$ rpki-client -vvf rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft File: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft (raw, json) Hash identifier: XeHIqWwPPQow7iKKJjlCnGF1N4OUG3cnTDI4bepxc8A= Subject key identifier: CF:22:DA:0D:0B:93:BF:F3:FD:0B:3A:58:9A:58:8B:A0:4C:57:FE:36 Authority key identifier: DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 Certificate issuer: /CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Certificate serial: 136D27852283ED173B3C885B73E3D3D8BB1654E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:38:47 +0000 Manifest this update: Wed 17 Jun 2026 00:33:47 +0000 Manifest next update: Thu 18 Jun 2026 00:56:47 +0000 Files and hashes: 1: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl (hash: f8c5lQ6cToZfQWOkzuxe+UEVzGo/lhycMpWqujjEsAQ=) 2: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: FP5pxHLBZtIDduyXGtgh7O/QJiYCmUVEXRSY7J06kQM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6d:27:85:22:83:ed:17:3b:3c:88:5b:73:e3:d3:d8:bb:16:54:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Validity Not Before: Jun 17 00:33:47 2026 GMT Not After : Jun 18 00:56:47 2026 GMT Subject: CN=CF22DA0D0B93BFF3FD0B3A589A588BA04C57FE36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:40:b5:49:27:2b:d7:bc:76:b6:d8:9b:ae: 66:4a:bc:f0:3a:35:1e:b7:5e:45:ea:1a:b8:03:2c: 52:c0:e3:0d:92:e4:4d:f5:b5:7f:66:6f:e1:3c:2b: 78:fb:1f:b2:8c:d6:1c:24:d2:cb:cb:e8:f4:f5:d4: f8:90:ae:59:25:ca:7c:20:1d:9a:f3:1a:35:c5:cd: 5c:ad:65:30:7c:7f:db:8a:e1:ec:4e:b1:6d:72:0a: ff:bf:98:f9:ed:5f:fa:a1:b6:8b:fa:29:f2:a1:a9: ca:00:5f:5a:6f:5f:ff:3d:8d:d3:19:9b:9e:4c:ba: fb:65:da:e2:86:e2:bf:3a:0a:43:a2:bd:2f:ee:89: 11:ea:fe:e1:1e:c4:29:53:e6:ae:ed:7b:f9:42:03: c5:3c:9a:dc:8e:ab:6b:1a:af:8f:49:ac:32:ef:0e: da:a3:34:0c:cd:aa:ea:de:69:fd:2f:8c:65:e3:d7: 23:47:98:dd:04:b5:ad:71:cc:a1:21:bb:94:d1:d1: c6:55:39:b0:ce:53:46:94:90:1a:3f:f6:11:d8:b1: b6:f2:54:7e:ce:14:d6:b4:8f:6f:e8:b1:8d:80:ac: 06:7d:73:e4:80:db:51:14:26:cb:4f:6a:87:f9:30: cc:97:d2:b0:7c:2f:d6:1b:7a:e1:3b:05:5a:13:52: d9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:22:DA:0D:0B:93:BF:F3:FD:0B:3A:58:9A:58:8B:A0:4C:57:FE:36 X509v3 Authority Key Identifier: keyid:DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f2:65:e4:72:0a:00:3e:d5:a1:7e:d3:0d:6a:c1:6c:cc:fe: 8a:81:c4:73:8f:ff:02:af:4e:94:3d:c0:65:80:1d:7a:bc:96: 71:f9:58:ec:f6:0a:08:49:d3:2e:51:52:93:8b:d3:9e:20:48: 9c:13:33:fe:0b:84:78:a4:ff:a0:30:9e:57:9e:59:66:a8:76: 3f:cd:65:40:a8:94:cc:86:8e:2d:96:f8:20:81:cb:90:00:ae: 89:6d:5f:1a:74:f8:88:a1:df:2f:1a:45:e0:8b:ac:17:e0:01: 72:82:2c:3f:6c:ea:61:b7:16:aa:fd:49:15:fc:f4:8b:6e:6a: 12:87:64:67:a7:54:12:9f:57:ac:33:2d:41:99:ee:59:73:91: 1b:93:dd:e9:06:cb:36:a0:09:b3:9f:fc:00:c2:f9:cd:b0:bd: 28:ca:9e:73:48:82:a8:aa:71:ed:fc:78:9c:cc:5b:25:8c:2d: 87:17:d6:66:51:f1:26:b6:a4:3b:e6:c0:96:e0:b2:1e:b0:9d: 2b:1c:9a:74:51:bf:0e:88:aa:02:88:07:26:f4:86:1b:ed:88: 59:e8:07:70:08:85:8f:c0:e4:13:ce:7c:ec:25:61:ab:df:d4: 0b:1b:f1:f9:c3:c9:df:e8:de:76:80:c5:de:23:d8:1c:a1:a1: 6e:fb:58:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE20nhSKD7Rc7PIhbc+PT2LsWVOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYz QTcyQzRBNTAeFw0yNjA2MTcwMDMzNDdaFw0yNjA2MTgwMDU2NDdaMDMxMTAvBgNV BAMTKENGMjJEQTBEMEI5M0JGRjNGRDBCM0E1ODlBNTg4QkEwNEM1N0ZFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GEC1SScr17x2ttibrmZKvPA6 NR63XkXqGrgDLFLA4w2S5E31tX9mb+E8K3j7H7KM1hwk0svL6PT11PiQrlklynwg HZrzGjXFzVytZTB8f9uK4exOsW1yCv+/mPntX/qhtov6KfKhqcoAX1pvX/89jdMZ m55Muvtl2uKG4r86CkOivS/uiRHq/uEexClT5q7te/lCA8U8mtyOq2sar49JrDLv DtqjNAzNqureaf0vjGXj1yNHmN0Eta1xzKEhu5TR0cZVObDOU0aUkBo/9hHYsbby VH7OFNa0j2/osY2ArAZ9c+SA21EUJstPaof5MMyX0rB8L9YbeuE7BVoTUtm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzyLaDQuTv/P9CzpYmliLoExX/jYwHwYDVR0j BBgwFoAU3hcvTPDOQjClEGzWrAwlpjpyxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQyYzFmMzItODFhYy00MTE4LWJlMmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENG MENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYzQTcyQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTE3MkY0Q0YwQ0U0MjMwQTUxMDZDRDZBQzBDMjVBNjNBNzJD NEE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1 QTYzQTcyQzRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/yZeRyCgA+1aF+0w1qwWzM/oqBxHOP/wKv TpQ9wGWAHXq8lnH5WOz2CghJ0y5RUpOL054gSJwTM/4LhHik/6AwnleeWWaodj/N ZUColMyGji2W+CCBy5AAroltXxp0+Iih3y8aReCLrBfgAXKCLD9s6mG3Fqr9SRX8 9ItuahKHZGenVBKfV6wzLUGZ7llzkRuT3ekGyzagCbOf/ADC+c2wvSjKnnNIgqiq ce38eJzMWyWMLYcX1mZR8Sa2pDvmwJbgsh6wnSscmnRRvw6IqgKIByb0hhvtiFno B3AIhY/A5BPOfOwlYavf1Asb8fnDyd/o3naAxd4j2ByhoW77WKg= -----END CERTIFICATE-----Generated at Wed Jun 17 10:31:51 2026 by rpki-client