$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft File: C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft (raw, json) Hash identifier: ceWhhcHlBUDBsUt45rMerFBV377hL9twkKfh4GHmIE0= Subject key identifier: A4:69:91:1B:C5:D8:AE:C2:29:8C:CD:90:BF:34:7D:96:D3:83:C3:DE Authority key identifier: C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B Certificate issuer: /CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B Certificate serial: 52050B01F9F896D33372AA28FEBA979513C16E7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 14:52:11 +0000 Manifest this update: Tue 16 Jun 2026 14:47:11 +0000 Manifest next update: Wed 17 Jun 2026 16:44:11 +0000 Files and hashes: 1: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: XztwHCHvbhSLiUv5Dcefs2qJFPWKrlIiunIE1+CwfUw=) 2: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: fWxyuXffWj1jqvHAsWNRbofSjd5DXyF8+uTLX0AR1zI=) 3: C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl (hash: DnilD3bQPCHnLlCuXk2T1YqSqWKwHoyuOwjA0DMZAgY=) 4: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: q3yJjhYDYiQshTjZtvHBXc0EumicuvHb+zQLM8AeoEQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:05:0b:01:f9:f8:96:d3:33:72:aa:28:fe:ba:97:95:13:c1:6e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B Validity Not Before: Jun 16 14:47:11 2026 GMT Not After : Jun 17 16:44:11 2026 GMT Subject: CN=A469911BC5D8AEC2298CCD90BF347D96D383C3DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1f:5c:7f:6c:ce:21:77:44:c3:97:94:d8:15: 42:67:25:77:2e:d2:98:9e:c3:36:f7:d4:a0:ad:97: 81:fb:3a:53:fa:57:49:ac:87:2f:93:6c:ac:f1:4c: c3:d9:31:b2:c7:f3:a7:17:f7:b9:1c:e1:54:65:e4: 18:b5:ba:44:8c:b1:80:06:b7:98:a7:d3:18:b9:8c: 0a:2b:ed:19:50:81:51:3a:0a:fc:ad:7a:67:00:77: af:93:bc:eb:f0:cf:93:b3:86:60:60:41:35:a8:e3: 61:db:c7:e5:e9:99:31:9b:b6:8b:6c:26:b8:4b:3b: 38:c9:df:4b:e7:b3:70:4d:99:ac:c2:0f:91:2f:35: db:bf:8b:3f:65:f5:58:68:ee:c7:ce:a0:22:13:c6: d0:aa:09:7a:22:b6:29:d0:3b:fd:a9:5c:c8:a3:db: a1:81:a0:b4:52:80:31:86:b0:cc:b5:1d:f7:1c:dc: 6f:25:2c:ae:61:59:35:4c:8b:cb:37:08:de:79:9c: e8:f6:3f:56:d9:d2:de:5c:32:ca:cf:18:a2:eb:44: 70:96:b0:5e:63:e5:1a:99:49:96:50:b5:23:2f:ca: cb:9a:17:da:b4:2c:94:0b:d7:ae:a2:8b:41:a6:5d: f0:00:51:29:bc:1e:dd:96:6b:6e:7b:5a:24:02:91: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:69:91:1B:C5:D8:AE:C2:29:8C:CD:90:BF:34:7D:96:D3:83:C3:DE X509v3 Authority Key Identifier: keyid:C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:aa:90:58:20:7a:c3:bb:7d:8f:d6:78:84:22:4c:dd:8a:1c: c7:76:58:54:85:e4:68:46:f2:32:59:77:f1:a5:f8:09:8f:5b: f6:e6:19:3c:88:7f:94:22:46:7d:91:e6:5f:fd:f0:f0:02:b9: 62:f3:ee:13:da:06:b6:16:ef:83:ba:29:67:04:2f:ed:13:be: 41:33:50:7d:f2:b3:bb:d0:67:d4:b5:24:b7:8d:71:11:c1:a1: f4:08:22:fd:03:40:32:ce:70:d7:41:42:28:55:60:a6:2f:2c: 9a:1a:e6:5a:b3:fd:6c:4a:90:92:4b:6a:6a:9f:2b:88:37:5d: d3:2a:8c:36:13:b9:fe:e3:43:43:fe:db:69:5f:42:f9:ff:8c: a5:2c:66:f8:6c:92:1d:2c:25:f3:45:50:40:9b:52:23:e5:81: c3:8a:e7:f8:6e:7b:4c:7c:f8:9f:83:3e:4c:62:f7:6b:3f:e6: da:85:94:47:84:87:87:2b:6f:b4:bd:f3:45:30:c7:bf:12:de: 2b:2c:9c:c9:16:4d:b8:bc:70:5f:00:9c:79:84:b6:d5:d6:c9: dc:60:a8:5f:b4:c1:25:7f:77:8e:1a:0f:45:c9:8e:0b:b3:15: ca:95:13:f5:73:74:03:98:73:1d:6c:d2:41:98:b3:72:a0:6d: 48:74:df:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUgULAfn4ltMzcqoo/rqXlRPBbn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1ODk5OUJDRDQyRkRBMTkwNzAzNTI1RkEzREIwMDM2 RUY4REM0QjAeFw0yNjA2MTYxNDQ3MTFaFw0yNjA2MTcxNjQ0MTFaMDMxMTAvBgNV BAMTKEE0Njk5MTFCQzVEOEFFQzIyOThDQ0Q5MEJGMzQ3RDk2RDM4M0MzREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4H1x/bM4hd0TDl5TYFUJnJXcu 0piewzb31KCtl4H7OlP6V0mshy+TbKzxTMPZMbLH86cX97kc4VRl5Bi1ukSMsYAG t5in0xi5jAor7RlQgVE6CvytemcAd6+TvOvwz5OzhmBgQTWo42Hbx+XpmTGbtots JrhLOzjJ30vns3BNmazCD5EvNdu/iz9l9Vho7sfOoCITxtCqCXoitinQO/2pXMij 26GBoLRSgDGGsMy1Hfcc3G8lLK5hWTVMi8s3CN55nOj2P1bZ0t5cMsrPGKLrRHCW sF5j5RqZSZZQtSMvysuaF9q0LJQL166ii0GmXfAAUSm8Ht2Wa257WiQCkXvXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpGmRG8XYrsIpjM2QvzR9ltODw94wHwYDVR0j BBgwFoAUyFiZm81C/aGQcDUl+j2wA2743EswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQwOTRkM2UtMDg5Yy00YzY4LTgwYTItNTZiNWNiZmMxMDNkLzAvQzg1ODk5OUJD RDQyRkRBMTkwNzAzNTI1RkEzREIwMDM2RUY4REM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODU4OTk5QkNENDJGREExOTA3MDM1MjVGQTNEQjAwMzZFRjhE QzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQzg1ODk5OUJDRDQyRkRBMTkwNzAzNTI1RkEzREIw MDM2RUY4REM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWqkFggesO7fY/WeIQiTN2KHMd2WFSF5GhG 8jJZd/Gl+AmPW/bmGTyIf5QiRn2R5l/98PACuWLz7hPaBrYW74O6KWcEL+0TvkEz UH3ys7vQZ9S1JLeNcRHBofQIIv0DQDLOcNdBQihVYKYvLJoa5lqz/WxKkJJLamqf K4g3XdMqjDYTuf7jQ0P+22lfQvn/jKUsZvhskh0sJfNFUECbUiPlgcOK5/hue0x8 +J+DPkxi92s/5tqFlEeEh4crb7S980Uwx78S3issnMkWTbi8cF8AnHmEttXWydxg qF+0wSV/d44aD0XJjguzFcqVE/VzdAOYcx1s0kGYs3KgbUh038M= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:27 2026 by rpki-client