$ rpki-client -vvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft File: D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft (raw, json) Hash identifier: SdZ76rWocpY4wdQmP1XbSskPIP8e7g+RayNGH9NFDp0= Subject key identifier: 27:06:65:71:16:BE:60:76:16:21:0C:14:CB:F1:AE:ED:0E:2E:AB:DB Authority key identifier: D4:FA:ED:0A:B5:E9:0A:36:B5:DB:DC:BC:E8:6B:88:EA:D2:66:A9:15 Certificate issuer: /CN=D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915 Certificate serial: 1D6752B78119034EF5482C301269E3ED66667C34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 05:55:01 +0000 Manifest this update: Sun 14 Jun 2026 05:50:01 +0000 Manifest next update: Mon 15 Jun 2026 07:34:01 +0000 Files and hashes: 1: D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl (hash: 82wEGmXrM1/vlnjTROguUefU5osaZVBVBunehdCjokA=) 2: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: 9hurPke9TvFgQ13BY5gZD2uH3uoeH6rZWMcJHoLiSRc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 07:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:67:52:b7:81:19:03:4e:f5:48:2c:30:12:69:e3:ed:66:66:7c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915 Validity Not Before: Jun 14 05:50:01 2026 GMT Not After : Jun 15 07:34:01 2026 GMT Subject: CN=2706657116BE607616210C14CBF1AEED0E2EABDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:97:d0:e3:18:06:8d:2b:d2:38:1e:97:e4: 97:92:f7:9e:4d:20:f5:8a:fe:62:34:0d:2f:3e:03: 53:dd:74:b1:f8:9a:9e:b6:6a:e4:97:14:b5:46:02: b0:00:48:f5:f4:75:a0:de:08:82:47:0a:4a:e7:16: ce:ff:34:5d:c7:da:39:c4:49:1c:8a:22:5d:43:6b: 0a:7e:f0:f0:89:22:6c:1e:58:80:d5:f5:be:2d:8b: c5:d6:8f:9f:bd:18:0f:8d:4f:c1:12:b5:0d:26:66: 37:cd:0a:23:a8:4f:08:cb:e6:f5:aa:b7:ec:85:5f: 56:64:45:1f:a0:cd:f9:d7:ac:d3:39:a0:ec:06:27: 5f:e3:2a:8d:a4:7f:6f:50:2e:71:80:19:e5:e1:c5: 62:83:54:90:ed:1f:9b:6f:20:f7:ae:c6:25:01:f7: dd:3b:30:d7:92:e9:b3:49:20:72:cb:b7:7a:c1:53: f2:c3:9b:a7:3d:66:29:ff:fd:40:90:a7:34:4f:e2: 1e:65:dd:26:9c:e3:c6:d2:ad:b9:28:8b:5b:9d:36: 02:fe:c8:01:f1:ba:a6:0b:b5:38:0c:aa:ee:fc:de: 39:30:e2:41:9b:96:8b:39:d4:8c:29:d5:d6:02:6a: 98:8b:95:90:d2:e1:94:3d:08:35:0c:cd:ac:05:a0: 10:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:06:65:71:16:BE:60:76:16:21:0C:14:CB:F1:AE:ED:0E:2E:AB:DB X509v3 Authority Key Identifier: keyid:D4:FA:ED:0A:B5:E9:0A:36:B5:DB:DC:BC:E8:6B:88:EA:D2:66:A9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e5:28:56:10:b4:ad:d5:42:63:69:98:aa:46:25:2d:d9:9a: 2e:6e:95:3d:99:af:31:3a:e1:f7:c5:60:8f:1a:a1:02:6c:e7: 54:1e:82:e2:09:eb:70:88:03:a4:ed:92:77:b5:1f:52:9d:a8: 9a:e8:6a:93:b5:5c:64:46:82:5e:dd:53:c7:dd:7c:da:9c:9e: c3:fe:eb:02:f8:61:23:c5:de:b3:56:a3:4f:61:4e:2c:33:4c: 5e:29:eb:8f:58:36:23:0f:3b:50:60:2e:9e:02:5c:da:da:ba: 3f:74:15:76:23:66:22:c2:fc:d6:c8:9f:27:50:46:3a:8e:8b: 94:44:f0:d0:c1:16:d9:40:1b:80:2b:1a:27:99:95:ce:80:75: 78:1a:72:d7:31:4f:76:c3:10:b0:02:a6:1c:22:be:ae:f3:57: 48:36:eb:85:95:83:a8:9c:cb:45:2e:ad:b2:56:f2:57:8d:9c: 8e:9d:ec:a9:1e:9f:d9:36:85:2d:09:2d:8e:ff:63:c4:e4:47: 75:40:9e:b4:42:48:d2:ba:b5:e7:10:4c:ee:5d:4f:9e:c4:bc: f0:ff:51:a2:02:c8:bc:de:85:f1:ca:cb:71:07:a3:d3:e2:fc: 48:2b:d0:09:18:84:77:af:5c:ca:48:89:27:92:e7:85:19:78: 6f:37:2a:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWdSt4EZA071SCwwEmnj7WZmfDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGQUVEMEFCNUU5MEEzNkI1REJEQ0JDRTg2Qjg4RUFE MjY2QTkxNTAeFw0yNjA2MTQwNTUwMDFaFw0yNjA2MTUwNzM0MDFaMDMxMTAvBgNV BAMTKDI3MDY2NTcxMTZCRTYwNzYxNjIxMEMxNENCRjFBRUVEMEUyRUFCREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkQpfQ4xgGjSvSOB6X5JeS955N IPWK/mI0DS8+A1PddLH4mp62auSXFLVGArAASPX0daDeCIJHCkrnFs7/NF3H2jnE SRyKIl1Dawp+8PCJImweWIDV9b4ti8XWj5+9GA+NT8EStQ0mZjfNCiOoTwjL5vWq t+yFX1ZkRR+gzfnXrNM5oOwGJ1/jKo2kf29QLnGAGeXhxWKDVJDtH5tvIPeuxiUB 9907MNeS6bNJIHLLt3rBU/LDm6c9Zin//UCQpzRP4h5l3Sac48bSrbkoi1udNgL+ yAHxuqYLtTgMqu783jkw4kGblos51Iwp1dYCapiLlZDS4ZQ9CDUMzawFoBDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJwZlcRa+YHYWIQwUy/Gu7Q4uq9swHwYDVR0j BBgwFoAU1PrtCrXpCja129y86GuI6tJmqRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU5NjEyYTItNDQzMy00MmI5LThmNGYtYjg0Nzc3NmFjYWZkLzEvRDRGQUVEMEFC NUU5MEEzNkI1REJEQ0JDRTg2Qjg4RUFEMjY2QTkxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEZBRUQwQUI1RTkwQTM2QjVEQkRDQkNFODZCODhFQUQyNjZB OTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzEvRDRGQUVEMEFCNUU5MEEzNkI1REJEQ0JDRTg2Qjg4 RUFEMjY2QTkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIblKFYQtK3VQmNpmKpGJS3Zmi5ulT2ZrzE6 4ffFYI8aoQJs51QeguIJ63CIA6Ttkne1H1KdqJroapO1XGRGgl7dU8fdfNqcnsP+ 6wL4YSPF3rNWo09hTiwzTF4p649YNiMPO1BgLp4CXNrauj90FXYjZiLC/NbInydQ RjqOi5RE8NDBFtlAG4ArGieZlc6AdXgactcxT3bDELACphwivq7zV0g264WVg6ic y0UurbJW8leNnI6d7Kken9k2hS0JLY7/Y8TkR3VAnrRCSNK6tecQTO5dT57EvPD/ UaICyLzehfHKy3EHo9Pi/Egr0AkYhHevXMpIiSeS54UZeG83KpQ= -----END CERTIFICATE-----Generated at Sun Jun 14 09:51:34 2026 by rpki-client