$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft File: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft (raw, json) Hash identifier: eJdtqDNqv+nbRF8bWNK4pLgulx99APD9gW9D8Fh/LMU= Subject key identifier: B2:CC:E4:76:61:90:B8:8A:55:01:AC:67:3F:D8:2F:9F:1D:BE:BD:F5 Authority key identifier: 96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 Certificate issuer: /CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Certificate serial: 4ECB00494D9FA98EBADB836435389139F4EC14EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:26:24 +0000 Manifest this update: Tue 16 Jun 2026 22:21:24 +0000 Manifest next update: Wed 17 Jun 2026 22:56:24 +0000 Files and hashes: 1: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl (hash: Ec5a25Bk0hyw29O4bQBjTuuFRe2825wEYJHdxqohvAg=) 2: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: FykeN+ZnqOJgkPJefPV3nDEsoGKfA2/qLMJi68jlv2o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:cb:00:49:4d:9f:a9:8e:ba:db:83:64:35:38:91:39:f4:ec:14:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Validity Not Before: Jun 16 22:21:24 2026 GMT Not After : Jun 17 22:56:24 2026 GMT Subject: CN=B2CCE4766190B88A5501AC673FD82F9F1DBEBDF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:df:3a:e8:30:3e:de:de:60:2b:3d:a8:2c: 33:a0:1d:10:3f:5c:bf:68:92:28:b2:2b:a7:f3:30: a2:95:3b:7f:4c:7e:3f:9a:d0:57:ff:6d:bc:ad:81: 4b:e6:6e:98:ca:8f:0f:3d:64:c3:c4:56:d2:0c:7b: ff:76:92:75:d9:86:d4:9e:6d:49:08:45:fa:55:5c: 54:3a:15:3b:8f:10:35:fb:3e:b9:83:58:9d:a9:dd: ec:1a:46:9f:97:07:8a:c7:f1:7a:7b:fb:cc:4e:46: f7:8b:66:6b:6d:51:03:88:a3:25:fb:d2:9d:47:e1: 3b:da:99:e7:1b:38:1d:78:8b:cf:1b:0e:89:5a:2f: a2:27:e7:8c:e8:be:1d:cc:f7:89:90:4c:4d:97:2f: 3b:5a:29:73:c8:2a:af:a6:20:84:64:93:a2:d4:f1: 4c:a0:d8:07:2d:8a:70:9f:a8:5c:3b:29:1a:30:c0: 61:d4:88:ef:4a:fb:b7:fc:03:e9:f8:3c:6b:7d:db: 49:36:2e:94:a5:0a:85:0b:13:9a:3a:87:d4:2b:cb: 96:89:0e:20:9b:9e:e3:73:8b:38:a1:4e:f7:f3:b7: cd:64:14:e0:53:8f:a1:df:6c:c8:ad:0a:f0:6a:95: 6a:5e:e3:96:73:e6:6f:dc:7a:2b:50:f4:5f:94:31: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CC:E4:76:61:90:B8:8A:55:01:AC:67:3F:D8:2F:9F:1D:BE:BD:F5 X509v3 Authority Key Identifier: keyid:96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:7d:78:24:be:0f:9d:40:f2:2a:e6:a8:9b:da:b6:bb:e4:b2: cf:94:92:70:c6:96:51:55:e7:8c:ce:e6:69:ad:57:d2:60:d0: 12:e0:84:0e:08:f6:06:a3:9f:bc:fe:78:d6:a4:fa:83:58:5e: ff:1c:0e:f3:c3:80:64:c5:fb:b9:f3:e1:7c:40:5a:a3:18:db: 0c:1f:53:a1:3a:ec:ec:76:6e:d3:bc:7c:5d:e1:e3:7b:5b:f4: 30:7d:70:22:f4:aa:11:0a:f2:ac:e2:84:dc:4a:bb:ca:59:7e: 8e:3d:b4:17:97:92:4f:37:cb:e7:3e:e2:e2:d4:f0:95:6a:93: a7:70:ea:fb:41:f7:40:30:60:45:69:51:3b:03:e7:69:5a:96: 1a:49:05:cf:49:4a:78:15:e5:c7:a4:f4:53:fc:3e:e9:c4:4f: 77:76:b0:64:fa:60:f8:fc:02:38:5d:21:54:ec:02:3f:53:70: dc:58:f2:6d:13:1f:ae:b2:0e:fb:41:8e:ef:ca:9c:df:2b:9a: 1d:9d:24:24:f1:f1:0b:d7:ea:f7:14:a2:f2:9e:ea:18:52:ed: 74:8b:6f:5e:d5:d9:09:8b:47:6c:65:d3:58:80:88:ba:27:08: 01:e5:e4:5a:4c:4d:f8:fb:a8:d8:e2:43:02:ef:f9:cf:1c:24: e1:f0:f4:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTssASU2fqY6624NkNTiROfTsFO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4 RTdFRkUyMTAeFw0yNjA2MTYyMjIxMjRaFw0yNjA2MTcyMjU2MjRaMDMxMTAvBgNV BAMTKEIyQ0NFNDc2NjE5MEI4OEE1NTAxQUM2NzNGRDgyRjlGMURCRUJERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+9866DA+3t5gKz2oLDOgHRA/ XL9okiiyK6fzMKKVO39Mfj+a0Ff/bbytgUvmbpjKjw89ZMPEVtIMe/92knXZhtSe bUkIRfpVXFQ6FTuPEDX7PrmDWJ2p3ewaRp+XB4rH8Xp7+8xORveLZmttUQOIoyX7 0p1H4TvamecbOB14i88bDolaL6In54zovh3M94mQTE2XLztaKXPIKq+mIIRkk6LU 8Uyg2ActinCfqFw7KRowwGHUiO9K+7f8A+n4PGt920k2LpSlCoULE5o6h9Qry5aJ DiCbnuNzizihTvfzt81kFOBTj6HfbMitCvBqlWpe45Zz5m/ceitQ9F+UMY5lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsszkdmGQuIpVAaxnP9gvnx2+vfUwHwYDVR0j BBgwFoAUlkzs5NsCptl4zn8isLM2545+/iEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGYzMTUxZGItMTMzMC00ZTcwLTljYzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTRE QjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4RTdFRkUyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjRDRUNFNERCMDJBNkQ5NzhDRTdGMjJCMEIzMzZFNzhFN0VG RTIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2 RTc4RTdFRkUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKd9eCS+D51A8irmqJvatrvkss+UknDGllFV 54zO5mmtV9Jg0BLghA4I9gajn7z+eNak+oNYXv8cDvPDgGTF+7nz4XxAWqMY2wwf U6E67Ox2btO8fF3h43tb9DB9cCL0qhEK8qzihNxKu8pZfo49tBeXkk83y+c+4uLU 8JVqk6dw6vtB90AwYEVpUTsD52lalhpJBc9JSngV5cek9FP8PunET3d2sGT6YPj8 AjhdIVTsAj9TcNxY8m0TH66yDvtBju/KnN8rmh2dJCTx8QvX6vcUovKe6hhS7XSL b17V2QmLR2xl01iAiLonCAHl5FpMTfj7qNjiQwLv+c8cJOHw9DY= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:30 2026 by rpki-client