$ rpki-client -vvf rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft File: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft (raw, json) Hash identifier: gs7XWtzlE5S9RF5wZXZTdoRedgQ7hgFAavqRVzjOOHU= Subject key identifier: 0E:68:7D:D3:96:68:4F:73:90:1C:7E:58:6D:00:73:91:5F:D2:8A:68 Authority key identifier: F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA Certificate issuer: /CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Certificate serial: 6231878BC56AC866C6CADF1796EB1BB5892944DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:11:08 +0000 Manifest this update: Tue 16 Jun 2026 18:06:08 +0000 Manifest next update: Wed 17 Jun 2026 20:03:08 +0000 Files and hashes: 1: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl (hash: TQX6V1XTZfP74D1Nh3NG2BZbXP/GD2BxPRWLQujVigc=) 2: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: wf52tNtWGqvJu4jJ0bY+suECblDw6T8omf+yFePGyuM=) 3: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: BEHpudyQRtuwFf2QCG10V78UvnovrE5OkEiSNy4zuO4=) 4: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: Q22MEgPVR0f+tL92VX04m4XuP6YQLIKMlMPaJZ8fbYE=) 5: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: XZr4Qm+n8o7er/+eUBzkmen2AskfpDrwMEA3kRcHwsg=) 6: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 95q1wdIN5xFaDjhByaZc0LA7ZtrsvihoQfqYrsCn+uc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:31:87:8b:c5:6a:c8:66:c6:ca:df:17:96:eb:1b:b5:89:29:44:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Validity Not Before: Jun 16 18:06:08 2026 GMT Not After : Jun 17 20:03:08 2026 GMT Subject: CN=0E687DD396684F73901C7E586D0073915FD28A68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ae:01:68:f6:19:51:12:14:f9:1e:5c:b0:9f: 65:dd:e3:de:17:dc:ca:b2:e2:f8:76:c0:b7:ed:97: 0f:e5:b7:1c:86:c9:17:2f:4e:27:2b:5c:6a:a0:6b: cc:f6:af:2d:6c:1f:65:89:50:59:34:74:78:1e:3d: 0e:d1:9e:b6:6f:5b:2c:59:8b:26:c8:77:e9:6a:87: db:76:41:8c:33:a8:65:68:17:87:f7:25:16:b0:26: de:40:f3:0b:e8:8d:10:2c:4b:26:30:57:da:ec:21: a3:0b:60:ce:ff:22:b7:83:1c:73:1d:2a:29:b6:0f: 76:ec:be:47:29:50:ef:92:b3:33:09:e7:37:0f:50: 6d:94:1c:4e:61:cc:18:fc:c9:35:87:cb:3e:d2:8a: c4:df:7e:a7:76:2e:33:73:85:17:51:34:8b:81:57: ea:5b:30:2b:b7:b6:77:90:ea:a7:a6:09:f9:41:09: c3:2f:e9:e1:e6:01:92:3f:97:ee:fe:6d:71:8c:15: ea:bf:9c:cd:f3:37:31:82:9f:9e:ed:95:d6:0c:7c: de:5c:f8:10:d0:bf:44:7c:9f:7c:d8:7a:20:30:44: dd:86:2f:2c:15:2f:89:d7:69:9f:a9:99:f2:ad:cc: 4c:9f:df:cf:68:79:94:da:80:ad:58:b3:56:19:38: 25:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:68:7D:D3:96:68:4F:73:90:1C:7E:58:6D:00:73:91:5F:D2:8A:68 X509v3 Authority Key Identifier: keyid:F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:c6:be:ef:c3:19:ee:bf:4d:5f:b4:a7:9e:4a:c6:70:e7:c4: 90:2e:b6:85:a5:77:f3:9f:03:c0:07:8f:c1:dc:2b:df:de:35: 5b:ae:86:e7:cc:0d:7f:15:b7:63:61:4a:b1:e6:e8:4b:0c:02: 65:a8:08:08:50:66:b0:7e:6c:8c:8e:5a:88:f4:2a:bc:4d:64: 50:74:1b:5a:3c:6e:b8:38:66:35:a9:ac:dc:e7:8d:45:25:7d: 87:55:81:6f:43:10:94:94:a3:71:97:a5:36:2d:77:4c:ed:60: 2b:12:47:99:27:e1:dc:b9:92:a1:25:bc:29:d8:0e:45:8b:33: f5:36:cc:9c:61:1b:a1:9d:c6:50:6b:df:49:41:d5:91:7c:a4: 9c:59:7f:ea:60:28:37:37:29:19:78:83:9f:e5:86:3b:0d:0e: 46:ce:fc:ff:2e:99:6c:7a:2d:dd:be:dc:2f:a4:c3:e1:d3:f4: 0a:88:17:13:be:66:55:6f:66:c4:24:c0:a9:08:d2:01:37:dc: e7:4b:1f:50:b5:bf:27:5b:43:7e:1e:1d:ea:9c:b6:a2:50:88: 99:0c:3a:fd:a6:43:89:e8:06:4f:4c:d8:fc:91:76:67:bc:bb: a7:6e:c9:87:c1:96:6d:e8:f5:9d:61:7d:3d:4a:a4:5c:0c:7d: 01:45:e4:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYjGHi8VqyGbGyt8XlusbtYkpRNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3RkRFN0U5QUJEOUQ0 MUQ3Q0NEQTAeFw0yNjA2MTYxODA2MDhaFw0yNjA2MTcyMDAzMDhaMDMxMTAvBgNV BAMTKDBFNjg3REQzOTY2ODRGNzM5MDFDN0U1ODZEMDA3MzkxNUZEMjhBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNrgFo9hlREhT5Hlywn2Xd494X 3Mqy4vh2wLftlw/ltxyGyRcvTicrXGqga8z2ry1sH2WJUFk0dHgePQ7RnrZvWyxZ iybId+lqh9t2QYwzqGVoF4f3JRawJt5A8wvojRAsSyYwV9rsIaMLYM7/IreDHHMd Kim2D3bsvkcpUO+SszMJ5zcPUG2UHE5hzBj8yTWHyz7SisTffqd2LjNzhRdRNIuB V+pbMCu3tneQ6qemCflBCcMv6eHmAZI/l+7+bXGMFeq/nM3zNzGCn57tldYMfN5c +BDQv0R8n3zYeiAwRN2GLywVL4nXaZ+pmfKtzEyf389oeZTagK1Ys1YZOCXHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDmh905ZoT3OQHH5YbQBzkV/SimgwHwYDVR0j BBgwFoAU8NNIHOFySzIkN3/efpq9nUHXzNowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjQ1MGQ5NTYtOWIwMC00NmMxLWE2MzEtMzU2NGUxODZhMDc5LzAvRjBEMzQ4MUNF MTcyNEIzMjI0Mzc3RkRFN0U5QUJEOUQ0MUQ3Q0NEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEQzNDgxQ0UxNzI0QjMyMjQzNzdGREU3RTlBQkQ5RDQxRDdD Q0RBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3RkRFN0U5QUJE OUQ0MUQ3Q0NEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHGvu/DGe6/TV+0p55KxnDnxJAutoWld/Of A8AHj8HcK9/eNVuuhufMDX8Vt2NhSrHm6EsMAmWoCAhQZrB+bIyOWoj0KrxNZFB0 G1o8brg4ZjWprNznjUUlfYdVgW9DEJSUo3GXpTYtd0ztYCsSR5kn4dy5kqElvCnY DkWLM/U2zJxhG6GdxlBr30lB1ZF8pJxZf+pgKDc3KRl4g5/lhjsNDkbO/P8umWx6 Ld2+3C+kw+HT9AqIFxO+ZlVvZsQkwKkI0gE33OdLH1C1vydbQ34eHeqctqJQiJkM Ov2mQ4noBk9M2PyRdme8u6duyYfBlm3o9Z1hfT1KpFwMfQFF5MM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:01 2026 by rpki-client