$ rpki-client -vvf rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft File: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft (raw, json) Hash identifier: IedfI4/1ZACVabTDhspcKx4kFROb83lrf4uIdS8W6j4= Subject key identifier: B9:67:75:40:0E:FF:4E:56:4E:85:CF:C6:6C:29:09:DC:6B:29:D7:D0 Authority key identifier: DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87 Certificate issuer: /CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887 Certificate serial: 23F46D1F7505FE550CED667FFADC7DFEEA381C89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:26:56 +0000 Manifest this update: Wed 17 Jun 2026 03:21:56 +0000 Manifest next update: Thu 18 Jun 2026 06:32:56 +0000 Files and hashes: 1: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: 2hrlUfalWGLJAAgURvT2UIB10iFx48ljh0wmwwAeiOQ=) 2: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl (hash: DL1T+5Y+dL8wCkroUuRY0XeeWh6eQMNj48PEypuvxV4=) 3: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: b9ucf82rqvNvVvSo4KylGCCzRBHVOTbyEMd9uIlhwkk=) 4: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: ogZJ6AIvbYZ3rfPWkAwkD+wUu9pRc9HcU7kgCnHTVek=) 5: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: 7vL8y9qGcwGlBHTlp7W2DDNh7nh9ZG6pUOsZTFcC5m8=) 6: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: BbljfPMaDaoCXmfqlX766e2gOwStRy9KRMwBeVYrNRA=) 7: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: swMIglkDWca6bTykcQAlBI8mPZmObmBmI7XJvNSgNmI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f4:6d:1f:75:05:fe:55:0c:ed:66:7f:fa:dc:7d:fe:ea:38:1c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887 Validity Not Before: Jun 17 03:21:56 2026 GMT Not After : Jun 18 06:32:56 2026 GMT Subject: CN=B96775400EFF4E564E85CFC66C2909DC6B29D7D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:34:88:13:56:dc:f0:f9:34:a8:64:00:c1:a5: 43:ae:82:d1:f7:44:15:4a:de:65:a5:b9:d0:75:d0: 14:ea:e4:30:16:87:11:a0:f5:c3:f4:6f:ee:9c:cd: 79:03:3c:61:50:21:d0:8e:e9:ca:86:7a:f8:85:80: e2:0b:4f:60:bb:e5:a3:c9:00:62:34:69:4c:e6:40: 43:6a:9d:53:cd:f6:74:67:bf:52:06:2e:a0:b1:13: 71:16:46:29:18:08:ec:64:77:27:d4:b8:5a:79:d3: bb:c5:7d:7b:4f:2b:d5:60:5b:bf:aa:bf:0b:ea:23: d3:12:92:c4:42:7c:68:51:04:a1:2a:6c:29:09:1a: cb:0d:9f:01:11:29:9d:de:d7:bf:3f:ef:35:0d:e1: 89:74:f5:0d:3c:0b:95:7c:f9:07:ef:df:37:ff:26: 8f:c8:0d:bf:7b:c8:d5:a7:c5:70:3f:dd:69:1d:a1: 54:c8:49:03:91:20:f7:31:d7:66:87:04:33:34:29: 2a:8f:e5:51:96:ff:fe:9b:70:87:b7:5c:ac:89:dc: 43:3a:29:a4:b7:7c:d6:8e:77:96:18:26:70:93:ca: 36:82:8c:9f:37:88:bf:a9:f9:24:69:c4:ac:a5:70: b4:09:6b:5a:f4:68:5f:f3:74:d5:87:f0:33:da:1a: 2e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:67:75:40:0E:FF:4E:56:4E:85:CF:C6:6C:29:09:DC:6B:29:D7:D0 X509v3 Authority Key Identifier: keyid:DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:70:e3:f7:f0:93:6c:95:39:dc:58:19:38:fd:d2:d4:4a:d4: e0:3e:ed:cb:c1:40:1f:0d:70:f3:2a:58:51:f2:b3:3c:c5:2e: 39:30:73:f6:7d:4d:b4:13:73:51:24:a5:49:1d:9c:ce:9a:b5: 34:55:63:f9:aa:23:95:d2:59:8b:bc:dc:86:8d:ef:91:15:68: 17:98:f1:70:74:4d:24:42:46:3d:13:27:65:aa:2b:e0:d2:20: 24:4d:f9:40:24:9b:76:82:93:a0:7c:12:f9:6e:0d:45:1a:05: 1e:89:f3:08:de:90:ad:b8:1d:c5:97:6d:09:23:21:eb:34:55: c8:22:59:2f:87:3e:d2:85:2d:3c:e8:f6:54:0e:39:08:c3:e2: 6f:d7:ee:be:1f:e0:e7:de:d1:67:a5:08:90:2e:b8:07:96:a1: d7:d4:27:55:a4:8c:f5:82:d9:f3:07:7f:b2:1a:6a:49:9e:39: 36:8b:a1:e3:c3:53:60:e4:51:57:19:ad:53:27:9f:9b:7e:51: 3a:f0:3f:88:5b:bd:8e:9e:9b:2c:00:e0:76:df:b1:81:58:9e: 3d:25:06:49:1e:38:24:01:26:4e:82:b3:a8:1c:60:55:70:21: 37:85:5e:3b:68:d2:6a:e7:3d:94:62:89:5c:22:85:ce:3c:2d: 1a:4e:0b:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI/RtH3UF/lUM7WZ/+tx9/uo4HIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBM0M4RjhFODJDRDRGOUUyRjhGOUFFQzg5MEJDMURC MDk4QTg4NzAeFw0yNjA2MTcwMzIxNTZaFw0yNjA2MTgwNjMyNTZaMDMxMTAvBgNV BAMTKEI5Njc3NTQwMEVGRjRFNTY0RTg1Q0ZDNjZDMjkwOURDNkIyOUQ3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINIgTVtzw+TSoZADBpUOugtH3 RBVK3mWludB10BTq5DAWhxGg9cP0b+6czXkDPGFQIdCO6cqGeviFgOILT2C75aPJ AGI0aUzmQENqnVPN9nRnv1IGLqCxE3EWRikYCOxkdyfUuFp507vFfXtPK9VgW7+q vwvqI9MSksRCfGhRBKEqbCkJGssNnwERKZ3e178/7zUN4Yl09Q08C5V8+Qfv3zf/ Jo/IDb97yNWnxXA/3WkdoVTISQORIPcx12aHBDM0KSqP5VGW//6bcIe3XKyJ3EM6 KaS3fNaOd5YYJnCTyjaCjJ83iL+p+SRpxKylcLQJa1r0aF/zdNWH8DPaGi6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuWd1QA7/TlZOhc/GbCkJ3Gsp19AwHwYDVR0j BBgwFoAU3KPI+Ogs1Pni+PmuyJC8HbCYqIcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBjNzczYzgtZmI1Ni00NDlmLTg2NDktMTEyZDZlMTY4NmIzLzAvRENBM0M4RjhF ODJDRDRGOUUyRjhGOUFFQzg5MEJDMURCMDk4QTg4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0EzQzhGOEU4MkNENEY5RTJGOEY5QUVDODkwQkMxREIwOThB ODg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBjNzczYzgtZmI1Ni00NDlmLTg2 NDktMTEyZDZlMTY4NmIzLzAvRENBM0M4RjhFODJDRDRGOUUyRjhGOUFFQzg5MEJD MURCMDk4QTg4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxw4/fwk2yVOdxYGTj90tRK1OA+7cvBQB8N cPMqWFHyszzFLjkwc/Z9TbQTc1EkpUkdnM6atTRVY/mqI5XSWYu83IaN75EVaBeY 8XB0TSRCRj0TJ2WqK+DSICRN+UAkm3aCk6B8EvluDUUaBR6J8wjekK24HcWXbQkj Ies0VcgiWS+HPtKFLTzo9lQOOQjD4m/X7r4f4Ofe0WelCJAuuAeWodfUJ1WkjPWC 2fMHf7IaakmeOTaLoePDU2DkUVcZrVMnn5t+UTrwP4hbvY6emywA4HbfsYFYnj0l BkkeOCQBJk6Cs6gcYFVwITeFXjto0mrnPZRiiVwihc48LRpOC4I= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:45 2026 by rpki-client