$ rpki-client -vvf rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft File: 1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft (raw, json) Hash identifier: hXxQUZ/Pxrl1DO4FmVGbM5MToyaLszyYTXCJ3Sn2KuA= Subject key identifier: EB:F4:90:40:F9:50:CA:50:DA:00:04:B0:98:82:D3:98:2E:45:EE:63 Authority key identifier: 1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3 Certificate issuer: /CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3 Certificate serial: 61D51FF413E3E7E9E716429D30895CD72BBB2635 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 03:21:55 +0000 Manifest this update: Wed 17 Jun 2026 03:16:55 +0000 Manifest next update: Thu 18 Jun 2026 05:45:55 +0000 Files and hashes: 1: 1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl (hash: 7t/jrrXb0FhEZNXGb8eS0zsR2583gqLOnxrE0ciJlKI=) 2: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: KO5msUjW/HADSpbcbiZqt5Rho/bq6n0Bk1hJW/E0KBc=) 3: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: eiTM77LAawXXBM2P9HzaFup35pUjYK9bwPNmiTzjRYk=) 4: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: y3pv5F6oTlsmrZ6EnNXAjdzgbs9s6wBiVuWts/sp7e0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d5:1f:f4:13:e3:e7:e9:e7:16:42:9d:30:89:5c:d7:2b:bb:26:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AA62432414DDF3584FE86B5C67FB22925A9D3B3 Validity Not Before: Jun 17 03:16:55 2026 GMT Not After : Jun 18 05:45:55 2026 GMT Subject: CN=EBF49040F950CA50DA0004B09882D3982E45EE63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:17:f1:00:10:0d:a9:47:9e:a4:86:4a:2b: e8:e6:79:bc:75:be:d4:6d:59:3e:56:07:d5:44:7b: b1:ba:25:19:66:4d:d6:a2:de:96:f5:a6:c9:c9:a3: fb:6f:c3:6b:10:c7:0d:84:cc:d5:81:2d:20:3e:e6: a1:25:77:06:a2:6a:a8:56:64:b9:64:06:c1:6a:31: 81:d8:fe:67:ab:20:6b:d3:3d:80:49:87:a8:cd:4f: 73:82:ce:e0:af:cc:5c:64:c6:ac:d0:ee:bd:93:12: 2a:f1:20:25:ef:7b:51:f8:ca:55:31:58:d8:bc:bc: e3:bf:8e:b8:47:c1:94:6b:0e:47:14:b9:56:d1:6b: 9c:f4:99:a5:30:83:9b:28:b2:0e:ba:37:a9:8b:80: d8:f3:bd:99:4d:68:24:c9:2a:c4:d1:72:a0:6e:98: cc:dc:95:d7:0d:f6:51:07:61:9f:9e:fc:4f:83:c3: 30:d5:f9:88:5a:fc:b2:47:28:99:7e:a4:f9:7b:4e: 2d:d4:5a:cb:7d:00:21:12:b5:fe:35:b4:e0:00:a6: 83:0b:3b:20:1a:79:59:6d:05:04:1b:5f:d1:a3:ee: 83:cb:59:f4:5e:1c:49:71:19:a9:2a:80:9c:5d:4e: a5:9c:aa:ee:61:1d:3c:3f:ce:9f:52:4e:0c:10:f4: f5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F4:90:40:F9:50:CA:50:DA:00:04:B0:98:82:D3:98:2E:45:EE:63 X509v3 Authority Key Identifier: keyid:1A:A6:24:32:41:4D:DF:35:84:FE:86:B5:C6:7F:B2:29:25:A9:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/1AA62432414DDF3584FE86B5C67FB22925A9D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:79:dd:33:db:84:c5:f9:21:91:d4:66:e0:cf:99:3c:d3:0d: 10:2c:99:cf:77:21:2c:18:6e:ae:2c:cc:2e:60:27:8a:21:21: c7:83:6e:02:95:38:bc:62:ef:33:16:30:75:06:20:08:21:10: c9:56:3f:6d:ea:0c:1c:59:f0:20:7b:43:fa:85:99:8e:9c:03: 51:bc:a0:0f:ba:f1:a1:31:c5:67:d7:c3:30:39:7c:39:dc:3d: 48:69:b9:3b:70:11:73:c1:40:2c:06:b6:82:bc:eb:5f:fb:34: 7b:8c:dd:90:77:8a:dc:49:47:ec:36:de:98:52:28:fa:ac:bb: 58:19:ba:76:6b:af:f0:e1:3a:43:34:10:29:3e:f1:48:2d:b8: 17:74:60:25:4f:f3:0c:c7:9d:26:b8:ca:47:52:14:52:fe:f7: c7:7d:25:71:45:d9:2a:1b:0a:1c:32:59:0e:2b:19:9e:77:64: 99:6f:da:a6:63:60:38:8c:ac:9a:60:81:c8:89:bd:7d:46:4e: 0b:a2:77:af:1a:bd:d3:6d:41:11:53:58:7e:96:e3:50:48:c6: 90:6d:42:f6:c2:3b:66:92:01:23:18:83:7e:7f:79:4b:c3:d6: 6d:78:41:3c:d2:28:83:a3:3b:bf:c8:5d:b3:c0:e8:16:d4:21: 70:2e:c8:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdUf9BPj5+nnFkKdMIlc1yu7JjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFBNjI0MzI0MTREREYzNTg0RkU4NkI1QzY3RkIyMjky NUE5RDNCMzAeFw0yNjA2MTcwMzE2NTVaFw0yNjA2MTgwNTQ1NTVaMDMxMTAvBgNV BAMTKEVCRjQ5MDQwRjk1MENBNTBEQTAwMDRCMDk4ODJEMzk4MkU0NUVFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/xfxABANqUeepIZKK+jmebx1 vtRtWT5WB9VEe7G6JRlmTdai3pb1psnJo/tvw2sQxw2EzNWBLSA+5qEldwaiaqhW ZLlkBsFqMYHY/merIGvTPYBJh6jNT3OCzuCvzFxkxqzQ7r2TEirxICXve1H4ylUx WNi8vOO/jrhHwZRrDkcUuVbRa5z0maUwg5sosg66N6mLgNjzvZlNaCTJKsTRcqBu mMzcldcN9lEHYZ+e/E+DwzDV+Yha/LJHKJl+pPl7Ti3UWst9ACEStf41tOAApoML OyAaeVltBQQbX9Gj7oPLWfReHElxGakqgJxdTqWcqu5hHTw/zp9STgwQ9PV5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6/SQQPlQylDaAASwmILTmC5F7mMwHwYDVR0j BBgwFoAUGqYkMkFN3zWE/oa1xn+yKSWp07MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmYxM2E2ZWYtMzQzNC00NDAxLWIzZTEtNjUxNTMwNjZmYjNlLzAvMUFBNjI0MzI0 MTREREYzNTg0RkU4NkI1QzY3RkIyMjkyNUE5RDNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUE2MjQzMjQxNERERjM1ODRGRTg2QjVDNjdGQjIyOTI1QTlE M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMUFBNjI0MzI0MTREREYzNTg0RkU4NkI1QzY3RkIy MjkyNUE5RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGd53TPbhMX5IZHUZuDPmTzTDRAsmc93ISwY bq4szC5gJ4ohIceDbgKVOLxi7zMWMHUGIAghEMlWP23qDBxZ8CB7Q/qFmY6cA1G8 oA+68aExxWfXwzA5fDncPUhpuTtwEXPBQCwGtoK861/7NHuM3ZB3itxJR+w23phS KPqsu1gZunZrr/DhOkM0ECk+8UgtuBd0YCVP8wzHnSa4ykdSFFL+98d9JXFF2Sob ChwyWQ4rGZ53ZJlv2qZjYDiMrJpggciJvX1GTguid68avdNtQRFTWH6W41BIxpBt QvbCO2aSASMYg35/eUvD1m14QTzSKIOjO7/IXbPA6BbUIXAuyJE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:06 2026 by rpki-client