$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft File: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft (raw, json) Hash identifier: JkEiqww07P/ZC7418Bc5x3STPKgs9NAAIXSB/o4KsAQ= Subject key identifier: 7B:B3:82:42:D2:40:D1:D7:98:21:17:C5:E2:E5:51:DC:97:67:43:F6 Authority key identifier: B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 Certificate issuer: /CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Certificate serial: 5E44D4FBD281D275A44382EB56374CE2D0FB17D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:36:31 +0000 Manifest this update: Tue 16 Jun 2026 22:31:31 +0000 Manifest next update: Wed 17 Jun 2026 23:18:31 +0000 Files and hashes: 1: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: WrcnjDvM2bO2wuu3OCRivgLaRSs+xddaOJ50D9MbO8U=) 2: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: Pavi+Ibkd+bl9I6ebmoiu+/5SxrpK9sFhLxy2ZXQkGw=) 3: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl (hash: +kJgQhtXSGtEZxAtl/Vygd+4h5ksWd+DWctQZWX/ke8=) 4: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: vGdo0aPhNFfXshch3eNd6YkNvIG8QzHxW2xedSDSTPc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:44:d4:fb:d2:81:d2:75:a4:43:82:eb:56:37:4c:e2:d0:fb:17:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Validity Not Before: Jun 16 22:31:31 2026 GMT Not After : Jun 17 23:18:31 2026 GMT Subject: CN=7BB38242D240D1D7982117C5E2E551DC976743F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:10:52:98:9a:5e:e2:42:b2:72:11:63:fd:cd: 3f:7a:56:97:70:74:09:82:d8:f4:b9:56:73:44:58: 05:74:45:4c:fa:d4:3a:2a:97:e1:33:89:4a:51:2d: 73:ba:85:4c:ff:38:05:69:9c:9f:3b:44:87:00:5a: 84:43:47:92:fb:32:7a:47:3d:25:26:fe:7d:96:fd: eb:f7:8e:13:1d:cf:7f:2a:72:7c:f8:48:a9:d0:df: f2:2f:e1:53:32:00:b4:cd:aa:28:8f:49:f3:c4:df: 1f:75:98:2d:4a:f3:71:ee:18:63:51:17:3a:68:10: 8c:d6:b6:df:67:c2:1e:43:78:37:10:cd:00:34:94: af:aa:48:e9:ad:5c:c2:09:1a:03:c5:cf:3b:3d:12: 61:ab:23:cf:4a:1b:37:8e:87:d9:f5:93:9e:3d:cb: 01:bd:d0:55:3d:39:e2:05:e4:9c:b6:e4:d0:c6:12: 50:de:2b:45:19:9f:bd:7d:e1:98:e7:a0:06:73:3c: 86:1b:fd:bb:96:66:04:1b:32:1c:44:33:3d:9c:48: ae:fe:57:ad:bb:cd:44:f6:70:c5:63:01:18:9a:11: ab:3a:48:b0:d9:5f:75:93:1a:26:37:ec:a9:c1:a2: 3c:1c:2f:75:19:45:bb:b2:1c:b1:95:23:81:84:61: d8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B3:82:42:D2:40:D1:D7:98:21:17:C5:E2:E5:51:DC:97:67:43:F6 X509v3 Authority Key Identifier: keyid:B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ad:d3:9c:9b:43:69:39:e9:39:fc:64:2b:3b:fa:75:c1:b0: d9:8e:9d:cc:39:8f:fc:61:d7:03:25:2f:c8:b1:59:d0:4c:f9: f0:4e:b6:d5:cf:70:ea:23:7b:e5:8b:a1:4d:de:dd:bc:79:ba: 63:8e:08:50:bd:54:73:17:5f:d0:8a:aa:fa:39:f9:04:55:d0: e6:d2:95:7e:36:2b:85:57:25:76:8c:05:99:62:dd:88:98:6a: 93:b7:60:77:d5:8a:3a:fa:2f:c6:f8:3a:71:d1:e0:66:ec:40: 39:7c:6d:8a:95:0f:a9:9a:d5:94:1c:c6:48:33:5d:27:5e:47: 8e:a7:4d:68:c4:c5:7b:44:3f:7b:b0:0c:0a:4d:01:f2:e7:2b: d4:9f:d6:28:0d:13:9c:f3:4f:85:15:88:d2:d1:68:a6:6a:01: 8a:a7:7b:50:5f:5b:37:7a:10:7d:d6:44:b4:07:be:f5:90:01: 85:cb:79:02:22:81:2b:5d:31:9d:2d:01:9c:c2:aa:9d:12:59: 88:93:0d:cb:5b:80:d8:d2:3f:62:59:aa:48:4a:95:a2:bd:f1: 65:72:9a:4f:e1:cc:e1:a8:0f:8a:25:83:56:68:77:ef:96:66: 11:54:01:ad:c3:5e:6b:57:fc:9e:25:3d:c4:50:29:e8:10:59: a6:e2:6c:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXkTU+9KB0nWkQ4LrVjdM4tD7F9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5QzVF Q0QyRDcwOTAeFw0yNjA2MTYyMjMxMzFaFw0yNjA2MTcyMzE4MzFaMDMxMTAvBgNV BAMTKDdCQjM4MjQyRDI0MEQxRDc5ODIxMTdDNUUyRTU1MURDOTc2NzQzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEFKYml7iQrJyEWP9zT96Vpdw dAmC2PS5VnNEWAV0RUz61Doql+EziUpRLXO6hUz/OAVpnJ87RIcAWoRDR5L7MnpH PSUm/n2W/ev3jhMdz38qcnz4SKnQ3/Iv4VMyALTNqiiPSfPE3x91mC1K83HuGGNR FzpoEIzWtt9nwh5DeDcQzQA0lK+qSOmtXMIJGgPFzzs9EmGrI89KGzeOh9n1k549 ywG90FU9OeIF5Jy25NDGElDeK0UZn7194ZjnoAZzPIYb/buWZgQbMhxEMz2cSK7+ V627zUT2cMVjARiaEas6SLDZX3WTGiY37KnBojwcL3UZRbuyHLGVI4GEYdj7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe7OCQtJA0deYIRfF4uVR3JdnQ/YwHwYDVR0j BBgwFoAUsxbGPS2hOH0ZGn6m3AtZxezS1wkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGZmMDk1ODQtOTExMC00YjBkLThmNmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0Qy REExMzg3RDE5MUE3RUE2REMwQjU5QzVFQ0QyRDcwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzE2QzYzRDJEQTEzODdEMTkxQTdFQTZEQzBCNTlDNUVDRDJE NzA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5 QzVFQ0QyRDcwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACet05ybQ2k56Tn8ZCs7+nXBsNmOncw5j/xh 1wMlL8ixWdBM+fBOttXPcOoje+WLoU3e3bx5umOOCFC9VHMXX9CKqvo5+QRV0ObS lX42K4VXJXaMBZli3YiYapO3YHfVijr6L8b4OnHR4GbsQDl8bYqVD6ma1ZQcxkgz XSdeR46nTWjExXtEP3uwDApNAfLnK9Sf1igNE5zzT4UViNLRaKZqAYqne1BfWzd6 EH3WRLQHvvWQAYXLeQIigStdMZ0tAZzCqp0SWYiTDctbgNjSP2JZqkhKlaK98WVy mk/hzOGoD4olg1Zod++WZhFUAa3DXmtX/J4lPcRQKegQWabibJ4= -----END CERTIFICATE-----Generated at Wed Jun 17 10:42:32 2026 by rpki-client