$ rpki-client -vvf rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft File: 2111C1DE0964BA3363560863B0A6338C56E44B27.mft (raw, json) Hash identifier: NfRsRoSJHldcEqhXbKpvelWJkL8Ezr/T94ToS94xfXI= Subject key identifier: A8:B8:53:FF:D2:F9:F3:89:1A:48:7C:C3:54:BF:BD:8F:83:DC:93:B2 Authority key identifier: 21:11:C1:DE:09:64:BA:33:63:56:08:63:B0:A6:33:8C:56:E4:4B:27 Certificate issuer: /CN=2111C1DE0964BA3363560863B0A6338C56E44B27 Certificate serial: 2229D5F288FF181A5853B9161D271A81D6B9F189 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 20:54:31 +0000 Manifest this update: Sat 13 Jun 2026 20:49:31 +0000 Manifest next update: Sun 14 Jun 2026 23:32:31 +0000 Files and hashes: 1: 2111C1DE0964BA3363560863B0A6338C56E44B27.crl (hash: /ADMjNPaQg8m6FUKKdjSc8Sjj3T11R00oddv6G4OQD0=) 2: 3130332e3136322e3130352e302f32342d3234203d3e20313337333136.roa (hash: reUfW2xUZcOA3UU73tVnYqvdrqLkl2f35VFNF05Zufw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.crl rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:29:d5:f2:88:ff:18:1a:58:53:b9:16:1d:27:1a:81:d6:b9:f1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2111C1DE0964BA3363560863B0A6338C56E44B27 Validity Not Before: Jun 13 20:49:31 2026 GMT Not After : Jun 14 23:32:31 2026 GMT Subject: CN=A8B853FFD2F9F3891A487CC354BFBD8F83DC93B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:2b:52:ec:70:b3:7a:50:e4:66:90:20:15: c0:2c:35:1c:5a:d9:b3:f5:d0:d9:02:68:fd:bc:95: db:9d:7f:d5:05:5c:2f:35:eb:12:1e:e2:62:3b:52: fa:12:7e:c9:eb:cd:cc:bd:1b:88:8c:27:d9:57:cd: ce:52:a5:6a:38:f3:36:ce:01:ce:e0:7f:ef:4b:36: 59:26:0c:03:df:91:e7:2f:7a:1d:26:eb:3b:92:42: e9:eb:e7:6f:82:f9:c8:41:e8:3c:79:7d:ae:62:b1: e1:e9:d2:c1:a3:92:bd:82:22:82:4c:69:45:7d:59: 9a:eb:e1:66:c1:47:93:3a:c9:be:6f:03:48:8a:f3: 8d:f0:75:99:1e:56:f0:03:02:c3:82:1b:be:cb:d6: de:08:06:82:7e:d2:25:8b:67:08:a8:9a:85:10:81: 19:2f:6e:9c:7d:50:1d:92:da:c2:2a:02:b2:6b:7d: 24:4e:83:8c:cf:85:46:0f:72:46:58:21:94:bb:2e: 47:6c:3a:8e:10:5d:dc:62:e1:2b:3a:c6:d5:a3:11: 5d:b3:ed:04:86:dd:5d:0a:cb:3b:1b:13:c9:22:68: 84:11:ea:be:30:5c:e1:4d:d7:1e:37:22:b0:89:9a: c5:01:66:65:9f:81:89:11:ed:b3:88:4d:4c:0f:0e: 92:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B8:53:FF:D2:F9:F3:89:1A:48:7C:C3:54:BF:BD:8F:83:DC:93:B2 X509v3 Authority Key Identifier: keyid:21:11:C1:DE:09:64:BA:33:63:56:08:63:B0:A6:33:8C:56:E4:4B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2111C1DE0964BA3363560863B0A6338C56E44B27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/2111C1DE0964BA3363560863B0A6338C56E44B27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d7:28:72:70:be:17:0c:48:10:24:6d:8a:3d:81:1f:ee:ba: bb:96:1c:ba:7a:e9:d5:79:0d:3f:e0:08:8b:98:9a:a0:f3:9f: ae:72:9b:c2:39:f4:7a:9f:b8:3b:ac:0b:94:06:dc:f0:16:6b: 81:52:e9:15:75:8e:09:a8:15:7e:38:64:24:8d:93:86:b3:ad: c8:71:6c:06:27:74:13:37:3c:47:28:d9:e1:f5:2d:e9:5c:15: bc:0d:f5:17:ee:a1:3f:3a:8d:db:39:91:84:24:42:3f:a9:43: ed:a5:1c:9c:22:1a:ef:8c:31:ae:5c:3d:15:4b:54:bf:c7:07: 1b:a4:c1:25:93:d4:eb:99:4a:63:ae:ca:67:94:ff:18:2b:25: 3e:c5:2e:f9:6b:ee:0a:ab:95:2a:12:51:23:da:2e:1d:aa:3e: 04:a6:d8:e9:87:bc:ef:44:d6:77:dd:6d:80:71:3b:a0:9c:24: 59:a0:db:5d:a8:d0:aa:01:0e:8d:77:4f:9e:f3:e3:75:59:43: 3c:7d:57:68:fd:72:0b:2f:ba:bb:8c:95:1e:9c:f2:3e:32:5e: 4b:f0:c0:1d:4e:e0:9f:82:82:f5:1b:f6:2c:e9:26:b1:be:a0: 72:82:a2:6a:ad:c6:a9:59:f6:f5:ec:fd:1a:e0:26:f6:9e:11: c4:95:52:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIinV8oj/GBpYU7kWHScagda58YkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExMUMxREUwOTY0QkEzMzYzNTYwODYzQjBBNjMzOEM1 NkU0NEIyNzAeFw0yNjA2MTMyMDQ5MzFaFw0yNjA2MTQyMzMyMzFaMDMxMTAvBgNV BAMTKEE4Qjg1M0ZGRDJGOUYzODkxQTQ4N0NDMzU0QkZCRDhGODNEQzkzQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd3ytS7HCzelDkZpAgFcAsNRxa 2bP10NkCaP28ldudf9UFXC816xIe4mI7UvoSfsnrzcy9G4iMJ9lXzc5SpWo48zbO Ac7gf+9LNlkmDAPfkecveh0m6zuSQunr52+C+chB6Dx5fa5iseHp0sGjkr2CIoJM aUV9WZrr4WbBR5M6yb5vA0iK843wdZkeVvADAsOCG77L1t4IBoJ+0iWLZwiomoUQ gRkvbpx9UB2S2sIqArJrfSROg4zPhUYPckZYIZS7LkdsOo4QXdxi4Ss6xtWjEV2z 7QSG3V0KyzsbE8kiaIQR6r4wXOFN1x43IrCJmsUBZmWfgYkR7bOITUwPDpIJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqLhT/9L584kaSHzDVL+9j4Pck7IwHwYDVR0j BBgwFoAUIRHB3glkujNjVghjsKYzjFbkSycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcyMjQzNjAtMjQ1ZC00YTFhLWFmMzYtZjliZWZjZGI3MGI3LzAvMjExMUMxREUw OTY0QkEzMzYzNTYwODYzQjBBNjMzOEM1NkU0NEIyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTExQzFERTA5NjRCQTMzNjM1NjA4NjNCMEE2MzM4QzU2RTQ0 QjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcyMjQzNjAtMjQ1ZC00YTFhLWFm MzYtZjliZWZjZGI3MGI3LzAvMjExMUMxREUwOTY0QkEzMzYzNTYwODYzQjBBNjMz OEM1NkU0NEIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDXKHJwvhcMSBAkbYo9gR/uuruWHLp66dV5 DT/gCIuYmqDzn65ym8I59HqfuDusC5QG3PAWa4FS6RV1jgmoFX44ZCSNk4azrchx bAYndBM3PEco2eH1LelcFbwN9RfuoT86jds5kYQkQj+pQ+2lHJwiGu+MMa5cPRVL VL/HBxukwSWT1OuZSmOuymeU/xgrJT7FLvlr7gqrlSoSUSPaLh2qPgSm2OmHvO9E 1nfdbYBxO6CcJFmg212o0KoBDo13T57z43VZQzx9V2j9cgsvuruMlR6c8j4yXkvw wB1O4J+CgvUb9izpJrG+oHKComqtxqlZ9vXs/RrgJvaeEcSVUos= -----END CERTIFICATE-----Generated at Sun Jun 14 06:43:45 2026 by rpki-client