$ rpki-client -vvf rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft File: D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft (raw, json) Hash identifier: 7Eem+KbuajWaI2klX8BT+PMEdWwuGW2INK2+vCyVj0A= Subject key identifier: 4F:5E:56:FC:C3:02:F8:58:A1:9E:2D:39:D8:17:BD:7B:9E:51:2C:3C Authority key identifier: D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 Certificate issuer: /CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Certificate serial: 6DE21EA785D8394315E126B078C9965455E8A765 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:04:50 +0000 Manifest this update: Tue 16 Jun 2026 16:59:50 +0000 Manifest next update: Wed 17 Jun 2026 18:47:50 +0000 Files and hashes: 1: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: JR5WOntI+i6T1zRjrN8zT02s0LTFAvw0fmSCSLj0TTI=) 2: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: P8+4V5z096Waggp484U08aSEWnvYMzfn2QuEGNZcw6k=) 3: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: AqPDvu5wMH9hSXVjD2VnKUqfXyX3eZeH2kklyZn/LgU=) 4: D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl (hash: eDiibgau3vTHW0yxKN693d+wfDxDW/pa/1TAcB1KfLM=) 5: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: UDtR/bmcoGQ4Qjq+Iq2hw3T7b2QXxyjMcOZO/xAMlNY=) 6: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: jPAnnqmUSZKCOHdAErpqklofojiM1qCv7SQs+xi8fCw=) 7: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: E6tR5JFlnt4a2SDzp1URSec/UvlgqLYhcsF8yth51R4=) 8: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: dQq3t9CHCoAGrdXvawfKbXrrABW3jl6jI9yPO4Api+E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e2:1e:a7:85:d8:39:43:15:e1:26:b0:78:c9:96:54:55:e8:a7:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Validity Not Before: Jun 16 16:59:50 2026 GMT Not After : Jun 17 18:47:50 2026 GMT Subject: CN=4F5E56FCC302F858A19E2D39D817BD7B9E512C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:a5:43:ba:53:39:7d:c3:29:77:4b:9d:5e: dd:fe:ea:b8:9a:f1:54:b5:e3:b7:3e:4f:6d:a5:16: e7:f2:2c:7f:7d:60:92:53:34:3f:a4:15:7b:1b:89: cc:ef:9e:fe:3d:4d:f6:9f:c4:d2:b6:85:01:86:95: 3f:72:ab:e7:ba:ef:91:de:fa:d2:cd:0e:a8:64:4c: 52:61:9a:ce:76:89:4a:a0:cd:4d:0c:fe:b4:e5:01: 82:31:a2:5e:22:e4:50:2c:2b:2e:0c:5c:45:03:1e: 22:ff:ca:24:da:d2:54:b6:7f:3a:5a:02:c7:e3:ae: 74:46:55:84:17:f7:1b:85:c3:aa:49:66:4a:1d:27: b7:35:d9:f8:ba:d9:78:06:e7:7e:ba:a4:8c:a8:2e: d4:49:0a:8e:74:6c:3f:4c:35:0a:e2:fc:69:df:f6: 25:b4:92:76:af:24:dc:a2:a3:14:36:3c:2a:cc:0a: 17:96:14:67:a2:ed:d1:86:a2:53:9b:75:6e:74:87: 19:e9:14:7b:bb:07:34:25:aa:3b:1c:bb:bc:80:cc: 05:0e:bb:63:f7:d3:88:95:d6:56:c1:55:71:f0:33: 69:64:43:a7:01:7e:13:87:9d:7a:6f:1e:b7:ae:48: 14:9f:83:13:b3:3d:15:70:a0:6f:64:ae:a9:d1:88: cf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5E:56:FC:C3:02:F8:58:A1:9E:2D:39:D8:17:BD:7B:9E:51:2C:3C X509v3 Authority Key Identifier: keyid:D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:55:30:c3:f6:11:05:59:8c:89:53:8c:db:61:ed:db:fe:cc: be:96:72:b3:23:9f:9d:15:ae:02:94:d3:80:2c:e5:56:7f:81: 56:42:62:88:9a:74:32:77:34:b3:e8:fe:a5:97:54:7d:32:29: b1:de:e0:c8:6c:2a:fb:76:d2:48:8b:14:da:d4:40:ce:db:fb: a3:04:07:59:49:91:dc:be:b0:22:a0:f8:ce:85:01:ed:5b:b2: 70:29:c4:2e:52:53:ab:4b:25:2f:b9:bb:ff:d9:9f:87:23:83: 3e:60:5e:87:1c:d2:a8:ea:59:38:37:1b:c2:1b:19:51:66:0b: 7e:0a:20:10:ab:46:ef:34:c4:bb:73:9c:dc:51:b4:f2:48:59: 57:65:28:42:29:4f:2d:10:38:e4:c0:22:d8:fa:39:bb:4e:29: 2e:22:b6:12:3c:0e:67:15:87:e9:a2:41:0c:0b:e6:c6:8c:4b: ec:b9:36:fa:4b:f5:1e:43:d2:d2:c5:bb:37:7d:f6:af:a0:51: 17:5d:f1:cc:35:36:10:b5:4b:7a:a0:25:e5:64:d4:71:74:31: dd:39:8d:4d:94:4f:c3:7b:4e:93:e8:69:49:22:8d:25:69:d5: 6e:bb:27:ac:62:3d:00:e6:82:25:d4:46:35:2d:0f:21:d2:ff: 2d:2d:62:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbeIep4XYOUMV4SaweMmWVFXop2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0 NjFFMUJGOTAeFw0yNjA2MTYxNjU5NTBaFw0yNjA2MTcxODQ3NTBaMDMxMTAvBgNV BAMTKDRGNUU1NkZDQzMwMkY4NThBMTlFMkQzOUQ4MTdCRDdCOUU1MTJDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80KVDulM5fcMpd0udXt3+6ria 8VS147c+T22lFufyLH99YJJTND+kFXsbiczvnv49TfafxNK2hQGGlT9yq+e675He +tLNDqhkTFJhms52iUqgzU0M/rTlAYIxol4i5FAsKy4MXEUDHiL/yiTa0lS2fzpa AsfjrnRGVYQX9xuFw6pJZkodJ7c12fi62XgG5366pIyoLtRJCo50bD9MNQri/Gnf 9iW0knavJNyioxQ2PCrMCheWFGei7dGGolObdW50hxnpFHu7BzQlqjscu7yAzAUO u2P304iV1lbBVXHwM2lkQ6cBfhOHnXpvHreuSBSfgxOzPRVwoG9krqnRiM/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT15W/MMC+Fihni052Be9e55RLDwwHwYDVR0j BBgwFoAU2D1uOjRJYNkeEIhKoc7jo0YeG/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDlkYTdiNmEtNGUxYS00MWZmLWI4ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0Ez NDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0NjFFMUJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODNENkUzQTM0NDk2MEQ5MUUxMDg4NEFBMUNFRTNBMzQ2MUUx QkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUz QTM0NjFFMUJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBVMMP2EQVZjIlTjNth7dv+zL6WcrMjn50V rgKU04As5VZ/gVZCYoiadDJ3NLPo/qWXVH0yKbHe4MhsKvt20kiLFNrUQM7b+6ME B1lJkdy+sCKg+M6FAe1bsnApxC5SU6tLJS+5u//Zn4cjgz5gXocc0qjqWTg3G8Ib GVFmC34KIBCrRu80xLtznNxRtPJIWVdlKEIpTy0QOOTAItj6ObtOKS4ithI8DmcV h+miQQwL5saMS+y5NvpL9R5D0tLFuzd99q+gURdd8cw1NhC1S3qgJeVk1HF0Md05 jU2UT8N7TpPoaUkijSVp1W67J6xiPQDmgiXURjUtDyHS/y0tYvo= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:13 2026 by rpki-client