$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft File: DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft (raw, json) Hash identifier: DqEL8pjwKIvDi5wegOVALXGCYdrX1+tLif0Fn2vd7Gc= Subject key identifier: AC:0F:C5:86:63:BB:E2:74:89:10:97:62:76:D4:4A:D2:F5:9E:74:73 Authority key identifier: DB:4A:C9:A8:08:70:56:C5:6E:38:C2:C0:CC:75:A3:90:3F:37:E2:30 Certificate issuer: /CN=DB4AC9A8087056C56E38C2C0CC75A3903F37E230 Certificate serial: 29B65210A1DCD4E61ADCCC93FEB11C956863AADF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:24:29 +0000 Manifest this update: Wed 17 Jun 2026 01:19:29 +0000 Manifest next update: Thu 18 Jun 2026 03:02:29 +0000 Files and hashes: 1: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: 4YZ/ZRV4ksOjfTDRZ8oe6dmwipIG0EjZ5ajPjIVeb/w=) 2: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 0Zbp66Mkncj5oCXs1yHj0YUhYzKAXAlHlpMsofKBpH8=) 3: DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl (hash: FqPsgXwQ4ycU72i3o9pbaFW2Z2aDttgf+Kv7h5dAkw4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b6:52:10:a1:dc:d4:e6:1a:dc:cc:93:fe:b1:1c:95:68:63:aa:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB4AC9A8087056C56E38C2C0CC75A3903F37E230 Validity Not Before: Jun 17 01:19:29 2026 GMT Not After : Jun 18 03:02:29 2026 GMT Subject: CN=AC0FC58663BBE2748910976276D44AD2F59E7473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:11:6d:e0:ba:72:aa:8d:95:b4:f2:33:81:a0: 1f:b0:9d:c6:f8:37:6d:ca:bd:2d:80:2f:15:b3:ef: ab:58:7f:ed:2c:5a:a7:67:ba:dd:a9:f3:73:44:9a: 4a:87:b4:c8:63:f3:58:24:6b:cc:b6:94:89:83:57: 96:da:0f:bd:cd:d1:ff:62:51:6f:74:ea:8f:b5:32: f3:fc:62:06:0a:98:37:30:de:f0:0b:fa:14:18:b0: 7b:1b:53:a6:90:97:02:7a:a5:f9:0d:d4:94:8c:c6: 00:5a:96:6c:a7:c9:14:56:7e:0b:8c:5c:c0:d3:f4: 5a:83:4d:82:0b:6f:df:2b:d7:6a:da:58:eb:59:79: 95:75:f6:c9:5d:81:05:1a:84:19:b6:6d:d9:4d:b3: 2b:33:0d:da:85:23:58:c8:7c:dc:1b:98:0f:a6:93: 1c:52:3e:4c:a7:52:48:22:6f:84:3e:c2:ce:ae:80: 4a:2d:a2:72:c2:e0:ab:47:cf:ea:25:a6:2b:7f:c7: 54:0f:22:7a:76:b9:7d:93:7d:11:a9:e1:9a:28:a1: 0b:3f:46:f5:7e:15:11:3c:be:56:e3:ac:36:dc:de: 2e:79:37:f7:31:67:19:bc:1b:5c:92:c9:60:ca:54: 3f:1b:da:d2:d7:d3:40:cf:3e:ce:b0:9a:4f:c9:1a: eb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0F:C5:86:63:BB:E2:74:89:10:97:62:76:D4:4A:D2:F5:9E:74:73 X509v3 Authority Key Identifier: keyid:DB:4A:C9:A8:08:70:56:C5:6E:38:C2:C0:CC:75:A3:90:3F:37:E2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/DB4AC9A8087056C56E38C2C0CC75A3903F37E230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:bd:0d:58:9b:e7:22:26:2d:19:59:a7:07:3b:0c:ad:70:6a: e5:4b:66:19:b6:28:ce:c4:1c:2a:4a:e5:ab:6d:0d:f7:0b:3f: d5:e8:1b:6a:e1:57:b1:54:72:58:05:7a:d3:c6:0b:fe:6f:9e: 72:b0:81:76:2a:10:e6:43:a6:78:c8:62:ec:2c:7d:fa:4b:ee: ed:97:3c:6f:b7:aa:b2:ef:f0:df:3a:65:52:f3:6d:06:c4:5c: e6:06:cd:2f:9f:ba:d2:b3:3b:5d:72:aa:a2:ea:a2:21:94:12: 61:aa:68:0d:25:8b:eb:06:08:b7:0b:b3:6f:b0:a3:cb:8b:50: 5b:6e:01:31:e4:03:05:07:fc:02:4f:78:66:29:02:30:9c:66: a4:3c:81:13:3c:82:3b:b0:3e:0e:78:fc:08:85:a2:0e:99:83: 00:fd:8a:8f:fa:eb:c8:1c:63:06:af:ff:9e:2f:b1:c7:d2:17: 4d:00:df:00:da:a1:d4:07:8d:4c:ac:6f:f7:7a:d0:b8:05:78: 1d:c6:f4:97:0b:58:37:80:7c:b8:4f:fa:fe:68:4d:9d:16:f5: c3:31:0b:4b:3a:31:9b:2f:70:8e:41:a7:bb:a6:05:38:45:de: ba:b8:6d:bd:8e:5d:8a:d2:e2:e5:e1:c4:a3:13:04:b8:46:12: 79:ea:16:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbZSEKHc1OYa3MyT/rEclWhjqt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI0QUM5QTgwODcwNTZDNTZFMzhDMkMwQ0M3NUEzOTAz RjM3RTIzMDAeFw0yNjA2MTcwMTE5MjlaFw0yNjA2MTgwMzAyMjlaMDMxMTAvBgNV BAMTKEFDMEZDNTg2NjNCQkUyNzQ4OTEwOTc2Mjc2RDQ0QUQyRjU5RTc0NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsEW3gunKqjZW08jOBoB+wncb4 N23KvS2ALxWz76tYf+0sWqdnut2p83NEmkqHtMhj81gka8y2lImDV5baD73N0f9i UW906o+1MvP8YgYKmDcw3vAL+hQYsHsbU6aQlwJ6pfkN1JSMxgBalmynyRRWfguM XMDT9FqDTYILb98r12raWOtZeZV19sldgQUahBm2bdlNsyszDdqFI1jIfNwbmA+m kxxSPkynUkgib4Q+ws6ugEotonLC4KtHz+olpit/x1QPInp2uX2TfRGp4ZoooQs/ RvV+FRE8vlbjrDbc3i55N/cxZxm8G1ySyWDKVD8b2tLX00DPPs6wmk/JGus7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrA/FhmO74nSJEJdidtRK0vWedHMwHwYDVR0j BBgwFoAU20rJqAhwVsVuOMLAzHWjkD834jAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZkM2ZjMjQtNzVhMi00N2Y2LTkyOGUtNGU5ODAyYjk3MDg1LzAvREI0QUM5QTgw ODcwNTZDNTZFMzhDMkMwQ0M3NUEzOTAzRjM3RTIzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjRBQzlBODA4NzA1NkM1NkUzOEMyQzBDQzc1QTM5MDNGMzdF MjMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvREI0QUM5QTgwODcwNTZDNTZFMzhDMkMwQ0M3NUEz OTAzRjM3RTIzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFK9DVib5yImLRlZpwc7DK1wauVLZhm2KM7E HCpK5attDfcLP9XoG2rhV7FUclgFetPGC/5vnnKwgXYqEOZDpnjIYuwsffpL7u2X PG+3qrLv8N86ZVLzbQbEXOYGzS+futKzO11yqqLqoiGUEmGqaA0li+sGCLcLs2+w o8uLUFtuATHkAwUH/AJPeGYpAjCcZqQ8gRM8gjuwPg54/AiFog6ZgwD9io/668gc Ywav/54vscfSF00A3wDaodQHjUysb/d60LgFeB3G9JcLWDeAfLhP+v5oTZ0W9cMx C0s6MZsvcI5Bp7umBThF3rq4bb2OXYrS4uXhxKMTBLhGEnnqFmE= -----END CERTIFICATE-----Generated at Wed Jun 17 11:02:41 2026 by rpki-client