$ rpki-client -vvf rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft File: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft (raw, json) Hash identifier: 5F6AHJZig4ZGvkltiNOB9lssXlzV6JlFEJFf/jW+bJs= Subject key identifier: 12:1D:60:CD:10:5D:86:F5:46:8A:A5:97:9E:97:01:7C:26:1E:53:88 Authority key identifier: 72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 Certificate issuer: /CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Certificate serial: 7CF34A930468D63CE69AF758014DE6D2CD0A6F05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:20:00 +0000 Manifest this update: Tue 16 Jun 2026 21:14:59 +0000 Manifest next update: Wed 17 Jun 2026 22:27:59 +0000 Files and hashes: 1: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl (hash: goqBbJJLHbzVmlNFpJHHKLBuIH90vHIIrxxNo7gnkdI=) 2: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: jvWEOsR7PfzKTUwNJSaNZgDIPP0tbvEXbSdlcBqgCio=) 3: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: oUpYjCZBUJLtFkQG6ecMP2UxGQxIQOGY4XCQZ/Ln3C8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f3:4a:93:04:68:d6:3c:e6:9a:f7:58:01:4d:e6:d2:cd:0a:6f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Validity Not Before: Jun 16 21:14:59 2026 GMT Not After : Jun 17 22:27:59 2026 GMT Subject: CN=121D60CD105D86F5468AA5979E97017C261E5388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:21:e6:7d:25:b7:1b:54:ff:f9:9b:5a:71:8f: 45:70:a5:2e:b8:b0:dd:29:68:9a:b4:77:01:2f:fe: 26:b8:cd:2c:b5:c0:7e:99:45:d7:1c:5c:48:64:93: 91:96:f4:6b:2d:37:e5:ca:33:42:5e:f9:26:57:a3: a6:43:9c:ef:f9:79:5f:c6:28:b5:74:12:a2:ae:24: 81:a2:b5:72:b7:6d:f4:d3:f4:3e:81:74:11:3e:14: 99:9c:54:11:75:16:86:92:50:7a:6c:4f:b6:d9:1c: c5:eb:91:40:a4:85:8e:57:a5:03:4c:dc:bf:1e:22: 13:aa:ea:c6:b4:13:f9:67:d1:be:d8:22:77:a4:d9: eb:df:8a:37:fd:0e:bf:80:bd:6b:e4:01:e6:29:73: 06:da:ed:e5:0f:b2:07:bd:f0:9f:9f:b3:b7:45:3f: 9a:05:48:cf:71:9b:51:95:ca:d6:c2:08:3b:b5:9a: 6d:92:5a:93:b7:0a:ed:f4:78:2b:bc:07:8a:9e:ff: 9d:ab:1e:3c:a1:43:d5:64:dc:65:6a:3c:fc:6f:09: 4b:f2:a6:35:d7:fb:cd:e4:5f:95:06:32:38:f3:39: 40:89:15:b6:90:89:9d:32:02:07:15:25:fa:90:c9: e3:cf:05:3a:78:fb:bb:32:55:65:f6:47:62:f5:81: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1D:60:CD:10:5D:86:F5:46:8A:A5:97:9E:97:01:7C:26:1E:53:88 X509v3 Authority Key Identifier: keyid:72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:66:ad:b5:0d:64:63:68:2b:dc:3b:39:b0:2f:e6:f8:2d:d0: 7c:32:ad:00:ea:0e:9e:a5:76:b4:88:7c:e8:75:d4:8d:8b:ab: 48:40:30:cb:41:13:1a:c2:7f:d6:93:13:02:38:57:9d:c1:df: b2:a8:5e:07:12:ae:f1:10:ce:18:d8:ca:b4:6d:22:64:72:78: e2:de:c7:05:90:67:a5:11:4b:c4:92:63:f1:53:46:0c:22:16: 17:22:10:8c:46:a9:c0:e5:07:f0:03:1b:38:37:93:f4:94:da: c5:58:a8:83:1d:9f:37:d0:72:b1:f5:95:65:bd:02:b4:42:92: 8e:f7:74:51:45:3d:a8:08:bf:a5:91:ed:3d:b6:71:1c:71:f5: 60:0e:d7:11:ac:32:bd:84:86:4b:a8:a0:27:56:70:a2:a2:23: e5:33:54:01:7c:6a:69:cb:17:4a:f4:bc:da:7e:52:af:42:e1: 08:27:a9:b7:7f:44:55:39:bd:f1:28:31:54:77:ed:50:bc:fa: 5b:84:b7:79:fb:26:a1:ce:2f:a8:6f:f8:33:42:01:71:bb:ed: 37:13:38:2c:3d:2f:ed:82:4e:e5:a6:52:f3:10:83:5c:77:ff: 8f:72:40:20:b8:29:55:d9:48:fe:c7:50:40:f4:44:2c:6c:63: 73:11:a3:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPNKkwRo1jzmmvdYAU3m0s0KbwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0Mx MzMzQjEyODAeFw0yNjA2MTYyMTE0NTlaFw0yNjA2MTcyMjI3NTlaMDMxMTAvBgNV BAMTKDEyMUQ2MENEMTA1RDg2RjU0NjhBQTU5NzlFOTcwMTdDMjYxRTUzODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTIeZ9JbcbVP/5m1pxj0VwpS64 sN0paJq0dwEv/ia4zSy1wH6ZRdccXEhkk5GW9GstN+XKM0Je+SZXo6ZDnO/5eV/G KLV0EqKuJIGitXK3bfTT9D6BdBE+FJmcVBF1FoaSUHpsT7bZHMXrkUCkhY5XpQNM 3L8eIhOq6sa0E/ln0b7YInek2evfijf9Dr+AvWvkAeYpcwba7eUPsge98J+fs7dF P5oFSM9xm1GVytbCCDu1mm2SWpO3Cu30eCu8B4qe/52rHjyhQ9Vk3GVqPPxvCUvy pjXX+83kX5UGMjjzOUCJFbaQiZ0yAgcVJfqQyePPBTp4+7syVWX2R2L1gVbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEh1gzRBdhvVGiqWXnpcBfCYeU4gwHwYDVR0j BBgwFoAUclBmpEzN+u5Ep8lY1A+6PBMzsSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVmODM3YjMtZGZkMi00MmNjLTliNzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0 Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0MxMzMzQjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUwNjZBNDRDQ0RGQUVFNDRBN0M5NThENDBGQkEzQzEzMzNC MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJB M0MxMzMzQjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExmrbUNZGNoK9w7ObAv5vgt0HwyrQDqDp6l drSIfOh11I2Lq0hAMMtBExrCf9aTEwI4V53B37KoXgcSrvEQzhjYyrRtImRyeOLe xwWQZ6URS8SSY/FTRgwiFhciEIxGqcDlB/ADGzg3k/SU2sVYqIMdnzfQcrH1lWW9 ArRCko73dFFFPagIv6WR7T22cRxx9WAO1xGsMr2EhkuooCdWcKKiI+UzVAF8amnL F0r0vNp+Uq9C4Qgnqbd/RFU5vfEoMVR37VC8+luEt3n7JqHOL6hv+DNCAXG77TcT OCw9L+2CTuWmUvMQg1x3/49yQCC4KVXZSP7HUED0RCxsY3MRo08= -----END CERTIFICATE-----Generated at Wed Jun 17 11:11:36 2026 by rpki-client