$ rpki-client -vvf rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft File: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft (raw, json) Hash identifier: ELh5FL6ZA9eMJNK8V/p8Z7oUkW8jmSfWRb7dK2GeDqo= Subject key identifier: 44:8E:9B:82:1A:85:BE:09:9F:78:AB:01:CC:F5:15:C6:06:B8:0B:72 Authority key identifier: 7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 Certificate issuer: /CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Certificate serial: 379F952D96ECF6089B8849939BCADAD51192C18C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 16:54:43 +0000 Manifest this update: Tue 16 Jun 2026 16:49:43 +0000 Manifest next update: Wed 17 Jun 2026 19:21:43 +0000 Files and hashes: 1: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl (hash: ERCxSownFvmgh+k9vAilkj/ZuyACbxl7GaqDqo/y5ag=) 2: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (hash: baKMFekyN+9MNlrAI1yXYRuteIC69CJjTfZATjoU5so=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9f:95:2d:96:ec:f6:08:9b:88:49:93:9b:ca:da:d5:11:92:c1:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Validity Not Before: Jun 16 16:49:43 2026 GMT Not After : Jun 17 19:21:43 2026 GMT Subject: CN=448E9B821A85BE099F78AB01CCF515C606B80B72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1a:28:37:3a:ea:25:95:94:4f:c9:d7:29:87: a9:fe:4b:f3:58:c1:c2:9f:1e:4b:d1:86:c3:05:11: be:8c:25:f5:4d:78:aa:b5:08:18:b5:fe:bf:d0:63: 6a:70:b0:22:83:ce:95:71:91:c0:bc:cb:92:dc:fa: 9d:0f:70:c2:ff:5c:0e:88:37:10:d6:1f:f2:40:c0: f8:8f:84:02:a1:b8:05:c1:aa:14:a3:a3:13:1c:5f: 6f:37:f4:d8:ee:2f:7f:e1:c9:ba:51:9f:c0:6f:a8: 4a:a6:0a:e5:85:1b:83:4f:c6:fa:0a:d8:d3:e1:4e: d6:0a:88:78:7f:81:f6:e5:0b:82:9d:5f:05:8e:4e: e3:cf:11:34:90:4c:7d:59:c5:46:31:40:b0:08:7f: 14:f0:34:70:a0:a0:ee:90:34:09:88:6a:ac:a1:a8: 68:3e:65:b6:8d:a6:fc:78:46:c1:ea:96:a5:16:ef: d6:69:2d:59:ad:92:30:0e:4b:3c:f0:d9:cf:48:c3: 68:ea:d4:4c:d7:b9:80:51:39:05:fa:86:19:b0:18: b8:41:12:0e:ac:ff:78:11:79:9d:62:b0:aa:56:16: 2b:60:0b:24:9f:56:b4:d3:da:20:9a:38:73:4f:4e: c5:13:66:fc:7f:dd:0c:4f:a9:a8:71:64:80:49:b3: 9a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8E:9B:82:1A:85:BE:09:9F:78:AB:01:CC:F5:15:C6:06:B8:0B:72 X509v3 Authority Key Identifier: keyid:7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:5b:57:65:90:29:2e:f6:61:d9:e6:07:fe:82:69:3a:dd:4e: 96:63:e7:5c:60:93:35:6a:ca:32:0b:ea:d1:d1:ef:be:17:af: 8d:9c:cf:18:b7:8f:ec:88:a1:e3:57:90:6b:e4:45:29:c1:d1: 1d:5c:7d:d2:40:63:13:c9:b3:c7:da:1f:d1:b3:54:39:70:ac: 51:0e:01:56:c4:a4:e4:5e:cd:24:e5:1d:b6:48:11:a8:76:19: e2:9c:bc:d5:13:45:74:ca:3b:57:c5:47:34:35:1e:14:74:9d: de:c2:12:fb:2f:31:0c:b0:72:6c:73:56:f0:ba:72:9f:f8:0c: 43:9c:6f:1c:ea:e8:77:fa:e5:3c:04:22:32:48:68:36:ff:d9: 0e:c4:bf:7d:29:a1:88:96:07:20:e9:15:d9:3d:33:44:f1:89: 6c:d8:2c:77:74:97:7e:e2:38:43:ef:2d:ff:57:28:46:7c:f0: 15:e5:90:aa:45:22:16:ff:29:06:f6:70:30:95:58:8e:b8:38: 6e:bf:90:b9:06:14:ae:e5:af:f8:63:d3:03:1b:2e:79:f3:c1: 00:46:2f:32:ef:0f:82:15:c3:f9:f3:b0:e4:02:97:c8:00:53: f2:03:7b:17:7f:6a:c1:1f:1e:11:f3:f9:94:3f:4d:0b:dd:d6: 7d:69:7f:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5+VLZbs9gibiEmTm8ra1RGSwYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RDNjc3MzIwRUNENEY5RkE2MUZEMjE3MkZBMEZGQkY3 NDRGNkEzMzAeFw0yNjA2MTYxNjQ5NDNaFw0yNjA2MTcxOTIxNDNaMDMxMTAvBgNV BAMTKDQ0OEU5QjgyMUE4NUJFMDk5Rjc4QUIwMUNDRjUxNUM2MDZCODBCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwGig3OuollZRPydcph6n+S/NY wcKfHkvRhsMFEb6MJfVNeKq1CBi1/r/QY2pwsCKDzpVxkcC8y5Lc+p0PcML/XA6I NxDWH/JAwPiPhAKhuAXBqhSjoxMcX2839NjuL3/hybpRn8BvqEqmCuWFG4NPxvoK 2NPhTtYKiHh/gfblC4KdXwWOTuPPETSQTH1ZxUYxQLAIfxTwNHCgoO6QNAmIaqyh qGg+ZbaNpvx4RsHqlqUW79ZpLVmtkjAOSzzw2c9Iw2jq1EzXuYBROQX6hhmwGLhB Eg6s/3gReZ1isKpWFitgCySfVrTT2iCaOHNPTsUTZvx/3QxPqahxZIBJs5pfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURI6bghqFvgmfeKsBzPUVxga4C3IwHwYDVR0j BBgwFoAUfcZ3Mg7NT5+mH9IXL6D/v3RPajMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1YTlkZGYtYzEwOS00ZmMxLWEzMGQtOGYwNGI4MzM4MWJlLzAvN0RDNjc3MzIw RUNENEY5RkE2MUZEMjE3MkZBMEZGQkY3NDRGNkEzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REM2NzczMjBFQ0Q0RjlGQTYxRkQyMTcyRkEwRkZCRjc0NEY2 QTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvN0RDNjc3MzIwRUNENEY5RkE2MUZEMjE3MkZBMEZG QkY3NDRGNkEzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVbV2WQKS72YdnmB/6CaTrdTpZj51xgkzVq yjIL6tHR774Xr42czxi3j+yIoeNXkGvkRSnB0R1cfdJAYxPJs8faH9GzVDlwrFEO AVbEpORezSTlHbZIEah2GeKcvNUTRXTKO1fFRzQ1HhR0nd7CEvsvMQywcmxzVvC6 cp/4DEOcbxzq6Hf65TwEIjJIaDb/2Q7Ev30poYiWByDpFdk9M0TxiWzYLHd0l37i OEPvLf9XKEZ88BXlkKpFIhb/KQb2cDCVWI64OG6/kLkGFK7lr/hj0wMbLnnzwQBG LzLvD4IVw/nzsOQCl8gAU/IDexd/asEfHhHz+ZQ/TQvd1n1pf5g= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:08 2026 by rpki-client