$ rpki-client -vvf rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft File: 309D66BED7C5AAB839669782F24FE6D817B8209A.mft (raw, json) Hash identifier: X0M4VMc1QoIr7shh31qo4lF87fU3WQwkODqLx8n33i0= Subject key identifier: 9C:6D:8B:9C:51:FB:81:C6:73:0B:6B:57:44:11:80:05:4E:F6:45:1F Authority key identifier: 30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A Certificate issuer: /CN=309D66BED7C5AAB839669782F24FE6D817B8209A Certificate serial: 5C396D60801D8BA622BBA5EAFECD33D2A44FAB06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:00:59 +0000 Manifest this update: Tue 16 Jun 2026 21:55:59 +0000 Manifest next update: Wed 17 Jun 2026 22:07:59 +0000 Files and hashes: 1: 3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa (hash: +xmmKCCGNPjDepHqzXzJnlfxWWK0PUzYuwz3sX367Vg=) 2: 309D66BED7C5AAB839669782F24FE6D817B8209A.crl (hash: IYyk9p5f+6r1FUghhw1YgVOpIHXy36vUCH/7mIGe3gM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:39:6d:60:80:1d:8b:a6:22:bb:a5:ea:fe:cd:33:d2:a4:4f:ab:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309D66BED7C5AAB839669782F24FE6D817B8209A Validity Not Before: Jun 16 21:55:59 2026 GMT Not After : Jun 17 22:07:59 2026 GMT Subject: CN=9C6D8B9C51FB81C6730B6B57441180054EF6451F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:a3:3a:52:51:f2:58:c8:f7:15:b5:9c:8a: 70:03:ac:cc:00:4e:56:c8:c6:1a:71:7b:aa:65:3b: c8:3d:7e:a6:53:df:60:85:a4:95:0b:8f:d1:c5:1a: b5:73:00:7e:3f:3f:b2:e7:45:a4:c6:e4:7c:2a:ec: e5:0f:6f:6d:29:b1:31:af:68:9f:fa:88:13:1c:5b: 92:0a:93:57:dc:55:b5:a2:40:e8:de:47:91:29:2b: 4e:3e:5b:32:8d:c9:f7:6a:2b:26:c5:61:55:b7:f3: e2:55:e1:97:e0:50:fd:42:d6:d0:40:4a:12:2b:53: 08:bf:80:f5:f3:e4:af:cc:7f:64:8c:db:3d:c5:5f: 07:58:12:37:ab:12:a9:b8:60:a5:03:0a:cd:df:2b: 11:e4:15:02:aa:a9:6e:cf:b1:c5:5b:9d:71:d6:82: 31:f0:b5:a1:4c:3c:f6:7b:ef:3a:ff:0c:9b:d6:6d: 6c:01:12:b0:16:1b:e0:9f:07:b3:91:ba:ac:9e:e4: 8d:b6:9b:7c:78:e5:11:40:80:6e:c3:c0:8a:7e:05: 8a:06:21:5f:a7:0f:d9:b9:a8:e0:2e:db:5e:b8:cf: a8:13:4f:91:71:d3:d8:e9:23:4d:45:f4:1d:56:70: 5a:90:4a:75:78:49:29:1c:2a:15:f8:d3:4c:55:f1: 22:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6D:8B:9C:51:FB:81:C6:73:0B:6B:57:44:11:80:05:4E:F6:45:1F X509v3 Authority Key Identifier: keyid:30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:5a:c7:a8:16:5a:0b:9b:5e:08:c0:d4:05:39:36:9c:8f:41: 78:8f:1f:9f:2b:e1:e4:a2:c2:a7:91:be:9d:d4:37:21:8d:e3: 76:cc:49:14:13:54:4e:0c:81:d7:1d:9c:4c:6c:6a:2e:9c:5b: 98:eb:3f:19:22:dd:21:d7:5c:07:06:57:68:e5:5c:3b:30:3d: 2e:7d:95:1d:56:8c:98:bc:0f:a1:45:b2:90:94:35:15:99:96: 03:fb:d6:a3:0e:64:f2:b5:6f:8e:ee:cc:4d:4f:eb:7c:d9:fb: 8b:19:db:61:ed:3b:38:60:fd:2f:67:b1:5a:b9:60:1f:44:c3: 8c:71:6a:33:e6:5e:e6:f3:98:0e:a3:7b:dd:22:75:98:16:22: bc:95:88:de:db:22:9c:76:89:93:b0:bf:45:a1:f6:36:53:0c: d3:5b:0f:66:d6:aa:fe:c1:17:cc:0e:2d:b7:d0:02:c8:42:11: f0:ec:7f:f3:d5:5e:b8:71:08:8a:f3:35:99:95:bb:59:85:44: 82:e8:6e:c8:cb:17:3a:b6:2a:84:47:d8:bf:64:d7:0e:31:fc: a8:6d:4b:bb:b3:d6:ba:ed:13:2d:86:9d:15:26:bf:8a:34:90: 82:0f:54:98:f8:f0:54:89:2a:32:e1:da:3c:0b:28:53:6c:c0: 2f:2d:25:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDltYIAdi6Yiu6Xq/s0z0qRPqwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RDY2QkVEN0M1QUFCODM5NjY5NzgyRjI0RkU2RDgx N0I4MjA5QTAeFw0yNjA2MTYyMTU1NTlaFw0yNjA2MTcyMjA3NTlaMDMxMTAvBgNV BAMTKDlDNkQ4QjlDNTFGQjgxQzY3MzBCNkI1NzQ0MTE4MDA1NEVGNjQ1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg96M6UlHyWMj3FbWcinADrMwA TlbIxhpxe6plO8g9fqZT32CFpJULj9HFGrVzAH4/P7LnRaTG5Hwq7OUPb20psTGv aJ/6iBMcW5IKk1fcVbWiQOjeR5EpK04+WzKNyfdqKybFYVW38+JV4ZfgUP1C1tBA ShIrUwi/gPXz5K/Mf2SM2z3FXwdYEjerEqm4YKUDCs3fKxHkFQKqqW7PscVbnXHW gjHwtaFMPPZ77zr/DJvWbWwBErAWG+CfB7ORuqye5I22m3x45RFAgG7DwIp+BYoG IV+nD9m5qOAu2164z6gTT5Fx09jpI01F9B1WcFqQSnV4SSkcKhX400xV8SLJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnG2LnFH7gcZzC2tXRBGABU72RR8wHwYDVR0j BBgwFoAUMJ1mvtfFqrg5ZpeC8k/m2Be4IJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwZmNjYjItY2UxYy00ODYyLThlZGYtOGMzNTI3MzAxMWMyLzAvMzA5RDY2QkVE N0M1QUFCODM5NjY5NzgyRjI0RkU2RDgxN0I4MjA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMDlENjZCRUQ3QzVBQUI4Mzk2Njk3ODJGMjRGRTZEODE3Qjgy MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwZmNjYjItY2UxYy00ODYyLThl ZGYtOGMzNTI3MzAxMWMyLzAvMzA5RDY2QkVEN0M1QUFCODM5NjY5NzgyRjI0RkU2 RDgxN0I4MjA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9ax6gWWgubXgjA1AU5NpyPQXiPH58r4eSi wqeRvp3UNyGN43bMSRQTVE4MgdcdnExsai6cW5jrPxki3SHXXAcGV2jlXDswPS59 lR1WjJi8D6FFspCUNRWZlgP71qMOZPK1b47uzE1P63zZ+4sZ22HtOzhg/S9nsVq5 YB9Ew4xxajPmXubzmA6je90idZgWIryViN7bIpx2iZOwv0Wh9jZTDNNbD2bWqv7B F8wOLbfQAshCEfDsf/PVXrhxCIrzNZmVu1mFRILobsjLFzq2KoRH2L9k1w4x/Kht S7uz1rrtEy2GnRUmv4o0kIIPVJj48FSJKjLh2jwLKFNswC8tJfE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:31:49 2026 by rpki-client