$ rpki-client -vvf rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft File: 872E319F800BA2C6B4EF39E67C02FA78A219796F.mft (raw, json) Hash identifier: hwvlFElsDHtIIaQxsUlq0kDoYlKTefmg0kfphbgf6+g= Subject key identifier: 1D:CE:7B:66:02:45:DE:42:A8:AB:8B:FF:A7:42:D2:57:C0:52:91:A6 Authority key identifier: 87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F Certificate issuer: /CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Certificate serial: 28C6864DA00E4398F17C6E9C0E1EAF01F4805E3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:03:04 +0000 Manifest this update: Tue 16 Jun 2026 23:58:04 +0000 Manifest next update: Thu 18 Jun 2026 01:52:04 +0000 Files and hashes: 1: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: OvRyOsYLEGBYlmYssyFcgvhpHbvbSdqAPtYyX5hS8EY=) 2: 872E319F800BA2C6B4EF39E67C02FA78A219796F.crl (hash: enh04rkdQTpfdKHJgsQ7NiqxF5ppXcJcpTB52+5TBo0=) 3: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: PGq4Tr5WM4VAyh7qw47RLuSMNDSTpWd9mtnYf8tmUA0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c6:86:4d:a0:0e:43:98:f1:7c:6e:9c:0e:1e:af:01:f4:80:5e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Validity Not Before: Jun 16 23:58:04 2026 GMT Not After : Jun 18 01:52:04 2026 GMT Subject: CN=1DCE7B660245DE42A8AB8BFFA742D257C05291A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:af:36:08:65:f4:65:5c:23:18:32:7e:0b:5d: 6c:15:a7:a8:ac:d9:aa:18:0e:25:44:af:12:0a:a7: 09:06:dc:5d:db:ee:43:26:85:2d:75:67:44:5f:ad: e2:a8:34:27:63:0e:ea:68:82:9b:55:38:3d:6f:b3: 50:7a:bc:d6:c3:bd:28:f4:68:a6:72:24:69:78:33: ac:37:d0:6d:2a:8c:c1:69:32:69:0a:58:5f:94:1b: 97:97:c5:68:64:a2:b3:1e:9f:17:ee:20:f3:74:47: 96:0b:9d:ab:0f:c1:40:49:7c:04:c6:6f:be:9a:4f: 20:92:55:b0:64:74:3f:ae:02:42:2e:07:4e:12:b9: 14:ea:5d:ae:c8:e4:ab:66:3f:77:4d:bb:30:a9:f8: ae:00:f6:98:8d:64:3a:f6:1f:df:0b:4d:79:16:06: 85:9a:09:ac:7d:65:15:cc:ae:58:9c:8b:f2:36:87: 9f:49:8d:53:70:ac:cc:80:b6:70:ba:e7:fa:a2:bd: fe:e9:38:31:46:4d:0a:9f:64:e9:70:9b:58:f9:f7: 3a:1f:b7:5b:51:12:97:31:f4:6a:13:db:68:f9:34: 54:cd:41:52:e2:f2:ea:6e:8f:ee:3d:16:67:08:ca: 31:ff:6c:46:ce:56:59:c2:8d:74:42:c7:7d:fb:c0: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CE:7B:66:02:45:DE:42:A8:AB:8B:FF:A7:42:D2:57:C0:52:91:A6 X509v3 Authority Key Identifier: keyid:87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f7:48:d6:db:67:4f:b6:ae:5d:fb:6e:ac:dc:f1:fa:bd:c4: ae:97:9a:f3:b2:36:3c:37:79:75:d8:b1:20:bb:c6:df:23:89: 9b:d2:bd:24:a0:b0:e2:9b:8c:90:fc:f0:b5:0a:40:c4:85:68: 3b:5d:6f:00:fb:10:ed:18:08:16:75:82:24:24:dc:4e:53:b3: f4:a8:53:2e:15:14:1f:7b:5c:84:da:8f:ca:49:f4:9f:89:be: 47:f9:cc:b4:a5:ee:e1:d0:a7:df:3d:44:e6:37:07:8f:29:97: 50:e6:45:ae:5f:b3:76:15:f6:d6:db:ed:1a:eb:54:63:90:df: 04:e9:e3:f8:f0:d1:2f:32:91:bc:e2:b0:3b:74:d3:53:30:13: 26:0f:15:80:72:cd:48:55:0f:30:c9:19:e6:c3:a5:c9:2c:8c: 29:53:80:3f:06:c2:a5:35:5d:88:8a:36:8b:3b:d2:90:25:50: 68:bd:66:c4:7d:16:b9:d7:75:85:55:22:09:6d:c5:d7:e0:b7: cf:3a:91:14:a5:db:e1:14:dc:3c:51:27:b3:47:c2:8e:38:7e: 32:b1:ae:f4:4a:96:a2:6b:61:f2:a7:39:cb:e5:9c:6b:57:13: 29:7c:a0:63:12:66:27:9d:36:af:df:30:e7:8f:39:64:75:f8: a8:3b:b7:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMaGTaAOQ5jxfG6cDh6vAfSAXjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhB MjE5Nzk2RjAeFw0yNjA2MTYyMzU4MDRaFw0yNjA2MTgwMTUyMDRaMDMxMTAvBgNV BAMTKDFEQ0U3QjY2MDI0NURFNDJBOEFCOEJGRkE3NDJEMjU3QzA1MjkxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGrzYIZfRlXCMYMn4LXWwVp6is 2aoYDiVErxIKpwkG3F3b7kMmhS11Z0RfreKoNCdjDupogptVOD1vs1B6vNbDvSj0 aKZyJGl4M6w30G0qjMFpMmkKWF+UG5eXxWhkorMenxfuIPN0R5YLnasPwUBJfATG b76aTyCSVbBkdD+uAkIuB04SuRTqXa7I5KtmP3dNuzCp+K4A9piNZDr2H98LTXkW BoWaCax9ZRXMrlici/I2h59JjVNwrMyAtnC65/qivf7pODFGTQqfZOlwm1j59zof t1tREpcx9GoT22j5NFTNQVLi8upuj+49FmcIyjH/bEbOVlnCjXRCx337wOxXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHc57ZgJF3kKoq4v/p0LSV8BSkaYwHwYDVR0j BBgwFoAUhy4xn4ALosa07znmfAL6eKIZeW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMwNWFiMzAtNTY1My00MmJjLTljM2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4 MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhBMjE5Nzk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzJFMzE5RjgwMEJBMkM2QjRFRjM5RTY3QzAyRkE3OEEyMTk3 OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZB NzhBMjE5Nzk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACH3SNbbZ0+2rl37bqzc8fq9xK6XmvOyNjw3 eXXYsSC7xt8jiZvSvSSgsOKbjJD88LUKQMSFaDtdbwD7EO0YCBZ1giQk3E5Ts/So Uy4VFB97XITaj8pJ9J+Jvkf5zLSl7uHQp989ROY3B48pl1DmRa5fs3YV9tbb7Rrr VGOQ3wTp4/jw0S8ykbzisDt001MwEyYPFYByzUhVDzDJGebDpcksjClTgD8GwqU1 XYiKNos70pAlUGi9ZsR9FrnXdYVVIgltxdfgt886kRSl2+EU3DxRJ7NHwo44fjKx rvRKlqJrYfKnOcvlnGtXEyl8oGMSZiedNq/fMOePOWR1+Kg7t/o= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:35 2026 by rpki-client