$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft File: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft (raw, json) Hash identifier: HZqYasjTVbXbz02i491FRCu9zcW8R/CIN+NJZo9WRCw= Subject key identifier: F0:8C:3B:3B:38:56:A5:05:89:4B:47:B3:53:15:08:CD:B1:57:E1:FE Authority key identifier: 63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 Certificate issuer: /CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Certificate serial: 46B7C1E16D70AE441D9CD0DC93A66F06AF30F192 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:15:27 +0000 Manifest this update: Wed 17 Jun 2026 06:10:27 +0000 Manifest next update: Thu 18 Jun 2026 08:59:27 +0000 Files and hashes: 1: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: K/r8+XOLbe3N3PaK9Jky/67CaUJEmno5lG+o29nHH2c=) 2: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl (hash: zp3u3m3sA+SFqTXbv31zy6gWFqtlMhTpmspfTCDxpu0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b7:c1:e1:6d:70:ae:44:1d:9c:d0:dc:93:a6:6f:06:af:30:f1:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Validity Not Before: Jun 17 06:10:27 2026 GMT Not After : Jun 18 08:59:27 2026 GMT Subject: CN=F08C3B3B3856A505894B47B3531508CDB157E1FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:76:1c:aa:da:47:8b:a3:bd:88:ec:ae:49: e6:7b:28:12:3c:00:54:85:93:94:9b:41:f5:31:94: 7f:63:f6:d2:e3:dd:52:7d:0c:18:04:89:8e:fe:8a: c0:df:e1:a1:7c:19:e7:84:b0:99:f6:ab:d2:27:87: d5:cc:e4:66:e4:37:2d:41:42:31:1a:e9:dc:0a:7b: 9f:1d:0c:66:1b:8d:ae:d2:59:00:e0:af:07:be:52: 4e:fe:2b:72:8a:62:da:90:b1:da:e3:81:13:82:e0: 6d:04:67:f6:e3:b5:e4:2e:7c:2b:c0:bc:be:9b:0f: a0:7e:df:60:d9:e5:ac:dc:08:42:77:bb:97:1d:a8: 99:75:b1:85:23:93:eb:7a:44:44:ed:da:ba:9f:c3: 63:b7:4f:15:75:86:65:31:41:f5:66:2f:bc:a9:16: 52:6a:54:3c:e8:f7:e5:09:23:bc:93:7e:0b:df:0b: ab:dd:ff:86:10:ba:44:9c:70:fa:9e:ab:84:82:4c: 1f:ab:b8:a4:76:47:cc:76:b8:e7:18:94:0e:58:ab: 43:b8:0d:75:a3:35:b4:ec:40:90:f7:92:bd:12:f5: 06:3c:c6:ba:31:ed:b5:ce:4e:78:d7:5e:a2:6c:f7: 01:4e:3e:91:81:94:5d:cd:3b:0c:1f:f8:27:f1:81: 1b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8C:3B:3B:38:56:A5:05:89:4B:47:B3:53:15:08:CD:B1:57:E1:FE X509v3 Authority Key Identifier: keyid:63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6a:ab:93:f9:84:b2:0c:f6:ba:dd:f3:f9:9f:2a:92:c5:49: 40:a1:31:fa:db:95:a3:39:5d:a5:0c:92:f6:b0:ff:3b:65:79: 9e:ef:8e:91:2e:98:3b:6c:b7:6d:2e:dd:ef:25:a1:a6:96:15: 2f:c6:e9:c7:e5:e2:cf:c3:24:fd:f6:f9:fc:67:c7:23:27:b9: 1d:4c:b1:bb:ef:fb:3e:00:0d:6f:6e:a2:ed:90:27:f4:13:58: c7:d6:28:b6:36:44:a0:69:a7:5c:c9:1c:6d:4d:32:8e:bf:fe: 19:fd:f2:36:b2:6c:38:39:c8:ba:77:be:26:25:f3:6d:a7:77: ad:dd:02:e2:bf:cb:44:f7:5e:f3:ed:9c:c5:d8:19:a3:14:5d: 46:4f:79:ed:21:73:ae:51:2d:d9:4f:a9:4b:91:67:88:fb:e4: 0b:62:2e:fa:4b:a8:05:d1:40:57:40:7a:17:27:f4:ed:a9:89: 33:3c:3b:7f:b4:14:9c:58:4b:d6:61:00:1d:29:48:ca:7c:94: c9:f8:af:d4:37:2e:d7:af:ee:30:71:f5:58:89:5b:c3:5d:cc: fb:b5:67:10:b4:09:07:f4:f1:e4:5c:03:a9:e9:ab:e1:76:5c: 90:77:8e:aa:7d:cc:72:6b:4a:fc:79:95:e9:ae:bc:ff:2f:a0: 1d:40:68:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURrfB4W1wrkQdnNDck6ZvBq8w8ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTczOTNF QUUyOUMzODAeFw0yNjA2MTcwNjEwMjdaFw0yNjA2MTgwODU5MjdaMDMxMTAvBgNV BAMTKEYwOEMzQjNCMzg1NkE1MDU4OTRCNDdCMzUzMTUwOENEQjE1N0UxRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwq3YcqtpHi6O9iOyuSeZ7KBI8 AFSFk5SbQfUxlH9j9tLj3VJ9DBgEiY7+isDf4aF8GeeEsJn2q9Inh9XM5GbkNy1B QjEa6dwKe58dDGYbja7SWQDgrwe+Uk7+K3KKYtqQsdrjgROC4G0EZ/bjteQufCvA vL6bD6B+32DZ5azcCEJ3u5cdqJl1sYUjk+t6RETt2rqfw2O3TxV1hmUxQfVmL7yp FlJqVDzo9+UJI7yTfgvfC6vd/4YQukSccPqeq4SCTB+ruKR2R8x2uOcYlA5Yq0O4 DXWjNbTsQJD3kr0S9QY8xrox7bXOTnjXXqJs9wFOPpGBlF3NOwwf+CfxgRtNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Iw7OzhWpQWJS0ezUxUIzbFX4f4wHwYDVR0j BBgwFoAUY02de/jvqlwG4bJdH0pzk+rinDgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY2YmYzN2MtZDhhZC00ZTAzLWEwNmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JG OEVGQUE1QzA2RTFCMjVEMUY0QTczOTNFQUUyOUMzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzREOUQ3QkY4RUZBQTVDMDZFMUIyNUQxRjRBNzM5M0VBRTI5 QzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTcz OTNFQUUyOUMzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtqq5P5hLIM9rrd8/mfKpLFSUChMfrblaM5 XaUMkvaw/ztleZ7vjpEumDtst20u3e8loaaWFS/G6cfl4s/DJP32+fxnxyMnuR1M sbvv+z4ADW9uou2QJ/QTWMfWKLY2RKBpp1zJHG1NMo6//hn98jaybDg5yLp3viYl 822nd63dAuK/y0T3XvPtnMXYGaMUXUZPee0hc65RLdlPqUuRZ4j75AtiLvpLqAXR QFdAehcn9O2piTM8O3+0FJxYS9ZhAB0pSMp8lMn4r9Q3Ltev7jBx9ViJW8NdzPu1 ZxC0CQf08eRcA6npq+F2XJB3jqp9zHJrSvx5lemuvP8voB1AaDs= -----END CERTIFICATE-----Generated at Wed Jun 17 12:52:09 2026 by rpki-client