$ rpki-client -vvf rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft File: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft (raw, json) Hash identifier: ZsSD9TKNoTFU62X5gcDAjQSucEQ0AgtK9hJI88w2LG4= Subject key identifier: 59:8F:F2:3E:B9:B0:70:69:04:91:F8:94:9B:F9:AF:65:10:50:FF:20 Authority key identifier: 03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 Certificate issuer: /CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Certificate serial: 4A012CA3B24DEECEE975D86856F6BC0CCC662B25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:32:44 +0000 Manifest this update: Tue 16 Jun 2026 19:27:44 +0000 Manifest next update: Wed 17 Jun 2026 23:05:44 +0000 Files and hashes: 1: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl (hash: A75tw6ucMj26cqg4NQsZThLyuKUmAIHhpqSiqayGUTk=) 2: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: bAYJsjQtRu+aYVmaWgkshTJ01ed0qF6a1B1HjXmthuw=) 3: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: W701XnzRp68q2ju50V8LTfQrMyEFAxYNvXNJc+815TM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:01:2c:a3:b2:4d:ee:ce:e9:75:d8:68:56:f6:bc:0c:cc:66:2b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Validity Not Before: Jun 16 19:27:44 2026 GMT Not After : Jun 17 23:05:44 2026 GMT Subject: CN=598FF23EB9B070690491F8949BF9AF651050FF20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:61:67:0b:c3:41:d6:17:09:cf:08:18:5c: 3f:d7:53:25:77:b5:4d:d9:dc:1c:3b:fa:33:c5:bc: c6:02:fa:06:0d:96:0e:52:0d:84:ab:4f:d4:92:84: a4:00:52:62:1d:38:cf:4b:76:86:91:0c:25:d7:47: 3c:f6:f2:a6:82:cd:9f:96:e7:1c:98:12:ed:b3:5f: ad:0b:83:95:90:04:df:10:7f:d8:4c:92:fd:1b:de: d5:bb:1e:e0:5d:a7:47:1e:a3:8e:14:9c:a6:4d:ce: e1:e1:cb:9a:e0:61:8b:c3:a7:2f:b0:1d:ee:cd:3e: b6:86:09:1a:b2:63:fa:3e:b8:e1:62:a9:77:af:37: d4:51:a5:30:20:a6:77:c0:4c:be:f9:05:22:f6:b2: 8b:59:2a:26:31:b1:46:f1:44:3a:aa:86:43:b3:ed: 9c:bf:29:38:d8:ad:4a:46:e8:32:64:ca:07:5d:28: b4:54:43:a6:8c:18:70:b9:6b:91:1c:71:ce:3e:c2: 14:12:26:6d:91:7f:eb:29:d7:93:ad:ca:64:3f:83: 9f:cf:c1:80:09:f5:75:6d:c7:26:f4:ed:a9:8f:05: 7d:07:e1:70:c3:27:5a:ef:5b:cd:ca:de:4e:f9:ef: e3:b0:53:5d:1a:6b:ea:ee:54:99:46:25:c9:ab:2d: 6c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8F:F2:3E:B9:B0:70:69:04:91:F8:94:9B:F9:AF:65:10:50:FF:20 X509v3 Authority Key Identifier: keyid:03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ea:cd:fd:21:41:14:f5:94:77:62:91:0e:21:90:4c:28:8e: 71:16:3f:0a:44:56:a8:da:40:f4:2f:3f:9b:7c:4f:fb:b6:89: 2d:83:32:15:2f:81:42:9a:2c:16:28:84:a2:41:c8:1e:8c:33: 95:68:e5:3d:c6:a4:78:86:39:1b:73:eb:a1:77:da:32:44:09: 18:37:27:57:b0:e2:47:00:45:5c:ca:70:57:1b:d2:ca:ad:0d: 7f:b0:1c:9b:60:3c:ca:e5:55:06:a7:0b:c8:da:d4:2f:76:fd: d8:2a:e8:c6:81:5a:da:4c:52:b9:02:ed:98:50:b1:eb:9f:a6: 30:48:00:56:1b:24:f2:a5:c2:69:3e:c7:82:01:96:4f:46:8a: 40:e4:be:55:c9:60:b7:e9:c7:01:ee:26:1e:7c:59:bf:45:0f: 4d:4d:b5:f8:bd:d2:97:29:67:e2:2a:b7:d0:b6:7d:ad:21:be: 66:fe:6d:e6:ae:97:5f:4e:37:1f:67:ca:8b:73:2a:f7:09:52: 69:5d:ef:45:0c:77:01:25:1a:93:f2:0b:5d:4c:cd:69:48:01: bf:52:ee:37:f3:c1:1b:86:a6:5a:47:14:d3:02:a9:5e:1d:fb: 0e:76:b2:fc:db:95:37:2b:d5:25:83:1d:f3:94:25:50:4e:6b: 63:50:ef:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSgEso7JN7s7pddhoVva8DMxmKyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVB MEE0RUM5MDAeFw0yNjA2MTYxOTI3NDRaFw0yNjA2MTcyMzA1NDRaMDMxMTAvBgNV BAMTKDU5OEZGMjNFQjlCMDcwNjkwNDkxRjg5NDlCRjlBRjY1MTA1MEZGMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXnWFnC8NB1hcJzwgYXD/XUyV3 tU3Z3Bw7+jPFvMYC+gYNlg5SDYSrT9SShKQAUmIdOM9LdoaRDCXXRzz28qaCzZ+W 5xyYEu2zX60Lg5WQBN8Qf9hMkv0b3tW7HuBdp0ceo44UnKZNzuHhy5rgYYvDpy+w He7NPraGCRqyY/o+uOFiqXevN9RRpTAgpnfATL75BSL2sotZKiYxsUbxRDqqhkOz 7Zy/KTjYrUpG6DJkygddKLRUQ6aMGHC5a5Eccc4+whQSJm2Rf+sp15OtymQ/g5/P wYAJ9XVtxyb07amPBX0H4XDDJ1rvW83K3k757+OwU10aa+ruVJlGJcmrLWz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWY/yPrmwcGkEkfiUm/mvZRBQ/yAwHwYDVR0j BBgwFoAUA87l7PXYKsQ1u4JWlgpgZaCk7JAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRlMWYzNzAtZjMxZi00N2VkLThhNDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNG NUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVBMEE0RUM5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wM0NFRTVFQ0Y1RDgyQUM0MzVCQjgyNTY5NjBBNjA2NUEwQTRF QzkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYw NjVBMEE0RUM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLqzf0hQRT1lHdikQ4hkEwojnEWPwpEVqja QPQvP5t8T/u2iS2DMhUvgUKaLBYohKJByB6MM5Vo5T3GpHiGORtz66F32jJECRg3 J1ew4kcARVzKcFcb0sqtDX+wHJtgPMrlVQanC8ja1C92/dgq6MaBWtpMUrkC7ZhQ seufpjBIAFYbJPKlwmk+x4IBlk9GikDkvlXJYLfpxwHuJh58Wb9FD01Ntfi90pcp Z+Iqt9C2fa0hvmb+beaul19ONx9nyotzKvcJUmld70UMdwElGpPyC11MzWlIAb9S 7jfzwRuGplpHFNMCqV4d+w52svzblTcr1SWDHfOUJVBOa2NQ744= -----END CERTIFICATE-----Generated at Wed Jun 17 12:51:13 2026 by rpki-client