$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft File: B625426C356E15C795153BAD3E2215D65F219A5E.mft (raw, json) Hash identifier: QiR0jc/P8kKvztOFCybeBTEcbztBqFHd5J/TD9AvBKw= Subject key identifier: 13:DE:29:E5:59:17:5A:F8:BE:CD:A1:EB:47:92:C5:9E:E1:8B:73:9D Authority key identifier: B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E Certificate issuer: /CN=B625426C356E15C795153BAD3E2215D65F219A5E Certificate serial: 598948407065007B3E17B02A4BC36409858255C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft Manifest number: 3C Signing time: Mon 15 Jun 2026 06:34:21 +0000 Manifest this update: Mon 15 Jun 2026 06:29:21 +0000 Manifest next update: Tue 16 Jun 2026 06:46:21 +0000 Files and hashes: 1: B625426C356E15C795153BAD3E2215D65F219A5E.crl (hash: jsaXe64KvDMR1++K4HjdqftEo90hu6CkuPjx5EPbVs4=) 2: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: 072PpS8RwhWZ6AW17W786YITh/wBQoWhhmI5PRB/Rfg=) 3: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: yogWy6TCKxhBmgshrPe2hKjITHvdTQkqQBDI5rFuoa0=) 4: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: qLUNvDfC3gbWxd/hHt1Guse9AQpSMZBZKKbyAr0FqSU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:89:48:40:70:65:00:7b:3e:17:b0:2a:4b:c3:64:09:85:82:55:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B625426C356E15C795153BAD3E2215D65F219A5E Validity Not Before: Jun 15 06:29:21 2026 GMT Not After : Jun 16 06:46:21 2026 GMT Subject: CN=13DE29E559175AF8BECDA1EB4792C59EE18B739D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:df:7f:16:36:3e:74:b0:ad:1d:d1:ef:6e: f2:48:1c:aa:73:c5:7e:ed:e1:c7:4f:fe:4e:0a:39: 0e:de:02:ec:fc:2a:b9:d9:be:8f:e5:99:8b:14:50: 86:69:e2:b4:78:e7:5c:22:5e:33:2d:e4:97:18:4d: f2:a3:54:52:05:75:ba:6b:53:ae:1c:73:e2:b9:9f: 50:02:9a:85:8e:70:2f:ba:67:9c:70:ce:f3:5f:bb: a9:23:21:99:1f:84:a9:8e:dd:2e:8c:4c:b0:56:b7: f5:07:22:eb:82:7c:e6:01:44:8e:4d:85:30:02:31: 9e:00:77:07:f3:a8:b7:00:fe:68:6c:f2:72:df:d7: 0c:48:54:52:1d:62:f8:46:7e:f5:17:b0:0f:64:fd: 6d:b6:97:c4:a6:bc:a1:aa:e6:2e:c5:46:9f:71:56: 77:ff:d2:dc:9a:eb:6c:f9:55:8a:fa:d2:8d:3b:c9: d2:07:76:c8:1d:49:b3:d4:18:e5:0e:dd:e4:bf:dd: fa:9d:c8:82:2b:f5:37:9b:99:76:83:47:a1:7b:fc: dc:b4:03:91:dc:5a:51:d2:b0:3f:da:b3:c6:e4:cd: ba:2f:3b:af:4a:ae:57:dc:05:78:85:f5:79:06:2e: 1b:d0:db:7d:12:c9:80:a5:aa:57:a5:75:4c:06:a0: 56:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DE:29:E5:59:17:5A:F8:BE:CD:A1:EB:47:92:C5:9E:E1:8B:73:9D X509v3 Authority Key Identifier: keyid:B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e1:bd:6a:1e:02:c6:b2:26:ce:04:85:96:37:6f:c6:d3:72: aa:74:84:ab:12:c2:bc:6e:0e:a6:e7:65:65:79:ac:3a:79:43: e0:58:aa:bd:2d:61:0a:3f:dc:ca:a9:63:a5:fb:a6:76:2f:0a: 25:30:30:9b:d4:9b:f6:06:89:1a:cf:a4:82:86:fe:43:ca:28: 8c:4c:c5:4f:da:c4:65:0a:a7:37:a7:06:fd:a7:f5:50:8f:70: 3d:4d:4d:1a:d3:ae:19:00:c4:96:dd:26:43:d1:13:08:2b:d5: 4a:92:8f:60:97:e5:c4:df:74:23:21:c1:04:20:14:22:b2:d4: 35:49:b8:8c:a4:6c:85:9f:e4:a7:42:73:b2:76:fd:84:a8:c4: 1e:1e:41:33:e1:09:84:e8:da:d8:75:44:91:85:16:cc:c1:af: 83:c2:2a:52:65:df:e3:21:38:14:d6:45:7f:78:8b:dd:a0:b3: ef:dc:ea:5c:f0:0b:43:98:f8:18:72:55:37:50:3b:83:ed:95: 93:aa:37:7d:c1:9a:f9:b0:ec:d7:d3:66:44:8e:07:bd:3e:91: e9:f6:d1:4b:de:b3:d7:5c:86:b1:79:a3:32:f0:d3:de:02:e4: c2:62:89:69:b5:b8:67:5f:95:06:79:69:18:4e:32:85:b4:41: e0:79:fc:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWYlIQHBlAHs+F7AqS8NkCYWCVcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1 RjIxOUE1RTAeFw0yNjA2MTUwNjI5MjFaFw0yNjA2MTYwNjQ2MjFaMDMxMTAvBgNV BAMTKDEzREUyOUU1NTkxNzVBRjhCRUNEQTFFQjQ3OTJDNTlFRTE4QjczOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtkN9/FjY+dLCtHdHvbvJIHKpz xX7t4cdP/k4KOQ7eAuz8KrnZvo/lmYsUUIZp4rR451wiXjMt5JcYTfKjVFIFdbpr U64cc+K5n1ACmoWOcC+6Z5xwzvNfu6kjIZkfhKmO3S6MTLBWt/UHIuuCfOYBRI5N hTACMZ4AdwfzqLcA/mhs8nLf1wxIVFIdYvhGfvUXsA9k/W22l8SmvKGq5i7FRp9x Vnf/0tya62z5VYr60o07ydIHdsgdSbPUGOUO3eS/3fqdyIIr9TebmXaDR6F7/Ny0 A5HcWlHSsD/as8bkzbovO69KrlfcBXiF9XkGLhvQ230SyYClqleldUwGoFYNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE94p5VkXWvi+zaHrR5LFnuGLc50wHwYDVR0j BBgwFoAUtiVCbDVuFceVFTutPiIV1l8hml4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIwNDgwNjQtODdkZS00ZGU3LWIwYmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMz NTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1RjIxOUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjI1NDI2QzM1NkUxNUM3OTUxNTNCQUQzRTIyMTVENjVGMjE5 QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1 RDY1RjIxOUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/hvWoeAsayJs4EhZY3b8bTcqp0hKsSwrxu DqbnZWV5rDp5Q+BYqr0tYQo/3MqpY6X7pnYvCiUwMJvUm/YGiRrPpIKG/kPKKIxM xU/axGUKpzenBv2n9VCPcD1NTRrTrhkAxJbdJkPREwgr1UqSj2CX5cTfdCMhwQQg FCKy1DVJuIykbIWf5KdCc7J2/YSoxB4eQTPhCYTo2th1RJGFFszBr4PCKlJl3+Mh OBTWRX94i92gs+/c6lzwC0OY+BhyVTdQO4PtlZOqN33Bmvmw7NfTZkSOB70+ken2 0Uves9dchrF5ozLw094C5MJiiWm1uGdflQZ5aRhOMoW0QeB5/FA= -----END CERTIFICATE-----Generated at Mon Jun 15 20:32:40 2026 by rpki-client