$ rpki-client -vvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft File: D3CDCB356F94C51B241188653C7ADC2C79D79424.mft (raw, json) Hash identifier: MmR2b72xq8S1hc/C6iGHdozHNZ9gofLWV4eOdCxkb8I= Subject key identifier: F2:F2:5C:B0:C5:DA:67:0C:01:7D:B6:DC:2C:58:C1:85:01:37:4B:5E Authority key identifier: D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 Certificate issuer: /CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Certificate serial: 0AAEC6EEC16D97B04240BDF2BFFC55D77A421E21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:56:58 +0000 Manifest this update: Tue 16 Jun 2026 22:51:58 +0000 Manifest next update: Thu 18 Jun 2026 02:42:58 +0000 Files and hashes: 1: D3CDCB356F94C51B241188653C7ADC2C79D79424.crl (hash: WaW5CcGRW1A/Ylujm3tIAkbTgWK2pnRr/c19ukFZAhw=) 2: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: 83bYI1z3e7ETkpXnXGTkrnk19/a7Qfy/7K16nNObwH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ae:c6:ee:c1:6d:97:b0:42:40:bd:f2:bf:fc:55:d7:7a:42:1e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Validity Not Before: Jun 16 22:51:58 2026 GMT Not After : Jun 18 02:42:58 2026 GMT Subject: CN=F2F25CB0C5DA670C017DB6DC2C58C18501374B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:12:2f:f9:dc:b5:48:0c:ee:6d:fd:23:f3:df: 55:ae:58:13:68:6f:80:97:5e:fc:4a:69:21:68:8b: 84:f5:f4:56:44:5e:ae:03:ef:0c:71:e5:6e:b5:be: 87:49:ac:3d:e0:e9:b3:d3:49:bf:c6:c6:01:c8:c8: c2:44:e5:7f:4b:17:4a:a0:0b:37:c8:13:13:c3:7f: 54:a0:85:16:4a:9f:66:2f:65:a8:6e:d9:86:6d:a1: 11:2d:7b:eb:38:0d:27:d7:22:c2:33:c2:51:6f:20: 64:fe:3b:ab:67:82:8d:21:f5:e8:87:04:bd:6e:de: 64:43:45:d4:c8:6a:f7:3c:a9:10:8f:25:e4:c8:27: a2:18:a0:d7:0f:6f:d1:f6:36:86:e9:2b:74:24:fa: b2:15:5f:b2:28:f3:28:52:b2:01:a5:f3:42:fd:fb: 4c:d7:dc:e0:16:26:58:7f:11:6b:30:ae:07:4f:da: 78:eb:e9:e9:0d:6e:15:f6:59:d7:70:b8:40:6c:ac: ac:29:11:8a:6e:92:e4:3c:fa:bc:72:b1:f8:5b:53: 34:b7:a1:d8:85:3b:50:49:00:90:df:bf:aa:2a:f1: b7:98:57:11:d9:92:12:b1:3b:0b:4a:23:cb:1b:ea: a7:aa:cd:eb:45:3f:cf:c9:3d:9d:b8:05:b4:16:0a: 24:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F2:5C:B0:C5:DA:67:0C:01:7D:B6:DC:2C:58:C1:85:01:37:4B:5E X509v3 Authority Key Identifier: keyid:D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:1d:17:77:75:35:5c:b9:b9:da:eb:e9:0d:17:d0:8a:8b:da: 77:bf:92:e7:63:64:14:e8:b0:3e:0b:12:0d:8d:cb:e4:23:e1: 45:fb:5b:e5:71:d3:69:4e:c5:0b:7f:44:76:00:1a:04:9c:df: 22:b2:05:3f:63:b6:55:55:c4:9a:3d:23:87:7b:9a:21:e9:84: 01:02:e2:47:d1:44:00:f6:75:d8:75:47:3d:81:6e:d4:60:15: 58:41:b6:31:e5:dd:77:e6:e2:d8:f9:d3:94:94:77:60:e9:e8: 88:24:d0:e6:f4:0c:aa:ab:5d:2f:cf:b5:39:87:18:16:a6:3f: 29:db:a7:77:86:a5:92:e5:d4:82:d7:b1:7e:88:7c:a6:df:fa: 9b:50:bd:cc:a4:05:ca:3e:16:3e:a2:02:52:3f:c5:0d:b4:15: 6b:09:1b:f3:e2:30:c6:9f:8a:92:ee:66:1e:e3:07:03:34:15: b0:ab:30:37:8b:92:6b:22:b8:06:0e:5b:67:97:ca:ed:0c:61: 67:a8:1d:9b:fb:31:5d:49:35:e6:97:db:9c:cf:47:ad:51:0b: 9d:a0:d4:be:52:f9:5e:d9:d7:24:dd:60:5f:c4:92:bf:5a:b9: 8c:76:9d:1e:4d:cf:e8:ec:9d:37:e1:18:18:c0:c1:f8:91:13: d4:8c:e8:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCq7G7sFtl7BCQL3yv/xV13pCHiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3 OUQ3OTQyNDAeFw0yNjA2MTYyMjUxNThaFw0yNjA2MTgwMjQyNThaMDMxMTAvBgNV BAMTKEYyRjI1Q0IwQzVEQTY3MEMwMTdEQjZEQzJDNThDMTg1MDEzNzRCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEi/53LVIDO5t/SPz31WuWBNo b4CXXvxKaSFoi4T19FZEXq4D7wxx5W61vodJrD3g6bPTSb/GxgHIyMJE5X9LF0qg CzfIExPDf1SghRZKn2YvZahu2YZtoREte+s4DSfXIsIzwlFvIGT+O6tngo0h9eiH BL1u3mRDRdTIavc8qRCPJeTIJ6IYoNcPb9H2NobpK3Qk+rIVX7Io8yhSsgGl80L9 +0zX3OAWJlh/EWswrgdP2njr6ekNbhX2WddwuEBsrKwpEYpukuQ8+rxysfhbUzS3 odiFO1BJAJDfv6oq8beYVxHZkhKxOwtKI8sb6qeqzetFP8/JPZ24BbQWCiR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8vJcsMXaZwwBfbbcLFjBhQE3S14wHwYDVR0j BBgwFoAU083LNW+UxRskEYhlPHrcLHnXlCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2 Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3OUQ3OTQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EM0NEQ0IzNTZGOTRDNTFCMjQxMTg4NjUzQzdBREMyQzc5RDc5 NDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURD MkM3OUQ3OTQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQdF3d1NVy5udrr6Q0X0IqL2ne/kudjZBTo sD4LEg2Ny+Qj4UX7W+Vx02lOxQt/RHYAGgSc3yKyBT9jtlVVxJo9I4d7miHphAEC 4kfRRAD2ddh1Rz2BbtRgFVhBtjHl3Xfm4tj505SUd2Dp6Igk0Ob0DKqrXS/PtTmH GBamPynbp3eGpZLl1ILXsX6IfKbf+ptQvcykBco+Fj6iAlI/xQ20FWsJG/PiMMaf ipLuZh7jBwM0FbCrMDeLkmsiuAYOW2eXyu0MYWeoHZv7MV1JNeaX25zPR61RC52g 1L5S+V7Z1yTdYF/Ekr9auYx2nR5Nz+jsnTfhGBjAwfiRE9SM6Es= -----END CERTIFICATE-----Generated at Wed Jun 17 11:11:34 2026 by rpki-client