$ rpki-client -vvf rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft File: D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft (raw, json) Hash identifier: +jqDrXuKcqDgpsDemHdXQHQCWwxfwi7M34dCNvL0n5E= Subject key identifier: C1:A5:0D:FA:02:3F:2C:43:7C:40:05:82:73:64:CC:BE:63:39:0D:14 Authority key identifier: D3:B0:B1:2C:00:ED:A4:8B:D2:7B:03:AE:46:20:E5:1B:4D:5B:35:B9 Certificate issuer: /CN=D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9 Certificate serial: 65F73744C615D48E4D8E8B0F1260A0E714D718A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:55:03 +0000 Manifest this update: Wed 17 Jun 2026 01:50:03 +0000 Manifest next update: Thu 18 Jun 2026 03:54:03 +0000 Files and hashes: 1: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: UG7HopHAsWszm3vKCwbdEPyJLKZk5ZAofsZVkykHgJs=) 2: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: ppvRL+0RoVt7WTK9nlYvDd18NTyRBb+RqG5BAHWS1Ig=) 3: D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl (hash: o+Y57nvLAsAVluOSCTGFB6VpYNXnXvVg9995SJC5HT4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f7:37:44:c6:15:d4:8e:4d:8e:8b:0f:12:60:a0:e7:14:d7:18:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9 Validity Not Before: Jun 17 01:50:03 2026 GMT Not After : Jun 18 03:54:03 2026 GMT Subject: CN=C1A50DFA023F2C437C4005827364CCBE63390D14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:89:2f:8e:84:41:d5:8c:e3:5d:d6:88:1b: 04:1d:ef:88:55:aa:c5:d0:71:92:71:3a:5d:b6:89: b2:1b:b4:8a:f1:17:7d:ed:cd:aa:d3:a4:74:a9:44: 67:93:43:f2:2d:7a:44:a5:81:6a:99:52:ab:4e:f6: ff:40:c0:80:bb:2e:a1:26:14:51:78:d4:80:41:51: b9:cc:62:67:fa:74:43:37:9a:d6:d2:ac:20:f3:b3: 16:7b:bd:56:ee:f7:50:bb:2d:ff:17:7b:63:7c:31: 9a:76:4e:38:f1:04:e3:a6:38:b2:ce:36:89:72:31: cd:45:73:c2:62:bd:98:51:89:ce:64:4c:a4:d0:18: 27:42:1a:1d:e0:a6:4e:0c:e1:b8:1a:1d:19:44:da: bc:38:e5:bf:ea:28:cd:41:a5:f7:c3:14:18:59:9c: f6:a2:94:44:43:10:0b:bf:2b:45:c6:b0:af:03:26: d5:88:e8:31:d5:85:b4:d0:62:4d:df:21:17:0a:20: 53:45:0b:ab:74:b9:26:2f:0f:25:06:36:63:9d:06: c4:6e:8c:42:3b:d5:e4:67:2d:9c:77:43:96:0a:96: a8:76:3c:b0:a6:a2:d5:34:79:b6:21:d2:bf:84:58: c1:58:c4:cf:e3:ab:06:a3:22:3d:60:ba:d6:1a:e5: 24:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A5:0D:FA:02:3F:2C:43:7C:40:05:82:73:64:CC:BE:63:39:0D:14 X509v3 Authority Key Identifier: keyid:D3:B0:B1:2C:00:ED:A4:8B:D2:7B:03:AE:46:20:E5:1B:4D:5B:35:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:28:57:56:05:33:f0:b4:97:17:37:a9:5a:8d:28:66:68:12: 0d:44:04:7b:f0:a8:51:65:e5:30:37:9d:5d:09:c5:64:a0:3b: c3:97:d0:7e:c1:26:57:b7:ff:dd:f2:34:19:37:2c:01:77:f8: 2b:4a:d0:e1:a5:d1:84:a7:39:20:ae:7c:43:14:d1:2f:40:71: 34:ca:a4:eb:cd:5d:d0:d5:9a:6b:3b:83:0e:d2:67:78:43:6b: a0:02:6c:56:08:5f:eb:db:9b:90:7e:65:8e:24:7e:33:29:14: 55:1d:96:20:14:a9:d8:94:58:d0:3d:8b:1b:4b:15:28:ef:8d: 1f:06:be:ad:09:0c:c4:b7:10:a3:9e:53:55:40:96:1c:75:9b: 2b:75:0d:32:86:fc:04:c5:2a:b4:97:99:b8:57:97:1b:b1:c8: 6f:50:f5:00:6a:a6:17:9c:27:d5:1d:b3:0d:62:58:a6:7b:41: 3e:02:6c:d3:12:f2:44:0e:0a:23:4f:69:25:cf:32:26:1f:10: f3:77:57:33:38:0c:23:3f:99:48:52:4e:36:59:8d:3a:b8:bf: 5a:5c:b8:7a:3f:da:5c:bb:77:8f:0b:20:49:48:96:5c:2e:0f: 0b:e2:92:d0:70:71:74:7e:eb:83:b0:1e:2c:04:70:b7:0f:63: 0f:8b:3a:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZfc3RMYV1I5NjosPEmCg5xTXGKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEIxMkMwMEVEQTQ4QkQyN0IwM0FFNDYyMEU1MUI0 RDVCMzVCOTAeFw0yNjA2MTcwMTUwMDNaFw0yNjA2MTgwMzU0MDNaMDMxMTAvBgNV BAMTKEMxQTUwREZBMDIzRjJDNDM3QzQwMDU4MjczNjRDQ0JFNjMzOTBEMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd6YkvjoRB1YzjXdaIGwQd74hV qsXQcZJxOl22ibIbtIrxF33tzarTpHSpRGeTQ/ItekSlgWqZUqtO9v9AwIC7LqEm FFF41IBBUbnMYmf6dEM3mtbSrCDzsxZ7vVbu91C7Lf8Xe2N8MZp2TjjxBOOmOLLO NolyMc1Fc8JivZhRic5kTKTQGCdCGh3gpk4M4bgaHRlE2rw45b/qKM1BpffDFBhZ nPailERDEAu/K0XGsK8DJtWI6DHVhbTQYk3fIRcKIFNFC6t0uSYvDyUGNmOdBsRu jEI71eRnLZx3Q5YKlqh2PLCmotU0ebYh0r+EWMFYxM/jqwajIj1gutYa5SRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwaUN+gI/LEN8QAWCc2TMvmM5DRQwHwYDVR0j BBgwFoAU07CxLADtpIvSewOuRiDlG01bNbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkyZTA3ZjgtMWE0OC00MzkxLWE2YTUtOGU0ZTM5Yzg1ODhhLzAvRDNCMEIxMkMw MEVEQTQ4QkQyN0IwM0FFNDYyMEU1MUI0RDVCMzVCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0IwQjEyQzAwRURBNDhCRDI3QjAzQUU0NjIwRTUxQjRENUIz NUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvRDNCMEIxMkMwMEVEQTQ4QkQyN0IwM0FFNDYyMEU1 MUI0RDVCMzVCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMoV1YFM/C0lxc3qVqNKGZoEg1EBHvwqFFl 5TA3nV0JxWSgO8OX0H7BJle3/93yNBk3LAF3+CtK0OGl0YSnOSCufEMU0S9AcTTK pOvNXdDVmms7gw7SZ3hDa6ACbFYIX+vbm5B+ZY4kfjMpFFUdliAUqdiUWNA9ixtL FSjvjR8Gvq0JDMS3EKOeU1VAlhx1myt1DTKG/ATFKrSXmbhXlxuxyG9Q9QBqphec J9Udsw1iWKZ7QT4CbNMS8kQOCiNPaSXPMiYfEPN3VzM4DCM/mUhSTjZZjTq4v1pc uHo/2ly7d48LIElIllwuDwviktBwcXR+64OwHiwEcLcPYw+LOjw= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:11 2026 by rpki-client