$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft File: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft (raw, json) Hash identifier: Tmjg5A8j82dciEM5ltGWMLwTDcvhIhLJTM3CXILZXoU= Subject key identifier: 91:36:8F:AB:BF:A6:4E:FE:35:92:32:1C:F7:F2:7B:E7:FD:56:56:E9 Authority key identifier: CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 Certificate issuer: /CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Certificate serial: 2DFA97822C68F91E0552C56047411BD711435597 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:21:17 +0000 Manifest this update: Tue 16 Jun 2026 22:16:17 +0000 Manifest next update: Thu 18 Jun 2026 00:02:17 +0000 Files and hashes: 1: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl (hash: KYp+M919swXN9llOZ1NkbPFxsib/tIaDKqIc4n+UtzA=) 2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: Pb1HhX9vGzRzwD3eC7x1KFYFFDBS8WYJS934upf4BBQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:fa:97:82:2c:68:f9:1e:05:52:c5:60:47:41:1b:d7:11:43:55:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Validity Not Before: Jun 16 22:16:17 2026 GMT Not After : Jun 18 00:02:17 2026 GMT Subject: CN=91368FABBFA64EFE3592321CF7F27BE7FD5656E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1a:82:31:b6:00:d4:c5:19:99:31:2c:53:c8: 64:64:c9:e2:c8:d5:ed:96:d6:a4:de:82:6f:81:b8: 5e:a5:12:5a:e8:09:7c:4b:c3:27:f3:91:3e:8e:11: 10:74:c9:45:9a:a5:c6:d1:ca:45:a4:5e:03:d1:86: 8c:72:59:ea:b1:5b:37:0b:05:45:38:01:be:02:e1: 81:c1:5d:32:45:01:91:32:42:b0:f6:dc:a8:e2:c4: 1e:78:32:13:33:6d:7e:dd:81:4a:7d:d7:cf:60:7d: 7f:15:67:81:29:16:e6:45:74:85:64:55:1b:b1:da: 5f:48:4a:1a:e3:74:81:8c:f6:b5:a6:95:6d:e8:13: ce:10:8f:bb:4e:47:0e:00:de:00:13:49:15:dc:14: c0:e8:98:3d:0f:91:0c:6e:27:22:f1:c1:88:5b:ec: 72:5e:95:40:e6:d1:74:5a:62:a2:2b:ce:78:a0:60: 06:be:2a:a8:fd:c3:c4:78:e8:64:27:ef:06:f4:a1: 0e:44:fa:90:41:c4:6c:6d:d3:38:19:e4:c8:3e:c0: 3c:0c:93:7d:61:6e:16:c5:5b:90:fe:d8:bd:49:61: b4:d9:52:f4:41:d6:7b:bd:e3:1b:07:9e:ba:18:da: 2c:ce:6a:d6:82:ca:ef:39:e3:25:84:dd:8a:45:72: 27:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:36:8F:AB:BF:A6:4E:FE:35:92:32:1C:F7:F2:7B:E7:FD:56:56:E9 X509v3 Authority Key Identifier: keyid:CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:77:db:ba:71:be:54:3e:b6:39:e6:a9:bc:2c:39:d0:ac:3e: a4:75:95:82:27:b0:55:1b:31:64:2c:f5:6d:29:0c:ee:14:ac: fb:8b:0a:f1:7d:57:0a:5a:2b:bd:a2:e7:cf:5e:55:e8:f6:ee: a2:85:c4:74:c9:da:fd:a4:e2:75:93:60:fb:bc:92:28:b3:f8: 36:00:9e:33:b7:30:64:70:a5:c6:1d:c2:13:5d:6e:7f:f5:a3: d6:14:3b:9c:06:76:80:01:f3:f1:20:7e:47:f2:a8:9d:ac:54: 7a:63:ba:12:ef:40:31:0b:53:c6:93:4d:04:ac:77:16:fb:3f: b6:a3:1e:2b:71:ab:36:1f:e2:e1:44:e2:50:b8:1c:24:19:10: 51:a7:df:fa:82:9e:fa:cd:ac:14:37:50:f4:db:de:40:97:ae: f8:f1:8a:b4:4d:c4:b9:82:95:72:ce:70:9d:81:31:28:91:6c: 4d:a1:42:26:18:e5:9e:05:04:94:6f:f8:89:f8:5a:78:fd:eb: 66:b3:03:9a:ff:61:61:31:bd:56:3c:cb:68:34:07:99:99:a5: 1b:08:4f:18:10:1e:5a:43:9c:06:24:5c:77:ae:e3:1d:ab:5b: be:6b:54:71:c0:ce:3d:23:d0:de:05:7f:b7:26:e2:e5:1b:c4: 0b:35:df:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULfqXgixo+R4FUsVgR0Eb1xFDVZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRGNzdF MTNBNTFBNjAeFw0yNjA2MTYyMjE2MTdaFw0yNjA2MTgwMDAyMTdaMDMxMTAvBgNV BAMTKDkxMzY4RkFCQkZBNjRFRkUzNTkyMzIxQ0Y3RjI3QkU3RkQ1NjU2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGoIxtgDUxRmZMSxTyGRkyeLI 1e2W1qTegm+BuF6lElroCXxLwyfzkT6OERB0yUWapcbRykWkXgPRhoxyWeqxWzcL BUU4Ab4C4YHBXTJFAZEyQrD23KjixB54MhMzbX7dgUp9189gfX8VZ4EpFuZFdIVk VRux2l9IShrjdIGM9rWmlW3oE84Qj7tORw4A3gATSRXcFMDomD0PkQxuJyLxwYhb 7HJelUDm0XRaYqIrznigYAa+Kqj9w8R46GQn7wb0oQ5E+pBBxGxt0zgZ5Mg+wDwM k31hbhbFW5D+2L1JYbTZUvRB1nu94xsHnroY2izOataCyu854yWE3YpFcidBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkTaPq7+mTv41kjIc9/J75/1WVukwHwYDVR0j BBgwFoAUzQoktNUI1D2MJbuOxdRPd+E6UaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUzMGFjNjQtMGYxMy00MTYyLTk2OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRE NTA4RDQzRDhDMjVCQjhFQzVENDRGNzdFMTNBNTFBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDBBMjRCNEQ1MDhENDNEOEMyNUJCOEVDNUQ0NEY3N0UxM0E1 MUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRG NzdFMTNBNTFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIp327pxvlQ+tjnmqbwsOdCsPqR1lYInsFUb MWQs9W0pDO4UrPuLCvF9VwpaK72i589eVej27qKFxHTJ2v2k4nWTYPu8kiiz+DYA njO3MGRwpcYdwhNdbn/1o9YUO5wGdoAB8/EgfkfyqJ2sVHpjuhLvQDELU8aTTQSs dxb7P7ajHitxqzYf4uFE4lC4HCQZEFGn3/qCnvrNrBQ3UPTb3kCXrvjxirRNxLmC lXLOcJ2BMSiRbE2hQiYY5Z4FBJRv+In4Wnj962azA5r/YWExvVY8y2g0B5mZpRsI TxgQHlpDnAYkXHeu4x2rW75rVHHAzj0j0N4Ff7cm4uUbxAs1364= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:19 2026 by rpki-client