$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft File: A65A7370A28DA71B1C11B89E09D51753C498246D.mft (raw, json) Hash identifier: Av1H3wTOPLJe04jX5+nK/Y0fUCoekdRBEnU92je3h3g= Subject key identifier: 0A:EA:D6:9D:80:02:35:C9:D7:68:01:55:47:52:56:A0:42:07:1A:AE Authority key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D Certificate issuer: /CN=A65A7370A28DA71B1C11B89E09D51753C498246D Certificate serial: 3E5DCBA71A27ED1BD45719BCE650C628CB5DBADD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 07:01:15 +0000 Manifest this update: Sun 14 Jun 2026 06:56:15 +0000 Manifest next update: Mon 15 Jun 2026 09:47:15 +0000 Files and hashes: 1: A65A7370A28DA71B1C11B89E09D51753C498246D.crl (hash: BFKylkKRQFv1TO6MxWCrBEgu9oDgDWbWDqPAWmpG7U4=) 2: 3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa (hash: Ho6tdl1he9FR1/62MiqnACr306KYnR/YSxoabj/m7M4=) 3: 3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa (hash: kTQiZ7hK+M7BbCy/GwseyxlIaws4BXvafRAJzzRJxhc=) 4: 3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa (hash: yLjPOFhKt4noRbzRL2MIGaluRq2L7M9f6uyh5pKU9Ec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 08:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5d:cb:a7:1a:27:ed:1b:d4:57:19:bc:e6:50:c6:28:cb:5d:ba:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65A7370A28DA71B1C11B89E09D51753C498246D Validity Not Before: Jun 14 06:56:15 2026 GMT Not After : Jun 15 09:47:15 2026 GMT Subject: CN=0AEAD69D800235C9D7680155475256A042071AAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:03:0f:3b:28:4d:92:09:81:c5:f9:b3:81: 0f:76:28:41:02:be:59:ff:20:2a:50:a6:9e:54:56: a3:f6:b1:68:54:c1:e9:a1:43:6b:32:3c:24:33:f7: 3c:31:1e:2e:71:8a:5d:73:a7:54:76:82:2d:b6:cc: d9:84:81:d0:0c:75:f7:1a:37:19:fc:fc:bc:2e:d0: 52:40:30:56:d1:3a:05:32:b7:ae:56:15:69:35:fe: 12:be:2f:55:99:a7:51:e3:56:c9:92:15:54:d1:0b: 1d:de:34:9f:3c:43:c6:e6:fa:2c:e7:f8:10:49:b7: 54:61:48:8b:ff:b9:b6:ed:39:8e:57:33:ee:02:e5: 81:87:39:21:56:3a:34:66:f3:42:d9:bd:db:1e:f4: 3b:39:a3:09:1c:c2:58:f5:b9:3b:8f:98:95:2d:a4: ed:fe:d3:56:35:66:c0:76:6a:a8:b7:e0:0b:91:cc: d9:75:bc:74:f7:af:c2:0d:57:60:63:18:13:85:41: e9:85:48:9f:33:fc:6f:27:c6:08:e7:df:c3:33:2c: f9:99:0d:32:3b:e7:e2:80:4a:1b:36:6c:26:aa:ac: d8:0f:6d:81:48:b3:15:83:6d:11:81:ab:96:48:e1: 4b:9f:a7:fa:a7:7c:ba:f1:1d:0c:72:b6:34:e0:51: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EA:D6:9D:80:02:35:C9:D7:68:01:55:47:52:56:A0:42:07:1A:AE X509v3 Authority Key Identifier: keyid:A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c7:f3:df:ca:71:53:74:12:5f:c4:60:f3:96:39:2e:d0:29: 6d:02:dc:80:9f:20:23:b3:6d:60:6e:d2:36:d5:5a:1e:06:0c: fa:e6:12:c8:b4:92:ba:16:b0:e9:e2:54:d1:6c:7f:de:3a:75: b8:4e:17:0c:95:d7:ec:f9:87:42:4b:ba:51:2a:c1:36:dc:15: 65:09:9f:f2:51:72:b7:5b:e8:0f:cc:98:37:90:ea:d8:13:4b: f4:6b:73:d3:56:f9:f0:a0:1f:09:60:ec:ed:02:e0:d0:ea:83: f0:c4:4f:ba:d4:48:9f:9d:77:04:2b:38:5f:3d:c8:18:50:74: 90:45:e9:3b:0e:46:ef:72:b7:a5:d0:68:9e:0f:5e:ad:43:5c: b0:4e:f7:d6:28:0c:f0:30:9d:c2:e9:a9:fe:52:7b:bc:52:0f: 3e:7e:55:21:ee:e2:0c:d4:11:3a:a9:f7:05:81:9d:80:35:d7: bb:4a:df:83:69:cd:02:95:bf:2f:81:78:9f:bd:69:8c:dd:93: 1e:25:c5:53:e9:21:6d:92:9a:af:59:b9:6c:38:ae:5e:23:43: 41:87:d1:be:9c:6c:af:e8:d8:d7:0f:a5:cf:eb:fe:eb:fc:b3: d0:4b:a3:dc:ea:7a:4a:74:d1:10:1c:9c:a5:cd:1e:6f:b3:4f: 6f:91:70:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPl3Lpxon7RvUVxm85lDGKMtdut0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3NTND NDk4MjQ2RDAeFw0yNjA2MTQwNjU2MTVaFw0yNjA2MTUwOTQ3MTVaMDMxMTAvBgNV BAMTKDBBRUFENjlEODAwMjM1QzlENzY4MDE1NTQ3NTI1NkEwNDIwNzFBQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYGwMPOyhNkgmBxfmzgQ92KEEC vln/ICpQpp5UVqP2sWhUwemhQ2syPCQz9zwxHi5xil1zp1R2gi22zNmEgdAMdfca Nxn8/Lwu0FJAMFbROgUyt65WFWk1/hK+L1WZp1HjVsmSFVTRCx3eNJ88Q8bm+izn +BBJt1RhSIv/ubbtOY5XM+4C5YGHOSFWOjRm80LZvdse9Ds5owkcwlj1uTuPmJUt pO3+01Y1ZsB2aqi34AuRzNl1vHT3r8INV2BjGBOFQemFSJ8z/G8nxgjn38MzLPmZ DTI75+KAShs2bCaqrNgPbYFIsxWDbRGBq5ZI4Uufp/qnfLrxHQxytjTgUf4dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCurWnYACNcnXaAFVR1JWoEIHGq4wHwYDVR0j BBgwFoAUplpzcKKNpxscEbieCdUXU8SYJG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBB MjhEQTcxQjFDMTFCODlFMDlENTE3NTNDNDk4MjQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9BNjVBNzM3MEEyOERBNzFCMUMxMUI4OUUwOUQ1MTc1M0M0OTgy NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3 NTNDNDk4MjQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3H89/KcVN0El/EYPOWOS7QKW0C3ICfICOz bWBu0jbVWh4GDPrmEsi0kroWsOniVNFsf946dbhOFwyV1+z5h0JLulEqwTbcFWUJ n/JRcrdb6A/MmDeQ6tgTS/Rrc9NW+fCgHwlg7O0C4NDqg/DET7rUSJ+ddwQrOF89 yBhQdJBF6TsORu9yt6XQaJ4PXq1DXLBO99YoDPAwncLpqf5Se7xSDz5+VSHu4gzU ETqp9wWBnYA117tK34NpzQKVvy+BeJ+9aYzdkx4lxVPpIW2Smq9ZuWw4rl4jQ0GH 0b6cbK/o2NcPpc/r/uv8s9BLo9zqekp00RAcnKXNHm+zT2+RcGA= -----END CERTIFICATE-----Generated at Sun Jun 14 09:22:01 2026 by rpki-client