$ rpki-client -vvf rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft File: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft (raw, json) Hash identifier: iXp0EOLC10hGiPfPjysUJErjLfRsHj+y98k+Ux/OhTI= Subject key identifier: 26:13:4B:23:BC:23:E4:CA:E4:87:46:37:E2:2C:C1:7C:9C:FB:DF:3C Authority key identifier: A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE Certificate issuer: /CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Certificate serial: 72E8C3F184652E6559996CF578EF661BEF81C598 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:31:27 +0000 Manifest this update: Tue 16 Jun 2026 22:26:27 +0000 Manifest next update: Wed 17 Jun 2026 22:39:27 +0000 Files and hashes: 1: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl (hash: 6190IySyf3O9OTttRqydAuo8oHO+1NugW3jxDU8rvCk=) 2: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: aovpUXhtG7nLDYyGx/GHHZuHleB68UHdZ+Sr7i30ntQ=) 3: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: K3OLubUlACzscrRuEaqGQ8Mg86bkVIp+TswVbW3m0Us=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e8:c3:f1:84:65:2e:65:59:99:6c:f5:78:ef:66:1b:ef:81:c5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Validity Not Before: Jun 16 22:26:27 2026 GMT Not After : Jun 17 22:39:27 2026 GMT Subject: CN=26134B23BC23E4CAE4874637E22CC17C9CFBDF3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:0b:d2:c5:8b:02:27:cd:57:99:91:62:1d: 1c:df:cc:4b:19:df:15:4e:a7:20:2f:4f:3c:22:89: 54:0f:dd:0d:60:15:a0:5c:90:93:c9:55:70:80:01: 04:70:86:48:74:0e:f5:c9:26:8f:46:f5:a8:9c:be: dd:64:d5:02:4f:df:da:17:ac:98:d9:44:60:9c:03: 80:4e:41:3a:8f:ae:07:d0:10:a3:d3:f8:62:e9:df: 62:5f:11:de:75:4f:c2:e5:27:28:bb:01:5b:52:ad: e4:15:38:1a:58:9d:59:08:ad:2b:2a:3f:71:5a:af: bd:51:e0:dd:18:55:fe:70:29:60:e7:4d:17:36:51: db:d2:b0:6b:71:88:2c:1a:68:c3:34:7c:c8:15:d7: 21:27:ab:e6:f3:d6:c7:d7:79:61:82:14:7b:e0:39: 4a:67:bd:0d:3d:cd:14:a9:c3:ad:98:7f:03:3d:49: 3a:37:d8:8f:78:32:40:11:38:44:5e:66:d6:cf:5c: b8:cb:b3:df:4c:e2:c4:5e:31:94:86:63:74:7a:b2: 67:c7:a3:9c:b6:2c:0c:f6:db:49:6f:78:2f:71:84: 69:f4:81:cd:81:f8:c1:bc:bf:56:28:6d:89:4c:6f: 5d:c3:4c:45:30:20:32:9e:2a:9c:15:e9:7c:97:cb: bd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:13:4B:23:BC:23:E4:CA:E4:87:46:37:E2:2C:C1:7C:9C:FB:DF:3C X509v3 Authority Key Identifier: keyid:A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:45:f7:af:b3:f8:94:57:02:9c:c4:f0:6d:00:0a:93:a5:7c: 95:d6:95:1c:d6:a6:b8:e7:53:41:f3:2f:5e:ca:7e:a0:a8:62: 1e:ea:51:31:a5:30:6a:6b:73:2b:1d:a8:ec:c9:1d:e1:23:d2: cf:73:c6:ad:37:ce:e1:6c:da:a3:aa:84:ae:2f:5a:de:01:6a: 8a:e5:07:05:0c:30:1b:05:d1:de:f3:97:34:b2:92:55:b3:26: 3f:26:2c:58:3a:4a:d8:72:cf:99:2b:c5:d4:3e:dd:54:35:c6: 0a:eb:0e:92:3f:a4:69:68:24:96:e9:eb:de:55:79:12:aa:69: 18:05:76:53:4f:1a:2f:8a:41:1c:48:cd:9d:63:d2:60:fe:a2: 4b:16:54:03:f7:a9:e5:93:60:29:04:ce:ef:f3:87:d7:ef:d1: e7:d3:b7:7f:0c:d4:e1:6f:12:8d:d1:41:36:1f:64:53:94:73: 0d:2c:9a:72:95:55:cb:88:9e:39:f5:e3:ba:97:80:b4:6c:b7: 48:78:65:73:01:e1:cd:d3:43:1e:23:01:f8:cb:ac:90:03:4e: cf:56:8c:ec:4f:8e:84:78:23:73:6e:e9:b7:97:62:b0:10:a3: cb:3e:bc:ef:ab:b0:f4:38:55:7f:39:89:50:6c:85:06:7b:dd: 7a:06:c4:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcujD8YRlLmVZmWz1eO9mG++BxZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4 QzNDNzlDRTAeFw0yNjA2MTYyMjI2MjdaFw0yNjA2MTcyMjM5MjdaMDMxMTAvBgNV BAMTKDI2MTM0QjIzQkMyM0U0Q0FFNDg3NDYzN0UyMkNDMTdDOUNGQkRGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOgvSxYsCJ81XmZFiHRzfzEsZ 3xVOpyAvTzwiiVQP3Q1gFaBckJPJVXCAAQRwhkh0DvXJJo9G9aicvt1k1QJP39oX rJjZRGCcA4BOQTqPrgfQEKPT+GLp32JfEd51T8LlJyi7AVtSreQVOBpYnVkIrSsq P3Far71R4N0YVf5wKWDnTRc2UdvSsGtxiCwaaMM0fMgV1yEnq+bz1sfXeWGCFHvg OUpnvQ09zRSpw62YfwM9STo32I94MkAROEReZtbPXLjLs99M4sReMZSGY3R6smfH o5y2LAz220lveC9xhGn0gc2B+MG8v1YobYlMb13DTEUwIDKeKpwV6XyXy71TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJhNLI7wj5Mrkh0Y34izBfJz73zwwHwYDVR0j BBgwFoAUo4/fYd/UXo+hySVtvTWmeow8ec4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDdkZjJhZDAtNmU5OS00NGE3LWEwNjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFE RkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4QzNDNzlDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzhGREY2MURGRDQ1RThGQTFDOTI1NkRCRDM1QTY3QThDM0M3 OUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2 N0E4QzNDNzlDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFF96+z+JRXApzE8G0ACpOlfJXWlRzWprjn U0HzL17KfqCoYh7qUTGlMGprcysdqOzJHeEj0s9zxq03zuFs2qOqhK4vWt4Baorl BwUMMBsF0d7zlzSyklWzJj8mLFg6Sthyz5krxdQ+3VQ1xgrrDpI/pGloJJbp695V eRKqaRgFdlNPGi+KQRxIzZ1j0mD+oksWVAP3qeWTYCkEzu/zh9fv0efTt38M1OFv Eo3RQTYfZFOUcw0smnKVVcuInjn147qXgLRst0h4ZXMB4c3TQx4jAfjLrJADTs9W jOxPjoR4I3Nu6beXYrAQo8s+vO+rsPQ4VX85iVBshQZ73XoGxIc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:10:46 2026 by rpki-client