$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft File: 1A3FAE72210F536C22392A8609A526D7557AD82C.mft (raw, json) Hash identifier: IsNa2YQ8XW1QVERLi1ciLN6b3LEIdcXeq61kpLbJeTw= Subject key identifier: 4E:87:B4:91:56:30:A4:3E:CA:C6:34:C2:BA:FD:75:19:8C:10:BD:43 Authority key identifier: 1A:3F:AE:72:21:0F:53:6C:22:39:2A:86:09:A5:26:D7:55:7A:D8:2C Certificate issuer: /CN=1A3FAE72210F536C22392A8609A526D7557AD82C Certificate serial: 6DEEE8B6B88826E17D974EDFAF9BF3C3C9FB9113 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A3FAE72210F536C22392A8609A526D7557AD82C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:23:08 +0000 Manifest this update: Wed 17 Jun 2026 08:18:08 +0000 Manifest next update: Thu 18 Jun 2026 08:56:08 +0000 Files and hashes: 1: 1A3FAE72210F536C22392A8609A526D7557AD82C.crl (hash: rvhGKw0HY/d6wQgXr29unH712Hv4kEq79mphJOKv2eY=) 2: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: QAd6aTZOH1XxHGA7Gr128UzSMTQ9i29lq8bejyTBhso=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.crl rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A3FAE72210F536C22392A8609A526D7557AD82C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ee:e8:b6:b8:88:26:e1:7d:97:4e:df:af:9b:f3:c3:c9:fb:91:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A3FAE72210F536C22392A8609A526D7557AD82C Validity Not Before: Jun 17 08:18:08 2026 GMT Not After : Jun 18 08:56:08 2026 GMT Subject: CN=4E87B4915630A43ECAC634C2BAFD75198C10BD43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8c:cd:e9:e0:fd:93:32:c4:f6:2d:4b:3f:0e: 4e:3a:f1:f5:d8:66:b5:69:be:9d:76:84:d7:6b:2f: b9:64:8b:9a:c4:b0:e0:a3:e6:ed:4c:13:11:aa:49: 52:0a:33:e4:ad:20:1b:1c:6c:40:51:43:c2:12:da: 83:63:48:df:16:a3:74:ed:aa:12:7b:d1:12:06:c1: 01:e3:06:87:fd:24:c8:2b:4a:2a:6a:2e:66:5e:de: 83:18:60:3e:a6:09:84:2c:69:3d:41:ef:2a:44:8b: 7a:b7:e0:7e:40:be:1a:2b:1a:99:56:45:f1:3d:7e: d6:2c:83:e6:60:a5:43:aa:9d:86:48:38:9f:05:5a: 14:a4:49:b3:80:42:6a:b8:02:99:4c:c6:f4:db:cd: b7:7b:3d:b9:22:4b:85:a6:2d:47:53:45:60:45:82: 96:d9:cc:ef:a7:27:99:df:a2:3d:17:82:fb:4d:db: ef:dc:be:ef:fd:98:38:60:c0:2b:46:50:04:df:38: 1a:be:34:64:e6:60:b5:d3:d4:00:1f:10:6f:15:5b: 0f:7c:85:d6:7a:b5:a5:5a:3a:73:53:74:2c:a5:85: b4:76:7a:3d:40:ef:a6:10:41:83:fe:ce:5b:a5:6c: 81:17:8b:a6:29:7e:9a:e7:0d:59:31:fc:5b:b6:e0: 27:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:87:B4:91:56:30:A4:3E:CA:C6:34:C2:BA:FD:75:19:8C:10:BD:43 X509v3 Authority Key Identifier: keyid:1A:3F:AE:72:21:0F:53:6C:22:39:2A:86:09:A5:26:D7:55:7A:D8:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A3FAE72210F536C22392A8609A526D7557AD82C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:13:74:2a:3a:bb:80:6e:25:07:41:6f:ed:30:0d:4a:72:b9: a3:77:65:16:96:fa:a4:f2:95:89:1f:88:51:65:82:7b:4e:16: f1:22:a2:12:f2:ac:72:18:f8:6a:3f:1d:d8:74:50:7c:6a:bd: 65:5a:d8:03:85:2f:52:70:c7:50:87:f1:0a:de:41:77:3b:e5: 04:2c:e0:5f:10:6b:7c:41:8d:63:e5:ac:67:ee:51:d0:77:df: f1:98:ac:65:cd:49:d0:32:80:b4:0e:a2:57:f7:60:ac:11:5a: 59:b4:ef:84:9c:8c:38:67:03:9a:b4:7c:bf:3f:87:28:63:3c: 77:30:a3:b1:3b:65:49:b5:2f:5a:79:12:80:b1:2b:17:5f:23: be:20:19:22:24:9e:8d:6b:d4:a5:60:2c:01:8d:d9:6c:9d:45: 04:15:c7:56:8d:cd:e3:9e:c5:6f:86:c6:25:23:af:59:dc:16: 93:7c:3a:6e:29:9f:cf:d3:4d:c7:e3:83:28:92:1b:03:cd:26: 8b:ad:05:36:8e:6c:a7:5f:ce:f9:3b:5b:16:2e:82:d7:c5:17: 09:13:34:de:93:91:c6:d3:44:c2:3f:b6:6c:93:24:3c:a1:f6: 0f:0e:1d:22:c1:83:03:35:f7:ff:28:7f:db:55:20:30:93:3a: 5b:5d:b2:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbe7otriIJuF9l07fr5vzw8n7kRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzRkFFNzIyMTBGNTM2QzIyMzkyQTg2MDlBNTI2RDc1 NTdBRDgyQzAeFw0yNjA2MTcwODE4MDhaFw0yNjA2MTgwODU2MDhaMDMxMTAvBgNV BAMTKDRFODdCNDkxNTYzMEE0M0VDQUM2MzRDMkJBRkQ3NTE5OEMxMEJENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQjM3p4P2TMsT2LUs/Dk468fXY ZrVpvp12hNdrL7lki5rEsOCj5u1MExGqSVIKM+StIBscbEBRQ8IS2oNjSN8Wo3Tt qhJ70RIGwQHjBof9JMgrSipqLmZe3oMYYD6mCYQsaT1B7ypEi3q34H5AvhorGplW RfE9ftYsg+ZgpUOqnYZIOJ8FWhSkSbOAQmq4AplMxvTbzbd7PbkiS4WmLUdTRWBF gpbZzO+nJ5nfoj0XgvtN2+/cvu/9mDhgwCtGUATfOBq+NGTmYLXT1AAfEG8VWw98 hdZ6taVaOnNTdCylhbR2ej1A76YQQYP+zlulbIEXi6YpfprnDVkx/Fu24CcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUToe0kVYwpD7KxjTCuv11GYwQvUMwHwYDVR0j BBgwFoAUGj+uciEPU2wiOSqGCaUm11V62CwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiMDg4NDUtZGY4Mi00NGMyLTk3NmQtNmQ3NGI4MTE2NmY0LzAvMUEzRkFFNzIy MTBGNTM2QzIyMzkyQTg2MDlBNTI2RDc1NTdBRDgyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQTNGQUU3MjIxMEY1MzZDMjIzOTJBODYwOUE1MjZENzU1N0FE ODJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMUEzRkFFNzIyMTBGNTM2QzIyMzkyQTg2MDlBNTI2 RDc1NTdBRDgyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYTdCo6u4BuJQdBb+0wDUpyuaN3ZRaW+qTy lYkfiFFlgntOFvEiohLyrHIY+Go/Hdh0UHxqvWVa2AOFL1Jwx1CH8QreQXc75QQs 4F8Qa3xBjWPlrGfuUdB33/GYrGXNSdAygLQOolf3YKwRWlm074ScjDhnA5q0fL8/ hyhjPHcwo7E7ZUm1L1p5EoCxKxdfI74gGSIkno1r1KVgLAGN2WydRQQVx1aNzeOe xW+GxiUjr1ncFpN8Om4pn8/TTcfjgyiSGwPNJoutBTaObKdfzvk7WxYugtfFFwkT NN6TkcbTRMI/tmyTJDyh9g8OHSLBgwM19/8of9tVIDCTOltdskY= -----END CERTIFICATE-----Generated at Wed Jun 17 11:50:34 2026 by rpki-client