$ rpki-client -vvf rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft File: B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft (raw, json) Hash identifier: aGsa2ANQZEsekGmIiAofgUQL5f3+CQVMXZNJ69ZbJZI= Subject key identifier: D7:96:A1:03:D9:52:9F:52:0A:EA:E6:80:A3:81:EE:97:07:57:E5:1F Authority key identifier: B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA Certificate issuer: /CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Certificate serial: 2804FFE70C7A17F3EA3E799E7C78AB69151609B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:26:22 +0000 Manifest this update: Tue 16 Jun 2026 18:21:22 +0000 Manifest next update: Wed 17 Jun 2026 22:05:22 +0000 Files and hashes: 1: B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl (hash: 8Lq36Hq2R0Zv7VPNIHQVa0YpJymUL2AO2hBRC7loNk4=) 2: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ZyMegzYLPmuWd/ikDAjq3H75TE6NMvhpUlSw0zwrA5M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:04:ff:e7:0c:7a:17:f3:ea:3e:79:9e:7c:78:ab:69:15:16:09:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Validity Not Before: Jun 16 18:21:22 2026 GMT Not After : Jun 17 22:05:22 2026 GMT Subject: CN=D796A103D9529F520AEAE680A381EE970757E51F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:2a:40:84:36:e1:a4:e5:7e:d6:95:96:70: 0e:30:c2:c3:21:61:ce:48:11:f5:d0:e4:af:4e:a0: 4d:13:86:42:67:6f:08:ee:d6:a8:d7:d2:57:e8:3c: 2e:01:a0:9d:58:fb:7d:43:ac:9d:3e:a3:75:b3:62: 16:c8:c9:83:09:53:64:35:d9:f2:7c:71:8d:a5:e7: eb:b1:8f:c5:18:c1:79:dc:b8:04:fe:89:e6:fb:2a: 25:1f:f3:4f:d2:bb:62:2a:46:74:53:7e:89:cc:4f: ea:98:5f:ec:06:f7:71:a2:9f:61:34:89:12:ee:7a: 6b:cb:ce:25:23:71:91:bd:da:7e:e3:56:ae:03:10: 88:48:c3:18:95:dc:9a:02:d1:dc:c1:d0:2e:cd:fa: 2e:20:9d:49:d2:4c:ce:b1:cf:0a:a0:7b:a9:97:af: 5a:4f:49:bf:55:61:0a:cd:2b:3a:58:03:99:90:e3: b1:cc:61:f5:a0:18:b3:fc:71:fa:af:e2:84:2a:e6: f6:02:44:9f:f2:da:93:f9:4b:fa:25:63:ef:14:8b: e8:6f:a9:05:66:9f:e0:ad:7f:51:bb:11:3b:ce:f3: 44:21:74:12:d0:2b:1b:36:4b:5a:52:25:32:07:80: a9:76:c5:b9:08:3f:8e:38:a5:ac:15:ba:1a:ae:9f: 8a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:96:A1:03:D9:52:9F:52:0A:EA:E6:80:A3:81:EE:97:07:57:E5:1F X509v3 Authority Key Identifier: keyid:B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:07:a5:39:5c:ae:3f:9e:77:eb:8b:ea:58:0b:4a:10:28:4f: a4:8a:d3:25:39:e2:a3:bb:94:be:e9:f2:99:18:6b:cd:88:ce: d3:53:62:7a:7c:4b:28:90:42:57:23:39:0d:41:d5:68:be:35: 67:37:50:b3:79:f7:03:58:d0:4c:b3:39:75:48:73:07:34:a2: ef:86:e0:70:56:75:6d:46:27:11:3f:df:02:13:48:67:34:5e: 55:89:99:c7:a9:04:ac:ae:af:68:6a:c9:ab:c1:21:93:3c:87: 92:ff:7b:53:22:91:5a:19:ba:d9:ac:3b:1b:d1:6d:7f:59:87: db:e7:39:d9:8a:b3:8b:da:d3:8d:c1:51:13:fc:06:53:a6:c6: 38:4b:49:93:8c:cc:51:b6:4b:71:67:2c:23:59:a8:55:00:4e: 96:75:9c:db:31:be:41:61:97:07:87:48:ff:f1:a8:1c:90:33: 40:cf:ae:3a:9e:e4:be:c7:fd:c5:8e:5a:e0:88:be:86:ea:ed: 85:37:29:48:63:d5:51:47:9c:55:0b:4a:86:d2:90:90:6f:f4: 10:a9:10:2f:b7:72:de:ad:dc:a8:78:f9:31:42:21:b5:3f:c2: 3f:eb:4e:ce:b4:19:bf:b7:ee:ed:90:80:c5:14:33:1d:77:97: f9:0c:ba:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKAT/5wx6F/PqPnmefHiraRUWCbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIw MDQ5NUJGQTAeFw0yNjA2MTYxODIxMjJaFw0yNjA2MTcyMjA1MjJaMDMxMTAvBgNV BAMTKEQ3OTZBMTAzRDk1MjlGNTIwQUVBRTY4MEEzODFFRTk3MDc1N0U1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjoypAhDbhpOV+1pWWcA4wwsMh Yc5IEfXQ5K9OoE0ThkJnbwju1qjX0lfoPC4BoJ1Y+31DrJ0+o3WzYhbIyYMJU2Q1 2fJ8cY2l5+uxj8UYwXncuAT+ieb7KiUf80/Su2IqRnRTfonMT+qYX+wG93Gin2E0 iRLuemvLziUjcZG92n7jVq4DEIhIwxiV3JoC0dzB0C7N+i4gnUnSTM6xzwqge6mX r1pPSb9VYQrNKzpYA5mQ47HMYfWgGLP8cfqv4oQq5vYCRJ/y2pP5S/olY+8Ui+hv qQVmn+Ctf1G7ETvO80QhdBLQKxs2S1pSJTIHgKl2xbkIP444pawVuhqun4p3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU15ahA9lSn1IK6uaAo4HulwdX5R8wHwYDVR0j BBgwFoAUs4mo0u4YHXU+l6jPXXQoSwBJW/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc5NGZmZDItNDU3Mi00NTUzLTlhMzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJF RTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIwMDQ5NUJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzg5QThEMkVFMTgxRDc1M0U5N0E4Q0Y1RDc0Mjg0QjAwNDk1 QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4 NEIwMDQ5NUJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgHpTlcrj+ed+uL6lgLShAoT6SK0yU54qO7 lL7p8pkYa82IztNTYnp8SyiQQlcjOQ1B1Wi+NWc3ULN59wNY0EyzOXVIcwc0ou+G 4HBWdW1GJxE/3wITSGc0XlWJmcepBKyur2hqyavBIZM8h5L/e1MikVoZutmsOxvR bX9Zh9vnOdmKs4va043BURP8BlOmxjhLSZOMzFG2S3FnLCNZqFUATpZ1nNsxvkFh lweHSP/xqByQM0DPrjqe5L7H/cWOWuCIvobq7YU3KUhj1VFHnFULSobSkJBv9BCp EC+3ct6t3Kh4+TFCIbU/wj/rTs60Gb+37u2QgMUUMx13l/kMugU= -----END CERTIFICATE-----Generated at Wed Jun 17 11:50:29 2026 by rpki-client