ad:92:04: cd:54:95:7a:db:c7:5a:77:85:fd:be:00:f1:1d:6c:6c:f1:43: 75:b2:0f:4e:3d:f0:ca:e1:08:a2:0f:f0:19:bd:7b:c9:3e:53: 2d:39:ad:c3:3e:b4:0b:a7:ef:b1:df:10:a0:b6:b6:c1:81:3d: 49:26:7c:d2:46:47:ca:15:8a:52:4c:ef:d5:0c:f9:02:31:9e: fb:ad:af:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFotcJB0kKDtI3ycRPm7JKBv4E00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ3QUMyMzEwOTcxNTc5ODAxREQ0NkQzQjI3MUI5OTRF OUU0MzZCODAeFw0yNjA2MTMwMzQzMzlaFw0yNjA2MTQwNjQ4MzlaMDMxMTAvBgNV BAMTKENCRTczOThCN0M0REJFRjRGRTNGNjNBODE1NUU2OThCQzVDRDc1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnEryg4VVSf59Dtee6tM+z0i4r w6NhgAKv9eFDB/ao4cgXxBwjhLDr3GLWt/CQxDxikO8IJJeS7Vs5kSCnTEigImB3 TaRDM+MZGh/xJJS6BaiZVpTqTgNd3K36bZ7x7ywGbMLMlHMUhRZlxZc0eTlf3bxD WiyOiWFuMLmguPpY71znL+XWoWNJw7eq0TfKAtqo0uCphtO2GFLh7U0dRgSi+ZOS dqe0iaWtrUnVl9OhQoA5em/LVeK9lMhO0XT9jpWfCmrfPVLRjIlOC5kyI2F+2vLX UyTqFwg1ZyHNF9dX5gX+QjWnQKgKfSFtspdamnzRztlwDk4PW0sG8mAuSEvNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy+c5i3xNvvT+P2OoFV5pi8XNdTYwHwYDVR0j BBgwFoAUZHrCMQlxV5gB3UbTsnG5lOnkNrgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ3OGI1MGItNDQ5Yy00NTRiLTg1MGQtZjIwODAzNzg5YjU4LzAvNjQ3QUMyMzEw OTcxNTc5ODAxREQ0NkQzQjI3MUI5OTRFOUU0MzZCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82NDdBQzIzMTA5NzE1Nzk4MDFERDQ2RDNCMjcxQjk5NEU5RTQz NkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzAvNjQ3QUMyMzEwOTcxNTc5ODAxREQ0NkQzQjI3MUI5 OTRFOUU0MzZCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALP0Zg6jjAp/XqQLfPF16gtkMlDnecpW44dt 7luxP8hYckmcrTA/1u6rdMz5suAh6bRcRNoNAE6aPR8ETBssmHm3yWuZ1/PJ3CjU FzoGh9e2EOW5a4povIocy+F4IU5ffc3tKmVobHw8Fq0OWhfPElVCEvnqjr1ivuuy kF5W+8zBxfilUg2LdUOdPyl27lDRemjjg+mpiu6CjXYwB3R/qMjlSZzbuwzQ4dvB 1Wkmo4Mj6a2SBM1UlXrbx1p3hf2+APEdbGzxQ3WyD0498MrhCKIP8Bm9e8k+Uy05 rcM+tAun77HfEKC2tsGBPUkmfNJGR8oVilJM79UM+QIxnvutr2M= -----END CERTIFICATE-----Generated at Sun Jun 14 00:27:05 2026 by rpki-client