$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft File: C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft (raw, json) Hash identifier: UzPuEnwgu6OKZg6Z3LGYtZ10+X8alv5Dy3Bx7wWwJpk= Subject key identifier: 5C:62:5D:C3:F6:DB:AF:FB:0E:B6:F3:7A:63:50:F5:41:3B:05:30:D1 Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F Certificate issuer: /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Certificate serial: 5ED1D13D27F0D6776B0DC681136C8DA31B8FB11A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:37:04 +0000 Manifest this update: Wed 17 Jun 2026 07:32:04 +0000 Manifest next update: Thu 18 Jun 2026 08:36:04 +0000 Files and hashes: 1: 3230322e39332e32362e302f32342d3234203d3e203233393532.roa (hash: wkOR/tKRFg1S67lRSPwTcy9/cVjDL9uk2HigWHRxfeU=) 2: C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl (hash: 4aD4pHgMx4bo+7vrc3YGjSB2m4yr0oc8Ed6bEDA6s+Y=) 3: 3230322e39332e32392e302f32342d3234203d3e203233393532.roa (hash: Omke75z/uNaQobGnfXKQ3d9K7J2R9/Q2eOXtQtif9WU=) 4: 3230322e39332e32352e302f32342d3234203d3e203233393532.roa (hash: XDcl778T4rloVqTTjGoVuGMqfUdN427riMbFlonBX50=) 5: 3230322e39332e32342e302f32342d3234203d3e203233393532.roa (hash: 13PIyETCXWDo1Gv/U6Oaqwz2KRpjJgPdWNVs0uRPBXw=) 6: 3230322e39332e33302e302f32342d3234203d3e203233393532.roa (hash: bpztS81zV/NNGiXHgumEn+WH+G0wv++4rGgXBHGkvA4=) 7: 3230322e39332e32372e302f32342d3234203d3e203233393532.roa (hash: XriecMPCY4alQrxwYsfldyREke/eGKRNr/vElamRFhc=) 8: 3230322e39332e32342e302f32312d3231203d3e203233393532.roa (hash: 3DKoXwBAcS+jAgG56so/w0LfTxjXkoMotMqExXI7Hkk=) 9: 3230322e39332e32382e302f32342d3234203d3e203233393532.roa (hash: 9SwaYqrzPZ+NZyn3VVdmOLoMhtVvVQwxxV4EtTxtGy4=) 10: 3230322e39332e33312e302f32342d3234203d3e203233393532.roa (hash: d+9UVCD8niS1faGA61UPoVHLJY0k2w63v+pVMpLKKfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d1:d1:3d:27:f0:d6:77:6b:0d:c6:81:13:6c:8d:a3:1b:8f:b1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Validity Not Before: Jun 17 07:32:04 2026 GMT Not After : Jun 18 08:36:04 2026 GMT Subject: CN=5C625DC3F6DBAFFB0EB6F37A6350F5413B0530D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:36:ba:51:ff:df:e4:7c:54:fd:11:b9:c4: 69:2e:ae:82:e3:d3:54:7f:67:32:33:44:46:f0:f8: 28:12:e7:d1:2f:5c:a5:f3:3b:ce:ae:62:a2:8a:27: 17:87:ad:da:69:d3:51:ce:66:86:5f:3c:10:9e:3f: 06:65:cd:2f:f4:64:fe:45:03:05:02:28:8e:36:91: ea:69:76:92:8e:c6:cc:5a:67:f9:d6:75:e3:4b:bd: 10:77:5e:e5:1c:cd:47:ce:02:e6:30:d8:37:08:01: 34:42:64:0b:d2:8f:3e:d5:4b:80:bd:e5:86:4b:df: 90:3e:bc:34:a9:69:bf:b2:3d:a3:cb:9c:e0:a0:e2: c0:03:8e:f7:02:42:4e:18:49:70:57:60:f9:e3:a7: eb:86:99:41:be:84:d8:19:88:db:48:0a:e7:23:51: 5e:43:46:6c:34:95:02:27:69:74:43:af:59:15:fa: 67:04:73:4f:f4:ee:fb:50:d5:5f:df:c2:f0:9d:e4: 85:d2:56:0a:9d:06:26:d8:43:95:c2:44:84:40:61: d1:68:50:f4:df:0c:f8:14:b3:e8:9c:68:2c:dd:3b: bb:db:5f:4b:d5:2b:f4:89:b8:6c:0a:d9:c1:b5:a1: 6d:75:d7:ca:3f:de:b2:8c:87:e2:bd:89:1e:d5:fa: 83:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:62:5D:C3:F6:DB:AF:FB:0E:B6:F3:7A:63:50:F5:41:3B:05:30:D1 X509v3 Authority Key Identifier: keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7e:48:a4:88:da:b3:72:71:1e:91:55:88:e4:47:b9:f5:d0: 70:5b:13:46:ed:ee:89:38:82:08:77:39:f9:92:93:db:ce:04: c6:34:bc:15:de:49:2d:ea:ab:87:30:de:e4:c8:cf:f1:e8:c1: 77:f3:ca:f4:da:0a:76:fc:71:02:42:07:e5:5c:7b:0a:97:9b: 47:7e:fb:b2:e9:6b:db:d2:e3:fe:9c:95:71:25:b0:a4:82:82: 69:5a:c8:f7:2c:18:9c:18:37:82:b4:a1:cf:f8:30:68:0d:34: cb:53:82:ec:f1:ab:99:4d:a8:fe:0f:f1:db:ed:7f:29:26:86: 51:ab:82:3c:19:65:09:bf:e7:69:cd:0f:44:55:d4:42:29:c7: 9b:c4:e9:ae:cc:ad:66:e6:94:fe:98:65:fd:cb:75:bb:d3:eb: b0:9f:fb:cc:2b:82:f1:7b:9f:f2:42:d4:7f:1d:85:b4:db:66: 44:9a:ea:4c:c0:2d:2a:90:33:fe:d6:1b:f1:bc:be:4e:8c:26: 82:2e:3b:db:6b:1c:30:b9:2a:f7:07:23:a4:3c:0a:7c:37:40: 44:3d:34:77:c4:68:88:cd:87:4f:19:b1:18:e5:76:ee:27:d7: 02:5c:56:a5:ce:b5:07:7b:41:da:50:1a:c1:aa:99:2c:f9:25: 8f:d0:88:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXtHRPSfw1ndrDcaBE2yNoxuPsRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQx RTU3MEExRjAeFw0yNjA2MTcwNzMyMDRaFw0yNjA2MTgwODM2MDRaMDMxMTAvBgNV BAMTKDVDNjI1REMzRjZEQkFGRkIwRUI2RjM3QTYzNTBGNTQxM0IwNTMwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9eza6Uf/f5HxU/RG5xGkuroLj 01R/ZzIzREbw+CgS59EvXKXzO86uYqKKJxeHrdpp01HOZoZfPBCePwZlzS/0ZP5F AwUCKI42keppdpKOxsxaZ/nWdeNLvRB3XuUczUfOAuYw2DcIATRCZAvSjz7VS4C9 5YZL35A+vDSpab+yPaPLnOCg4sADjvcCQk4YSXBXYPnjp+uGmUG+hNgZiNtICucj UV5DRmw0lQInaXRDr1kV+mcEc0/07vtQ1V/fwvCd5IXSVgqdBibYQ5XCRIRAYdFo UPTfDPgUs+icaCzdO7vbX0vVK/SJuGwK2cG1oW1118o/3rKMh+K9iR7V+oNTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXGJdw/bbr/sOtvN6Y1D1QTsFMNEwHwYDVR0j BBgwFoAUwqkKw2SBoZ7kFLtayqgAJB5XCh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4YWIzZTAtY2E2OC00MmY2LTk4ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2 NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQxRTU3MEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkE5MEFDMzY0ODFBMTlFRTQxNEJCNUFDQUE4MDAyNDFFNTcw QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4 ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAw MjQxRTU3MEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABt+SKSI2rNycR6RVYjkR7n10HBbE0bt7ok4 ggh3OfmSk9vOBMY0vBXeSS3qq4cw3uTIz/HowXfzyvTaCnb8cQJCB+VcewqXm0d+ +7Lpa9vS4/6clXElsKSCgmlayPcsGJwYN4K0oc/4MGgNNMtTguzxq5lNqP4P8dvt fykmhlGrgjwZZQm/52nND0RV1EIpx5vE6a7MrWbmlP6YZf3LdbvT67Cf+8wrgvF7 n/JC1H8dhbTbZkSa6kzALSqQM/7WG/G8vk6MJoIuO9trHDC5KvcHI6Q8Cnw3QEQ9 NHfEaIjNh08ZsRjldu4n1wJcVqXOtQd7QdpQGsGqmSz5JY/QiLw= -----END CERTIFICATE-----Generated at Wed Jun 17 11:50:35 2026 by rpki-client