$ rpki-client -vvf rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft File: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft (raw, json) Hash identifier: qKxTQKtZU9Ry1rx47QeWqizxb1Nxhc78fBD+bzgYyBk= Subject key identifier: 2E:BF:11:C5:D9:19:05:A5:77:2C:34:D1:B8:9D:1A:26:6B:B2:37:42 Authority key identifier: A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2 Certificate issuer: /CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2 Certificate serial: 1932AAB2FA7E1E2787DD0DF99CBE1BBBB9AA9DF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 03:47:29 +0000 Manifest this update: Sun 14 Jun 2026 03:42:29 +0000 Manifest next update: Mon 15 Jun 2026 07:40:29 +0000 Files and hashes: 1: A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl (hash: uMMmvpkWVB0kTe5cVfb/i7EpcTAf3ccdPczTWu2lNyc=) 2: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: C+h1+9cN0GpUOXDh90MHekCqY6uk6Swn27VB4kNaByQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 07:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:32:aa:b2:fa:7e:1e:27:87:dd:0d:f9:9c:be:1b:bb:b9:aa:9d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A785B4C890C9E26CFCE6849FEF009B041D31D5F2 Validity Not Before: Jun 14 03:42:29 2026 GMT Not After : Jun 15 07:40:29 2026 GMT Subject: CN=2EBF11C5D91905A5772C34D1B89D1A266BB23742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:18:5b:00:f1:e8:4e:9b:04:25:03:d3:7e:0d: 58:08:6c:fc:ef:e8:72:60:6e:73:56:ff:4c:95:51: ec:79:0d:fc:27:73:10:f0:3c:1b:12:2f:3d:d0:c1: e1:8c:b1:28:b3:80:f2:79:f7:9b:53:85:a5:4f:0e: 19:04:39:15:0b:84:46:ae:90:1d:a8:da:06:4d:b6: 70:e3:4b:df:f7:c1:79:f3:e1:74:60:6d:ab:bd:f3: ae:92:24:af:97:e9:43:ff:90:0d:86:e4:81:c3:da: 7d:87:19:78:5f:d8:32:29:54:c3:f9:7f:87:1f:83: e3:2f:7f:93:3e:4c:8d:2e:5a:61:0f:97:52:88:1e: 9a:e4:45:6b:b7:ab:7f:46:51:5b:b1:b0:9a:b6:ae: 55:4e:9b:bc:c0:e5:3c:40:7b:d3:19:13:ca:63:1d: 73:2d:35:b0:ec:e7:34:e3:f1:a3:0f:ea:c2:72:9a: 0c:f1:7a:20:47:c0:cb:90:ec:1e:b8:cf:08:e7:c5: c0:6e:9a:13:ce:fc:e6:7f:11:24:42:73:3a:ca:44: d7:35:41:17:0d:25:48:5e:dd:74:ce:86:d1:42:f9: 17:d4:c0:2f:13:a7:95:23:c8:26:91:0f:8c:7e:4e: 5c:d9:09:a5:0e:b0:e9:45:f2:7b:0f:16:f4:ff:06: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BF:11:C5:D9:19:05:A5:77:2C:34:D1:B8:9D:1A:26:6B:B2:37:42 X509v3 Authority Key Identifier: keyid:A7:85:B4:C8:90:C9:E2:6C:FC:E6:84:9F:EF:00:9B:04:1D:31:D5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/A785B4C890C9E26CFCE6849FEF009B041D31D5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:80:68:d4:1b:be:ae:4c:b9:13:9f:fc:19:dc:a8:93:aa:03: 01:4f:47:f7:53:43:dd:b0:ec:55:ba:b4:67:a3:ae:46:e4:5a: 0b:6d:85:73:24:f1:9e:06:2c:e1:9d:d0:23:1a:8c:98:9a:88: 0a:7c:7f:91:a6:85:e1:f8:77:71:03:be:19:07:d9:2c:21:34: 81:8a:f9:df:87:4a:08:83:c2:c8:30:0d:05:cc:d5:6f:d9:a3: f2:72:ee:14:23:5e:6e:30:6e:39:58:55:9c:84:86:d2:a8:60: 80:86:94:5d:16:13:34:f3:90:e7:59:43:99:73:74:b6:ae:11: be:26:7a:3c:d1:c5:c7:14:ce:bb:e9:6a:93:82:e4:1b:6b:3b: 21:11:00:e5:4a:4b:60:5e:99:61:8c:bb:e9:4d:2a:eb:91:61: ae:dc:00:f6:61:78:46:b5:42:47:9c:48:3f:39:1a:0e:a2:62: 34:93:2c:17:bb:06:2d:c3:42:53:d1:ff:e7:94:a1:8a:1e:a4: 9b:84:67:6a:e3:77:7f:92:2d:58:e5:de:49:4c:57:39:1f:e2: 14:90:a3:85:10:bb:c1:04:c1:ad:99:d8:08:4a:3b:74:2c:aa: 0b:57:9c:c1:3d:12:d9:2b:3d:f7:7b:e6:08:29:90:d0:b1:4a: f6:f8:70:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTKqsvp+HieH3Q35nL4bu7mqnfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4NUI0Qzg5MEM5RTI2Q0ZDRTY4NDlGRUYwMDlCMDQx RDMxRDVGMjAeFw0yNjA2MTQwMzQyMjlaFw0yNjA2MTUwNzQwMjlaMDMxMTAvBgNV BAMTKDJFQkYxMUM1RDkxOTA1QTU3NzJDMzREMUI4OUQxQTI2NkJCMjM3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXGFsA8ehOmwQlA9N+DVgIbPzv 6HJgbnNW/0yVUex5DfwncxDwPBsSLz3QweGMsSizgPJ595tThaVPDhkEORULhEau kB2o2gZNtnDjS9/3wXnz4XRgbau9866SJK+X6UP/kA2G5IHD2n2HGXhf2DIpVMP5 f4cfg+Mvf5M+TI0uWmEPl1KIHprkRWu3q39GUVuxsJq2rlVOm7zA5TxAe9MZE8pj HXMtNbDs5zTj8aMP6sJymgzxeiBHwMuQ7B64zwjnxcBumhPO/OZ/ESRCczrKRNc1 QRcNJUhe3XTOhtFC+RfUwC8Tp5UjyCaRD4x+TlzZCaUOsOlF8nsPFvT/BsnfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULr8RxdkZBaV3LDTRuJ0aJmuyN0IwHwYDVR0j BBgwFoAUp4W0yJDJ4mz85oSf7wCbBB0x1fIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY2YThmMjgtOWEwMy00Mzc2LWI2MTItMzFmNWFkMWMxZWQ2LzAvQTc4NUI0Qzg5 MEM5RTI2Q0ZDRTY4NDlGRUYwMDlCMDQxRDMxRDVGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzg1QjRDODkwQzlFMjZDRkNFNjg0OUZFRjAwOUIwNDFEMzFE NUYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY2YThmMjgtOWEwMy00Mzc2LWI2 MTItMzFmNWFkMWMxZWQ2LzAvQTc4NUI0Qzg5MEM5RTI2Q0ZDRTY4NDlGRUYwMDlC MDQxRDMxRDVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2AaNQbvq5MuROf/BncqJOqAwFPR/dTQ92w 7FW6tGejrkbkWgtthXMk8Z4GLOGd0CMajJiaiAp8f5GmheH4d3EDvhkH2SwhNIGK +d+HSgiDwsgwDQXM1W/Zo/Jy7hQjXm4wbjlYVZyEhtKoYICGlF0WEzTzkOdZQ5lz dLauEb4mejzRxccUzrvpapOC5BtrOyERAOVKS2BemWGMu+lNKuuRYa7cAPZheEa1 QkecSD85Gg6iYjSTLBe7Bi3DQlPR/+eUoYoepJuEZ2rjd3+SLVjl3klMVzkf4hSQ o4UQu8EEwa2Z2AhKO3QsqgtXnME9EtkrPfd75ggpkNCxSvb4cMQ= -----END CERTIFICATE-----Generated at Sun Jun 14 12:18:55 2026 by rpki-client