$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft File: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft (raw, json) Hash identifier: R2YVpBMEiw8x1lI03Hn1sncqAVcws/7RdDrDDV/HkOk= Subject key identifier: 58:40:12:7E:B9:33:6E:4B:7C:0E:5D:3C:E9:63:86:26:F5:22:6B:63 Authority key identifier: 67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 Certificate issuer: /CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Certificate serial: 0322EAB7C3C062A788CDA89B2379FE1359BC31BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:28:12 +0000 Manifest this update: Wed 17 Jun 2026 04:23:12 +0000 Manifest next update: Thu 18 Jun 2026 07:52:12 +0000 Files and hashes: 1: 3130332e32392e31302e302f32332d3233203d3e20313431303634.roa (hash: IBUQjMZ5NNzGmdB2zhWUusvHNKo79g9C811Va7sgvlo=) 2: 3130332e32392e31302e302f32342d3234203d3e20313431303634.roa (hash: uSk10krPfxdFIHOBpfkxhwhZ1K9QJq18Qw/WrYuUlfQ=) 3: 3130332e32392e31312e302f32342d3234203d3e20313431303634.roa (hash: +AUN4MHHWAUjMgF6xm0EYpBlr5qq8MXy2UpCeEPacA4=) 4: 673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl (hash: QQ+V4o1RXzs2T54W8YpBO+o0k3fqEVfeS78Z2WCnUx0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:22:ea:b7:c3:c0:62:a7:88:cd:a8:9b:23:79:fe:13:59:bc:31:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87 Validity Not Before: Jun 17 04:23:12 2026 GMT Not After : Jun 18 07:52:12 2026 GMT Subject: CN=5840127EB9336E4B7C0E5D3CE9638626F5226B63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:79:1b:e8:95:95:3f:c6:53:8b:71:d0:80: 85:0a:66:35:cf:6b:14:89:47:26:b0:85:bf:3e:6c: 1e:2d:9c:27:b7:ef:b1:72:61:c9:62:7b:d1:5e:2d: 1c:6e:01:20:64:22:b4:92:ad:f9:76:ef:c9:dc:f3: c5:00:12:06:a4:31:42:dc:95:6d:30:26:ec:af:fe: d3:8a:c4:9e:ca:10:cb:65:fc:01:69:71:2d:f9:61: 35:75:a5:1e:8b:5f:ae:6d:70:e4:ae:9c:c8:4c:42: 5d:d7:dd:48:bc:32:ce:2c:e7:63:98:e9:1e:28:96: 21:7b:fa:26:f4:40:f3:99:fa:c4:17:a5:e8:5b:55: 5d:ce:da:46:b4:df:07:fe:f6:ab:bc:18:30:3d:71: f3:1f:01:73:a0:46:50:02:f9:7e:6c:49:5b:e3:05: ed:90:42:c4:c8:04:2c:0d:f2:11:05:c9:d1:54:e0: e6:2d:95:e0:f4:c9:2c:b9:81:32:25:bd:b7:d6:e3: c0:a2:8a:53:8f:77:66:20:ca:c4:04:ec:7c:1b:3a: dc:66:c6:02:52:a5:93:71:3f:bf:fe:69:c7:91:bf: d3:fd:91:91:95:f5:de:39:60:49:38:f9:29:27:bf: cf:7e:cd:4c:3c:72:14:3c:ab:a0:b5:70:3e:b2:d9: 65:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:40:12:7E:B9:33:6E:4B:7C:0E:5D:3C:E9:63:86:26:F5:22:6B:63 X509v3 Authority Key Identifier: keyid:67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:db:76:02:17:b1:32:d4:6f:57:c3:4d:31:cb:ff:8a:f6:95: 59:e9:86:f1:29:8d:08:86:9e:2f:1c:69:3c:fb:f5:92:39:14: c6:a1:7d:85:a1:f9:9e:e1:6e:10:72:aa:f4:bd:6e:d2:f1:02: 7f:83:8e:c2:d9:1a:54:76:d1:82:8b:c1:c7:29:4e:93:10:6c: 70:2c:77:5e:81:02:52:e8:50:5c:ef:e5:e1:62:a7:2a:4b:03: a7:ad:eb:8a:a4:7f:42:27:45:6d:3e:f2:45:07:cb:49:81:fd: 38:41:39:b6:19:6d:79:58:eb:1c:e3:45:41:f4:7e:4b:b8:5b: 00:0f:21:4f:44:90:30:34:7b:12:3e:53:ce:f9:8d:41:8b:4e: 47:50:60:c6:00:55:96:1d:22:36:e0:b7:11:8d:bb:98:43:6f: e0:c5:46:92:f3:da:0c:04:b7:b0:18:51:a4:b7:98:bf:e7:c0: 87:27:af:68:92:c9:59:1c:6f:5b:8b:2f:81:1f:c8:b0:b0:5f: 8b:c4:81:69:49:0e:d2:da:f3:e0:3d:a3:ae:36:c1:65:eb:57: ba:06:56:f2:08:8b:03:fe:e6:f2:74:84:50:96:8e:ed:dd:3a: c3:93:92:e4:a4:ec:ea:38:ab:81:f5:22:25:a5:ee:11:6a:2b: 3c:d8:8e:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAyLqt8PAYqeIzaibI3n+E1m8MbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjczMDYyRkZGQkI4N0Q1NEIyNEY4MDBDQTcxRDRDMURE NzdFMkI4NzAeFw0yNjA2MTcwNDIzMTJaFw0yNjA2MTgwNzUyMTJaMDMxMTAvBgNV BAMTKDU4NDAxMjdFQjkzMzZFNEI3QzBFNUQzQ0U5NjM4NjI2RjUyMjZCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY23kb6JWVP8ZTi3HQgIUKZjXP axSJRyawhb8+bB4tnCe377FyYclie9FeLRxuASBkIrSSrfl278nc88UAEgakMULc lW0wJuyv/tOKxJ7KEMtl/AFpcS35YTV1pR6LX65tcOSunMhMQl3X3Ui8Ms4s52OY 6R4oliF7+ib0QPOZ+sQXpehbVV3O2ka03wf+9qu8GDA9cfMfAXOgRlAC+X5sSVvj Be2QQsTIBCwN8hEFydFU4OYtleD0ySy5gTIlvbfW48CiilOPd2YgysQE7HwbOtxm xgJSpZNxP7/+aceRv9P9kZGV9d45YEk4+Sknv89+zUw8chQ8q6C1cD6y2WUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWEASfrkzbkt8Dl086WOGJvUia2MwHwYDVR0j BBgwFoAUZzBi//u4fVSyT4AMpx1MHdd+K4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE1MzJjNjUtODBiZS00ZmRlLTg3ZDAtMzZjNWJkMjg4Y2Q4LzAvNjczMDYyRkZG QkI4N0Q1NEIyNEY4MDBDQTcxRDRDMURENzdFMkI4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzMwNjJGRkZCQjg3RDU0QjI0RjgwMENBNzFENEMxREQ3N0Uy Qjg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE1MzJjNjUtODBiZS00ZmRlLTg3 ZDAtMzZjNWJkMjg4Y2Q4LzAvNjczMDYyRkZGQkI4N0Q1NEIyNEY4MDBDQTcxRDRD MURENzdFMkI4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXbdgIXsTLUb1fDTTHL/4r2lVnphvEpjQiG ni8caTz79ZI5FMahfYWh+Z7hbhByqvS9btLxAn+DjsLZGlR20YKLwccpTpMQbHAs d16BAlLoUFzv5eFipypLA6et64qkf0InRW0+8kUHy0mB/ThBObYZbXlY6xzjRUH0 fku4WwAPIU9EkDA0exI+U875jUGLTkdQYMYAVZYdIjbgtxGNu5hDb+DFRpLz2gwE t7AYUaS3mL/nwIcnr2iSyVkcb1uLL4EfyLCwX4vEgWlJDtLa8+A9o642wWXrV7oG VvIIiwP+5vJ0hFCWju3dOsOTkuSk7Oo4q4H1IiWl7hFqKzzYjgY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:31:57 2026 by rpki-client