$ rpki-client -vvf rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft File: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft (raw, json) Hash identifier: aQXgXYpojCufTpTdeCiVON/R4hTZo/uzCIFvZP8mLrU= Subject key identifier: 0C:C7:09:BE:55:0D:E3:80:BA:2A:6C:75:B1:C4:8A:0F:A9:BE:93:24 Authority key identifier: 25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED Certificate issuer: /CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Certificate serial: 04A76DEC2ABF9B734045384A534E6DBED34D19E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 20:13:51 +0000 Manifest this update: Sat 13 Jun 2026 20:08:51 +0000 Manifest next update: Sun 14 Jun 2026 23:43:51 +0000 Files and hashes: 1: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: seLt9J4Omc3hnlGUE3OGC5XsPU9/YgeAHtEiSSm80kY=) 2: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl (hash: Ye2VlQFdHgI0dqL3uT57j3jLVJeFqCjusHhqxsK2PkA=) 3: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: cfTJoIKD7v5E50NDw9RdyVoXvRV8kIdsxzrTBtYWbZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a7:6d:ec:2a:bf:9b:73:40:45:38:4a:53:4e:6d:be:d3:4d:19:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED Validity Not Before: Jun 13 20:08:51 2026 GMT Not After : Jun 14 23:43:51 2026 GMT Subject: CN=0CC709BE550DE380BA2A6C75B1C48A0FA9BE9324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:33:f6:0b:00:a4:3f:8f:8c:09:af:74:6c:88: 15:4f:d3:3a:ed:8f:b2:1d:df:45:f1:7d:5c:89:68: f6:d0:5e:fe:05:08:71:06:6e:2e:4f:69:29:b0:c7: fe:ca:bd:ed:ce:47:e3:a0:36:6d:89:be:36:bb:66: 73:82:8b:d7:ad:26:2b:55:c4:79:4a:9a:8c:21:81: c0:10:a0:8c:3f:32:12:8d:d4:a4:f5:6e:c0:db:1f: 07:c7:97:b9:7b:f9:34:1b:68:4a:43:12:21:79:c0: 7f:b3:ad:28:f7:b1:a1:46:66:ff:69:a7:ca:93:e5: db:0b:cd:fd:f3:31:3a:d0:5e:92:6d:ab:86:07:0c: a4:f7:f4:c2:b0:cc:bb:12:c0:09:39:07:1a:be:5d: 36:1b:95:39:d4:89:45:7b:34:1a:97:e5:f8:9c:15: 4c:e6:6f:a9:28:5c:12:20:de:33:35:4e:79:8a:78: ed:b2:f8:0d:66:b4:79:62:48:1b:22:24:b0:a2:6b: 9c:87:65:e1:93:e2:3f:ff:f1:e3:0b:a9:d5:ca:03: 95:80:b9:05:30:a9:86:d6:fe:79:64:d9:b2:03:01: a8:76:27:ad:68:b1:c3:ce:da:c1:e8:dd:e1:1d:6c: 53:19:b3:65:18:85:b9:fe:7f:d2:68:34:3c:f2:ed: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C7:09:BE:55:0D:E3:80:BA:2A:6C:75:B1:C4:8A:0F:A9:BE:93:24 X509v3 Authority Key Identifier: keyid:25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b9:c7:25:07:c0:0a:98:0f:d8:c6:72:b7:09:39:25:84:2c: 05:0e:fa:5f:12:90:72:5d:02:ac:ce:70:56:6f:e2:42:f2:40: 19:f6:37:07:0a:a3:db:5a:c8:6a:ef:03:67:fd:f3:7b:37:55: 5f:e7:9f:00:7f:d5:b5:9b:ee:24:70:3c:4f:0c:34:07:47:58: d5:b6:39:0b:27:cc:fe:78:8c:57:c5:42:0c:ef:f4:c1:4e:c1: f0:a6:b2:48:a1:d4:f5:15:eb:19:e4:a6:ff:b6:2a:0b:3c:e7: ed:0e:4b:cd:f2:04:a6:e8:64:2f:ce:a9:f0:7c:df:f7:37:42: d5:7c:3e:db:2c:c7:83:42:de:37:a2:62:2d:22:85:ca:60:b8: 79:a3:d5:04:e6:9a:72:2a:40:0a:3b:53:0e:c5:f6:06:d3:58: a9:a2:48:08:3b:4f:8f:14:16:ad:34:7d:ed:eb:9c:61:c5:ce: db:7e:13:47:f3:2e:0e:63:7b:95:e1:6a:71:5b:50:4e:f7:63: 9b:2b:f1:f8:63:2e:3a:8a:ab:b8:71:a7:a0:ad:0e:d8:aa:2e: 77:89:f7:09:8a:9e:e4:f3:0d:7d:77:da:5f:fa:3e:1d:5c:12: 52:c4:04:d6:67:04:e9:24:06:ec:f3:d4:ca:cb:7b:9e:7f:f2: 9a:52:92:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKdt7Cq/m3NARThKU05tvtNNGegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBD NDQ5NDZFRDAeFw0yNjA2MTMyMDA4NTFaFw0yNjA2MTQyMzQzNTFaMDMxMTAvBgNV BAMTKDBDQzcwOUJFNTUwREUzODBCQTJBNkM3NUIxQzQ4QTBGQTlCRTkzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlM/YLAKQ/j4wJr3RsiBVP0zrt j7Id30XxfVyJaPbQXv4FCHEGbi5PaSmwx/7Kve3OR+OgNm2Jvja7ZnOCi9etJitV xHlKmowhgcAQoIw/MhKN1KT1bsDbHwfHl7l7+TQbaEpDEiF5wH+zrSj3saFGZv9p p8qT5dsLzf3zMTrQXpJtq4YHDKT39MKwzLsSwAk5Bxq+XTYblTnUiUV7NBqX5fic FUzmb6koXBIg3jM1TnmKeO2y+A1mtHliSBsiJLCia5yHZeGT4j//8eMLqdXKA5WA uQUwqYbW/nlk2bIDAah2J61oscPO2sHo3eEdbFMZs2UYhbn+f9JoNDzy7SpPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDMcJvlUN44C6Kmx1scSKD6m+kyQwHwYDVR0j BBgwFoAUJW4DvC8dpPkDHnHGgU0BkMRJRu0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZmZGMyYjctZjMwNS00ZTA3LWFhYzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMy RjFEQTRGOTAzMUU3MUM2ODE0RDAxOTBDNDQ5NDZFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTZFMDNCQzJGMURBNEY5MDMxRTcxQzY4MTREMDE5MEM0NDk0 NkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvMjU2RTAzQkMyRjFEQTRGOTAzMUU3MUM2ODE0RDAx OTBDNDQ5NDZFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE25xyUHwAqYD9jGcrcJOSWELAUO+l8SkHJd AqzOcFZv4kLyQBn2NwcKo9tayGrvA2f983s3VV/nnwB/1bWb7iRwPE8MNAdHWNW2 OQsnzP54jFfFQgzv9MFOwfCmskih1PUV6xnkpv+2Kgs85+0OS83yBKboZC/OqfB8 3/c3QtV8Ptssx4NC3jeiYi0ihcpguHmj1QTmmnIqQAo7Uw7F9gbTWKmiSAg7T48U Fq00fe3rnGHFztt+E0fzLg5je5XhanFbUE73Y5sr8fhjLjqKq7hxp6CtDtiqLneJ 9wmKnuTzDX132l/6Ph1cElLEBNZnBOkkBuzz1MrLe55/8ppSksI= -----END CERTIFICATE-----Generated at Sat Jun 13 22:39:34 2026 by rpki-client