$ rpki-client -vvf rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft File: C352DFD797F0814103500130B1A6B6876355C3DF.mft (raw, json) Hash identifier: hUbqIzaGXwfq/91C7kdxp7S1CVigpl6UBSo0jIztjvw= Subject key identifier: 7C:24:F7:66:1E:12:76:1C:F3:9E:80:BD:D4:6C:D2:93:75:FE:45:0B Authority key identifier: C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF Certificate issuer: /CN=C352DFD797F0814103500130B1A6B6876355C3DF Certificate serial: 5D661FD8F70BF4B12F213D96EB2E4CABC424F158 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:47:11 +0000 Manifest this update: Wed 17 Jun 2026 07:42:11 +0000 Manifest next update: Thu 18 Jun 2026 08:12:11 +0000 Files and hashes: 1: C352DFD797F0814103500130B1A6B6876355C3DF.crl (hash: V5UvZ1ZYORHJz7JThSsP53Kbj7Xtb/FNIr7jmkYRCgg=) 2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: zyRn7jFyehFEgsKHr+RevPoVMdyoLH00YGiqg3O4fKo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:66:1f:d8:f7:0b:f4:b1:2f:21:3d:96:eb:2e:4c:ab:c4:24:f1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C352DFD797F0814103500130B1A6B6876355C3DF Validity Not Before: Jun 17 07:42:11 2026 GMT Not After : Jun 18 08:12:11 2026 GMT Subject: CN=7C24F7661E12761CF39E80BDD46CD29375FE450B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:21:94:80:28:7a:39:7d:88:39:4b:35:6e:28: 2b:4b:72:53:49:30:68:11:f9:3f:fb:20:96:8c:05: 24:02:e7:e0:62:bc:6e:79:bf:1b:03:45:e5:1c:95: 5d:27:7a:41:d7:51:02:8b:62:b6:5c:cd:aa:60:c4: d9:2c:bf:d9:e7:bf:5b:4c:af:44:6f:b7:08:f8:8b: f3:ad:56:d0:8f:42:d2:63:17:f0:5d:7c:c3:a1:65: c4:4a:16:21:67:71:13:fb:f7:c8:74:a7:8c:24:69: 24:7a:1c:92:98:76:7b:cd:41:7c:97:f7:41:41:ee: 61:66:36:1a:9d:b8:07:d6:0d:63:81:7e:fa:e7:e8: 78:cb:95:3c:74:9c:09:bd:a7:b1:eb:89:ef:2e:1f: 3d:c0:c6:01:58:b3:1f:31:a3:ff:5d:84:fa:44:1e: ab:6d:e9:cd:17:63:97:b5:91:62:53:87:b8:49:ba: a8:05:11:56:1b:dd:9e:a6:59:c4:18:75:fc:19:9a: 1f:9a:66:95:96:99:7e:75:39:ef:8b:a5:fd:30:b5: d1:23:3d:ce:e0:bc:e1:4d:1d:a0:c7:5b:2e:c3:6d: 46:29:66:c4:60:e1:22:57:ee:99:ee:e2:53:73:b9: db:f1:0b:7d:7b:75:94:51:71:50:02:00:8c:e5:a3: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:24:F7:66:1E:12:76:1C:F3:9E:80:BD:D4:6C:D2:93:75:FE:45:0B X509v3 Authority Key Identifier: keyid:C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a4:78:eb:f6:d9:10:42:6a:64:60:4f:5a:f8:f8:cc:e9:34: 5c:55:d3:b4:04:b3:e6:76:93:68:74:50:ec:a7:a7:d5:11:75: 12:36:ea:fd:b2:79:17:65:37:bd:bd:62:a3:a3:3c:b3:88:0f: 83:fd:78:62:6f:19:d8:20:1b:41:da:ef:1b:8d:b4:64:cf:7f: e9:5b:ab:94:ba:94:0b:ef:7c:14:bc:10:c3:34:92:83:a5:a9: 40:39:e1:e2:97:00:0e:b0:95:58:0a:9e:ba:1c:f3:fe:23:d9: 53:4b:ba:d9:40:9a:65:7d:b1:f5:e6:ab:82:f2:90:fe:78:16: a7:44:94:5c:1a:d5:0d:31:6f:28:9d:12:c0:36:61:54:27:4e: fd:c8:e2:7e:b3:33:16:b0:1e:ef:96:6c:ba:4a:aa:ea:fd:b4: 69:5f:ba:73:35:98:bf:7f:0c:e7:69:bb:b9:d5:af:8a:f9:55: 3e:9b:84:75:d8:a1:67:bd:ed:10:e9:60:04:ad:d2:03:bf:63: 96:30:ee:5b:fa:a9:51:d2:19:ff:2b:48:f1:f7:b6:a2:89:9d: b5:4e:dd:f1:7a:5b:ca:16:2d:23:05:fc:23:07:cd:51:b9:9e: 66:6d:d1:48:b0:d5:e7:f2:cb:02:9c:df:2a:7f:1e:f4:3a:67: 09:30:93:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWYf2PcL9LEvIT2W6y5Mq8Qk8VgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2 MzU1QzNERjAeFw0yNjA2MTcwNzQyMTFaFw0yNjA2MTgwODEyMTFaMDMxMTAvBgNV BAMTKDdDMjRGNzY2MUUxMjc2MUNGMzlFODBCREQ0NkNEMjkzNzVGRTQ1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCIZSAKHo5fYg5SzVuKCtLclNJ MGgR+T/7IJaMBSQC5+BivG55vxsDReUclV0nekHXUQKLYrZczapgxNksv9nnv1tM r0Rvtwj4i/OtVtCPQtJjF/BdfMOhZcRKFiFncRP798h0p4wkaSR6HJKYdnvNQXyX 90FB7mFmNhqduAfWDWOBfvrn6HjLlTx0nAm9p7Hrie8uHz3AxgFYsx8xo/9dhPpE Hqtt6c0XY5e1kWJTh7hJuqgFEVYb3Z6mWcQYdfwZmh+aZpWWmX51Oe+Lpf0wtdEj Pc7gvOFNHaDHWy7DbUYpZsRg4SJX7pnu4lNzudvxC317dZRRcVACAIzlo7L9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfCT3Zh4SdhzznoC91GzSk3X+RQswHwYDVR0j BBgwFoAUw1Lf15fwgUEDUAEwsaa2h2NVw98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2N2VjMzMtNWE3Mi00YzY1LTlmZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5 N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2MzU1QzNERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMzUyREZENzk3RjA4MTQxMDM1MDAxMzBCMUE2QjY4NzYzNTVD M0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2 ODc2MzU1QzNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGkeOv22RBCamRgT1r4+MzpNFxV07QEs+Z2 k2h0UOynp9URdRI26v2yeRdlN729YqOjPLOID4P9eGJvGdggG0Ha7xuNtGTPf+lb q5S6lAvvfBS8EMM0koOlqUA54eKXAA6wlVgKnroc8/4j2VNLutlAmmV9sfXmq4Ly kP54FqdElFwa1Q0xbyidEsA2YVQnTv3I4n6zMxawHu+WbLpKqur9tGlfunM1mL9/ DOdpu7nVr4r5VT6bhHXYoWe97RDpYASt0gO/Y5Yw7lv6qVHSGf8rSPH3tqKJnbVO 3fF6W8oWLSMF/CMHzVG5nmZt0Uiw1efyywKc3yp/HvQ6Zwkwk3g= -----END CERTIFICATE-----Generated at Wed Jun 17 09:44:10 2026 by rpki-client