$ rpki-client -vvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft File: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft (raw, json) Hash identifier: jDWHgtPgI6NcpNXmxjFXOMOdWIIca3tn3oGQfG79DKU= Subject key identifier: D1:37:1B:5D:C0:EC:67:33:9C:22:58:7F:71:78:9C:01:54:76:D8:98 Authority key identifier: 20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E Certificate issuer: /CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E Certificate serial: 56AA2B404C7C87545FBC87C327A49DD4C3C60A89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 15:28:12 +0000 Manifest this update: Sat 13 Jun 2026 15:23:12 +0000 Manifest next update: Sun 14 Jun 2026 17:04:12 +0000 Files and hashes: 1: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl (hash: 66expChZhf1lD0VLFV8DD4hTyJ3RJPcOqVqDdMin9dI=) 2: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: D52uwwzpgaxCjAFI9GaZMm7APMN7ImtqrU9yyVklPWk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:aa:2b:40:4c:7c:87:54:5f:bc:87:c3:27:a4:9d:d4:c3:c6:0a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E Validity Not Before: Jun 13 15:23:12 2026 GMT Not After : Jun 14 17:04:12 2026 GMT Subject: CN=D1371B5DC0EC67339C22587F71789C015476D898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:17:08:a2:47:82:a0:46:fb:55:d4:87:84: 14:1c:8d:a0:1d:2f:d5:f9:91:b6:db:2b:f3:7f:a9: 4e:ea:25:89:84:78:cf:08:ab:2f:33:63:8f:3e:42: 50:8c:0c:4d:e7:ae:fe:79:c5:8f:56:48:16:17:57: 93:be:25:90:aa:7f:bb:4c:95:29:ba:0c:0f:8c:ab: dc:ac:ab:53:ce:8a:27:c3:ce:55:d1:80:11:da:ed: 97:e8:22:6b:69:ca:a9:83:c5:a3:de:b2:4a:a2:e5: 54:ea:e3:60:17:aa:a1:1a:cf:b0:11:85:f7:d0:75: aa:cd:72:09:76:be:d2:b0:7b:03:d7:10:f8:85:4f: c9:28:d3:06:ef:1e:ca:48:d8:19:93:24:78:2c:a7: 7c:7b:8a:e9:f7:71:82:74:f2:ab:af:23:44:a0:0b: 22:b3:98:3d:d4:6f:76:3b:b0:75:ba:cb:32:6e:5a: ca:71:08:2f:6f:34:c4:f8:19:f2:e2:93:ff:ac:92: 01:be:af:a5:69:c3:66:eb:ed:b0:3e:a1:e7:ee:f5: 45:26:7f:22:93:18:79:20:f1:c8:98:84:cb:5a:32: dd:2c:37:f9:c3:2e:72:c7:f1:97:5a:f3:62:98:f8: e8:7a:50:d5:9e:df:d4:9d:ee:4a:0d:ee:ec:ea:e2: ce:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:37:1B:5D:C0:EC:67:33:9C:22:58:7F:71:78:9C:01:54:76:D8:98 X509v3 Authority Key Identifier: keyid:20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ed:f4:93:67:36:23:86:d1:a2:5e:70:17:fa:7d:bb:39:4b: ff:f1:94:72:3c:11:12:04:8c:2e:ce:2c:ec:e8:10:72:b2:b3: 59:02:5b:4e:f2:9a:90:91:26:28:5b:47:ff:cd:e9:c7:5e:ee: ac:55:35:5d:01:11:49:09:50:7a:f4:59:db:9e:38:63:04:59: ac:bf:e7:6b:7a:a2:97:8e:49:c9:89:27:74:df:3c:4e:1a:08: 6a:7a:91:96:c9:cf:31:23:f0:58:16:c7:94:e5:2f:1e:9d:12: f6:0c:c4:24:9c:b0:df:57:56:1e:16:9e:a3:d0:1c:4f:49:15: 19:8d:49:80:27:1e:7c:0d:55:1e:f2:24:41:94:12:a4:82:86: e5:80:85:38:50:ed:c8:ee:54:a7:9f:af:0e:02:54:77:da:e2: d8:d6:d6:e2:e7:12:60:d6:e3:a9:f2:3b:82:d2:a6:46:d8:82: 41:79:82:fa:0d:36:71:98:a5:22:75:39:cb:c2:48:4d:51:23: 10:11:cc:cc:1f:3e:aa:61:d5:62:2a:df:7e:7f:25:79:68:b2: 16:ab:4c:b6:84:53:55:0a:7f:45:1d:93:9b:07:44:ad:e0:8b: 3b:c0:e8:a2:f3:6a:76:f4:26:1f:c5:ce:67:5b:f1:6f:0a:44: ed:4b:08:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqorQEx8h1RfvIfDJ6Sd1MPGCokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAzMDIxOUFDMkQ4QkRFNTQwQjNBMDZCM0UyMjBDQzYy QjZCMzc0RTAeFw0yNjA2MTMxNTIzMTJaFw0yNjA2MTQxNzA0MTJaMDMxMTAvBgNV BAMTKEQxMzcxQjVEQzBFQzY3MzM5QzIyNTg3RjcxNzg5QzAxNTQ3NkQ4OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx4BcIokeCoEb7VdSHhBQcjaAd L9X5kbbbK/N/qU7qJYmEeM8Iqy8zY48+QlCMDE3nrv55xY9WSBYXV5O+JZCqf7tM lSm6DA+Mq9ysq1POiifDzlXRgBHa7ZfoImtpyqmDxaPeskqi5VTq42AXqqEaz7AR hffQdarNcgl2vtKwewPXEPiFT8ko0wbvHspI2BmTJHgsp3x7iun3cYJ08quvI0Sg CyKzmD3Ub3Y7sHW6yzJuWspxCC9vNMT4GfLik/+skgG+r6Vpw2br7bA+oefu9UUm fyKTGHkg8ciYhMtaMt0sN/nDLnLH8Zda82KY+Oh6UNWe39Sd7koN7uzq4s7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0TcbXcDsZzOcIlh/cXicAVR22JgwHwYDVR0j BBgwFoAUIDAhmsLYveVAs6BrPiIMxitrN04wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzEvMjAzMDIxOUFD MkQ4QkRFNTQwQjNBMDZCM0UyMjBDQzYyQjZCMzc0RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDMwMjE5QUMyRDhCREU1NDBCM0EwNkIzRTIyMENDNjJCNkIz NzRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzEvMjAzMDIxOUFDMkQ4QkRFNTQwQjNBMDZCM0UyMjBD QzYyQjZCMzc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7t9JNnNiOG0aJecBf6fbs5S//xlHI8ERIE jC7OLOzoEHKys1kCW07ympCRJihbR//N6cde7qxVNV0BEUkJUHr0WdueOGMEWay/ 52t6opeOScmJJ3TfPE4aCGp6kZbJzzEj8FgWx5TlLx6dEvYMxCScsN9XVh4WnqPQ HE9JFRmNSYAnHnwNVR7yJEGUEqSChuWAhThQ7cjuVKefrw4CVHfa4tjW1uLnEmDW 46nyO4LSpkbYgkF5gvoNNnGYpSJ1OcvCSE1RIxARzMwfPqph1WIq335/JXloshar TLaEU1UKf0Udk5sHRK3gizvA6KLzanb0Jh/Fzmdb8W8KRO1LCBE= -----END CERTIFICATE-----Generated at Sat Jun 13 21:54:47 2026 by rpki-client