$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft File: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft (raw, json) Hash identifier: ipKRyh1BFdmge8rtQXCUfyXoCqngTZMfrdOA4VQybms= Subject key identifier: 17:00:62:2D:84:BF:E4:37:13:D8:F8:60:8E:E7:65:17:67:9D:FE:E0 Authority key identifier: 1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E Certificate issuer: /CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Certificate serial: 3334D6F4AEF1CC68A13719A0FE5485E856F7F48F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:32:43 +0000 Manifest this update: Tue 16 Jun 2026 19:27:43 +0000 Manifest next update: Wed 17 Jun 2026 22:58:43 +0000 Files and hashes: 1: 1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl (hash: LE06wN9cB1qQVWTpNxEBAp5tzXX24jMksCMtUCoJIzk=) 2: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: 1n9SNDjrvcks0gDiRfW+y5COwfj6j7g0N+zUW08aQJo=) 3: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: nZbaKSWu9s5rV55piHeXvkmOotMmTZ35vGIFuNTZyR0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:34:d6:f4:ae:f1:cc:68:a1:37:19:a0:fe:54:85:e8:56:f7:f4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D643B1C6E629DF042A8F3A55F9B999045E5B20E Validity Not Before: Jun 16 19:27:43 2026 GMT Not After : Jun 17 22:58:43 2026 GMT Subject: CN=1700622D84BFE43713D8F8608EE76517679DFEE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:a5:c5:3f:34:af:98:8c:e9:ef:74:97:c1: 49:16:7e:5b:9d:b9:f1:7b:24:ec:49:97:c2:ef:38: 51:86:d1:4a:dd:b7:d5:7f:49:27:75:3b:cc:d8:91: 15:16:81:9c:ad:05:79:60:81:53:d9:fb:ac:d0:b9: 06:be:8c:da:19:78:e7:01:d4:2c:fd:0c:5e:21:87: 6a:5e:d8:0e:23:46:a5:c0:7c:df:53:b0:45:9a:fd: 9d:8a:27:7b:29:3a:44:65:9a:c8:95:0b:9e:4b:e4: bf:d1:8f:9b:6d:e9:60:a7:33:00:a4:84:81:fd:ef: 23:e0:55:7b:d5:b4:82:1f:a2:78:3e:3a:db:4c:5b: 09:74:2b:66:d0:68:c6:0f:ca:9a:e7:44:67:63:b2: 8c:b2:e6:2b:76:d2:54:3d:1e:41:0c:6c:85:b6:f3: 06:10:48:8f:b9:31:df:fb:8c:53:38:3d:0c:ba:5c: 03:77:76:52:b6:c8:b4:36:2c:f8:2e:0e:27:46:dd: 7d:4b:ac:a1:21:6e:8d:7c:a7:10:3e:8d:d2:b2:25: 2e:b3:f9:95:e8:13:ee:4d:03:c3:55:b1:f1:c4:01: 01:8e:75:e5:d1:f8:31:eb:2b:a7:09:29:44:43:b1: 15:6e:75:c7:40:45:d3:00:e7:1b:bd:79:d1:fa:df: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:00:62:2D:84:BF:E4:37:13:D8:F8:60:8E:E7:65:17:67:9D:FE:E0 X509v3 Authority Key Identifier: keyid:1D:64:3B:1C:6E:62:9D:F0:42:A8:F3:A5:5F:9B:99:90:45:E5:B2:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/1D643B1C6E629DF042A8F3A55F9B999045E5B20E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:5a:ae:dd:23:7c:8f:2f:15:1e:89:32:1a:1d:af:24:ce:63: a7:c9:4f:6d:58:3d:e4:a3:32:42:2e:fb:b6:f0:b3:59:ca:39: c4:23:ec:17:0f:d7:f5:d3:46:b7:ee:19:21:c8:e3:40:fc:71: 19:c3:04:0b:fd:ef:1a:7e:61:3e:1b:36:01:af:aa:eb:8e:c5: fb:25:09:a4:10:72:a7:87:90:93:d7:69:fe:62:5a:c1:fb:39: 33:ad:6a:65:45:44:bd:1b:e6:c2:4e:35:fa:2c:95:1d:fc:d8: af:6d:2e:72:49:e0:01:c5:d6:31:4b:0a:cc:81:97:9b:06:64: b1:71:e5:ff:32:9f:87:f5:19:fe:41:f0:a6:6b:66:93:d9:ee: 23:b7:18:28:83:bb:ab:e6:ec:98:76:96:2f:22:b5:bf:e7:55: 9b:86:11:a1:13:33:d0:71:9e:e5:eb:1f:ca:d8:a2:20:91:3f: 5e:b0:1c:51:21:d7:86:ca:05:b8:c2:dc:8f:b9:09:ec:a9:64: 7f:b6:80:0a:1e:c0:08:c9:97:3b:06:28:86:8f:34:2c:97:c0: aa:a2:1a:dd:fb:72:de:88:ff:cb:be:a1:38:12:40:95:ab:88: 8b:95:1c:d7:25:e5:41:07:d7:2f:f1:02:e7:20:54:c8:d3:26: d5:ce:64:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzTW9K7xzGihNxmg/lSF6Fb39I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2NDNCMUM2RTYyOURGMDQyQThGM0E1NUY5Qjk5OTA0 NUU1QjIwRTAeFw0yNjA2MTYxOTI3NDNaFw0yNjA2MTcyMjU4NDNaMDMxMTAvBgNV BAMTKDE3MDA2MjJEODRCRkU0MzcxM0Q4Rjg2MDhFRTc2NTE3Njc5REZFRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sKXFPzSvmIzp73SXwUkWflud ufF7JOxJl8LvOFGG0Urdt9V/SSd1O8zYkRUWgZytBXlggVPZ+6zQuQa+jNoZeOcB 1Cz9DF4hh2pe2A4jRqXAfN9TsEWa/Z2KJ3spOkRlmsiVC55L5L/Rj5tt6WCnMwCk hIH97yPgVXvVtIIfong+OttMWwl0K2bQaMYPyprnRGdjsoyy5it20lQ9HkEMbIW2 8wYQSI+5Md/7jFM4PQy6XAN3dlK2yLQ2LPguDidG3X1LrKEhbo18pxA+jdKyJS6z +ZXoE+5NA8NVsfHEAQGOdeXR+DHrK6cJKURDsRVudcdARdMA5xu9edH63xXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFwBiLYS/5DcT2PhgjudlF2ed/uAwHwYDVR0j BBgwFoAUHWQ7HG5infBCqPOlX5uZkEXlsg4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2EwYjRmMTUtNzcyMC00ZjJhLTgzNDMtOGUzN2ZhZTg3YTU0LzAvMUQ2NDNCMUM2 RTYyOURGMDQyQThGM0E1NUY5Qjk5OTA0NUU1QjIwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDY0M0IxQzZFNjI5REYwNDJBOEYzQTU1RjlCOTk5MDQ1RTVC MjBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvMUQ2NDNCMUM2RTYyOURGMDQyQThGM0E1NUY5Qjk5 OTA0NUU1QjIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhart0jfI8vFR6JMhodryTOY6fJT21YPeSj MkIu+7bws1nKOcQj7BcP1/XTRrfuGSHI40D8cRnDBAv97xp+YT4bNgGvquuOxfsl CaQQcqeHkJPXaf5iWsH7OTOtamVFRL0b5sJONfoslR382K9tLnJJ4AHF1jFLCsyB l5sGZLFx5f8yn4f1Gf5B8KZrZpPZ7iO3GCiDu6vm7Jh2li8itb/nVZuGEaETM9Bx nuXrH8rYoiCRP16wHFEh14bKBbjC3I+5CeypZH+2gAoewAjJlzsGKIaPNCyXwKqi Gt37ct6I/8u+oTgSQJWriIuVHNcl5UEH1y/xAucgVMjTJtXOZD4= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:35 2026 by rpki-client