$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft File: D713503939D2573A44FA29703CDDCC704F03A75E.mft (raw, json) Hash identifier: DTZAIw11z/e6Dclcku1SHyO399y+JTBRQDIInXhDJ5Q= Subject key identifier: 95:6E:9E:B3:F5:EC:57:7A:EB:B7:20:1B:BE:26:FC:63:48:19:54:42 Authority key identifier: D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E Certificate issuer: /CN=D713503939D2573A44FA29703CDDCC704F03A75E Certificate serial: 0ACA4A72404C8A5727A2C2D40F2BA515E49C2B6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft Manifest number: 3B Signing time: Sun 14 Jun 2026 06:30:44 +0000 Manifest this update: Sun 14 Jun 2026 06:25:44 +0000 Manifest next update: Mon 15 Jun 2026 07:57:44 +0000 Files and hashes: 1: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: GTWGWiGFFFL7qU1osUGFkofRdRSFUHbSkHuzGVb3rSI=) 2: D713503939D2573A44FA29703CDDCC704F03A75E.crl (hash: 3N82fThmf3dLlez3Si/SHsEbjFKSmPS4KzJanj5rWAU=) 3: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: cciT2cLODhuCXSq6f7ZeF3BxK19X9kDtH1Tm4E9hM34=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 07:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ca:4a:72:40:4c:8a:57:27:a2:c2:d4:0f:2b:a5:15:e4:9c:2b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D713503939D2573A44FA29703CDDCC704F03A75E Validity Not Before: Jun 14 06:25:44 2026 GMT Not After : Jun 15 07:57:44 2026 GMT Subject: CN=956E9EB3F5EC577AEBB7201BBE26FC6348195442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:6c:06:fc:07:ba:d0:27:67:d6:e5:26:9d: 5c:7e:2a:4a:9b:94:19:65:7b:1d:30:28:6a:81:ba: 94:43:0b:1b:ed:6f:9c:4b:a7:b8:75:ae:b1:f3:19: 82:8f:9b:ff:0f:f7:d3:ba:07:f2:fa:9b:6b:7e:5a: 44:08:21:fa:b8:8d:24:6a:ef:74:dc:86:39:bd:f9: 03:40:e8:26:bc:1f:6f:62:5e:8a:2d:21:c7:50:4e: 12:01:1c:07:ff:02:1f:03:d0:a7:ec:42:dc:c8:09: 90:6a:32:62:cf:46:6b:59:7e:33:a4:f1:40:5a:7d: 58:38:15:12:30:4b:11:49:77:61:33:21:56:06:27: 52:c3:7a:8e:d9:95:45:75:63:51:60:dd:ae:08:4e: fc:7b:33:47:a4:bd:cb:b8:b8:4a:48:aa:e9:5c:17: b1:d0:ee:f6:af:f8:30:bd:0b:09:b5:40:50:2a:5b: a8:e0:d3:1a:41:88:a8:0e:35:59:61:92:83:ea:e1: 83:8d:90:f7:f2:a5:2b:70:17:7f:56:b8:ea:41:72: 57:7e:71:de:b0:2c:00:e3:38:04:72:88:93:ce:48: 56:4b:e7:cd:2c:50:b7:3a:9a:8e:64:04:5f:90:32: 5c:46:a3:16:5e:c3:19:fa:2d:61:60:54:92:36:45: 3a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6E:9E:B3:F5:EC:57:7A:EB:B7:20:1B:BE:26:FC:63:48:19:54:42 X509v3 Authority Key Identifier: keyid:D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:0b:91:ad:a5:6b:8b:ef:d1:54:db:bf:0f:cd:ec:e5:63:a8: a3:24:53:7b:5b:2c:87:19:b8:f6:b7:a4:16:80:b6:1f:92:fb: fe:f9:f8:b0:15:a9:22:1f:cf:b5:75:78:0d:80:90:46:d4:c7: 09:e7:a5:a7:5b:5b:0d:5d:b2:15:b3:90:91:7f:0f:48:57:35: b3:06:47:9d:72:2b:1e:48:b5:ab:41:5d:3d:97:8f:05:16:fe: 51:8f:e2:29:22:12:9e:c5:46:40:46:5f:c7:01:d1:0a:81:ff: 64:12:6b:e4:62:92:b3:9f:57:68:89:3b:da:f5:d5:3d:49:e3: ac:71:81:01:5d:14:07:b9:5e:f4:fa:89:77:7e:86:2d:73:85: 9e:73:c4:83:31:89:7a:69:f7:73:d6:57:e4:8f:de:f1:6c:2a: 77:4b:92:45:b7:b7:83:ba:d0:7b:c2:32:0d:de:49:23:1f:f4: 18:11:5d:2d:a3:e2:e6:93:2c:2b:84:5b:67:f5:46:f1:08:07: bf:97:d9:2f:45:91:e2:c0:88:c8:62:6d:de:fc:bc:fd:d7:68: 2a:a4:61:0d:cb:2c:af:0a:63:d9:1f:4e:96:1a:1c:03:e3:a6: b0:b9:49:88:af:de:cb:03:b9:6a:9d:d7:e8:09:2a:ff:8e:8b: 63:3b:42:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCspKckBMilcnosLUDyulFeScK24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NERENDNzA0 RjAzQTc1RTAeFw0yNjA2MTQwNjI1NDRaFw0yNjA2MTUwNzU3NDRaMDMxMTAvBgNV BAMTKDk1NkU5RUIzRjVFQzU3N0FFQkI3MjAxQkJFMjZGQzYzNDgxOTU0NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZLmwG/Ae60Cdn1uUmnVx+Kkqb lBllex0wKGqBupRDCxvtb5xLp7h1rrHzGYKPm/8P99O6B/L6m2t+WkQIIfq4jSRq 73Tchjm9+QNA6Ca8H29iXootIcdQThIBHAf/Ah8D0KfsQtzICZBqMmLPRmtZfjOk 8UBafVg4FRIwSxFJd2EzIVYGJ1LDeo7ZlUV1Y1Fg3a4ITvx7M0ekvcu4uEpIqulc F7HQ7vav+DC9Cwm1QFAqW6jg0xpBiKgONVlhkoPq4YONkPfypStwF39WuOpBcld+ cd6wLADjOARyiJPOSFZL580sULc6mo5kBF+QMlxGoxZewxn6LWFgVJI2RTpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlW6es/XsV3rrtyAbvib8Y0gZVEIwHwYDVR0j BBgwFoAU1xNQOTnSVzpE+ilwPN3McE8Dp14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I5MDU3NjYtNDQwZS00YmNiLWFlNzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkz OUQyNTczQTQ0RkEyOTcwM0NERENDNzA0RjAzQTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEzNTAzOTM5RDI1NzNBNDRGQTI5NzAzQ0REQ0M3MDRGMDNB NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NEREND NzA0RjAzQTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgLka2la4vv0VTbvw/N7OVjqKMkU3tbLIcZ uPa3pBaAth+S+/75+LAVqSIfz7V1eA2AkEbUxwnnpadbWw1dshWzkJF/D0hXNbMG R51yKx5ItatBXT2XjwUW/lGP4ikiEp7FRkBGX8cB0QqB/2QSa+RikrOfV2iJO9r1 1T1J46xxgQFdFAe5XvT6iXd+hi1zhZ5zxIMxiXpp93PWV+SP3vFsKndLkkW3t4O6 0HvCMg3eSSMf9BgRXS2j4uaTLCuEW2f1RvEIB7+X2S9FkeLAiMhibd78vP3XaCqk YQ3LLK8KY9kfTpYaHAPjprC5SYiv3ssDuWqd1+gJKv+Oi2M7Qsg= -----END CERTIFICATE-----Generated at Sun Jun 14 10:22:02 2026 by rpki-client