$ rpki-client -vvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft File: CD846D565A6E2859697B59C438907050C12DE37D.mft (raw, json) Hash identifier: QOXWg93Bmh8mcoRDnvLFzMdnzN70WQBA24WLs2aOInw= Subject key identifier: AF:C5:72:8B:BD:D9:C1:3F:CB:78:53:D3:DE:47:0B:09:47:3E:0A:A5 Authority key identifier: CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D Certificate issuer: /CN=CD846D565A6E2859697B59C438907050C12DE37D Certificate serial: 7A1C33E59A9DDFEB06118FC874134F4367F49D66 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:04:02 +0000 Manifest this update: Wed 17 Jun 2026 04:59:02 +0000 Manifest next update: Thu 18 Jun 2026 06:44:02 +0000 Files and hashes: 1: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (hash: tagwsSVL2euywnNYgfGcSI37agKbNG24pIwjEJuU+FQ=) 2: CD846D565A6E2859697B59C438907050C12DE37D.crl (hash: 4m4lrEQ4WqSruN1E9gC76XSnMNaacx5tx3rUjwC00qk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.crl rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:1c:33:e5:9a:9d:df:eb:06:11:8f:c8:74:13:4f:43:67:f4:9d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD846D565A6E2859697B59C438907050C12DE37D Validity Not Before: Jun 17 04:59:02 2026 GMT Not After : Jun 18 06:44:02 2026 GMT Subject: CN=AFC5728BBDD9C13FCB7853D3DE470B09473E0AA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4d:95:c7:90:53:a3:7d:d6:01:7f:81:a4:8d: 6b:44:c6:34:3a:c2:21:09:3e:d4:4c:bd:69:97:6c: de:69:e7:89:a4:5e:33:b6:d7:f1:ee:ff:bf:e2:92: 97:0c:da:af:af:83:a9:77:47:a5:f6:8c:b7:a1:2a: 4b:37:f4:5d:93:bb:2b:30:32:f3:77:5d:59:0d:8e: 01:05:bc:a7:28:4c:ff:5c:2d:6e:3d:65:67:44:c3: cd:5c:15:c5:2a:48:fe:48:ab:af:42:50:8b:5e:40: 87:1b:af:54:ae:24:ef:5e:53:df:a2:6c:79:b4:bd: c8:7b:5c:c5:7c:b2:da:66:3e:08:37:fd:b1:93:e2: 31:50:b3:3e:36:bd:7f:c0:66:5f:da:57:87:33:19: 1b:8f:98:ce:a2:2a:34:85:8b:81:5c:4c:6c:e7:88: fc:40:6a:65:22:ce:f0:d3:97:a4:55:e5:43:5d:30: 82:78:a1:cb:5d:f3:c5:64:ab:29:76:12:71:fd:f2: 96:a1:40:68:ad:06:ef:8c:d5:49:af:13:2b:be:86: 59:90:72:5a:2c:d7:5a:bc:00:bd:80:42:6b:d2:3c: f7:ce:99:90:cf:f7:60:1e:1e:2c:4e:88:e8:54:d6: ec:5f:d3:f9:88:cc:2d:0c:ff:c2:d3:fd:55:0b:30: 94:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C5:72:8B:BD:D9:C1:3F:CB:78:53:D3:DE:47:0B:09:47:3E:0A:A5 X509v3 Authority Key Identifier: keyid:CD:84:6D:56:5A:6E:28:59:69:7B:59:C4:38:90:70:50:C1:2D:E3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/CD846D565A6E2859697B59C438907050C12DE37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/CD846D565A6E2859697B59C438907050C12DE37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:51:7e:d9:1c:45:74:b3:2b:c2:f8:85:59:cd:99:c4:bc:14: ce:98:02:97:30:d6:02:8e:69:7e:fb:8b:a5:47:a9:cd:e0:bd: 5c:3c:f7:68:11:45:73:a9:0c:98:e2:33:79:5e:e2:d8:69:62: c1:a4:8a:44:a2:da:c9:de:1f:b6:2b:1a:62:04:d7:83:a5:e7: af:a0:8f:5b:00:bc:01:f2:ac:17:88:d5:0d:23:e7:d6:23:02: 94:0f:8f:ff:4f:ab:94:e3:b7:f2:5d:3c:6d:63:97:90:60:e2: f1:78:c4:5e:1e:ff:07:60:49:2f:05:74:62:6b:c6:07:ab:7f: 6e:17:b2:4a:7b:34:4d:35:cc:26:0c:2a:d6:de:02:c8:98:b4: 9c:48:a7:5e:2f:1b:ae:bc:8f:7c:75:14:f0:fd:59:b7:84:ff: 16:2e:01:64:c0:bf:a0:71:e7:2a:89:6b:e3:a6:28:8b:c0:e6: b9:b5:c6:ed:ac:1d:e1:e5:79:04:ce:f4:11:63:01:70:09:dc: 0c:51:3b:fc:0b:7e:02:c9:5b:d1:b0:65:5a:c5:e3:a9:41:e2: 0e:94:37:43:6e:3a:f7:c5:7e:84:9e:dc:73:35:eb:5a:55:7b: a3:33:a7:36:91:a1:7b:9a:65:d2:49:6b:a7:1a:de:db:77:a2: 80:ce:03:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUehwz5Zqd3+sGEY/IdBNPQ2f0nWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDZENTY1QTZFMjg1OTY5N0I1OUM0Mzg5MDcwNTBD MTJERTM3RDAeFw0yNjA2MTcwNDU5MDJaFw0yNjA2MTgwNjQ0MDJaMDMxMTAvBgNV BAMTKEFGQzU3MjhCQkREOUMxM0ZDQjc4NTNEM0RFNDcwQjA5NDczRTBBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1TZXHkFOjfdYBf4GkjWtExjQ6 wiEJPtRMvWmXbN5p54mkXjO21/Hu/7/ikpcM2q+vg6l3R6X2jLehKks39F2Tuysw MvN3XVkNjgEFvKcoTP9cLW49ZWdEw81cFcUqSP5Iq69CUIteQIcbr1SuJO9eU9+i bHm0vch7XMV8stpmPgg3/bGT4jFQsz42vX/AZl/aV4czGRuPmM6iKjSFi4FcTGzn iPxAamUizvDTl6RV5UNdMIJ4octd88Vkqyl2EnH98pahQGitBu+M1UmvEyu+hlmQ clos11q8AL2AQmvSPPfOmZDP92AeHixOiOhU1uxf0/mIzC0M/8LT/VULMJR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr8Vyi73ZwT/LeFPT3kcLCUc+CqUwHwYDVR0j BBgwFoAUzYRtVlpuKFlpe1nEOJBwUMEt430wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODkxZDNjMzAtOTVkYy00YjcyLWFlMWItYWQxZTk4YjBlMTc5LzEvQ0Q4NDZENTY1 QTZFMjg1OTY5N0I1OUM0Mzg5MDcwNTBDMTJERTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9DRDg0NkQ1NjVBNkUyODU5Njk3QjU5QzQzODkwNzA1MEMxMkRF MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzEvQ0Q4NDZENTY1QTZFMjg1OTY5N0I1OUM0Mzg5MDcw NTBDMTJERTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxRftkcRXSzK8L4hVnNmcS8FM6YApcw1gKO aX77i6VHqc3gvVw892gRRXOpDJjiM3le4thpYsGkikSi2sneH7YrGmIE14Ol56+g j1sAvAHyrBeI1Q0j59YjApQPj/9Pq5Tjt/JdPG1jl5Bg4vF4xF4e/wdgSS8FdGJr xgerf24Xskp7NE01zCYMKtbeAsiYtJxIp14vG668j3x1FPD9WbeE/xYuAWTAv6Bx 5yqJa+OmKIvA5rm1xu2sHeHleQTO9BFjAXAJ3AxRO/wLfgLJW9GwZVrF46lB4g6U N0NuOvfFfoSe3HM161pVe6MzpzaRoXuaZdJJa6ca3tt3ooDOAyk= -----END CERTIFICATE-----Generated at Wed Jun 17 12:06:45 2026 by rpki-client