$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft File: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft (raw, json) Hash identifier: U2b/CGZBq2D8y79yKx5gq0sEf7nKO5pM/mrkzUXyakU= Subject key identifier: 13:99:F8:58:6B:F3:CC:DA:30:FB:15:B1:E8:14:21:D2:75:B3:3F:74 Authority key identifier: DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 Certificate issuer: /CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Certificate serial: 68400825640D9AB8930699062C6B09EF8865FD9D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 03:06:33 +0000 Manifest this update: Wed 17 Jun 2026 03:01:33 +0000 Manifest next update: Thu 18 Jun 2026 05:55:33 +0000 Files and hashes: 1: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl (hash: 066Ms/BMBeAQvNuiShC10teSMQfafp4EfmC+FilVGyM=) 2: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: uFKAqSD6oWq2rEbik7/vRzt6HsV3cf1Z8RYkorvCjFs=) 3: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: lXhYJ0DA1ZPF7j87Xae2VDeesVSyf9L7rCounE/aVVg=) 4: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: 8kH9OYeCGgkpS6ETOYa6DFVI3BcrTxBasG8Wv5iWOP8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:40:08:25:64:0d:9a:b8:93:06:99:06:2c:6b:09:ef:88:65:fd:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Validity Not Before: Jun 17 03:01:33 2026 GMT Not After : Jun 18 05:55:33 2026 GMT Subject: CN=1399F8586BF3CCDA30FB15B1E81421D275B33F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:e0:a4:8c:8c:fc:84:ce:5b:e8:f8:18:14: 47:37:95:8a:8d:6e:4d:48:0a:32:cb:08:a7:7b:7b: b9:c2:6f:55:88:54:3f:a0:19:7b:bc:da:3c:a4:33: 81:cf:6b:2c:3c:07:5a:3e:b6:1e:d6:e1:86:e4:34: a3:3b:16:fe:55:91:0c:b0:b3:fa:c6:0a:2b:7e:c2: b3:f8:84:4a:38:01:99:73:3c:ba:42:7e:d6:98:e2: 24:cf:29:8a:17:87:db:f7:24:29:92:63:44:a1:6b: e8:93:93:56:60:c8:ac:38:fb:33:39:81:c8:9a:58: 27:a1:ca:6e:90:ee:02:55:8e:79:26:3c:96:47:82: af:2d:27:ac:7e:91:6d:e3:aa:90:d5:0e:ab:1c:c4: 30:1b:05:d8:67:39:2b:56:1e:c5:a3:e7:90:dc:70: 9f:33:3d:91:90:46:44:eb:20:ed:e6:41:4e:d9:3f: b6:20:f9:3a:c7:13:d0:f7:3c:1a:69:dd:57:84:fc: 09:2a:ee:27:af:2f:7d:cb:b0:01:ff:a0:29:99:64: 04:ec:de:ba:ec:44:b5:70:f5:64:da:e9:44:0d:80: f5:2b:38:88:3a:9e:d3:47:7f:d1:9a:77:fe:43:35: 3f:a5:47:17:71:07:16:71:04:dd:bc:90:8e:c7:96: f1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:99:F8:58:6B:F3:CC:DA:30:FB:15:B1:E8:14:21:D2:75:B3:3F:74 X509v3 Authority Key Identifier: keyid:DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:44:9f:30:37:21:35:de:bb:0c:0c:e1:64:4e:98:4c:23:93: 0f:2f:15:cb:62:eb:32:9b:5f:95:d3:43:18:26:fc:d4:75:87: ef:1b:97:be:c0:67:4a:7c:e3:05:c0:68:24:bb:0a:52:fc:fd: 48:74:bb:58:ba:e8:8f:4f:e8:c3:ef:06:2d:90:56:ae:86:2c: 01:7a:1b:12:f5:b0:c7:82:7b:c2:6f:4d:8b:56:57:70:39:06: 0a:69:1c:40:47:61:95:10:19:6a:25:a1:d2:56:8c:90:8f:4e: 8b:96:60:6d:d1:a7:28:92:cc:a0:30:99:db:e6:6a:27:3f:0e: 79:6b:81:b8:12:39:d3:dd:ac:e6:8a:8d:71:93:42:b5:36:47: d1:3e:0e:b9:9c:7c:1c:cd:e6:54:53:13:8b:1b:cc:b1:a5:b6: 81:49:6f:43:53:39:fa:6f:d5:c2:bb:5c:33:b2:e3:a2:59:65: 96:a6:7e:f4:b0:4a:ff:49:a7:1b:f8:c0:d8:a4:68:cf:e9:17: 55:fd:e7:2f:04:a6:e7:52:0f:64:fc:a2:9e:69:ab:72:30:00: 42:01:5a:9c:00:ad:50:e0:ca:48:5d:43:6e:dc:ec:91:6a:52: 26:35:95:37:d9:2c:55:46:0f:bc:86:cf:62:9d:f6:f9:e1:99: 4c:18:4f:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaEAIJWQNmriTBpkGLGsJ74hl/Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2QjdG QjZFNEQwOTAeFw0yNjA2MTcwMzAxMzNaFw0yNjA2MTgwNTU1MzNaMDMxMTAvBgNV BAMTKDEzOTlGODU4NkJGM0NDREEzMEZCMTVCMUU4MTQyMUQyNzVCMzNGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJJ+CkjIz8hM5b6PgYFEc3lYqN bk1ICjLLCKd7e7nCb1WIVD+gGXu82jykM4HPayw8B1o+th7W4YbkNKM7Fv5VkQyw s/rGCit+wrP4hEo4AZlzPLpCftaY4iTPKYoXh9v3JCmSY0Sha+iTk1ZgyKw4+zM5 gciaWCehym6Q7gJVjnkmPJZHgq8tJ6x+kW3jqpDVDqscxDAbBdhnOStWHsWj55Dc cJ8zPZGQRkTrIO3mQU7ZP7Yg+TrHE9D3PBpp3VeE/Akq7ievL33LsAH/oCmZZATs 3rrsRLVw9WTa6UQNgPUrOIg6ntNHf9Gad/5DNT+lRxdxBxZxBN28kI7HlvERAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE5n4WGvzzNow+xWx6BQh0nWzP3QwHwYDVR0j BBgwFoAU3PrNBOlHijbwWM0X3g6mt/tuTQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGEwOTlhZGYtN2UxMi00ZTgzLTk1YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRF OTQ3OEEzNkYwNThDRDE3REUwRUE2QjdGQjZFNEQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0ZBQ0QwNEU5NDc4QTM2RjA1OENEMTdERTBFQTZCN0ZCNkU0 RDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2 QjdGQjZFNEQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVEnzA3ITXeuwwM4WROmEwjkw8vFcti6zKb X5XTQxgm/NR1h+8bl77AZ0p84wXAaCS7ClL8/Uh0u1i66I9P6MPvBi2QVq6GLAF6 GxL1sMeCe8JvTYtWV3A5BgppHEBHYZUQGWolodJWjJCPTouWYG3RpyiSzKAwmdvm aic/DnlrgbgSOdPdrOaKjXGTQrU2R9E+DrmcfBzN5lRTE4sbzLGltoFJb0NTOfpv 1cK7XDOy46JZZZamfvSwSv9Jpxv4wNikaM/pF1X95y8EpudSD2T8op5pq3IwAEIB WpwArVDgykhdQ27c7JFqUiY1lTfZLFVGD7yGz2Kd9vnhmUwYT8k= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:56 2026 by rpki-client