$ rpki-client -vvf rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft File: 785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft (raw, json) Hash identifier: aBLvF+McrPKp/49+wDDH/KCcpoIJJ94xtBD7lvl4mMw= Subject key identifier: 25:AA:83:9B:79:E3:24:D2:B7:F2:0B:0E:B5:C8:AE:43:C5:EA:E7:F8 Authority key identifier: 78:50:24:DB:7A:6F:C2:EE:9E:4D:4A:40:97:68:D7:9A:95:22:73:FC Certificate issuer: /CN=785024DB7A6FC2EE9E4D4A409768D79A952273FC Certificate serial: 611BCE63634CB0A1716A57C1429B75EF1C1D126A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:31:29 +0000 Manifest this update: Tue 16 Jun 2026 22:26:29 +0000 Manifest next update: Wed 17 Jun 2026 23:58:29 +0000 Files and hashes: 1: 785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl (hash: WLusbtscAIyd5ExXY1fQkaKKpxK2SfKdErymiwz1zf8=) 2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: yOnWZNbCc8o1mKC0JiqTlN6+Y33PQ/Kc+NLmWQanxsY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1b:ce:63:63:4c:b0:a1:71:6a:57:c1:42:9b:75:ef:1c:1d:12:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785024DB7A6FC2EE9E4D4A409768D79A952273FC Validity Not Before: Jun 16 22:26:29 2026 GMT Not After : Jun 17 23:58:29 2026 GMT Subject: CN=25AA839B79E324D2B7F20B0EB5C8AE43C5EAE7F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:89:7f:df:8b:1c:08:a1:7c:82:e6:24:31: a9:0b:4c:b8:f9:af:b7:7c:94:72:ef:08:d4:6c:bb: 8d:2d:77:f8:2d:dd:09:c7:bf:12:f8:e8:13:b4:8d: 14:68:f9:f9:6d:aa:c8:f0:88:14:97:4c:4b:38:63: 16:a3:4c:9a:8a:9d:e2:e5:eb:4a:15:9d:c9:1e:f5: a1:f7:bc:42:5b:8d:e7:da:85:c5:28:b0:2a:8f:b5: e8:d9:39:34:b8:cd:61:0a:32:4d:27:4c:2a:cf:35: 28:94:7e:6c:de:31:fc:60:5c:10:08:9a:dd:29:e8: f2:a1:7e:6d:d8:de:14:36:85:05:e1:53:59:75:90: ac:95:e9:ef:ef:8d:4f:48:fb:6e:12:a0:47:5f:57: 51:4b:42:69:53:79:cb:ec:55:00:d9:14:f5:dd:58: 9b:67:25:21:60:aa:ab:91:9d:9a:cd:f8:7a:1a:ff: fa:5e:22:5b:ed:20:fe:ce:7d:6c:29:0f:0f:bd:50: fe:4e:31:92:15:41:f0:35:8a:79:d1:0d:d1:f6:a9: fe:2a:9b:1f:1d:b3:2c:d1:a2:d8:8c:2f:ab:3f:dd: 5f:07:d1:03:f0:ee:43:f9:56:64:b8:21:87:ad:b0: 27:4b:01:e0:60:71:b5:61:58:2e:a9:93:dc:2a:23: 95:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AA:83:9B:79:E3:24:D2:B7:F2:0B:0E:B5:C8:AE:43:C5:EA:E7:F8 X509v3 Authority Key Identifier: keyid:78:50:24:DB:7A:6F:C2:EE:9E:4D:4A:40:97:68:D7:9A:95:22:73:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:93:47:d9:8e:4a:46:35:b7:09:4c:b4:e1:c7:4d:dd:81:af: 30:0b:fe:db:b0:17:8f:c8:96:53:8b:85:c9:e9:ea:03:08:59: 21:f1:29:4a:6b:be:c0:ee:7b:73:22:54:4c:15:ed:d6:85:d0: 0d:4f:c0:93:d0:12:dd:a7:82:a2:f7:9f:cd:17:6c:f0:9c:af: cf:d2:51:a0:16:35:ca:bb:96:ef:50:a0:f5:c3:a9:e0:bb:7f: 3e:5a:85:bf:d7:7f:ed:49:63:16:58:7c:20:da:c1:df:f0:bc: 26:4d:4f:76:1c:63:47:e3:64:7a:5b:f9:b9:e6:e6:af:83:6a: f0:c4:cb:ea:a3:71:55:e7:60:64:7b:8b:51:4f:72:14:95:4e: 47:fb:6e:87:06:dc:20:10:fb:c6:e9:93:cb:2a:61:20:0f:42: ac:8b:8e:c4:54:11:94:da:35:d7:01:df:69:43:4c:f4:e6:d0: 69:77:8a:b1:85:ea:c0:c9:d6:70:3d:ec:88:83:f0:0f:8d:f6: b4:ca:a6:f5:f4:d6:73:cc:30:bb:cd:54:60:6b:f8:c3:2f:32: 5f:09:01:f0:8b:f1:6f:10:3b:9c:8a:da:4d:d9:4f:80:54:4c: f3:f0:69:ee:8e:d6:de:4b:9f:00:7c:9f:15:88:9a:ec:dd:4e: 1b:fa:6d:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYRvOY2NMsKFxalfBQpt17xwdEmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg1MDI0REI3QTZGQzJFRTlFNEQ0QTQwOTc2OEQ3OUE5 NTIyNzNGQzAeFw0yNjA2MTYyMjI2MjlaFw0yNjA2MTcyMzU4MjlaMDMxMTAvBgNV BAMTKDI1QUE4MzlCNzlFMzI0RDJCN0YyMEIwRUI1QzhBRTQzQzVFQUU3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1b4l/34scCKF8guYkMakLTLj5 r7d8lHLvCNRsu40td/gt3QnHvxL46BO0jRRo+fltqsjwiBSXTEs4YxajTJqKneLl 60oVncke9aH3vEJbjefahcUosCqPtejZOTS4zWEKMk0nTCrPNSiUfmzeMfxgXBAI mt0p6PKhfm3Y3hQ2hQXhU1l1kKyV6e/vjU9I+24SoEdfV1FLQmlTecvsVQDZFPXd WJtnJSFgqquRnZrN+Hoa//peIlvtIP7OfWwpDw+9UP5OMZIVQfA1innRDdH2qf4q mx8dsyzRotiML6s/3V8H0QPw7kP5VmS4IYetsCdLAeBgcbVhWC6pk9wqI5X9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJaqDm3njJNK38gsOtciuQ8Xq5/gwHwYDVR0j BBgwFoAUeFAk23pvwu6eTUpAl2jXmpUic/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFhMjkyOWMtNjA4OC00Y2I1LTgzYzYtZjRhMzU2YjIwZjlkLzAvNzg1MDI0REI3 QTZGQzJFRTlFNEQ0QTQwOTc2OEQ3OUE5NTIyNzNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODUwMjREQjdBNkZDMkVFOUU0RDRBNDA5NzY4RDc5QTk1MjI3 M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvNzg1MDI0REI3QTZGQzJFRTlFNEQ0QTQwOTc2OEQ3 OUE5NTIyNzNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmTR9mOSkY1twlMtOHHTd2BrzAL/tuwF4/I llOLhcnp6gMIWSHxKUprvsDue3MiVEwV7daF0A1PwJPQEt2ngqL3n80XbPCcr8/S UaAWNcq7lu9QoPXDqeC7fz5ahb/Xf+1JYxZYfCDawd/wvCZNT3YcY0fjZHpb+bnm 5q+DavDEy+qjcVXnYGR7i1FPchSVTkf7bocG3CAQ+8bpk8sqYSAPQqyLjsRUEZTa NdcB32lDTPTm0Gl3irGF6sDJ1nA97IiD8A+N9rTKpvX01nPMMLvNVGBr+MMvMl8J AfCL8W8QO5yK2k3ZT4BUTPPwae6O1t5LnwB8nxWImuzdThv6bQ8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:46 2026 by rpki-client