$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft File: 096782C6E108EAAEE59692E8A1E468AA698658F3.mft (raw, json) Hash identifier: CscRFLFWw1oj4aMHFAcqC3HWil3TJY8DBnxIah3jZ+8= Subject key identifier: 51:3C:C0:31:5E:88:E6:89:1A:D1:51:DF:A2:90:52:85:C3:8E:D6:E4 Authority key identifier: 09:67:82:C6:E1:08:EA:AE:E5:96:92:E8:A1:E4:68:AA:69:86:58:F3 Certificate issuer: /CN=096782C6E108EAAEE59692E8A1E468AA698658F3 Certificate serial: 7995D70FA9DE7D281588441494B3D8DFBA1AE7D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 04:28:14 +0000 Manifest this update: Wed 17 Jun 2026 04:23:14 +0000 Manifest next update: Thu 18 Jun 2026 05:01:14 +0000 Files and hashes: 1: 096782C6E108EAAEE59692E8A1E468AA698658F3.crl (hash: Iw/la6HcBhB+r91MO78ZZVxLuoCL6ijd7G5jbxPkzoc=) 2: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: tMpre+MZxLR5ON6NNmXKYRn2JHOCOghwsK548yy7sUU=) 3: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: 2fUOKnvs8nbAYX5IeKT2gpYQH5FYCwB7JlXdvrKSoYU=) 4: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: MoX5ilaIoQNT0YRgbynks7+fFHyOxX0urPfftQqHjU8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.crl rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:95:d7:0f:a9:de:7d:28:15:88:44:14:94:b3:d8:df:ba:1a:e7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096782C6E108EAAEE59692E8A1E468AA698658F3 Validity Not Before: Jun 17 04:23:14 2026 GMT Not After : Jun 18 05:01:14 2026 GMT Subject: CN=513CC0315E88E6891AD151DFA2905285C38ED6E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:57:f4:56:fd:58:dd:f5:73:52:d0:7e:2d: 54:8a:ce:d6:dd:76:e6:10:e4:c9:c4:75:83:7a:ad: 37:e6:48:43:ce:d4:34:0e:e9:a2:b1:3f:83:48:6a: 84:7e:bc:2c:dd:cb:c2:08:47:ba:7e:a3:9c:41:40: 4d:89:f8:39:ef:69:8d:78:f9:86:54:61:bc:bd:08: 35:00:7e:d6:83:67:86:d4:27:64:24:68:a9:21:95: 3f:ca:60:ed:6d:2c:89:8c:03:fc:87:25:56:bb:70: d8:35:39:4a:28:1e:f7:35:08:18:60:22:90:b5:fb: 9d:a3:ac:76:c8:31:63:98:e8:0e:d6:00:f6:19:09: 3f:20:5e:de:b7:8e:be:f4:31:72:8e:88:ce:46:d5: df:76:76:d0:b3:84:17:56:c8:09:a4:96:e9:e3:ce: 47:80:c6:f1:62:69:28:8f:c7:47:3d:f6:53:90:04: 97:ac:a7:02:40:bb:a3:6a:be:77:68:fe:d4:d9:9d: 26:49:de:ce:e1:09:cb:b0:f8:92:de:29:7f:9d:8f: 02:e0:a9:c5:b0:5e:9a:36:b3:f4:1d:4a:86:67:68: 24:4b:7c:64:81:97:b1:c9:da:53:04:23:00:e6:db: ae:59:1d:73:20:7f:4b:fb:54:71:6b:c2:32:e9:b0: d8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3C:C0:31:5E:88:E6:89:1A:D1:51:DF:A2:90:52:85:C3:8E:D6:E4 X509v3 Authority Key Identifier: keyid:09:67:82:C6:E1:08:EA:AE:E5:96:92:E8:A1:E4:68:AA:69:86:58:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a4:3d:d0:ae:60:a4:a7:a0:c8:fc:0b:ba:17:e0:c8:59:44: 35:fb:62:6a:11:69:96:b7:00:18:99:17:c2:f0:b8:49:5f:e8: aa:ae:9d:a6:5b:a8:70:30:27:6b:c8:2d:4c:de:90:e7:16:f0: be:b6:a6:54:67:59:36:d8:b0:e6:43:2a:ae:6e:3e:c1:14:76: 8b:56:a5:5f:f4:0a:5f:eb:db:fc:17:3c:e0:d0:8e:16:26:7e: e8:dc:2b:48:04:cc:35:bf:93:8a:69:2e:98:24:09:08:aa:54: f4:5d:ef:74:d4:29:ba:42:a2:61:d5:5a:cf:91:1f:a4:83:ee: 18:1e:14:9a:51:43:64:54:5b:f7:d0:27:17:91:02:00:53:85: 15:78:2e:bc:ee:65:91:ce:04:50:a1:e0:d5:2c:14:33:5f:da: 89:f6:72:ce:18:58:f0:25:f3:16:66:55:e0:32:fc:78:91:2d: d3:41:e6:f8:17:12:44:24:13:65:b3:69:0a:d6:0f:a6:2e:b8: 47:c8:a2:91:d0:43:e7:8f:46:cb:3a:43:c1:b0:0b:14:be:bd: 00:af:db:c5:15:84:5e:0a:1a:10:2f:d3:93:19:36:09:b9:43: 83:7e:bc:75:15:fe:c8:51:d5:2e:2c:5e:35:d0:af:36:71:71: 7c:d6:4a:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZXXD6nefSgViEQUlLPY37oa59kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk2NzgyQzZFMTA4RUFBRUU1OTY5MkU4QTFFNDY4QUE2 OTg2NThGMzAeFw0yNjA2MTcwNDIzMTRaFw0yNjA2MTgwNTAxMTRaMDMxMTAvBgNV BAMTKDUxM0NDMDMxNUU4OEU2ODkxQUQxNTFERkEyOTA1Mjg1QzM4RUQ2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFdFf0Vv1Y3fVzUtB+LVSKztbd duYQ5MnEdYN6rTfmSEPO1DQO6aKxP4NIaoR+vCzdy8IIR7p+o5xBQE2J+DnvaY14 +YZUYby9CDUAftaDZ4bUJ2QkaKkhlT/KYO1tLImMA/yHJVa7cNg1OUooHvc1CBhg IpC1+52jrHbIMWOY6A7WAPYZCT8gXt63jr70MXKOiM5G1d92dtCzhBdWyAmklunj zkeAxvFiaSiPx0c99lOQBJespwJAu6Nqvndo/tTZnSZJ3s7hCcuw+JLeKX+djwLg qcWwXpo2s/QdSoZnaCRLfGSBl7HJ2lMEIwDm265ZHXMgf0v7VHFrwjLpsNgRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUTzAMV6I5oka0VHfopBShcOO1uQwHwYDVR0j BBgwFoAUCWeCxuEI6q7llpLooeRoqmmGWPMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI1MGJhYzQtYTZhNy00NTZjLTg1MGYtNjBkY2RlNjdiNDk5LzAvMDk2NzgyQzZF MTA4RUFBRUU1OTY5MkU4QTFFNDY4QUE2OTg2NThGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTY3ODJDNkUxMDhFQUFFRTU5NjkyRThBMUU0NjhBQTY5ODY1 OEYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1 MGYtNjBkY2RlNjdiNDk5LzAvMDk2NzgyQzZFMTA4RUFBRUU1OTY5MkU4QTFFNDY4 QUE2OTg2NThGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJykPdCuYKSnoMj8C7oX4MhZRDX7YmoRaZa3 ABiZF8LwuElf6KqunaZbqHAwJ2vILUzekOcW8L62plRnWTbYsOZDKq5uPsEUdotW pV/0Cl/r2/wXPODQjhYmfujcK0gEzDW/k4ppLpgkCQiqVPRd73TUKbpComHVWs+R H6SD7hgeFJpRQ2RUW/fQJxeRAgBThRV4LrzuZZHOBFCh4NUsFDNf2on2cs4YWPAl 8xZmVeAy/HiRLdNB5vgXEkQkE2WzaQrWD6YuuEfIopHQQ+ePRss6Q8GwCxS+vQCv 28UVhF4KGhAv05MZNgm5Q4N+vHUV/shR1S4sXjXQrzZxcXzWSko= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:24 2026 by rpki-client