$ rpki-client -vvf rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft File: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft (raw, json) Hash identifier: LUNwuyXtfbvDT2cBhij+kly3q3jFhh3q3wuGpEDiMI4= Subject key identifier: C4:E1:26:A2:F1:9E:7A:D4:95:C1:09:33:50:C9:F9:30:F2:B7:13:CF Authority key identifier: 1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 Certificate issuer: /CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Certificate serial: 3AC82F3DE865FCE4A4EEA9D89ACCACF210DA7781 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:47:28 +0000 Manifest this update: Wed 17 Jun 2026 03:42:28 +0000 Manifest next update: Thu 18 Jun 2026 04:06:28 +0000 Files and hashes: 1: 3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa (hash: abHJVxNnwaoboRz133X3G8MnlftrvDuOlkNRl1NWN8Q=) 2: 3130332e3231312e3130362e302f32342d3234203d3e20313530393938.roa (hash: 8wIJWteGAIk9T9oN6S4OkGcsq4cI3A7o+2OUPgwfN0k=) 3: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl (hash: sTtgABfy13nprKdCL0NMUsjmK0lTshDxdd5X9hwIR4k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c8:2f:3d:e8:65:fc:e4:a4:ee:a9:d8:9a:cc:ac:f2:10:da:77:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Validity Not Before: Jun 17 03:42:28 2026 GMT Not After : Jun 18 04:06:28 2026 GMT Subject: CN=C4E126A2F19E7AD495C1093350C9F930F2B713CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:9b:30:37:34:35:8e:5d:f0:ed:0c:7d:83: 17:d2:1d:bd:cf:16:25:93:c1:79:ef:46:a0:ed:6a: fc:dc:4e:08:48:3b:42:a3:33:78:5c:7f:46:88:39: b0:fa:1e:a4:9b:d6:ae:a8:d8:2a:04:fb:14:bd:42: ff:08:98:39:13:ad:32:00:cf:66:19:e2:f7:08:5d: a5:89:58:c8:3f:d5:e7:92:c9:2e:17:1d:12:6d:3c: ef:63:17:0e:63:f3:55:81:3e:0b:bb:31:f3:57:3c: 3c:d1:29:88:c4:2c:23:eb:c2:b6:7f:b6:32:f8:09: 29:ce:bf:a5:f6:32:2c:c4:16:ec:4b:db:12:82:ab: 2a:02:dd:ea:89:64:6c:95:06:3d:f0:dc:1e:6d:ef: 92:13:67:9f:51:c6:80:63:30:4b:46:a0:6a:a2:a4: 25:c5:fa:ac:e0:94:0a:4b:72:5f:10:18:17:c2:9e: 07:6b:1e:c2:66:d6:73:cf:cf:05:50:fe:fd:44:62: 3b:53:24:21:f3:33:83:ae:d3:04:d3:a5:bf:35:8e: 2f:72:28:5a:05:f6:7e:7c:0e:b5:d8:2b:9e:51:57: b3:c0:55:c4:9c:06:83:e4:2d:b0:d7:6d:4c:64:c8: dd:99:20:39:f4:e6:d6:3c:b8:60:9e:17:5b:c7:3b: 47:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E1:26:A2:F1:9E:7A:D4:95:C1:09:33:50:C9:F9:30:F2:B7:13:CF X509v3 Authority Key Identifier: keyid:1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a4:98:67:c3:30:e5:e4:4d:99:3d:20:b2:ef:88:af:80:c4: d0:ff:68:f2:48:b5:82:1d:14:f1:f7:66:e7:2b:c9:af:ee:ff: 18:b5:10:1c:3e:88:6d:54:bf:26:30:5e:98:f7:fc:4c:d6:81: 80:78:20:89:9f:5d:47:fb:98:9a:72:e8:91:f6:2d:23:f0:e4: d2:c0:9b:7e:9b:3f:ed:25:77:36:2f:4e:17:e2:f8:41:41:2c: 1c:10:d2:d2:74:1c:f7:2b:af:cd:e8:15:40:bb:ae:b3:f8:cd: 6e:5d:66:aa:ba:8b:3f:3c:82:de:c5:f7:16:a1:0d:6b:17:14: db:ff:58:49:00:3a:95:0e:e9:90:77:4f:12:52:9a:1d:87:72: 09:0f:f0:d5:8a:c8:0d:e5:25:a7:f2:d2:0c:0f:ab:ab:b0:ec: 56:6a:24:da:a0:df:9e:b3:44:70:89:a6:35:68:b2:d3:06:02: 33:b1:9f:d7:aa:42:bd:20:9d:a7:f2:f7:cf:a0:06:23:3e:d3: 53:93:5d:2f:88:01:da:48:a2:88:e9:15:2a:4e:8d:78:2c:a2: 90:83:b6:ae:bf:6b:8e:59:42:80:7a:91:fd:b4:8a:c7:3a:17: 59:d3:33:d8:03:a2:5a:57:5c:7d:d5:4b:d8:ad:fd:ec:66:e8: fa:bf:82:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsgvPehl/OSk7qnYmsys8hDad4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMjE3QUFFQkM4QTVCOEJBRkFEM0Y3RUY0OUJFQkM2 MUZCRTM0NjAeFw0yNjA2MTcwMzQyMjhaFw0yNjA2MTgwNDA2MjhaMDMxMTAvBgNV BAMTKEM0RTEyNkEyRjE5RTdBRDQ5NUMxMDkzMzUwQzlGOTMwRjJCNzEzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzaJswNzQ1jl3w7Qx9gxfSHb3P FiWTwXnvRqDtavzcTghIO0KjM3hcf0aIObD6HqSb1q6o2CoE+xS9Qv8ImDkTrTIA z2YZ4vcIXaWJWMg/1eeSyS4XHRJtPO9jFw5j81WBPgu7MfNXPDzRKYjELCPrwrZ/ tjL4CSnOv6X2MizEFuxL2xKCqyoC3eqJZGyVBj3w3B5t75ITZ59RxoBjMEtGoGqi pCXF+qzglApLcl8QGBfCngdrHsJm1nPPzwVQ/v1EYjtTJCHzM4Ou0wTTpb81ji9y KFoF9n58DrXYK55RV7PAVcScBoPkLbDXbUxkyN2ZIDn05tY8uGCeF1vHO0cxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxOEmovGeetSVwQkzUMn5MPK3E88wHwYDVR0j BBgwFoAUHPIXquvIpbi6+tP370m+vGH740YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg3OGMwNjItYjA5Mi00MDI1LTliNjgtYmZlYjliNjVhNWEwLzAvMUNGMjE3QUFF QkM4QTVCOEJBRkFEM0Y3RUY0OUJFQkM2MUZCRTM0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0YyMTdBQUVCQzhBNUI4QkFGQUQzRjdFRjQ5QkVCQzYxRkJF MzQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg3OGMwNjItYjA5Mi00MDI1LTli NjgtYmZlYjliNjVhNWEwLzAvMUNGMjE3QUFFQkM4QTVCOEJBRkFEM0Y3RUY0OUJF QkM2MUZCRTM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2kmGfDMOXkTZk9ILLviK+AxND/aPJItYId FPH3Zucrya/u/xi1EBw+iG1UvyYwXpj3/EzWgYB4IImfXUf7mJpy6JH2LSPw5NLA m36bP+0ldzYvThfi+EFBLBwQ0tJ0HPcrr83oFUC7rrP4zW5dZqq6iz88gt7F9xah DWsXFNv/WEkAOpUO6ZB3TxJSmh2HcgkP8NWKyA3lJafy0gwPq6uw7FZqJNqg356z RHCJpjVostMGAjOxn9eqQr0gnafy98+gBiM+01OTXS+IAdpIoojpFSpOjXgsopCD tq6/a45ZQoB6kf20isc6F1nTM9gDolpXXH3VS9it/exm6Pq/gmo= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:06 2026 by rpki-client