$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft File: 872439399C3ADEB5FD342E7B6286CED219899CA2.mft (raw, json) Hash identifier: 9vrqiAC24Geb0tm0xHJygKyWFmijkBxkYYhOKgE1Kwk= Subject key identifier: 66:7E:50:47:09:C4:8A:FC:E0:A4:34:C3:55:EF:26:E6:AC:89:86:21 Authority key identifier: 87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 Certificate issuer: /CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Certificate serial: 366614703BDDABC63345FC9C7D520522C202F7A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 21:40:27 +0000 Manifest this update: Tue 16 Jun 2026 21:35:27 +0000 Manifest next update: Wed 17 Jun 2026 22:51:27 +0000 Files and hashes: 1: 872439399C3ADEB5FD342E7B6286CED219899CA2.crl (hash: LeMtqRDEC5pdOSzU9RVJkHhDn8UcUidyQaZk/3lfgFM=) 2: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: adl429vFkP0oWDwTvPnmag7OFx0zxihqimWJrrJGrRE=) 3: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: yjf0/JJFQABhzT0gnDsCQ/oag0HSQ3URmpUm4ciNYx4=) 4: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: NKC5Np3Ag/+a1x7nhQql2VpKY7CAeiWtD4pS8O2fPAg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:66:14:70:3b:dd:ab:c6:33:45:fc:9c:7d:52:05:22:c2:02:f7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Validity Not Before: Jun 16 21:35:27 2026 GMT Not After : Jun 17 22:51:27 2026 GMT Subject: CN=667E504709C48AFCE0A434C355EF26E6AC898621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:54:e8:04:9e:8e:d6:1f:81:ef:08:c2:2b: e2:65:18:88:fe:b0:89:f1:89:bd:6d:4b:96:2b:95: 67:b6:24:7b:64:87:8b:9f:93:55:0b:3f:4a:bf:70: 20:49:eb:24:64:b5:f1:8f:ab:83:d5:1a:25:ae:c3: e2:cf:19:cb:6d:fb:76:85:94:9f:7d:8b:2f:88:6a: 05:58:88:d5:84:f5:66:2a:91:21:86:4c:d9:5e:0c: 98:c6:8b:07:57:13:57:ec:5c:66:c6:27:b3:03:74: 5c:d3:d0:f6:13:bb:ca:ed:84:d7:77:f5:b7:fc:0a: 4e:fb:c2:49:9f:d1:62:11:cf:60:a1:8a:64:c2:38: 71:ac:a5:06:48:b2:8c:dd:cc:8c:e0:80:1c:0f:b2: 07:48:60:ac:6d:fc:b0:0a:ed:08:3c:91:b6:b4:13: e3:be:80:87:91:db:9d:83:a8:7b:9d:2a:18:51:b8: 69:76:02:35:a8:cb:6f:63:25:c5:b9:9e:4f:49:72: 09:13:7d:0e:7e:4e:b5:18:67:66:70:a8:58:5f:33: 01:63:be:ee:5d:0d:1d:fa:e9:9b:30:15:59:95:d4: 47:a6:a6:a0:b3:4b:00:29:bd:a4:3b:3e:9c:1c:27: 1e:31:da:76:07:96:fc:fe:66:be:2f:d5:23:1e:6c: 92:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7E:50:47:09:C4:8A:FC:E0:A4:34:C3:55:EF:26:E6:AC:89:86:21 X509v3 Authority Key Identifier: keyid:87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:43:86:d8:66:36:58:54:a5:b7:59:54:f1:02:f5:32:16:6f: 6e:f1:84:1b:14:40:49:77:a5:d6:d1:00:b7:cb:50:44:14:72: 91:58:94:b3:ac:97:84:20:92:7f:af:97:25:ed:52:95:3a:15: 6f:bb:36:b3:74:dd:b8:ec:31:d0:fc:3d:0b:8a:df:a7:aa:a3: 9e:04:65:ec:4f:ce:65:d6:f9:71:de:6b:da:f7:1b:ba:ee:60: 10:03:10:3c:00:a1:86:4c:45:46:84:d7:c9:87:0d:0c:ea:55: 96:e4:ca:85:d9:68:1b:54:51:04:17:9c:0c:16:80:60:4e:90: 92:60:5f:a4:63:a8:bc:ca:59:11:f2:8b:87:62:1b:b4:3e:4c: c5:24:58:81:7f:4d:d8:ad:93:01:9f:82:9a:67:e6:5e:af:3c: 1f:45:02:64:5a:fd:e6:39:4c:d7:78:62:ac:ad:3c:cb:40:25: ef:fc:71:16:78:72:fc:bd:c5:e7:3d:72:c8:a7:92:62:0f:7f: 57:a3:ca:02:63:ed:85:f8:9c:dd:16:d5:fa:fc:18:c4:00:d9: 03:b1:48:c2:62:30:b3:06:6d:ae:c1:11:d3:e7:8b:ea:8d:8b: 99:07:fd:6d:da:f5:45:74:5c:55:d1:85:2f:b6:22:61:4a:6b: d0:b3:5c:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNmYUcDvdq8YzRfycfVIFIsIC96UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIx OTg5OUNBMjAeFw0yNjA2MTYyMTM1MjdaFw0yNjA2MTcyMjUxMjdaMDMxMTAvBgNV BAMTKDY2N0U1MDQ3MDlDNDhBRkNFMEE0MzRDMzU1RUYyNkU2QUM4OTg2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLfFToBJ6O1h+B7wjCK+JlGIj+ sInxib1tS5YrlWe2JHtkh4ufk1ULP0q/cCBJ6yRktfGPq4PVGiWuw+LPGctt+3aF lJ99iy+IagVYiNWE9WYqkSGGTNleDJjGiwdXE1fsXGbGJ7MDdFzT0PYTu8rthNd3 9bf8Ck77wkmf0WIRz2ChimTCOHGspQZIsozdzIzggBwPsgdIYKxt/LAK7Qg8kba0 E+O+gIeR252DqHudKhhRuGl2AjWoy29jJcW5nk9JcgkTfQ5+TrUYZ2ZwqFhfMwFj vu5dDR366ZswFVmV1EempqCzSwApvaQ7PpwcJx4x2nYHlvz+Zr4v1SMebJJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZn5QRwnEivzgpDTDVe8m5qyJhiEwHwYDVR0j BBgwFoAUhyQ5OZw63rX9NC57YobO0hmJnKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM3ZDNjYmYtMjRkNi00YjFjLTg2Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5 QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIxOTg5OUNBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzI0MzkzOTlDM0FERUI1RkQzNDJFN0I2Mjg2Q0VEMjE5ODk5 Q0EyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNF RDIxOTg5OUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhDhthmNlhUpbdZVPEC9TIWb27xhBsUQEl3 pdbRALfLUEQUcpFYlLOsl4Qgkn+vlyXtUpU6FW+7NrN03bjsMdD8PQuK36eqo54E ZexPzmXW+XHea9r3G7ruYBADEDwAoYZMRUaE18mHDQzqVZbkyoXZaBtUUQQXnAwW gGBOkJJgX6RjqLzKWRHyi4diG7Q+TMUkWIF/TditkwGfgppn5l6vPB9FAmRa/eY5 TNd4YqytPMtAJe/8cRZ4cvy9xec9csinkmIPf1ejygJj7YX4nN0W1fr8GMQA2QOx SMJiMLMGba7BEdPni+qNi5kH/W3a9UV0XFXRhS+2ImFKa9CzXJY= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:01 2026 by rpki-client