$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft File: D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft (raw, json) Hash identifier: EHDQpdzU85+ZpKAa7W3Nw7nlbkgoFn3tR5ieyIXtrag= Subject key identifier: 1A:05:1E:9C:D5:11:0A:9E:FC:56:66:BB:BD:B1:3E:8A:C7:15:3A:BA Authority key identifier: D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B Certificate issuer: /CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Certificate serial: 77A9C22891EF57709986D8DC979B1F9A3F5C57A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:05:13 +0000 Manifest this update: Wed 17 Jun 2026 06:00:13 +0000 Manifest next update: Thu 18 Jun 2026 08:06:13 +0000 Files and hashes: 1: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: pHpItOVKv8esoRGqC1921wkOWFNotJS3YzPQt+5pees=) 2: D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl (hash: 7PLKhUn1OdJJMUqqCdcyEQtodZjQ+2U2I43dgzHqegc=) 3: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: zY+TCMFw7rqEprfDm4KpW3QZwoOVJC4HoqlrpBLXEfI=) 4: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: O9b/sE0cgUl/rxVhhp6cIJikTp6ysHnQzs5JN33UOjQ=) 5: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: qvAhwO/EjrHouy1t9oPOe/Yp+kgXSnzORPmVIxEb76o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a9:c2:28:91:ef:57:70:99:86:d8:dc:97:9b:1f:9a:3f:5c:57:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Validity Not Before: Jun 17 06:00:13 2026 GMT Not After : Jun 18 08:06:13 2026 GMT Subject: CN=1A051E9CD5110A9EFC5666BBBDB13E8AC7153ABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:72:63:0d:55:7e:d3:c8:dd:a7:67:b2:d3: e1:44:4d:74:7d:40:49:9b:c6:73:af:06:b2:9b:73: 0e:7c:ad:0e:3e:fb:bc:b2:18:39:75:68:a0:85:b0: b7:32:11:51:cc:5d:0c:d5:e2:1e:b3:3b:44:4e:39: e6:21:b0:0a:80:81:83:01:fe:e3:48:9b:b2:6b:6d: 37:84:24:c5:aa:3b:7a:02:eb:1a:e4:69:a0:c1:27: 91:fb:4b:72:08:1e:aa:93:a3:a3:63:d3:31:c3:76: 59:73:b3:c4:eb:86:4d:b7:80:14:53:db:1d:cd:69: 15:81:54:c0:11:8c:c9:6a:10:f2:6c:e7:82:80:15: cd:f9:49:f3:86:f7:37:c0:2f:ff:34:49:c7:45:5f: a3:d4:2c:4e:9c:29:04:03:fb:a2:6c:ff:b4:63:b5: 13:c6:45:3f:74:78:61:e0:d2:8f:a4:c5:2f:1d:8e: f0:76:66:f1:fe:80:b6:23:f9:d8:a2:06:44:10:ef: e1:5d:6b:87:d9:65:5f:47:5f:06:83:d6:ab:b3:85: f4:58:ac:91:da:3a:4d:57:c2:6e:a4:bf:a7:09:ac: 03:7a:ad:08:f8:cb:f8:9e:6f:f8:ad:9e:24:6e:5c: 89:1e:fc:7a:fa:34:ef:6e:48:49:39:21:05:8b:92: 01:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:05:1E:9C:D5:11:0A:9E:FC:56:66:BB:BD:B1:3E:8A:C7:15:3A:BA X509v3 Authority Key Identifier: keyid:D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:89:fc:a3:5e:a0:33:89:8f:02:9a:45:2b:ed:aa:11:17:6c: 80:fd:6d:0b:44:d7:b0:9e:1d:40:31:07:5e:1d:07:f6:1f:e0: 99:01:b1:45:ac:2f:a4:f7:03:77:9d:a3:5f:20:fc:16:6c:14: c2:9a:65:f2:2b:06:fb:7a:10:c6:7a:9d:60:4c:32:94:69:d0: 2c:18:ce:8a:65:3f:60:1b:fe:f7:02:1e:e7:5e:40:2c:3f:06: 34:d8:14:d1:ca:f2:23:0e:aa:29:fd:89:80:cd:a4:fb:28:0b: 59:c1:ec:80:b9:ce:08:c9:fa:26:3f:ab:d0:dc:eb:52:38:12: 9f:94:0e:32:75:4d:90:62:ad:d5:85:a4:3d:d0:ed:83:b9:a2: 18:e1:f6:a5:2a:10:21:5a:62:82:e9:52:85:8b:75:ac:0f:5e: fe:cf:2e:12:fc:8d:66:61:d1:8b:60:51:74:e9:92:73:9a:77: dc:92:66:7d:cc:f3:a8:c0:df:9d:eb:12:20:c8:c8:f7:19:12: 11:b1:1c:c1:19:bd:19:ad:a1:9d:6d:1f:7d:89:9c:85:be:17: 54:86:92:aa:49:65:b9:98:95:a6:6f:4d:92:e2:0d:cf:25:54: 45:cc:cf:02:48:82:3e:54:a3:e1:2f:57:72:30:2f:70:b5:51: de:bc:d1:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd6nCKJHvV3CZhtjcl5sfmj9cV6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUx NTMyODE3QjAeFw0yNjA2MTcwNjAwMTNaFw0yNjA2MTgwODA2MTNaMDMxMTAvBgNV BAMTKDFBMDUxRTlDRDUxMTBBOUVGQzU2NjZCQkJEQjEzRThBQzcxNTNBQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugXJjDVV+08jdp2ey0+FETXR9 QEmbxnOvBrKbcw58rQ4++7yyGDl1aKCFsLcyEVHMXQzV4h6zO0ROOeYhsAqAgYMB /uNIm7JrbTeEJMWqO3oC6xrkaaDBJ5H7S3IIHqqTo6Nj0zHDdllzs8Trhk23gBRT 2x3NaRWBVMARjMlqEPJs54KAFc35SfOG9zfAL/80ScdFX6PULE6cKQQD+6Js/7Rj tRPGRT90eGHg0o+kxS8djvB2ZvH+gLYj+diiBkQQ7+Fda4fZZV9HXwaD1quzhfRY rJHaOk1Xwm6kv6cJrAN6rQj4y/ieb/itniRuXIke/Hr6NO9uSEk5IQWLkgETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGgUenNURCp78Vma7vbE+iscVOrowHwYDVR0j BBgwFoAU2EsCCSzZ+vSHt//oo84kXhUygXswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I3NWJmZDAtYTg2Yy00YmViLTlmOTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDky Q0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUxNTMyODE3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODRCMDIwOTJDRDlGQUY0ODdCN0ZGRThBM0NFMjQ1RTE1MzI4 MTdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0 NUUxNTMyODE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqJ/KNeoDOJjwKaRSvtqhEXbID9bQtE17Ce HUAxB14dB/Yf4JkBsUWsL6T3A3edo18g/BZsFMKaZfIrBvt6EMZ6nWBMMpRp0CwY zoplP2Ab/vcCHudeQCw/BjTYFNHK8iMOqin9iYDNpPsoC1nB7IC5zgjJ+iY/q9Dc 61I4Ep+UDjJ1TZBirdWFpD3Q7YO5ohjh9qUqECFaYoLpUoWLdawPXv7PLhL8jWZh 0YtgUXTpknOad9ySZn3M86jA353rEiDIyPcZEhGxHMEZvRmtoZ1tH32JnIW+F1SG kqpJZbmYlaZvTZLiDc8lVEXMzwJIgj5Uo+EvV3IwL3C1Ud680RI= -----END CERTIFICATE-----Generated at Wed Jun 17 11:49:09 2026 by rpki-client