$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft File: C7CDFA6BC067C7A495919AAD0E26180B86353954.mft (raw, json) Hash identifier: 7FR8hiWl/GlyS5p8Z80sC/xKHMa9wjz14M3epqo8xp0= Subject key identifier: 2B:F5:66:64:D9:50:94:75:64:97:41:9E:76:77:B6:66:98:C4:61:7B Authority key identifier: C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 Certificate issuer: /CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Certificate serial: 54B8EAE2ABAC04D6813427D71A3F1E05B153886B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:36:36 +0000 Manifest this update: Tue 16 Jun 2026 22:31:36 +0000 Manifest next update: Thu 18 Jun 2026 02:19:36 +0000 Files and hashes: 1: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: pSVzT2vio9bf7LUyfGmLirM4hVE1PKigRBwf0BFNg8U=) 2: C7CDFA6BC067C7A495919AAD0E26180B86353954.crl (hash: 5Gu7QEaGqX5IB/Sq8vNAhA8aDc00lHhaBuIWMharQOk=) 3: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: 0iLOUhfmWoIB+lxiDVooYY80mjdqjMFktAq2sVeC4n8=) 4: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: LgH9oXeBcuQFeopdycllX9ZwgANBmbEdowpLFMRb868=) 5: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: I79Q34o1f2vuvFl40hYKqigyJvsHaAMckuqi63LU5sQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b8:ea:e2:ab:ac:04:d6:81:34:27:d7:1a:3f:1e:05:b1:53:88:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Validity Not Before: Jun 16 22:31:36 2026 GMT Not After : Jun 18 02:19:36 2026 GMT Subject: CN=2BF56664D95094756497419E7677B66698C4617B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3f:e4:81:8a:a1:97:36:60:89:96:7b:4b:37: 25:a6:70:23:66:92:92:02:c7:ca:69:e4:95:9a:c6: 92:64:0c:7d:e2:e8:3a:29:0f:54:b0:9f:85:3d:40: 15:64:57:45:00:c7:4d:67:6d:dd:0d:e1:26:40:cb: e9:8a:48:8e:54:99:07:2e:65:bd:10:f5:95:50:21: 75:e7:5d:44:67:45:bd:fa:00:00:aa:96:c6:b1:20: ed:86:44:da:67:c9:8a:11:a1:1f:dc:49:a6:28:69: 52:7f:38:f8:fc:0d:96:b4:b9:5c:40:14:ca:11:34: 33:05:b5:10:c5:7a:ac:f1:91:c6:fd:78:f0:78:0a: 5f:c0:12:a5:36:51:a1:b3:c9:78:2d:1c:5a:05:b4: c6:51:21:92:e9:36:a1:3e:92:b0:a4:4a:a6:b5:9f: 27:d0:de:d8:50:2c:71:66:3f:4a:a6:10:43:18:6a: bf:fa:fe:7c:d3:77:f1:76:85:90:b7:47:05:ef:fb: e0:32:b5:e4:66:c1:c3:23:3e:9b:04:f7:24:36:ef: 7d:1f:75:82:f8:f9:81:77:20:39:22:18:cf:13:fa: c9:27:71:b5:4c:64:f7:eb:55:6d:b0:da:fc:91:d6: 4a:b8:f1:ba:1b:ae:f8:00:17:55:fc:36:aa:76:a2: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F5:66:64:D9:50:94:75:64:97:41:9E:76:77:B6:66:98:C4:61:7B X509v3 Authority Key Identifier: keyid:C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:46:d9:1e:5b:00:ec:b4:44:c2:71:98:cb:f5:f7:c8:b7:8e: 6a:f8:bc:1e:17:ae:0a:13:ef:8d:ed:47:9c:b5:c4:0a:fc:08: c9:54:69:2b:da:c5:f6:34:03:64:24:48:f9:35:34:ff:7d:40: ef:e6:2f:c0:bc:08:ce:5a:02:47:8c:ef:01:e4:bb:05:df:88: 3d:0b:fe:d1:b9:ef:11:82:19:bf:80:82:6d:79:37:4b:59:ef: ef:64:4b:3e:b2:9d:61:95:23:1b:ad:03:16:ba:4a:e1:ab:cd: 69:fa:27:2a:da:31:d9:f9:54:91:a0:e0:9d:7d:fc:61:21:e8: 92:dd:87:bb:25:68:cc:b9:87:70:e5:b8:fa:f5:f3:ef:ae:48: 21:b6:5c:9f:5a:19:03:09:d0:b5:2c:e2:f3:97:c2:a6:9d:a1: fc:0f:bd:0f:90:d5:bd:ad:60:6d:e1:1c:ec:03:4c:78:e5:4d: 9e:87:dc:b4:f3:ed:d6:1b:41:12:d6:39:d7:0f:5d:16:8a:20: 24:4d:7d:eb:fd:54:12:d1:74:40:bc:f7:a3:5d:e2:78:95:13: ec:b4:82:80:fd:8b:41:ac:7a:77:44:89:42:14:ef:10:bd:d4: 62:52:a4:41:cc:00:16:82:61:a0:6a:86:33:a4:4a:93:20:17: 6d:ca:37:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVLjq4qusBNaBNCfXGj8eBbFTiGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4 NjM1Mzk1NDAeFw0yNjA2MTYyMjMxMzZaFw0yNjA2MTgwMjE5MzZaMDMxMTAvBgNV BAMTKDJCRjU2NjY0RDk1MDk0NzU2NDk3NDE5RTc2NzdCNjY2OThDNDYxN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcP+SBiqGXNmCJlntLNyWmcCNm kpICx8pp5JWaxpJkDH3i6DopD1Swn4U9QBVkV0UAx01nbd0N4SZAy+mKSI5UmQcu Zb0Q9ZVQIXXnXURnRb36AACqlsaxIO2GRNpnyYoRoR/cSaYoaVJ/OPj8DZa0uVxA FMoRNDMFtRDFeqzxkcb9ePB4Cl/AEqU2UaGzyXgtHFoFtMZRIZLpNqE+krCkSqa1 nyfQ3thQLHFmP0qmEEMYar/6/nzTd/F2hZC3RwXv++AyteRmwcMjPpsE9yQ2730f dYL4+YF3IDkiGM8T+skncbVMZPfrVW2w2vyR1kq48bobrvgAF1X8Nqp2ojJZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK/VmZNlQlHVkl0Gedne2ZpjEYXswHwYDVR0j BBgwFoAUx836a8Bnx6SVkZqtDiYYC4Y1OVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ2NGJmNmEtNDMwMi00NjBmLTk2NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJD MDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4NjM1Mzk1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0NERkE2QkMwNjdDN0E0OTU5MTlBQUQwRTI2MTgwQjg2MzUz OTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4 MEI4NjM1Mzk1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBG2R5bAOy0RMJxmMv198i3jmr4vB4XrgoT 743tR5y1xAr8CMlUaSvaxfY0A2QkSPk1NP99QO/mL8C8CM5aAkeM7wHkuwXfiD0L /tG57xGCGb+Agm15N0tZ7+9kSz6ynWGVIxutAxa6SuGrzWn6JyraMdn5VJGg4J19 /GEh6JLdh7slaMy5h3DluPr18++uSCG2XJ9aGQMJ0LUs4vOXwqadofwPvQ+Q1b2t YG3hHOwDTHjlTZ6H3LTz7dYbQRLWOdcPXRaKICRNfev9VBLRdEC896Nd4niVE+y0 goD9i0GsendEiUIU7xC91GJSpEHMABaCYaBqhjOkSpMgF23KN7w= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:05 2026 by rpki-client