$ rpki-client -vvf rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft File: D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft (raw, json) Hash identifier: 8eEREiGFGSt2/z616ib5hnlZWGd3kckMfpxaPDpdNwE= Subject key identifier: 32:C4:FA:30:9E:B7:4B:05:43:59:15:4B:06:7E:2A:05:1E:66:AE:12 Authority key identifier: D7:A0:5D:FF:98:BB:9B:3D:02:F4:B6:13:09:F4:6F:1C:93:67:08:4C Certificate issuer: /CN=D7A05DFF98BB9B3D02F4B61309F46F1C9367084C Certificate serial: 4F054CB5B6A2B2E15D6A92F4E3DE4A93A60567F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:56:17 +0000 Manifest this update: Wed 17 Jun 2026 06:51:17 +0000 Manifest next update: Thu 18 Jun 2026 10:39:17 +0000 Files and hashes: 1: 3130332e3137392e3138302e302f32342d3234203d3e20313439333435.roa (hash: MblWuzrOZD28wkceG5+ZPQEBVsmdypcKgkkQ4DKBQmM=) 2: D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl (hash: 23VFCOMN2ANf5YGCTXmw3lQlXBewsP1REkDFtl636bM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:05:4c:b5:b6:a2:b2:e1:5d:6a:92:f4:e3:de:4a:93:a6:05:67:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7A05DFF98BB9B3D02F4B61309F46F1C9367084C Validity Not Before: Jun 17 06:51:17 2026 GMT Not After : Jun 18 10:39:17 2026 GMT Subject: CN=32C4FA309EB74B054359154B067E2A051E66AE12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b7:94:ee:73:27:78:d9:af:de:75:f8:bf:1f: b6:44:99:27:34:b2:3d:f8:61:26:93:5d:b2:7d:94: b7:47:84:00:7a:3b:21:e2:ec:d0:17:96:64:7e:27: 08:60:82:27:66:c1:ac:54:d5:3a:1c:19:09:b8:a4: 6c:a3:dc:ef:8f:f5:28:2c:bf:af:d3:cf:e1:aa:ac: fe:a7:2e:ec:16:f6:48:ce:31:e5:ba:b7:4b:15:42: ab:d7:1c:e4:82:cc:90:a0:41:13:79:b5:38:29:71: 89:fe:b8:5e:8b:c9:2a:ee:45:fb:c7:9c:ec:6c:50: 67:eb:f7:50:ab:9f:f6:31:9e:f1:2f:e8:b1:f8:79: 09:2f:98:cb:27:bd:d0:de:18:70:6e:53:be:54:44: 10:5b:d9:79:ec:1c:62:c5:48:de:96:d7:1c:63:db: 99:2e:0e:54:3d:5b:8c:42:ba:2f:29:ad:55:c2:cd: 2a:1b:05:f3:5e:eb:7e:c0:ae:8f:c8:34:32:04:54: 30:d1:13:f4:2b:07:63:1b:0b:65:83:50:a2:28:3d: 20:74:52:ab:35:7a:33:c0:12:27:f4:dc:45:71:98: 66:05:98:8b:88:67:6c:36:d1:d2:11:37:dd:7d:cb: bb:ce:40:e6:79:c6:dd:8c:eb:09:a3:54:0a:2d:dc: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C4:FA:30:9E:B7:4B:05:43:59:15:4B:06:7E:2A:05:1E:66:AE:12 X509v3 Authority Key Identifier: keyid:D7:A0:5D:FF:98:BB:9B:3D:02:F4:B6:13:09:F4:6F:1C:93:67:08:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/D7A05DFF98BB9B3D02F4B61309F46F1C9367084C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1d:66:1d:a8:bc:62:07:4c:48:a9:f6:2f:d5:cd:f1:ce:a0: 17:d2:29:0e:71:28:be:5c:21:c9:fd:08:50:1c:3f:4f:ad:68: 93:7a:87:9b:49:e2:78:3a:02:cb:6f:96:9f:17:bc:24:32:44: 4f:66:ac:76:01:33:a1:fe:3d:da:b2:4e:c8:dd:58:75:b0:7e: 6e:b3:7e:10:a7:66:b1:fd:f2:fa:28:d1:e0:5d:4c:5e:f0:18: b9:5b:9b:3b:a6:fd:75:c8:07:4a:a2:24:40:1f:28:60:51:a7: 17:8e:8d:c3:5d:96:cc:89:65:78:ef:7c:7a:70:dc:78:2f:47: 7d:3d:75:ac:cf:ba:ec:49:0a:a4:a2:53:e5:92:c7:0a:99:5e: d4:61:44:c9:b7:50:e0:3e:d1:16:34:4e:a8:85:82:a8:61:d9: 64:a1:39:4b:80:9e:94:a9:3e:84:91:a3:33:3b:96:64:8e:40: 12:a2:f2:28:4a:ed:c1:90:50:d8:3e:37:a1:89:fa:89:1f:de: ca:fb:b3:50:38:f8:0e:6c:14:c2:5c:d4:c6:d1:f0:0d:c5:a0: 57:b3:84:ff:7a:54:a3:a6:51:f9:bc:67:75:df:3f:dd:5d:d3: 25:69:70:66:6f:3a:dc:de:05:7c:a8:a0:1c:de:6a:45:cf:d4: 84:41:79:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwVMtbaisuFdapL0495Kk6YFZ/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBMDVERkY5OEJCOUIzRDAyRjRCNjEzMDlGNDZGMUM5 MzY3MDg0QzAeFw0yNjA2MTcwNjUxMTdaFw0yNjA2MTgxMDM5MTdaMDMxMTAvBgNV BAMTKDMyQzRGQTMwOUVCNzRCMDU0MzU5MTU0QjA2N0UyQTA1MUU2NkFFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqt5Tucyd42a/edfi/H7ZEmSc0 sj34YSaTXbJ9lLdHhAB6OyHi7NAXlmR+JwhggidmwaxU1TocGQm4pGyj3O+P9Sgs v6/Tz+GqrP6nLuwW9kjOMeW6t0sVQqvXHOSCzJCgQRN5tTgpcYn+uF6LySruRfvH nOxsUGfr91Crn/YxnvEv6LH4eQkvmMsnvdDeGHBuU75URBBb2XnsHGLFSN6W1xxj 25kuDlQ9W4xCui8prVXCzSobBfNe637Aro/INDIEVDDRE/QrB2MbC2WDUKIoPSB0 Uqs1ejPAEif03EVxmGYFmIuIZ2w20dIRN919y7vOQOZ5xt2M6wmjVAot3AiZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMsT6MJ63SwVDWRVLBn4qBR5mrhIwHwYDVR0j BBgwFoAU16Bd/5i7mz0C9LYTCfRvHJNnCEwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY5M2ZjOGYtYWZjYy00ZGVmLTgwNmYtZjQ0NDkzZDA3YTNmLzAvRDdBMDVERkY5 OEJCOUIzRDAyRjRCNjEzMDlGNDZGMUM5MzY3MDg0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EN0EwNURGRjk4QkI5QjNEMDJGNEI2MTMwOUY0NkYxQzkzNjcw ODRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY5M2ZjOGYtYWZjYy00ZGVmLTgw NmYtZjQ0NDkzZDA3YTNmLzAvRDdBMDVERkY5OEJCOUIzRDAyRjRCNjEzMDlGNDZG MUM5MzY3MDg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIdZh2ovGIHTEip9i/VzfHOoBfSKQ5xKL5c Icn9CFAcP0+taJN6h5tJ4ng6Astvlp8XvCQyRE9mrHYBM6H+PdqyTsjdWHWwfm6z fhCnZrH98voo0eBdTF7wGLlbmzum/XXIB0qiJEAfKGBRpxeOjcNdlsyJZXjvfHpw 3HgvR309dazPuuxJCqSiU+WSxwqZXtRhRMm3UOA+0RY0TqiFgqhh2WShOUuAnpSp PoSRozM7lmSOQBKi8ihK7cGQUNg+N6GJ+okf3sr7s1A4+A5sFMJc1MbR8A3FoFez hP96VKOmUfm8Z3XfP91d0yVpcGZvOtzeBXyooBzeakXP1IRBeRg= -----END CERTIFICATE-----Generated at Wed Jun 17 11:14:19 2026 by rpki-client