$ rpki-client -vvf rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft File: C687463B31D1E298020BCE05C39C8B4C428C4D37.mft (raw, json) Hash identifier: UKsrHhWQDHr3LmH6CkaCOgaN5OcAIPG+EI1Flk3Hsjg= Subject key identifier: 51:49:77:E3:80:C5:5F:B6:32:94:B6:45:10:D6:AF:53:77:2E:B6:7D Authority key identifier: C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 Certificate issuer: /CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Certificate serial: 2209B09D76BC7CD5253E6DE92BE4E1BE6B6CEAE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 14:21:59 +0000 Manifest this update: Sat 13 Jun 2026 14:16:59 +0000 Manifest next update: Sun 14 Jun 2026 17:47:59 +0000 Files and hashes: 1: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: YAhRb5MLLPBq7GLmsdwukjSGrR09NAZjb7/Q0IbDPGs=) 2: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: FMD2KI8vXpC0oPiEKe8NJdG3T8DkuTzlFnyK8zKEONk=) 3: C687463B31D1E298020BCE05C39C8B4C428C4D37.crl (hash: 108EhQAaOiCeZqVjL7mRXatMDi8p8DkpVJkgC+/cRVM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:09:b0:9d:76:bc:7c:d5:25:3e:6d:e9:2b:e4:e1:be:6b:6c:ea:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Validity Not Before: Jun 13 14:16:59 2026 GMT Not After : Jun 14 17:47:59 2026 GMT Subject: CN=514977E380C55FB63294B64510D6AF53772EB67D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:74:b7:4b:83:20:79:96:27:ec:8c:82:af:b6: d1:55:1d:8f:28:37:18:bc:53:a7:1a:85:3c:da:ad: 7f:c4:93:b7:0f:3e:0f:03:67:f0:a0:0e:2d:47:52: 0b:1b:4e:6d:c5:ff:e8:4d:f5:0d:44:fc:98:28:fe: ad:9b:4e:c6:28:c4:5e:da:80:52:b8:6f:28:92:c6: d3:c1:16:f6:83:9f:75:72:6b:1d:67:70:52:26:ab: 97:8c:d1:3d:6a:9b:ff:17:94:ee:04:8e:5e:62:75: 7e:a8:ab:64:57:c0:71:62:51:f5:57:a8:cf:fb:27: e7:51:05:67:87:b8:ea:f7:2b:db:c2:22:10:81:12: 14:83:0d:bf:2a:7f:c5:04:95:d1:fb:94:ca:d3:c5: c3:03:7e:60:ef:39:17:07:f8:3f:fe:8c:92:d5:86: fb:26:4b:40:a1:b3:7b:37:29:43:61:a0:8e:fb:1d: 06:d9:25:40:71:5c:0a:94:72:2e:31:fe:36:17:a1: ee:b1:7b:1c:57:cd:86:b0:76:86:a8:0a:d0:06:22: 89:dc:46:26:e7:60:c6:df:ac:1e:34:be:ac:1e:f5: aa:40:4e:49:e8:1a:47:03:b4:d0:05:b2:30:53:41: f4:3f:5c:6e:54:ac:f6:86:12:c5:2b:35:0f:5f:f5: 1d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:49:77:E3:80:C5:5F:B6:32:94:B6:45:10:D6:AF:53:77:2E:B6:7D X509v3 Authority Key Identifier: keyid:C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:74:3f:17:59:ff:e6:bb:96:45:b8:24:35:26:89:61:ca:e5: 55:3f:c7:da:e2:e1:9f:c2:7f:cd:44:66:74:6c:54:e4:f9:11: 24:e7:40:98:0b:57:e1:7b:d4:8c:b2:b9:94:61:a0:f5:a9:48: ca:80:6a:31:85:49:f0:74:b4:75:f5:87:a7:1c:27:83:d4:c0: 22:b1:4f:1f:b3:ea:f5:be:75:82:47:c4:45:93:d4:5b:41:0b: 15:89:1b:f3:c7:9d:c1:7a:86:4c:bc:95:9e:d0:9f:f4:d5:51: 73:32:83:83:16:a0:a2:ef:e0:3b:1f:a0:8b:4e:1a:b8:1d:38: 07:d3:33:56:20:d6:80:f2:2d:b2:16:65:a5:5f:35:a7:65:46: 00:a0:dd:68:ce:17:4c:1b:65:3f:f9:02:24:ef:92:58:53:7b: 10:48:3f:00:f6:99:79:c6:9b:49:e8:88:74:cb:fe:9f:df:e1: 9d:94:23:53:91:ee:aa:c7:12:a1:55:1d:55:73:bf:b4:d9:b8: 77:2b:e7:e3:90:d0:c5:9f:fc:a4:64:1a:65:1c:4f:f2:b7:34: 1c:9b:9e:ef:cb:7f:1e:84:c7:48:ff:e0:ed:56:7c:de:9c:c0: 46:a0:4c:27:79:f6:6d:e7:ea:43:79:a1:28:0a:7f:51:62:5a: e0:f6:09:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIgmwnXa8fNUlPm3pK+Thvmts6uMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0 MjhDNEQzNzAeFw0yNjA2MTMxNDE2NTlaFw0yNjA2MTQxNzQ3NTlaMDMxMTAvBgNV BAMTKDUxNDk3N0UzODBDNTVGQjYzMjk0QjY0NTEwRDZBRjUzNzcyRUI2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCndLdLgyB5lifsjIKvttFVHY8o Nxi8U6cahTzarX/Ek7cPPg8DZ/CgDi1HUgsbTm3F/+hN9Q1E/Jgo/q2bTsYoxF7a gFK4byiSxtPBFvaDn3Vyax1ncFImq5eM0T1qm/8XlO4Ejl5idX6oq2RXwHFiUfVX qM/7J+dRBWeHuOr3K9vCIhCBEhSDDb8qf8UEldH7lMrTxcMDfmDvORcH+D/+jJLV hvsmS0Chs3s3KUNhoI77HQbZJUBxXAqUci4x/jYXoe6xexxXzYawdoaoCtAGIonc RibnYMbfrB40vqwe9apATknoGkcDtNAFsjBTQfQ/XG5UrPaGEsUrNQ9f9R3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUUl344DFX7YylLZFENavU3cutn0wHwYDVR0j BBgwFoAUxodGOzHR4pgCC84Fw5yLTEKMTTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZjMDAzNzYtMzM1MS00ZmEzLTk3ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0Iz MUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0MjhDNEQzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg3NDYzQjMxRDFFMjk4MDIwQkNFMDVDMzlDOEI0QzQyOEM0 RDM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZjMDAzNzYtMzM1MS00ZmEzLTk3 ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhC NEM0MjhDNEQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIt0PxdZ/+a7lkW4JDUmiWHK5VU/x9ri4Z/C f81EZnRsVOT5ESTnQJgLV+F71IyyuZRhoPWpSMqAajGFSfB0tHX1h6ccJ4PUwCKx Tx+z6vW+dYJHxEWT1FtBCxWJG/PHncF6hky8lZ7Qn/TVUXMyg4MWoKLv4DsfoItO GrgdOAfTM1Yg1oDyLbIWZaVfNadlRgCg3WjOF0wbZT/5AiTvklhTexBIPwD2mXnG m0noiHTL/p/f4Z2UI1OR7qrHEqFVHVVzv7TZuHcr5+OQ0MWf/KRkGmUcT/K3NByb nu/Lfx6Ex0j/4O1WfN6cwEagTCd59m3n6kN5oSgKf1FiWuD2CWc= -----END CERTIFICATE-----Generated at Sat Jun 13 21:53:57 2026 by rpki-client