$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft File: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft (raw, json) Hash identifier: nHAjuVBL8maIzUAbN0y2E/hJ57D6xAKcKliAEMXBzNA= Subject key identifier: D1:2F:0E:6E:E4:93:4E:96:F1:C7:F0:26:01:65:D5:FF:7B:7B:3B:A1 Authority key identifier: DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 Certificate issuer: /CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Certificate serial: 0D64E64AB767B3A14EDE4EC0C5D469CE00EAC30F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 16:13:52 +0000 Manifest this update: Tue 16 Jun 2026 16:08:52 +0000 Manifest next update: Wed 17 Jun 2026 19:29:52 +0000 Files and hashes: 1: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl (hash: IIQPsiOsNWR8PgzLNzl026/bEZsJsOyVrSvj/S8vnW4=) 2: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: Bl/k50LueSgJjg8VDKjdeOLA5vAz35PavygXYOL9fXU=) 3: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: cHi+wDASSXBvEYUwne4ghJo+D7FzU4toHGViW0cqxos=) 4: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: SGuts0/+uyJce0bHFyKC5/STYlo5gf3uXrTdV1Kngrs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:64:e6:4a:b7:67:b3:a1:4e:de:4e:c0:c5:d4:69:ce:00:ea:c3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Validity Not Before: Jun 16 16:08:52 2026 GMT Not After : Jun 17 19:29:52 2026 GMT Subject: CN=D12F0E6EE4934E96F1C7F0260165D5FF7B7B3BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:9e:d7:cd:db:4d:33:f2:e6:0b:ae:0e:a1: d9:34:54:88:7a:a8:28:d4:b7:1c:96:6d:53:4c:f7: c5:fb:00:d4:79:28:d3:da:be:d5:de:f7:70:22:99: 14:31:d1:d0:6a:cc:ae:e8:ed:c1:a8:5a:2b:7a:31: b1:32:4c:2d:3d:9f:0b:5a:14:3b:e1:25:37:36:3a: d6:ad:33:e3:19:b8:e6:b6:cc:11:fb:9f:75:9c:50: c3:da:4f:fc:94:8d:c6:77:33:a0:f2:a5:55:b9:29: f8:0d:f7:40:f4:c7:f6:47:d3:70:0a:24:86:4a:b2: 25:a2:dc:5d:cb:09:9b:87:7b:f0:ca:25:8f:4e:84: 11:0e:e8:23:5d:21:11:d8:a5:10:e3:05:7f:77:b9: 3f:b9:2a:8e:64:c2:70:0f:b6:2f:58:98:cb:37:a2: b3:87:aa:21:b2:af:b2:e7:d0:3d:cd:13:ce:5d:aa: 76:83:43:b1:db:44:14:d5:ee:c6:7a:a2:33:c4:60: 92:1d:57:ac:ec:35:00:6d:5b:81:22:dc:a3:ea:6b: b1:04:3e:7d:d0:80:3e:25:99:06:a7:21:d3:a2:c3: 13:f0:b4:5a:1b:84:26:2b:58:7b:aa:4d:8c:e9:99: 45:9a:c5:56:ea:20:28:a3:02:71:c8:c3:7a:50:3b: e6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2F:0E:6E:E4:93:4E:96:F1:C7:F0:26:01:65:D5:FF:7B:7B:3B:A1 X509v3 Authority Key Identifier: keyid:DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6d:94:57:04:bb:78:e8:ec:e0:10:f3:91:77:f3:c3:6b:9c: 8b:24:07:12:1c:23:72:45:9f:17:60:59:6c:15:83:b5:0b:fc: 0f:12:c6:e9:49:82:46:79:74:50:9b:ec:36:9d:62:3e:55:26: a9:97:aa:cd:68:75:dc:62:3b:02:b0:f2:ba:e1:be:bd:81:98: 12:64:51:1c:75:ea:21:3f:1b:f2:4d:4c:05:90:ce:b0:ab:ae: 2f:d4:45:13:b9:d1:c3:97:81:a1:ab:c9:85:cd:08:1c:d7:c8: b7:f8:04:43:93:0c:cf:7e:6e:46:83:96:f9:08:2e:4d:b0:af: 86:b6:9a:56:d8:26:2d:0a:be:0b:59:ec:91:78:e8:36:be:0b: de:59:46:80:2e:24:0e:83:01:dd:3b:8d:e1:3e:0f:1f:b8:60: 59:6c:0a:e2:fb:5d:ba:56:c3:2d:49:d5:95:5b:9a:7b:37:0c: fb:db:37:ae:66:5d:56:90:3c:0e:18:c7:cd:a7:50:a6:25:40: 68:f5:18:c1:d2:5e:76:d0:c6:ec:02:ae:60:51:4f:3c:7b:f5: 27:14:f9:39:5d:09:84:5b:9d:58:70:50:a4:85:66:52:dc:ee: 1a:ab:cd:92:e9:6a:6c:e0:84:44:0c:5b:e4:97:c2:53:63:b6: c3:86:e6:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWTmSrdns6FO3k7AxdRpzgDqww8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3NkNE RkE1QTQyNTAeFw0yNjA2MTYxNjA4NTJaFw0yNjA2MTcxOTI5NTJaMDMxMTAvBgNV BAMTKEQxMkYwRTZFRTQ5MzRFOTZGMUM3RjAyNjAxNjVENUZGN0I3QjNCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+p7XzdtNM/LmC64Oodk0VIh6 qCjUtxyWbVNM98X7ANR5KNPavtXe93AimRQx0dBqzK7o7cGoWit6MbEyTC09nwta FDvhJTc2OtatM+MZuOa2zBH7n3WcUMPaT/yUjcZ3M6DypVW5KfgN90D0x/ZH03AK JIZKsiWi3F3LCZuHe/DKJY9OhBEO6CNdIRHYpRDjBX93uT+5Ko5kwnAPti9YmMs3 orOHqiGyr7Ln0D3NE85dqnaDQ7HbRBTV7sZ6ojPEYJIdV6zsNQBtW4Ei3KPqa7EE Pn3QgD4lmQanIdOiwxPwtFobhCYrWHuqTYzpmUWaxVbqICijAnHIw3pQO+YRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0S8ObuSTTpbxx/AmAWXV/3t7O6EwHwYDVR0j BBgwFoAU3zQXUAzglWS0pM6v7eSnbN+lpCUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM3ODVlNjUtNTFlMi00YjFiLTgyZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAw Q0UwOTU2NEI0QTRDRUFGRURFNEE3NkNERkE1QTQyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjM0MTc1MDBDRTA5NTY0QjRBNENFQUZFREU0QTc2Q0RGQTVB NDI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3 NkNERkE1QTQyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxtlFcEu3jo7OAQ85F388NrnIskBxIcI3JF nxdgWWwVg7UL/A8SxulJgkZ5dFCb7DadYj5VJqmXqs1oddxiOwKw8rrhvr2BmBJk URx16iE/G/JNTAWQzrCrri/URRO50cOXgaGryYXNCBzXyLf4BEOTDM9+bkaDlvkI Lk2wr4a2mlbYJi0KvgtZ7JF46Da+C95ZRoAuJA6DAd07jeE+Dx+4YFlsCuL7XbpW wy1J1ZVbmns3DPvbN65mXVaQPA4Yx82nUKYlQGj1GMHSXnbQxuwCrmBRTzx79ScU +TldCYRbnVhwUKSFZlLc7hqrzZLpamzghEQMW+SXwlNjtsOG5sA= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:22 2026 by rpki-client