$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft File: D69827B97765F94998CEA76A23999571F2BDA426.mft (raw, json) Hash identifier: AY7WFVHOYPC57Wve8CwciKXMqHfsFTE/NJspS8IUmCI= Subject key identifier: DE:87:AC:DD:75:41:7A:2A:A7:E6:BC:FC:25:BB:6E:2D:F2:93:F0:C5 Authority key identifier: D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 Certificate issuer: /CN=D69827B97765F94998CEA76A23999571F2BDA426 Certificate serial: 7C8A2DA403884F9138C91071E8AF48F170B84124 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 06:10:20 +0000 Manifest this update: Wed 17 Jun 2026 06:05:20 +0000 Manifest next update: Thu 18 Jun 2026 09:39:20 +0000 Files and hashes: 1: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: 0y6JUWjxpl3UiTjjA3rkmhxCstrj/MfIM81XvNQIAG8=) 2: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: iLHx8gOj2lpsnRU9gP4XnWUqEugFMffYvM4rOFlrJs8=) 3: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: vm3LwDwLeRAwMnQkRWhgtW4ETHGNuBudAWSRp1ytOKg=) 4: D69827B97765F94998CEA76A23999571F2BDA426.crl (hash: xKmv1PJyX/dxzKZbsJIqAbREwXxSc6R4HfgzzWQFRCc=) 5: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: TZoS498ctZpsXD1NhIQ84Q2pw5rT92BFxmYiyFfNKls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8a:2d:a4:03:88:4f:91:38:c9:10:71:e8:af:48:f1:70:b8:41:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69827B97765F94998CEA76A23999571F2BDA426 Validity Not Before: Jun 17 06:05:20 2026 GMT Not After : Jun 18 09:39:20 2026 GMT Subject: CN=DE87ACDD75417A2AA7E6BCFC25BB6E2DF293F0C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:ce:63:bc:6a:e3:72:db:09:64:a6:1d:fc: 2d:6e:91:f3:0c:fa:6b:4c:9c:f5:f6:f2:6e:17:f0: 78:cf:33:6f:92:42:c6:1b:ae:40:9b:c9:f6:be:85: 27:22:e4:d0:0e:78:9e:97:d3:ba:55:f0:57:4c:c8: 8a:ba:1e:d0:40:46:06:f1:90:88:a3:45:87:f6:78: 6d:d5:16:a0:e1:20:61:5a:8a:05:1f:c5:d9:ba:0d: 0b:e1:98:62:90:8a:0c:0f:6c:c9:25:0a:4a:f5:3f: 58:9e:6a:4e:4a:eb:51:64:b8:01:ac:2f:7d:18:11: 81:0c:7a:a8:af:44:1f:48:bc:38:05:09:e8:6c:39: 78:f4:b7:22:24:08:e8:18:74:34:1b:14:10:22:ff: 5f:c9:fd:c5:21:c5:4c:74:53:a3:84:61:c0:53:6b: 15:e7:c7:b8:e7:4e:2c:d9:24:2e:0e:70:3e:6d:0c: 13:3e:65:02:f1:73:d7:62:f2:cb:8b:f3:02:61:b6: 2a:e8:79:34:40:f9:a6:0e:07:0e:ae:25:30:73:f8: 36:dd:16:51:72:7f:a1:12:ef:9c:45:59:9c:3a:3b: 53:e5:e9:61:8e:75:5d:c0:f4:77:9a:66:ec:47:c4: 49:ce:13:ab:92:44:bb:cc:20:3b:61:9f:19:14:2d: 6a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:87:AC:DD:75:41:7A:2A:A7:E6:BC:FC:25:BB:6E:2D:F2:93:F0:C5 X509v3 Authority Key Identifier: keyid:D6:98:27:B9:77:65:F9:49:98:CE:A7:6A:23:99:95:71:F2:BD:A4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69827B97765F94998CEA76A23999571F2BDA426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/D69827B97765F94998CEA76A23999571F2BDA426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d1:af:28:38:85:ce:36:07:c0:75:6d:36:e9:43:d8:fc:61: 74:e3:78:b5:70:80:d2:50:50:d7:fb:b3:43:51:92:c2:0f:f1: 3d:84:a8:4b:3a:58:b6:21:ee:98:20:96:b4:04:be:fe:23:86: 20:e6:86:4a:b9:98:3f:9c:0c:19:4f:42:59:a3:bd:8c:ed:f6: 73:f1:28:40:46:99:26:d3:47:43:59:92:2e:88:f4:46:5f:c5: 4b:58:ff:de:b4:c4:ae:11:1d:3c:d3:05:2c:10:c6:2f:31:5c: c6:4c:96:a4:d7:a4:89:f6:ec:17:4d:82:4a:4c:69:74:d0:8f: 34:ca:0d:db:dc:fd:fe:16:4d:8e:b1:f6:96:47:c9:44:33:9e: 87:f9:93:f6:6c:2c:2f:2c:0a:4d:a6:a0:5a:a9:d4:c1:b6:6c: 71:20:cf:ed:be:70:ba:f8:2d:30:5e:a2:09:c7:1e:3a:91:e9: 76:7d:33:58:59:25:2e:c5:1f:96:d2:7b:99:23:0d:fc:f5:68: 09:f1:9f:29:ca:d5:59:45:e1:25:8f:18:0a:b3:7a:da:e6:28: 2c:1c:9d:f9:7e:9f:c5:90:ed:7d:42:1b:a7:c6:30:42:58:5c: 1f:f3:48:e9:ea:f4:93:20:6b:b9:d2:bf:99:a8:8e:6c:15:f3: 28:1e:90:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIotpAOIT5E4yRBx6K9I8XC4QSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFG MkJEQTQyNjAeFw0yNjA2MTcwNjA1MjBaFw0yNjA2MTgwOTM5MjBaMDMxMTAvBgNV BAMTKERFODdBQ0RENzU0MTdBMkFBN0U2QkNGQzI1QkI2RTJERjI5M0YwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVs5jvGrjctsJZKYd/C1ukfMM +mtMnPX28m4X8HjPM2+SQsYbrkCbyfa+hSci5NAOeJ6X07pV8FdMyIq6HtBARgbx kIijRYf2eG3VFqDhIGFaigUfxdm6DQvhmGKQigwPbMklCkr1P1ieak5K61FkuAGs L30YEYEMeqivRB9IvDgFCehsOXj0tyIkCOgYdDQbFBAi/1/J/cUhxUx0U6OEYcBT axXnx7jnTizZJC4OcD5tDBM+ZQLxc9di8suL8wJhtiroeTRA+aYOBw6uJTBz+Dbd FlFyf6ES75xFWZw6O1Pl6WGOdV3A9HeaZuxHxEnOE6uSRLvMIDthnxkULWr1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3oes3XVBeiqn5rz8JbtuLfKT8MUwHwYDVR0j BBgwFoAU1pgnuXdl+UmYzqdqI5mVcfK9pCYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjdiODdmNmQtMjlhNy00YjRjLTgxYzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3 NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1NzFGMkJEQTQyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk4MjdCOTc3NjVGOTQ5OThDRUE3NkEyMzk5OTU3MUYyQkRB NDI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvRDY5ODI3Qjk3NzY1Rjk0OTk4Q0VBNzZBMjM5OTk1 NzFGMkJEQTQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPRryg4hc42B8B1bTbpQ9j8YXTjeLVwgNJQ UNf7s0NRksIP8T2EqEs6WLYh7pgglrQEvv4jhiDmhkq5mD+cDBlPQlmjvYzt9nPx KEBGmSbTR0NZki6I9EZfxUtY/960xK4RHTzTBSwQxi8xXMZMlqTXpIn27BdNgkpM aXTQjzTKDdvc/f4WTY6x9pZHyUQznof5k/ZsLC8sCk2moFqp1MG2bHEgz+2+cLr4 LTBeognHHjqR6XZ9M1hZJS7FH5bSe5kjDfz1aAnxnynK1VlF4SWPGAqzetrmKCwc nfl+n8WQ7X1CG6fGMEJYXB/zSOnq9JMga7nSv5mojmwV8ygekDY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:27 2026 by rpki-client