$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft File: 7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft (raw, json) Hash identifier: 2aiYZqDkgE9ZYBwU+qdvO1kyWIgoXSdeTsSkUeHWJXo= Subject key identifier: B2:63:AD:3C:2C:2D:53:73:9B:98:9F:B0:66:3D:B7:3E:2E:59:D9:83 Authority key identifier: 7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 Certificate issuer: /CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Certificate serial: 60DF66D5D4CE87115D7F83CB4FC4442811D852AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:28:12 +0000 Manifest this update: Wed 17 Jun 2026 04:23:12 +0000 Manifest next update: Thu 18 Jun 2026 06:31:12 +0000 Files and hashes: 1: 7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl (hash: OZnRkTAfQ2qtqgJBOW3NmT8WRkBAFom83etLOcbd9DU=) 2: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: XAlXWmMjaTIgPpDDe6g4p0/8EhTXLUGxpCwgLN6Nis0=) 3: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: zpN+ZUQARf85utjXtSfFSa/KkTvAdeU606KS8jCMD5U=) 4: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: Gp5/rWdRIu6ScqVU154gXkTtG4fAxGJvRR3MmRVopqg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:df:66:d5:d4:ce:87:11:5d:7f:83:cb:4f:c4:44:28:11:d8:52:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Validity Not Before: Jun 17 04:23:12 2026 GMT Not After : Jun 18 06:31:12 2026 GMT Subject: CN=B263AD3C2C2D53739B989FB0663DB73E2E59D983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7d:0e:50:eb:f4:3b:5d:88:28:ab:fd:dd:21: 6a:8d:92:6d:61:8d:0e:f4:9a:80:f1:89:b9:7f:05: ae:6f:29:a9:a9:50:6d:2e:77:1a:f6:d0:9a:8b:30: 37:10:13:f9:f6:fe:34:4f:37:89:aa:20:55:3f:8a: 36:82:3c:98:6a:4d:9d:1a:22:a7:b0:e8:8b:45:62: 22:ff:7e:45:a0:9d:2c:3c:9f:46:4d:47:6d:0f:a6: cf:44:56:1a:fa:55:4a:5d:34:2b:3c:3b:6b:46:e0: 19:a2:78:87:f9:55:23:fa:3a:08:c0:df:9a:48:35: 17:eb:48:1f:21:19:fc:d7:db:9b:37:89:8f:11:d4: 4b:c0:6a:23:02:dd:f0:79:37:5a:d0:0e:55:c8:f7: fe:d5:d6:7e:89:88:bc:73:bc:eb:61:1e:2c:1c:e9: 8b:76:8c:6e:2f:b4:9a:fd:8b:e5:dc:62:3e:1e:81: b9:88:3b:3c:cb:10:af:c2:a5:c7:cb:dc:8d:3a:82: 35:c8:18:c3:41:3e:4f:7a:f9:f8:9f:01:d5:34:b9: b5:c3:8f:b7:03:7e:bd:58:7f:46:b8:03:97:a7:9c: 28:8f:15:ae:29:09:18:ab:56:03:e7:5f:4c:95:d4: 8a:7c:55:31:7b:47:8e:22:63:1d:8c:ce:01:3b:f1: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:63:AD:3C:2C:2D:53:73:9B:98:9F:B0:66:3D:B7:3E:2E:59:D9:83 X509v3 Authority Key Identifier: keyid:7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:54:41:84:3c:63:7b:ca:44:eb:7a:00:8c:3e:c2:22:e9:10: d6:98:fc:2e:08:44:16:8e:6c:76:59:ff:c2:32:d7:37:fd:0b: ed:5c:c3:41:01:e5:bb:d8:77:6e:5a:c1:bb:c5:1c:a9:64:18: fd:4b:40:09:a3:80:02:d0:67:27:8a:9f:59:0b:39:4a:ee:30: 7e:db:cf:a2:ac:f3:db:bb:2b:43:d0:16:6c:dd:80:05:3b:5f: c4:66:d9:99:09:98:d0:89:c0:84:f7:cc:11:98:d7:1a:7b:82: d8:02:54:1a:1c:14:87:cd:0a:aa:de:fc:1c:43:0a:84:ca:6f: 26:04:38:59:87:9e:e6:19:3c:97:04:8e:30:d4:40:0a:ff:4a: 24:77:f0:b4:63:86:6a:54:41:51:86:cb:2b:fe:c6:dc:0e:5a: 45:d5:e9:d9:79:9c:5c:cb:25:eb:64:89:ea:e6:7e:2f:b8:47: 9e:c7:24:35:05:73:ed:a7:41:08:6a:d6:7e:f9:f0:55:c7:dd: 7c:ff:db:58:a8:58:ee:0b:7b:f6:3b:0c:7e:d4:39:90:91:32: 5c:4c:a9:6b:1d:30:31:2e:2b:e9:1c:4a:f4:a0:31:43:3b:b3: 16:e2:2c:f8:1a:01:82:8f:3a:b7:fc:1e:61:97:df:45:7a:0a: 41:ec:12:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYN9m1dTOhxFdf4PLT8REKBHYUq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2 QkM2NUVFNDAeFw0yNjA2MTcwNDIzMTJaFw0yNjA2MTgwNjMxMTJaMDMxMTAvBgNV BAMTKEIyNjNBRDNDMkMyRDUzNzM5Qjk4OUZCMDY2M0RCNzNFMkU1OUQ5ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRfQ5Q6/Q7XYgoq/3dIWqNkm1h jQ70moDxibl/Ba5vKampUG0udxr20JqLMDcQE/n2/jRPN4mqIFU/ijaCPJhqTZ0a Iqew6ItFYiL/fkWgnSw8n0ZNR20Pps9EVhr6VUpdNCs8O2tG4BmieIf5VSP6OgjA 35pINRfrSB8hGfzX25s3iY8R1EvAaiMC3fB5N1rQDlXI9/7V1n6JiLxzvOthHiwc 6Yt2jG4vtJr9i+XcYj4egbmIOzzLEK/CpcfL3I06gjXIGMNBPk96+fifAdU0ubXD j7cDfr1Yf0a4A5ennCiPFa4pCRirVgPnX0yV1Ip8VTF7R44iYx2MzgE78TP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsmOtPCwtU3ObmJ+wZj23Pi5Z2YMwHwYDVR0j BBgwFoAUer0r4gn84qNvo+XNhkv3D2vGXuQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M0N2VmNWMtNWJiYS00Y2QxLThkYzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIw OUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2QkM2NUVFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUJEMkJFMjA5RkNFMkEzNkZBM0U1Q0Q4NjRCRjcwRjZCQzY1 RUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3 MEY2QkM2NUVFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBUQYQ8Y3vKROt6AIw+wiLpENaY/C4IRBaO bHZZ/8Iy1zf9C+1cw0EB5bvYd25awbvFHKlkGP1LQAmjgALQZyeKn1kLOUruMH7b z6Ks89u7K0PQFmzdgAU7X8Rm2ZkJmNCJwIT3zBGY1xp7gtgCVBocFIfNCqre/BxD CoTKbyYEOFmHnuYZPJcEjjDUQAr/SiR38LRjhmpUQVGGyyv+xtwOWkXV6dl5nFzL Jetkiermfi+4R57HJDUFc+2nQQhq1n758FXH3Xz/21ioWO4Le/Y7DH7UOZCRMlxM qWsdMDEuK+kcSvSgMUM7sxbiLPgaAYKPOrf8HmGX30V6CkHsEr4= -----END CERTIFICATE-----Generated at Wed Jun 17 10:40:58 2026 by rpki-client