$ rpki-client -vvf rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft File: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft (raw, json) Hash identifier: ZPbNLOuUgpmX8L3t/2rCC1FCKTngPI1EuTOz2QKMGvI= Subject key identifier: 49:20:F1:0A:DA:C3:6A:DD:7C:21:36:D7:8F:30:AF:2E:50:27:84:FC Authority key identifier: C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C Certificate issuer: /CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Certificate serial: 019B16851CBFA42BB07F038B1FC1D9C3EB9C4CE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:25:41 +0000 Manifest this update: Wed 17 Jun 2026 02:20:41 +0000 Manifest next update: Thu 18 Jun 2026 02:50:41 +0000 Files and hashes: 1: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl (hash: o+XZ5WmbQInllRfVFtXiJVklMa2f7dUU/uCcLXeZCTQ=) 2: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 67eHKrfnUV+o5bdh8AJ2qRePKkWRvK0EPB7qFbO8S2g=) 3: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: +rxATWvogOmG58QtPOl3t5ZnCAWvuClI+FAmj6pibBE=) 4: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: hbxsy5rYM2ui/y8kSQK8vRtJw5Os4ztQgliynYBu9Sg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:85:1c:bf:a4:2b:b0:7f:03:8b:1f:c1:d9:c3:eb:9c:4c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Validity Not Before: Jun 17 02:20:41 2026 GMT Not After : Jun 18 02:50:41 2026 GMT Subject: CN=4920F10ADAC36ADD7C2136D78F30AF2E502784FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:73:69:ed:42:a2:7d:6d:f1:e0:0e:a6:0e: e6:a7:75:df:56:9f:26:45:e5:03:a3:36:66:ec:6f: cf:c9:3a:0d:84:b7:fd:af:cf:bf:6a:f8:d5:50:a5: b4:43:82:ab:7e:5a:3d:44:15:a3:28:d8:88:03:38: 7c:49:87:a7:a7:dd:bb:16:06:cd:e1:c8:39:29:e9: 8e:ee:e0:5a:2e:95:f8:87:11:1a:6d:fb:8b:32:75: d8:11:2c:16:94:07:c8:2a:68:b1:1f:39:85:6d:99: b8:7d:44:17:3d:fb:56:e7:3b:7c:f1:54:f4:f2:e3: ae:99:d9:72:c5:8c:5b:5e:f5:51:6e:47:34:a8:2e: 11:cd:63:a8:dd:73:2c:36:cd:39:6f:2e:76:ca:f8: f5:a3:b0:f2:27:79:b1:86:af:c1:10:8f:6e:b2:27: e0:2e:36:69:7f:d1:ad:92:98:53:f9:74:04:f2:89: ba:66:09:4c:cf:b3:f0:2e:07:92:c8:18:59:6d:0a: f2:05:3a:05:8c:12:8d:ce:2c:f8:5e:59:74:13:f8: 25:2b:e7:48:ed:52:0f:3d:a9:ca:cb:32:ce:59:8c: 0f:25:0e:b7:cb:e0:57:07:37:ba:e8:56:bb:bc:45: 20:97:ef:b3:b9:b7:62:de:9e:2f:a8:1e:f9:ed:8a: 73:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:20:F1:0A:DA:C3:6A:DD:7C:21:36:D7:8F:30:AF:2E:50:27:84:FC X509v3 Authority Key Identifier: keyid:C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:65:fc:25:15:02:d4:57:c6:21:c3:19:4c:34:ac:e8:34:30: fe:82:cc:19:ca:f4:89:d4:9d:21:1c:79:88:2c:a6:d4:32:6d: 2e:99:a7:d3:39:9a:d4:b8:2b:36:e5:d7:57:83:a2:5c:da:e9: 12:99:c0:36:28:28:66:2f:d4:61:af:b2:2d:e6:e8:0f:ce:4f: 60:ec:c4:33:72:c1:6a:19:0d:5f:b4:4d:4d:dd:73:f7:a3:8c: 9f:16:e9:00:8a:fa:14:3e:95:1a:c7:7e:81:27:65:77:5f:0d: aa:b7:cf:00:49:d7:44:75:47:89:38:23:82:bd:d2:8f:2f:36: 64:77:87:22:2a:00:05:d7:b0:fc:c1:b3:55:59:49:7f:c4:dd: c1:3c:c5:0e:8a:85:b2:0d:fb:11:41:12:77:59:0f:96:cf:b9: 48:51:24:aa:4c:3a:67:a8:0d:82:39:cb:0f:3d:44:3a:fd:ee: 2e:65:d2:f0:a3:db:c3:92:19:29:96:da:54:55:4a:27:59:24: c3:59:2f:f8:bd:8b:7e:5a:21:ff:22:c9:ea:2b:74:fa:ef:f3: 8f:a2:45:10:ab:aa:31:18:16:d1:ee:d8:14:1e:78:12:38:56: 75:7d:df:2b:d3:b1:11:1e:f6:9e:52:34:29:22:7d:a5:6e:6c: 02:91:73:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZsWhRy/pCuwfwOLH8HZw+ucTOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzRE MEEwNTI2QzAeFw0yNjA2MTcwMjIwNDFaFw0yNjA2MTgwMjUwNDFaMDMxMTAvBgNV BAMTKDQ5MjBGMTBBREFDMzZBREQ3QzIxMzZENzhGMzBBRjJFNTAyNzg0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiXXNp7UKifW3x4A6mDuandd9W nyZF5QOjNmbsb8/JOg2Et/2vz79q+NVQpbRDgqt+Wj1EFaMo2IgDOHxJh6en3bsW Bs3hyDkp6Y7u4FoulfiHERpt+4syddgRLBaUB8gqaLEfOYVtmbh9RBc9+1bnO3zx VPTy466Z2XLFjFte9VFuRzSoLhHNY6jdcyw2zTlvLnbK+PWjsPInebGGr8EQj26y J+AuNml/0a2SmFP5dATyibpmCUzPs/AuB5LIGFltCvIFOgWMEo3OLPheWXQT+CUr 50jtUg89qcrLMs5ZjA8lDrfL4FcHN7roVru8RSCX77O5t2Leni+oHvntinMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSSDxCtrDat18ITbXjzCvLlAnhPwwHwYDVR0j BBgwFoAUwEM8/C4GSnf9yze0nCyTxNCgUmwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRjZjYzMmQtZDYxYS00ODI2LWI1NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMy RTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzREMEEwNTI2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMDQzM0NGQzJFMDY0QTc3RkRDQjM3QjQ5QzJDOTNDNEQwQTA1 MjZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkz QzREMEEwNTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJl/CUVAtRXxiHDGUw0rOg0MP6CzBnK9InU nSEceYgsptQybS6Zp9M5mtS4Kzbl11eDolza6RKZwDYoKGYv1GGvsi3m6A/OT2Ds xDNywWoZDV+0TU3dc/ejjJ8W6QCK+hQ+lRrHfoEnZXdfDaq3zwBJ10R1R4k4I4K9 0o8vNmR3hyIqAAXXsPzBs1VZSX/E3cE8xQ6KhbIN+xFBEndZD5bPuUhRJKpMOmeo DYI5yw89RDr97i5l0vCj28OSGSmW2lRVSidZJMNZL/i9i35aIf8iyeordPrv84+i RRCrqjEYFtHu2BQeeBI4VnV93yvTsREe9p5SNCkifaVubAKRcwY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:45:21 2026 by rpki-client