$ rpki-client -vvf rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft File: 1423B36DE1705432D7FAC72E76D94A011FDE2748.mft (raw, json) Hash identifier: MBbtY58pQDRNgMfhwxfiiOZ8GBmDAuuXjsjugRhagTc= Subject key identifier: 3F:50:BE:72:2D:D8:7A:DE:EB:DE:2F:73:A1:6C:3E:C7:03:9A:86:C1 Authority key identifier: 14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48 Certificate issuer: /CN=1423B36DE1705432D7FAC72E76D94A011FDE2748 Certificate serial: 525DF595C11D815802C75C91D7F68E775F6D7EC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:28:36 +0000 Manifest this update: Wed 17 Jun 2026 00:23:36 +0000 Manifest next update: Thu 18 Jun 2026 00:55:36 +0000 Files and hashes: 1: 1423B36DE1705432D7FAC72E76D94A011FDE2748.crl (hash: oEck+v6YOFaSKsR2INPHY/Kmd6TQJYJuoCx8xZW3l2I=) 2: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: cCEW6l1CmmQEDb9CwJ4tPNqGxyEaPxiJZinIbOgsV2E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5d:f5:95:c1:1d:81:58:02:c7:5c:91:d7:f6:8e:77:5f:6d:7e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1423B36DE1705432D7FAC72E76D94A011FDE2748 Validity Not Before: Jun 17 00:23:36 2026 GMT Not After : Jun 18 00:55:36 2026 GMT Subject: CN=3F50BE722DD87ADEEBDE2F73A16C3EC7039A86C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:b2:0d:33:9a:36:19:b2:98:2c:02:c7:e7: eb:61:3a:be:3b:55:82:9b:ca:5a:18:96:84:93:1c: db:37:8e:5c:5d:57:3d:06:0b:da:0c:de:c9:fc:b8: 3e:5d:a4:8b:12:5a:9e:78:03:42:aa:cc:65:a9:a3: 2e:6c:94:30:78:02:7a:ea:fc:1a:c6:1d:10:2b:ac: ba:5b:71:cc:ed:87:fa:17:5a:0b:5c:13:5a:a5:fe: 00:a4:dd:ab:6b:a6:09:f1:40:ae:8a:a0:5f:49:63: 19:23:85:32:27:cc:fa:5f:31:fe:97:e3:49:e3:50: a3:d4:e0:bd:bf:42:f5:95:26:59:8c:41:a8:ed:54: 44:7a:7b:00:8f:dd:45:72:a8:be:36:50:b2:1d:9d: e0:e5:9b:7a:e6:47:3c:f9:c4:89:9b:7b:d3:16:89: ab:fb:41:76:c8:55:ef:a8:0f:84:6f:e1:af:98:3a: a8:19:82:eb:d1:e6:57:2d:52:b3:3e:0c:e1:9e:1a: e1:5f:76:d9:f7:66:27:92:c3:eb:5c:25:21:f9:06: 12:f2:20:55:bb:80:38:cc:dd:6f:17:ae:c2:f5:a9: 19:ba:03:4b:c2:74:e8:c2:73:26:1c:8d:21:78:6d: 70:e8:03:2f:1c:54:ab:97:6c:c4:77:3e:1c:d4:ad: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:50:BE:72:2D:D8:7A:DE:EB:DE:2F:73:A1:6C:3E:C7:03:9A:86:C1 X509v3 Authority Key Identifier: keyid:14:23:B3:6D:E1:70:54:32:D7:FA:C7:2E:76:D9:4A:01:1F:DE:27:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1423B36DE1705432D7FAC72E76D94A011FDE2748.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/1423B36DE1705432D7FAC72E76D94A011FDE2748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cb:0d:a2:96:39:98:32:8d:20:da:c9:27:fb:36:c8:8a:e0: 70:ec:f6:b4:d8:01:06:86:eb:c9:91:aa:02:f1:0e:b9:41:2a: 4e:f5:0e:02:99:d2:8c:fd:a4:53:89:5e:d7:12:e3:9c:a7:45: 48:06:e6:a7:72:b4:79:ee:c7:c3:0e:6d:34:41:00:5f:0d:de: 29:c4:e2:16:df:bf:ac:16:7d:69:8e:ce:f7:07:ab:ad:ea:6a: 3a:34:06:c4:5c:aa:0d:c0:6f:79:65:1b:46:fd:7e:9b:e4:a5: 58:f7:c5:0d:67:03:61:cb:fd:ac:cd:5c:1e:8c:81:16:4f:7e: b3:69:4e:89:c6:59:4a:3f:0c:58:50:5d:ae:76:a1:79:92:49: 65:a8:d6:97:29:e2:0d:ca:6a:6a:f7:55:24:97:90:33:53:78: 09:49:12:3c:7e:b8:fe:32:af:bf:de:53:76:2a:e2:c6:da:87: b5:3f:b4:02:83:3f:b4:bb:82:e2:e1:f7:5a:3b:e4:03:cd:2b: ad:27:dc:d5:e1:0c:68:28:3d:5b:4b:f8:58:e0:21:8b:63:50: a0:a4:cb:0f:2d:7b:4a:13:48:e2:97:84:dc:69:a5:2e:47:4c: 86:a9:96:f0:20:cf:f1:fc:63:c7:61:b6:3f:96:16:17:fa:3e: 1e:19:5e:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUl31lcEdgVgCx1yR1/aOd19tfskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyM0IzNkRFMTcwNTQzMkQ3RkFDNzJFNzZEOTRBMDEx RkRFMjc0ODAeFw0yNjA2MTcwMDIzMzZaFw0yNjA2MTgwMDU1MzZaMDMxMTAvBgNV BAMTKDNGNTBCRTcyMkREODdBREVFQkRFMkY3M0ExNkMzRUM3MDM5QTg2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJLINM5o2GbKYLALH5+thOr47 VYKbyloYloSTHNs3jlxdVz0GC9oM3sn8uD5dpIsSWp54A0KqzGWpoy5slDB4Anrq /BrGHRArrLpbcczth/oXWgtcE1ql/gCk3atrpgnxQK6KoF9JYxkjhTInzPpfMf6X 40njUKPU4L2/QvWVJlmMQajtVER6ewCP3UVyqL42ULIdneDlm3rmRzz5xImbe9MW iav7QXbIVe+oD4Rv4a+YOqgZguvR5lctUrM+DOGeGuFfdtn3ZieSw+tcJSH5BhLy IFW7gDjM3W8XrsL1qRm6A0vCdOjCcyYcjSF4bXDoAy8cVKuXbMR3PhzUrYt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP1C+ci3Yet7r3i9zoWw+xwOahsEwHwYDVR0j BBgwFoAUFCOzbeFwVDLX+scudtlKAR/eJ0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY1MDZlNzItOGI4Ny00NzAxLWEzNjAtYWViZTI1ODQ4ZjcxLzAvMTQyM0IzNkRF MTcwNTQzMkQ3RkFDNzJFNzZEOTRBMDExRkRFMjc0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNDIzQjM2REUxNzA1NDMyRDdGQUM3MkU3NkQ5NEEwMTFGREUy NzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMTQyM0IzNkRFMTcwNTQzMkQ3RkFDNzJFNzZEOTRB MDExRkRFMjc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDLDaKWOZgyjSDaySf7NsiK4HDs9rTYAQaG 68mRqgLxDrlBKk71DgKZ0oz9pFOJXtcS45ynRUgG5qdytHnux8MObTRBAF8N3inE 4hbfv6wWfWmOzvcHq63qajo0BsRcqg3Ab3llG0b9fpvkpVj3xQ1nA2HL/azNXB6M gRZPfrNpTonGWUo/DFhQXa52oXmSSWWo1pcp4g3Kamr3VSSXkDNTeAlJEjx+uP4y r7/eU3Yq4sbah7U/tAKDP7S7guLh91o75APNK60n3NXhDGgoPVtL+FjgIYtjUKCk yw8te0oTSOKXhNxppS5HTIaplvAgz/H8Y8dhtj+WFhf6Ph4ZXsA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:23 2026 by rpki-client