$ rpki-client -vvf rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft File: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft (raw, json) Hash identifier: TFxQZxuZi2tAqt6m55H0GVFIJ1utkEUYhb9k2/p4UQ8= Subject key identifier: 1C:7F:78:C4:FE:F8:04:27:44:3A:3D:73:DE:6A:9B:2B:C8:E5:C7:E3 Authority key identifier: D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 Certificate issuer: /CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Certificate serial: 7C1BF134C86367D84B71EA892692163E14F161E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 02:56:18 +0000 Manifest this update: Wed 17 Jun 2026 02:51:18 +0000 Manifest next update: Thu 18 Jun 2026 03:44:18 +0000 Files and hashes: 1: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: OK8J5tFKOjzZkYFlXmJIuP/RnOPH7Dha6p0ILyYgDYQ=) 2: D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl (hash: 9qmlMhz1+EmpB3ZSXpKGdqZPPEqlkw3/k9PGeqPKZwM=) 3: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: cHfAqVSrYWCvGTjmxTN9VKckgkvEOepk7bQUQ5YDUTM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:1b:f1:34:c8:63:67:d8:4b:71:ea:89:26:92:16:3e:14:f1:61:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9E4B9E5C20C5D24545E4B3744B724232423EDB7 Validity Not Before: Jun 17 02:51:18 2026 GMT Not After : Jun 18 03:44:18 2026 GMT Subject: CN=1C7F78C4FEF80427443A3D73DE6A9B2BC8E5C7E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:97:c3:ce:78:be:ea:48:c0:56:2a:06:02:c1: e5:4d:4f:6d:8f:fa:e6:52:79:7e:6a:83:61:8d:3f: 8f:e6:09:72:24:38:94:5a:1a:e8:0f:53:0c:77:48: 1a:12:41:6f:7a:10:d8:a8:f5:b5:89:10:81:9d:09: ac:e8:4e:32:72:01:08:b2:16:4e:1a:4e:68:03:6f: 21:60:62:8b:cf:d0:6c:08:1e:2f:b7:68:75:40:da: 77:6d:09:32:da:b5:1a:b5:73:66:d0:3c:42:d8:e9: 9d:09:c0:fb:15:0e:db:59:1b:2d:a9:17:df:78:8c: 87:a7:2d:19:2a:79:a0:3a:52:14:9f:d8:f9:23:d1: 90:43:56:e9:8e:0b:dd:86:aa:17:0b:9d:2d:b8:29: eb:15:8d:a8:03:56:b1:05:62:c1:00:2b:89:0d:ad: ad:1e:d2:27:0b:43:fd:c8:ce:14:a2:5c:08:10:7e: 3d:99:58:75:6f:4f:ce:c6:c0:a5:b1:39:34:09:ca: b9:da:9b:26:b6:0d:1b:13:ae:8a:a8:aa:aa:f9:ad: 31:1d:62:78:b9:d8:a5:50:77:a5:64:51:02:df:0b: 7c:79:84:3a:8c:ad:e9:a1:46:3a:9d:3b:15:05:bc: 97:84:8b:a1:bc:c9:db:57:b4:f2:5c:1d:10:1b:f5: c2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7F:78:C4:FE:F8:04:27:44:3A:3D:73:DE:6A:9B:2B:C8:E5:C7:E3 X509v3 Authority Key Identifier: keyid:D9:E4:B9:E5:C2:0C:5D:24:54:5E:4B:37:44:B7:24:23:24:23:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/D9E4B9E5C20C5D24545E4B3744B724232423EDB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5f:01:1e:a0:3d:73:c7:fc:bc:a9:10:b2:37:be:44:59:03: 61:0b:9e:84:bb:5c:ef:40:76:19:b6:f9:92:6a:f3:bb:ff:51: 87:69:f0:e0:d6:1b:7d:ff:08:24:3b:32:cd:79:0b:fc:c2:9e: 4d:35:d7:72:26:5e:79:17:14:8b:f1:50:f3:55:f4:e9:f7:c7: 19:79:89:90:9d:d4:28:67:68:a3:fe:33:37:9a:1f:41:10:10: 91:5c:22:38:9a:d9:16:c3:8f:75:91:50:86:f3:d7:90:e5:31: 8b:00:3b:2e:d2:79:3d:d2:20:ed:44:63:bf:4d:9f:21:cf:39: 79:6f:4e:e2:05:49:15:07:12:b7:10:d0:bb:70:9e:5f:2c:ef: 57:78:06:f4:ac:bc:75:c4:30:6c:75:a7:db:a4:9c:c6:25:4e: 28:de:05:84:f6:cb:1e:50:5f:a4:c1:63:34:1e:cf:71:1a:5c: 2d:8d:f3:d5:45:68:63:3b:3b:d1:d0:60:31:2d:24:7f:f5:c7: 73:10:27:5a:68:eb:ff:49:39:b7:e6:2f:57:d0:4d:94:e3:ba: fb:78:63:b7:d7:37:30:91:d1:79:13:a3:1d:bb:b3:e0:f6:92: 83:d4:a5:52:ec:c4:0c:ba:36:2d:20:c0:42:72:a2:4d:c9:0b: 0a:25:1d:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfBvxNMhjZ9hLceqJJpIWPhTxYegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMy NDIzRURCNzAeFw0yNjA2MTcwMjUxMThaFw0yNjA2MTgwMzQ0MThaMDMxMTAvBgNV BAMTKDFDN0Y3OEM0RkVGODA0Mjc0NDNBM0Q3M0RFNkE5QjJCQzhFNUM3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCul8POeL7qSMBWKgYCweVNT22P +uZSeX5qg2GNP4/mCXIkOJRaGugPUwx3SBoSQW96ENio9bWJEIGdCazoTjJyAQiy Fk4aTmgDbyFgYovP0GwIHi+3aHVA2ndtCTLatRq1c2bQPELY6Z0JwPsVDttZGy2p F994jIenLRkqeaA6UhSf2Pkj0ZBDVumOC92GqhcLnS24KesVjagDVrEFYsEAK4kN ra0e0icLQ/3IzhSiXAgQfj2ZWHVvT87GwKWxOTQJyrnamya2DRsTroqoqqr5rTEd Yni52KVQd6VkUQLfC3x5hDqMremhRjqdOxUFvJeEi6G8ydtXtPJcHRAb9cKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHH94xP74BCdEOj1z3mqbK8jlx+MwHwYDVR0j BBgwFoAU2eS55cIMXSRUXks3RLckIyQj7bcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBhMzkyZGMtMmU0ZS00NzcwLThmNjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVD MjBDNUQyNDU0NUU0QjM3NDRCNzI0MjMyNDIzRURCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOUU0QjlFNUMyMEM1RDI0NTQ1RTRCMzc0NEI3MjQyMzI0MjNF REI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBhMzkyZGMtMmU0ZS00NzcwLThm NjgtYmM2MWY4MGI3NGE3LzAvRDlFNEI5RTVDMjBDNUQyNDU0NUU0QjM3NDRCNzI0 MjMyNDIzRURCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZfAR6gPXPH/LypELI3vkRZA2ELnoS7XO9A dhm2+ZJq87v/UYdp8ODWG33/CCQ7Ms15C/zCnk0113ImXnkXFIvxUPNV9On3xxl5 iZCd1ChnaKP+MzeaH0EQEJFcIjia2RbDj3WRUIbz15DlMYsAOy7SeT3SIO1EY79N nyHPOXlvTuIFSRUHErcQ0Ltwnl8s71d4BvSsvHXEMGx1p9uknMYlTijeBYT2yx5Q X6TBYzQez3EaXC2N89VFaGM7O9HQYDEtJH/1x3MQJ1po6/9JObfmL1fQTZTjuvt4 Y7fXNzCR0XkTox27s+D2koPUpVLsxAy6Ni0gwEJyok3JCwolHWM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:31:33 2026 by rpki-client