$ rpki-client -vvf rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft File: 000F2B21BC5C00475E698BA18880BB67B774EC97.mft (raw, json) Hash identifier: s7DLrQKB6ouk4enu5py0cOVCiJi3oLy0HNn7b6tOEmg= Subject key identifier: B7:7E:07:31:E4:8B:A4:6F:99:5F:CE:BA:1F:FE:13:C2:1D:35:AC:CB Authority key identifier: 00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97 Certificate issuer: /CN=000F2B21BC5C00475E698BA18880BB67B774EC97 Certificate serial: 5C0FD53B6A57712D2EDD13A6DE47A000B58850A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft Manifest number: 3C Signing time: Wed 17 Jun 2026 06:56:13 +0000 Manifest this update: Wed 17 Jun 2026 06:51:13 +0000 Manifest next update: Thu 18 Jun 2026 10:06:13 +0000 Files and hashes: 1: 000F2B21BC5C00475E698BA18880BB67B774EC97.crl (hash: ao+w3NLPDg2i5Rui9JtIF++s9yqQ1uWujGSjwu9LI/I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.crl rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0f:d5:3b:6a:57:71:2d:2e:dd:13:a6:de:47:a0:00:b5:88:50:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000F2B21BC5C00475E698BA18880BB67B774EC97 Validity Not Before: Jun 17 06:51:13 2026 GMT Not After : Jun 18 10:06:13 2026 GMT Subject: CN=B77E0731E48BA46F995FCEBA1FFE13C21D35ACCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:cf:a5:1e:70:fd:3d:64:ec:2a:54:35:3c: 22:7b:60:9e:08:8e:00:32:68:7f:bf:16:0e:30:0e: 5e:c5:06:44:e1:92:48:74:ca:78:73:2c:0a:4d:3e: 96:64:ca:38:ec:e5:4b:68:f0:75:b1:b3:42:9b:b9: cf:e0:cf:11:6f:42:25:28:94:5a:9d:19:ae:a3:54: 33:8d:4d:96:3e:96:65:1c:e8:b6:ba:54:f8:23:92: 43:04:e8:71:2d:8a:09:41:7e:b7:3f:fe:df:d4:3c: 83:b0:b6:17:6c:00:ac:ec:0f:92:94:cd:19:f2:50: a4:12:76:f3:73:68:e6:e2:08:5f:29:e5:e5:64:32: c7:5a:a4:22:fe:6a:90:09:86:ca:54:83:03:c6:77: d2:42:cb:6a:38:f1:59:24:0c:22:82:33:bb:6a:e2: 62:65:6f:6c:49:f1:c2:bc:6d:21:0d:9f:ff:b2:d9: 94:45:1f:85:6f:c3:f8:a8:71:ae:aa:72:b7:26:7b: 7b:02:ec:9f:1b:f6:93:fe:62:ee:1d:74:04:8e:12: db:70:fb:d3:d8:2d:13:39:bd:87:eb:f0:e5:74:dc: 13:62:ca:ae:d9:b1:a3:f4:d5:63:1d:e7:3b:ab:93: a2:bd:da:74:29:1a:e2:00:8e:4b:59:5c:88:27:6f: df:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7E:07:31:E4:8B:A4:6F:99:5F:CE:BA:1F:FE:13:C2:1D:35:AC:CB X509v3 Authority Key Identifier: keyid:00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:af:c0:a4:7f:a7:0c:57:38:49:37:92:0f:2f:f0:a1:43:96: b2:27:12:40:f0:5d:b6:95:57:2e:9a:f7:ac:26:10:91:66:7f: c8:19:0e:0a:91:b8:d4:bd:b0:2d:8a:54:22:ab:93:44:16:07: c3:48:e9:7f:3e:00:70:b8:36:38:bc:32:37:80:87:61:57:7c: 7c:5b:b1:61:19:1d:42:43:64:5a:e1:02:fc:b1:05:86:cf:4f: da:d6:47:57:a2:c7:e2:d2:f0:5c:e5:41:c4:86:21:6d:ad:a5: 8f:4f:98:00:1b:4d:15:6e:56:bb:d7:49:c7:ca:46:9f:ae:95: 6b:b2:2d:6a:62:ab:85:11:72:d7:a7:a6:c2:25:de:fa:f2:f6: d5:96:24:02:fc:45:7a:89:5b:9a:9f:e5:52:ca:a3:52:33:91: b0:9c:90:ba:24:52:0b:c3:0b:12:a5:fb:8c:3a:4b:2a:10:c8: 37:c0:c1:f1:e8:d3:03:20:5d:73:34:b3:70:85:69:f4:e3:1d: 06:9b:ad:f2:dd:5e:f6:1f:28:a9:8a:5b:4b:c6:ee:8a:68:e8: 94:97:7e:88:61:24:8e:d6:c2:0c:90:80:5b:9a:c6:74:91:1c: 82:58:fe:e7:8a:fd:d6:46:63:ef:ce:66:e2:93:b4:22:2d:69: 82:19:d2:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXA/VO2pXcS0u3ROm3kegALWIUKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwRjJCMjFCQzVDMDA0NzVFNjk4QkExODg4MEJCNjdC Nzc0RUM5NzAeFw0yNjA2MTcwNjUxMTNaFw0yNjA2MTgxMDA2MTNaMDMxMTAvBgNV BAMTKEI3N0UwNzMxRTQ4QkE0NkY5OTVGQ0VCQTFGRkUxM0MyMUQzNUFDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKs+lHnD9PWTsKlQ1PCJ7YJ4I jgAyaH+/Fg4wDl7FBkThkkh0ynhzLApNPpZkyjjs5Uto8HWxs0Kbuc/gzxFvQiUo lFqdGa6jVDONTZY+lmUc6La6VPgjkkME6HEtiglBfrc//t/UPIOwthdsAKzsD5KU zRnyUKQSdvNzaObiCF8p5eVkMsdapCL+apAJhspUgwPGd9JCy2o48VkkDCKCM7tq 4mJlb2xJ8cK8bSENn/+y2ZRFH4Vvw/ioca6qcrcme3sC7J8b9pP+Yu4ddASOEttw +9PYLRM5vYfr8OV03BNiyq7ZsaP01WMd5zurk6K92nQpGuIAjktZXIgnb9/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt34HMeSLpG+ZX866H/4Twh01rMswHwYDVR0j BBgwFoAUAA8rIbxcAEdeaYuhiIC7Z7d07JcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjI2MjViZjItZjNiNi00ZTljLTg1YjAtNTVlM2M1NDY3ZjljLzAvMDAwRjJCMjFC QzVDMDA0NzVFNjk4QkExODg4MEJCNjdCNzc0RUM5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDBGMkIyMUJDNUMwMDQ3NUU2OThCQTE4ODgwQkI2N0I3NzRF Qzk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjI2MjViZjItZjNiNi00ZTljLTg1 YjAtNTVlM2M1NDY3ZjljLzAvMDAwRjJCMjFCQzVDMDA0NzVFNjk4QkExODg4MEJC NjdCNzc0RUM5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuvwKR/pwxXOEk3kg8v8KFDlrInEkDwXbaV Vy6a96wmEJFmf8gZDgqRuNS9sC2KVCKrk0QWB8NI6X8+AHC4Nji8MjeAh2FXfHxb sWEZHUJDZFrhAvyxBYbPT9rWR1eix+LS8FzlQcSGIW2tpY9PmAAbTRVuVrvXScfK Rp+ulWuyLWpiq4URctenpsIl3vry9tWWJAL8RXqJW5qf5VLKo1IzkbCckLokUgvD CxKl+4w6SyoQyDfAwfHo0wMgXXM0s3CFafTjHQabrfLdXvYfKKmKW0vG7opo6JSX fohhJI7WwgyQgFuaxnSRHIJY/ueK/dZGY+/OZuKTtCItaYIZ0os= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:40 2026 by rpki-client