$ rpki-client -vvf rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft File: A337D214F1B15825AC6178574C28712521D64B38.mft (raw, json) Hash identifier: ZJU6yHPh8p9/LR5abrMSKuejcIgwUPqdMUOzCE7SFAI= Subject key identifier: 49:C7:81:9B:5A:3E:23:FB:40:42:77:DB:11:A6:58:7A:04:8B:28:A1 Authority key identifier: A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38 Certificate issuer: /CN=A337D214F1B15825AC6178574C28712521D64B38 Certificate serial: 76F7E12FCBF084EDA74772CFDA35F0CD94A0DA53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:16:44 +0000 Manifest this update: Wed 17 Jun 2026 07:11:44 +0000 Manifest next update: Thu 18 Jun 2026 08:56:44 +0000 Files and hashes: 1: A337D214F1B15825AC6178574C28712521D64B38.crl (hash: bFkUMlD0SojeIFArPwfTSgQcOMd9kquXdG5r5rJvpX0=) 2: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: YLw5IVSAkKDuGq+lyyvqHOq+xZOAw6KjW85lZGyeWXA=) 3: 3130332e32302e3130382e302f32342d3234203d3e20313534323137.roa (hash: 6ANd8eDpGDry4TmWd8klyvoxo3+q5EgqhgVj7CcAyKQ=) 4: 3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa (hash: eSjZGWM1OyV1yhzjQEoayB2vN+fO3mEGbT4lUzAsfwU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f7:e1:2f:cb:f0:84:ed:a7:47:72:cf:da:35:f0:cd:94:a0:da:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A337D214F1B15825AC6178574C28712521D64B38 Validity Not Before: Jun 17 07:11:44 2026 GMT Not After : Jun 18 08:56:44 2026 GMT Subject: CN=49C7819B5A3E23FB404277DB11A6587A048B28A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0c:08:a7:b7:06:5a:40:46:bb:18:0d:1a:5a: c7:69:fa:b0:c6:c4:9d:9a:4c:e2:4a:00:e8:99:aa: 5a:fa:38:66:d6:fe:ac:78:d5:05:c1:92:71:58:b9: f7:c9:73:e5:4b:91:c9:5f:d1:f7:6d:bc:8e:3e:84: 77:e3:c5:3f:6f:c0:9a:38:de:90:ed:f5:dd:d7:39: 21:e0:36:8f:8b:0c:15:36:fe:18:c0:61:dc:73:d2: 15:b6:0b:c8:9a:2a:a1:b2:43:95:c4:02:52:2e:cf: a9:e2:12:f8:35:25:9f:f7:cb:8f:b8:e1:94:c0:69: a5:68:58:75:b4:4c:9a:2a:eb:61:5d:0e:51:6d:40: 0c:8a:b4:99:8b:d9:dd:37:59:c9:d9:56:29:fc:9a: 48:f2:c7:51:20:03:d6:5e:78:03:74:c0:3a:50:48: e9:95:f3:0f:b1:9d:22:70:cd:a5:01:93:d6:c7:61: 70:30:97:e3:26:63:b0:11:66:94:6e:39:fb:0a:8f: ec:45:7d:49:36:a7:5b:f7:21:07:dd:c7:38:78:80: d3:b7:48:ad:b3:78:92:c1:3c:eb:f1:e7:83:19:e4: d4:7a:f3:7c:d9:1e:6e:f9:71:36:55:5a:6d:bc:5a: 05:1b:5a:05:a1:8b:b2:da:54:44:d1:19:39:59:4e: 3a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C7:81:9B:5A:3E:23:FB:40:42:77:DB:11:A6:58:7A:04:8B:28:A1 X509v3 Authority Key Identifier: keyid:A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ef:03:a9:a7:c2:c3:90:fb:d0:2c:15:50:8e:f9:05:f9:72: 08:27:37:50:08:9b:8b:7e:93:7c:82:df:92:16:5c:66:c1:16: 63:63:e0:13:bb:6f:a2:ce:ea:1d:d7:78:0b:65:e1:a5:41:63: 69:fb:8b:58:80:07:9f:8e:13:2e:fa:69:1c:6e:28:d7:5c:7b: 82:d9:d7:1f:ed:e2:02:c1:8d:d4:a0:07:22:ef:b6:0c:e9:26: 0d:8f:b9:c2:08:2c:ba:46:a3:fb:e2:e1:e7:01:9f:ea:c2:97: 9a:b4:a3:b3:3f:45:15:1f:bb:38:34:c0:23:7f:49:a6:50:32: 0f:ed:a3:1c:9e:2d:9c:c2:75:31:51:85:ad:12:fd:83:c1:8c: 59:90:9d:c7:e3:01:ae:60:25:03:88:3c:39:fe:e8:96:02:ec: 8d:04:02:12:76:04:f7:af:a1:a2:61:01:c7:91:ef:65:4a:6e: 64:b7:29:6d:e5:db:1b:a3:74:7c:00:47:58:4c:aa:61:3c:53: 2d:4c:5e:d5:1c:4b:66:ca:5e:a9:c4:c8:4e:02:40:ad:61:68: 3a:be:ac:90:ad:26:dc:66:6f:58:17:2d:d9:1b:dd:2c:7a:22: 7c:b1:58:19:15:ea:54:0a:83:96:8c:94:52:80:1b:43:7f:53: 4b:ad:2a:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdvfhL8vwhO2nR3LP2jXwzZSg2lMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzN0QyMTRGMUIxNTgyNUFDNjE3ODU3NEMyODcxMjUy MUQ2NEIzODAeFw0yNjA2MTcwNzExNDRaFw0yNjA2MTgwODU2NDRaMDMxMTAvBgNV BAMTKDQ5Qzc4MTlCNUEzRTIzRkI0MDQyNzdEQjExQTY1ODdBMDQ4QjI4QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDAintwZaQEa7GA0aWsdp+rDG xJ2aTOJKAOiZqlr6OGbW/qx41QXBknFYuffJc+VLkclf0fdtvI4+hHfjxT9vwJo4 3pDt9d3XOSHgNo+LDBU2/hjAYdxz0hW2C8iaKqGyQ5XEAlIuz6niEvg1JZ/3y4+4 4ZTAaaVoWHW0TJoq62FdDlFtQAyKtJmL2d03WcnZVin8mkjyx1EgA9ZeeAN0wDpQ SOmV8w+xnSJwzaUBk9bHYXAwl+MmY7ARZpRuOfsKj+xFfUk2p1v3IQfdxzh4gNO3 SK2zeJLBPOvx54MZ5NR683zZHm75cTZVWm28WgUbWgWhi7LaVETRGTlZTjrXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSceBm1o+I/tAQnfbEaZYegSLKKEwHwYDVR0j BBgwFoAUozfSFPGxWCWsYXhXTChxJSHWSzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNjNmJkNzMtZjliZC00ZjVhLTljNTktZmJlYTFiZDgzNDczLzAvQTMzN0QyMTRG MUIxNTgyNUFDNjE3ODU3NEMyODcxMjUyMUQ2NEIzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzM3RDIxNEYxQjE1ODI1QUM2MTc4NTc0QzI4NzEyNTIxRDY0 QjM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvQTMzN0QyMTRGMUIxNTgyNUFDNjE3ODU3NEMyODcx MjUyMUQ2NEIzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXvA6mnwsOQ+9AsFVCO+QX5cggnN1AIm4t+ k3yC35IWXGbBFmNj4BO7b6LO6h3XeAtl4aVBY2n7i1iAB5+OEy76aRxuKNdce4LZ 1x/t4gLBjdSgByLvtgzpJg2PucIILLpGo/vi4ecBn+rCl5q0o7M/RRUfuzg0wCN/ SaZQMg/toxyeLZzCdTFRha0S/YPBjFmQncfjAa5gJQOIPDn+6JYC7I0EAhJ2BPev oaJhAceR72VKbmS3KW3l2xujdHwAR1hMqmE8Uy1MXtUcS2bKXqnEyE4CQK1haDq+ rJCtJtxmb1gXLdkb3Sx6InyxWBkV6lQKg5aMlFKAG0N/U0utKtM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:18 2026 by rpki-client