$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft File: D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft (raw, json) Hash identifier: nCRLFke+bjinvAZ2BS3GvhGqt0SgfXkxhk/R2okvGWs= Subject key identifier: 6B:34:25:86:57:2C:25:3D:77:BF:A8:31:24:C3:FC:80:B4:38:B9:DC Authority key identifier: D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 Certificate issuer: /CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Certificate serial: 3C8C9DA6BF4685939F603BDC0187616F08392DD5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:49:33 +0000 Manifest this update: Tue 16 Jun 2026 16:44:33 +0000 Manifest next update: Wed 17 Jun 2026 17:31:33 +0000 Files and hashes: 1: D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl (hash: X8mA16YawbXUcyClQXi4YGTiNqrVvOAzROKu1APe74c=) 2: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: xFfth544qMvDawFqjY1oWbMZQMZwR8ATU9ANAJM8pNM=) 3: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: IaAf1+vjln5sceJpZ1s3ScYLsPQRM51r/bqMTajLuUs=) 4: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: mldeFV7Jf6QOev5E++VL/jRK/PuO8nW0ShYwDv/SkQ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8c:9d:a6:bf:46:85:93:9f:60:3b:dc:01:87:61:6f:08:39:2d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03 Validity Not Before: Jun 16 16:44:33 2026 GMT Not After : Jun 17 17:31:33 2026 GMT Subject: CN=6B342586572C253D77BFA83124C3FC80B438B9DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:3a:ca:1a:eb:e5:c0:43:fa:05:e1:01:28: f3:db:1d:6d:14:89:4c:57:db:85:44:05:f9:a0:c7: d6:05:31:be:1b:9d:99:be:f8:11:20:59:10:9f:9f: d7:8f:bc:00:6f:b8:41:eb:fc:de:bd:2c:20:62:2e: 3d:48:e2:70:e3:13:f3:8d:bb:c8:16:f4:4b:05:68: 9a:15:c2:25:94:6b:72:ff:92:70:76:f5:09:55:9b: 84:ec:7f:93:d0:75:ea:dc:08:be:60:f1:87:66:76: 1b:d2:ba:b6:7e:a8:21:b6:42:48:22:1b:34:fa:b4: 61:3e:4c:95:f7:49:69:34:60:f5:bb:b4:a8:76:b7: a9:60:1a:f8:33:a2:c2:a9:bc:b9:d7:03:7a:c8:0b: f0:5f:1a:fc:34:18:67:75:a1:83:5f:2f:c5:21:8d: 1e:7d:7e:54:bb:df:77:3c:bf:8c:14:ff:4c:fa:43: 33:63:97:80:a9:19:6b:c6:a3:8e:72:ec:78:2c:ed: 38:55:a9:b8:8e:c3:98:d5:58:67:63:01:ed:32:1e: 81:d2:75:6b:5e:9f:ce:0a:38:c2:c0:ab:83:b3:19: 32:fc:05:0f:b6:35:4b:5d:c1:16:98:35:2d:8d:97: d4:1e:c0:fc:db:25:f3:74:64:21:e8:7b:d0:ab:b7: c8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:34:25:86:57:2C:25:3D:77:BF:A8:31:24:C3:FC:80:B4:38:B9:DC X509v3 Authority Key Identifier: keyid:D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6e:43:5b:72:44:61:65:85:42:5b:45:52:63:bc:52:24:61: 78:08:bd:50:d4:bc:b0:47:d9:07:d1:60:30:50:6f:38:6c:10: 81:b3:4b:ff:59:6c:c0:b2:d7:02:1b:17:ff:55:a1:43:9e:ae: 66:9c:3c:16:50:e9:09:77:fe:1d:3a:54:02:47:5f:76:55:db: 53:fd:d9:8c:8d:3d:b4:b0:30:64:30:65:e0:91:f1:95:49:5b: 72:e4:6e:10:88:dc:2d:e0:ba:a6:e8:4e:74:53:98:1d:d3:50: 8f:95:02:4a:06:05:93:bd:ae:97:ce:a6:33:29:47:87:bb:12: 0c:7a:58:4b:c9:4c:77:ec:69:e0:82:d7:02:06:72:df:0d:ec: f1:52:76:24:2d:3c:ca:57:51:50:cc:76:4f:fb:44:30:b5:7f: 18:aa:8e:5d:3a:07:c0:6b:be:60:08:70:28:f7:76:94:28:ca: aa:b6:f2:b5:55:39:96:d9:d0:91:97:49:ab:e0:d5:e1:30:8b: 61:99:e9:18:25:09:c6:70:8d:2e:7f:fa:d6:0b:5e:1d:ba:cb: aa:28:e1:81:66:3e:ff:7e:6a:f1:12:2d:e7:eb:4a:0f:0f:c4: 8f:02:0a:47:43:f3:c0:bb:11:99:1c:3d:20:a3:06:0d:5a:8d: cf:b7:5e:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIydpr9GhZOfYDvcAYdhbwg5LdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMwOUEy RjgxNUMwMzAeFw0yNjA2MTYxNjQ0MzNaFw0yNjA2MTcxNzMxMzNaMDMxMTAvBgNV BAMTKDZCMzQyNTg2NTcyQzI1M0Q3N0JGQTgzMTI0QzNGQzgwQjQzOEI5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZuzrKGuvlwEP6BeEBKPPbHW0U iUxX24VEBfmgx9YFMb4bnZm++BEgWRCfn9ePvABvuEHr/N69LCBiLj1I4nDjE/ON u8gW9EsFaJoVwiWUa3L/knB29QlVm4Tsf5PQdercCL5g8YdmdhvSurZ+qCG2Qkgi GzT6tGE+TJX3SWk0YPW7tKh2t6lgGvgzosKpvLnXA3rIC/BfGvw0GGd1oYNfL8Uh jR59flS733c8v4wU/0z6QzNjl4CpGWvGo45y7Hgs7ThVqbiOw5jVWGdjAe0yHoHS dWten84KOMLAq4OzGTL8BQ+2NUtdwRaYNS2Nl9QewPzbJfN0ZCHoe9Crt8j/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUazQlhlcsJT13v6gxJMP8gLQ4udwwHwYDVR0j BBgwFoAU2I4AbSGXMMUt3cvW6wXAmi+BXAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EwMjEwYjMtY2NhMi00M2M1LTg5ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQy MTk3MzBDNTJERERDQkQ2RUIwNUMwOUEyRjgxNUMwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EODhFMDA2RDIxOTczMEM1MkRERENCRDZFQjA1QzA5QTJGODE1 QzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvRDg4RTAwNkQyMTk3MzBDNTJERERDQkQ2RUIwNUMw OUEyRjgxNUMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxuQ1tyRGFlhUJbRVJjvFIkYXgIvVDUvLBH 2QfRYDBQbzhsEIGzS/9ZbMCy1wIbF/9VoUOermacPBZQ6Ql3/h06VAJHX3ZV21P9 2YyNPbSwMGQwZeCR8ZVJW3LkbhCI3C3guqboTnRTmB3TUI+VAkoGBZO9rpfOpjMp R4e7Egx6WEvJTHfsaeCC1wIGct8N7PFSdiQtPMpXUVDMdk/7RDC1fxiqjl06B8Br vmAIcCj3dpQoyqq28rVVOZbZ0JGXSavg1eEwi2GZ6RglCcZwjS5/+tYLXh26y6oo 4YFmPv9+avESLefrSg8PxI8CCkdD88C7EZkcPSCjBg1ajc+3XoY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:30 2026 by rpki-client