$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft File: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft (raw, json) Hash identifier: vUvNlx1juJalF8DScEE+BcZRTl847kwVnWBRfeuosZU= Subject key identifier: A8:13:E2:E2:35:6A:F5:EC:44:1A:7C:D0:A8:98:2B:34:C8:D8:CF:27 Authority key identifier: 64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 Certificate issuer: /CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Certificate serial: 25DAD05DCB215AEE486D7004126AC24E13D2514E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 20:39:18 +0000 Manifest this update: Sat 13 Jun 2026 20:34:18 +0000 Manifest next update: Sun 14 Jun 2026 21:33:18 +0000 Files and hashes: 1: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl (hash: zegTHrPZM18J71W9kdvrdvEh+HcPkV+n28N7MrSSVsY=) 2: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: lTZ01/fJUOFqaJRWKnNIALG7LB1k+HJpJA/DEXbiNSg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:da:d0:5d:cb:21:5a:ee:48:6d:70:04:12:6a:c2:4e:13:d2:51:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46 Validity Not Before: Jun 13 20:34:18 2026 GMT Not After : Jun 14 21:33:18 2026 GMT Subject: CN=A813E2E2356AF5EC441A7CD0A8982B34C8D8CF27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4a:30:f2:ac:08:c7:3a:8f:2e:e5:2e:e4:5e: 7a:5b:3c:06:6e:6a:8e:88:4c:09:f1:39:32:98:f0: 3e:06:d6:5e:37:d6:02:5a:53:89:57:02:95:4e:01: 29:8c:ba:e5:5e:82:ac:38:17:6d:7d:d1:e9:69:6e: ba:2e:f5:1c:2b:df:9c:e5:1a:f1:9b:09:0d:7b:b1: e5:b3:a2:72:d0:ee:df:d0:54:11:b6:fc:a7:97:b1: 34:16:1e:e4:37:2b:27:62:34:ff:ba:07:6d:45:91: 34:5f:9b:3f:1f:62:19:c2:49:f2:db:65:a5:fb:71: a0:f3:fa:1c:e9:df:b7:f8:63:ab:c9:49:5a:f9:bc: f1:7e:ca:9a:cb:1a:76:7d:d9:b6:67:0f:ce:77:8c: dc:bb:ed:0b:db:7c:5b:b6:04:1c:7c:02:55:1b:ec: b2:1d:ce:72:12:83:d1:1b:38:bb:e2:39:f9:0d:f8: 01:96:e8:2d:fa:6c:11:af:fb:9d:6b:d7:48:98:54: a7:c1:6c:83:1f:35:f1:43:62:9f:6d:f0:46:7a:9d: bf:8e:3b:7e:5c:f6:80:f7:59:4c:1b:ab:1e:50:ca: bc:1b:fb:db:88:19:4a:32:67:39:2c:40:62:8c:2e: b6:ff:42:67:e0:db:e6:e8:ba:75:46:30:55:1c:c6: 26:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:13:E2:E2:35:6A:F5:EC:44:1A:7C:D0:A8:98:2B:34:C8:D8:CF:27 X509v3 Authority Key Identifier: keyid:64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:af:b5:3a:bb:3b:0f:01:3f:ea:3e:7f:d8:ef:44:90:5e:ef: 1e:fb:71:82:06:e1:b1:e3:09:75:26:8e:c6:9b:08:ef:42:1c: 61:53:c1:e5:32:9e:2c:9f:79:2e:18:ef:c4:f7:46:1b:0e:2b: 17:ec:81:d5:62:11:84:da:64:69:b5:cf:11:6c:e5:9f:61:e7: 74:c4:5c:7e:be:e8:40:91:6f:4a:18:e2:63:db:f0:cc:cb:c0: b4:43:0c:f0:29:7b:cc:ff:09:bc:f5:6a:05:ab:e6:ed:b7:08: e8:4f:37:70:05:88:15:ff:aa:39:0b:33:c4:2b:d7:31:8f:32: d3:cd:6c:e2:2d:26:7b:ef:3e:64:6f:6d:a0:ab:d5:89:b5:b7: 7d:a3:5e:b6:e3:cb:84:4d:66:41:9c:83:46:c1:f6:7f:1a:09: 6c:47:7f:3f:3f:3b:dd:e3:df:13:82:96:78:9b:83:cd:e6:31: 88:2b:cf:a7:d1:19:63:d0:8e:29:c1:e6:a7:ef:2b:5c:3b:0d: 52:83:79:c8:6e:73:cc:ca:5f:31:74:11:80:b3:57:12:cc:3a: c9:bb:3b:37:9f:32:57:75:cd:c9:40:94:33:b3:6c:3d:10:eb: a4:8f:ec:7d:b5:33:19:b5:3a:28:4e:f6:7d:3a:f4:3e:fe:3b: a9:52:d9:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdrQXcshWu5IbXAEEmrCThPSUU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1 RUU3NUY0NjAeFw0yNjA2MTMyMDM0MThaFw0yNjA2MTQyMTMzMThaMDMxMTAvBgNV BAMTKEE4MTNFMkUyMzU2QUY1RUM0NDFBN0NEMEE4OTgyQjM0QzhEOENGMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfSjDyrAjHOo8u5S7kXnpbPAZu ao6ITAnxOTKY8D4G1l431gJaU4lXApVOASmMuuVegqw4F2190elpbrou9Rwr35zl GvGbCQ17seWzonLQ7t/QVBG2/KeXsTQWHuQ3KydiNP+6B21FkTRfmz8fYhnCSfLb ZaX7caDz+hzp37f4Y6vJSVr5vPF+yprLGnZ92bZnD853jNy77QvbfFu2BBx8AlUb 7LIdznISg9EbOLviOfkN+AGW6C36bBGv+51r10iYVKfBbIMfNfFDYp9t8EZ6nb+O O35c9oD3WUwbqx5Qyrwb+9uIGUoyZzksQGKMLrb/Qmfg2+bounVGMFUcxiZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqBPi4jVq9exEGnzQqJgrNMjYzycwHwYDVR0j BBgwFoAUZE6r3fd6q6fp+LL6OCrFXl7nX0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY3OWE0MDItZGU1Yi00OWU1LWE2ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERG NzdBQUJBN0U5RjhCMkZBMzgyQUM1NUU1RUU3NUY0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NDRFQUJEREY3N0FBQkE3RTlGOEIyRkEzODJBQzU1RTVFRTc1 RjQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY3OWE0MDItZGU1Yi00OWU1LWE2 ZjUtZWVhYmFjMDg0ZjQxLzAvNjQ0RUFCRERGNzdBQUJBN0U5RjhCMkZBMzgyQUM1 NUU1RUU3NUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANuvtTq7Ow8BP+o+f9jvRJBe7x77cYIG4bHj CXUmjsabCO9CHGFTweUyniyfeS4Y78T3RhsOKxfsgdViEYTaZGm1zxFs5Z9h53TE XH6+6ECRb0oY4mPb8MzLwLRDDPApe8z/Cbz1agWr5u23COhPN3AFiBX/qjkLM8Qr 1zGPMtPNbOItJnvvPmRvbaCr1Ym1t32jXrbjy4RNZkGcg0bB9n8aCWxHfz8/O93j 3xOClnibg83mMYgrz6fRGWPQjinB5qfvK1w7DVKDechuc8zKXzF0EYCzVxLMOsm7 OzefMld1zclAlDOzbD0Q66SP7H21Mxm1OihO9n069D7+O6lS2Uk= -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:31 2026 by rpki-client