$ rpki-client -vvf rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft File: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft (raw, json) Hash identifier: CRMyEJgP6nEUJOCNF/5vyCPtUpMIpKpsP3L09HRrHgs= Subject key identifier: 68:BC:1B:71:E8:0C:F1:BB:12:91:6C:DE:14:43:95:75:CD:B4:1E:9C Authority key identifier: 18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC Certificate issuer: /CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC Certificate serial: 0C41489E1B380285D52DBB5C898A9984D964D09F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:16:12 +0000 Manifest this update: Tue 16 Jun 2026 18:11:12 +0000 Manifest next update: Wed 17 Jun 2026 19:36:12 +0000 Files and hashes: 1: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: XT0qu0X/ewJ1G8Ps14eM7XvkOXUBLJSpuICPqH+2rFs=) 2: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: vrdxMLho5nkxNsVzaZL33riDh9yKFKVbCWaknvqb6JM=) 3: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl (hash: 4UM7J7tIxTsrevlXLafh0MeKlDWDlaUKgOXGfhDLh5Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:41:48:9e:1b:38:02:85:d5:2d:bb:5c:89:8a:99:84:d9:64:d0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC Validity Not Before: Jun 16 18:11:12 2026 GMT Not After : Jun 17 19:36:12 2026 GMT Subject: CN=68BC1B71E80CF1BB12916CDE14439575CDB41E9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b2:f4:ab:ca:29:db:f7:91:59:7a:db:8a:6b: d0:4b:95:b1:79:e4:0e:9e:94:0a:ed:c0:29:64:a3: 12:dd:b4:ad:f7:90:0a:b8:dd:7e:d1:49:7b:33:5d: f8:0f:8f:6f:9f:49:66:19:43:16:a6:14:89:89:40: ab:8f:7f:26:25:16:a6:4b:13:87:ab:f9:cd:d8:ee: 36:f8:34:5c:46:93:1b:b7:07:a3:2d:3c:59:6a:8f: 91:98:8a:af:62:38:90:95:af:58:96:6f:bf:71:f7: b0:4a:17:6c:40:85:e0:d8:b9:c7:e2:20:85:ab:a7: 82:b6:a6:e4:ef:7c:8a:60:dd:90:2d:16:18:c5:47: 1f:bf:8a:31:87:14:22:b8:86:cc:ba:63:1a:08:65: da:a4:a4:54:0d:c7:07:26:f2:b5:1e:d3:62:2f:ec: 63:49:4d:8e:1e:b3:5a:95:bf:ce:26:49:72:db:b4: 02:cd:fc:ad:43:ad:95:7a:96:a1:65:6f:cb:b0:1a: d0:c1:91:ea:48:13:73:6e:b1:a4:b3:ca:98:f6:54: d7:26:f8:13:14:42:7d:9c:72:50:63:8c:d0:c7:a9: c7:90:f9:a0:2a:09:80:cd:81:9b:91:6b:66:b2:fe: 07:cb:ba:aa:5f:5d:44:db:f4:a2:aa:98:42:4c:9e: 75:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BC:1B:71:E8:0C:F1:BB:12:91:6C:DE:14:43:95:75:CD:B4:1E:9C X509v3 Authority Key Identifier: keyid:18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e9:ee:32:fb:f4:00:c2:ff:23:68:2e:ea:2a:3b:29:cd:49: f1:2b:88:7d:a8:c2:04:7c:e4:54:d9:fc:ad:3d:e0:39:11:b3: a3:c4:ed:88:ca:f4:e6:50:75:cb:5a:57:92:ff:62:75:b7:5e: 27:f6:1c:bd:40:8a:f7:2e:c1:0e:88:e2:4b:e8:83:65:f0:7a: cc:ab:68:8f:bb:3a:5b:6e:54:f4:a6:09:a0:1f:91:c9:dd:60: 9b:bf:32:5f:85:25:42:a1:15:2e:b5:a5:a5:e2:c3:e8:93:aa: da:7c:8c:7e:8a:78:da:aa:e7:ad:e5:b2:ac:e6:8b:0d:ca:4e: 60:d0:fb:92:e8:fb:1c:f0:d5:51:5c:13:69:33:83:58:94:9e: 13:ab:14:4e:76:f5:cc:95:b7:be:30:a7:4a:4c:40:64:1c:1b: 5f:13:c0:a4:2e:e8:14:cd:0f:6c:e2:f4:73:88:19:4b:d0:ac: 16:8f:68:e1:89:c7:6e:c2:58:36:30:95:77:7b:07:1b:f0:77: db:83:88:a7:3d:d5:8c:5e:89:ca:c6:e4:80:1d:53:1b:d9:ac: 71:ca:43:a4:d8:87:00:96:13:15:34:0a:7c:25:1c:e4:d1:42: d1:a0:94:6d:98:f5:7c:7e:c6:7b:96:05:55:20:d8:32:05:47: 56:21:c6:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDEFInhs4AoXVLbtciYqZhNlk0J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5MDIyNEJBQ0NFOEM1NTFDMTI3QTdGNDA1MkVDRTBB NjhCQzZBQzAeFw0yNjA2MTYxODExMTJaFw0yNjA2MTcxOTM2MTJaMDMxMTAvBgNV BAMTKDY4QkMxQjcxRTgwQ0YxQkIxMjkxNkNERTE0NDM5NTc1Q0RCNDFFOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrsvSryinb95FZetuKa9BLlbF5 5A6elArtwClkoxLdtK33kAq43X7RSXszXfgPj2+fSWYZQxamFImJQKuPfyYlFqZL E4er+c3Y7jb4NFxGkxu3B6MtPFlqj5GYiq9iOJCVr1iWb79x97BKF2xAheDYucfi IIWrp4K2puTvfIpg3ZAtFhjFRx+/ijGHFCK4hsy6YxoIZdqkpFQNxwcm8rUe02Iv 7GNJTY4es1qVv84mSXLbtALN/K1DrZV6lqFlb8uwGtDBkepIE3NusaSzypj2VNcm +BMUQn2cclBjjNDHqceQ+aAqCYDNgZuRa2ay/gfLuqpfXUTb9KKqmEJMnnUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaLwbcegM8bsSkWzeFEOVdc20HpwwHwYDVR0j BBgwFoAUGJAiS6zOjFUcEnp/QFLs4KaLxqwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg1M2FmZGQtMmUwOS00NzczLThiZTQtNmZkMGVlOTBiMDQwLzAvMTg5MDIyNEJB Q0NFOEM1NTFDMTI3QTdGNDA1MkVDRTBBNjhCQzZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODkwMjI0QkFDQ0U4QzU1MUMxMjdBN0Y0MDUyRUNFMEE2OEJD NkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvMTg5MDIyNEJBQ0NFOEM1NTFDMTI3QTdGNDA1MkVD RTBBNjhCQzZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnp7jL79ADC/yNoLuoqOynNSfEriH2owgR8 5FTZ/K094DkRs6PE7YjK9OZQdctaV5L/YnW3Xif2HL1AivcuwQ6I4kvog2Xwesyr aI+7OltuVPSmCaAfkcndYJu/Ml+FJUKhFS61paXiw+iTqtp8jH6KeNqq563lsqzm iw3KTmDQ+5Lo+xzw1VFcE2kzg1iUnhOrFE529cyVt74wp0pMQGQcG18TwKQu6BTN D2zi9HOIGUvQrBaPaOGJx27CWDYwlXd7Bxvwd9uDiKc91YxeicrG5IAdUxvZrHHK Q6TYhwCWExU0CnwlHOTRQtGglG2Y9Xx+xnuWBVUg2DIFR1YhxsA= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:40 2026 by rpki-client