$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft File: C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft (raw, json) Hash identifier: cJfsAQ8P0APlNKuU5hEIWyY5ayo7xvKUWhtcaJ87NNA= Subject key identifier: D4:05:8A:F2:9B:F4:C6:54:78:AA:52:AD:A2:D6:3E:63:AB:24:EA:5A Authority key identifier: C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C Certificate issuer: /CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C Certificate serial: 285475632381691121664053CCBE4A580E9A7A0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 14:52:12 +0000 Manifest this update: Tue 16 Jun 2026 14:47:12 +0000 Manifest next update: Wed 17 Jun 2026 17:35:12 +0000 Files and hashes: 1: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 3Tzs+hQ+b22vv80zUD8FcOM/x7RDc2pjQFIIYIEE2b4=) 2: C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl (hash: 91Cea2W9z/24TqwNJh+aXHR0EQkt2raQeWQpyExBd50=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:54:75:63:23:81:69:11:21:66:40:53:cc:be:4a:58:0e:9a:7a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C Validity Not Before: Jun 16 14:47:12 2026 GMT Not After : Jun 17 17:35:12 2026 GMT Subject: CN=D4058AF29BF4C65478AA52ADA2D63E63AB24EA5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:cc:67:01:12:24:ac:a1:27:3f:c5:bf:cc: e9:d5:1a:6a:04:54:e1:25:63:54:a3:d8:81:4e:f7: ff:f4:f3:62:5a:26:50:bd:79:e4:a0:58:9b:4f:b7: 9c:51:3a:1a:e1:a8:dc:97:5b:96:1d:da:14:80:06: 4a:d1:cf:36:58:3e:66:46:d3:59:0c:db:96:e2:b7: d9:40:3b:e9:47:22:38:44:de:6a:07:17:98:17:d1: 02:45:75:b7:1e:57:c9:b6:cc:c3:ed:27:e5:8f:bb: b9:36:ae:4d:45:26:86:0b:a1:42:62:b0:ec:ef:2b: 99:98:66:04:c3:01:a9:ac:32:b3:bc:4e:92:d2:9d: 6c:58:3a:66:a4:fd:bd:71:6f:31:cb:82:c8:67:90: e7:14:63:0c:10:a9:54:57:e5:dc:1a:1d:79:da:81: df:b8:f0:af:c4:1c:9c:58:e5:75:4d:6e:0e:7a:e5: 0a:ac:48:fc:ac:43:27:96:b8:79:e6:21:5a:06:a6: 69:20:b8:81:1d:59:97:0a:17:8a:0c:ac:0b:93:e7: 7d:08:ae:3c:64:d3:d5:3b:a3:59:11:5a:79:94:d3: f3:8b:f4:2d:85:7a:09:7d:55:79:f2:5b:e4:60:66: f9:b7:f7:03:92:fa:34:19:a9:7b:c5:e2:f5:41:f5: 20:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:05:8A:F2:9B:F4:C6:54:78:AA:52:AD:A2:D6:3E:63:AB:24:EA:5A X509v3 Authority Key Identifier: keyid:C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:2c:19:f8:92:c8:ee:58:9a:07:3d:66:10:ef:e7:19:c4:3d: c5:b4:a8:12:22:41:34:33:4c:32:4f:5c:e9:d2:41:44:a0:5b: e6:20:8a:90:c5:7a:20:93:b6:f3:25:c0:51:69:ac:ea:57:fe: 79:fc:2f:f7:9f:c7:42:4a:05:f2:3e:bc:d5:75:d7:32:67:34: 74:04:63:6a:ad:bf:ce:96:bf:60:d3:da:24:a2:2f:1c:9d:aa: b7:1c:bc:ab:f0:c8:89:f2:e4:fd:26:83:42:0d:0c:b8:98:03: b8:b0:a8:8d:2a:59:08:62:97:de:a8:04:f3:2f:eb:96:8f:de: 8a:a1:61:58:67:e0:99:2f:ad:ce:a0:78:65:05:c4:b6:c0:70: 99:98:98:b3:79:e3:40:00:34:03:43:52:a4:fb:dd:1b:41:95: b3:63:a2:9b:0e:f9:31:1c:1a:0b:9f:8b:5b:89:63:bd:7b:9c: 1b:8e:e5:da:b2:74:86:92:98:76:ef:53:1f:49:19:2f:44:59: e6:30:1f:c1:ca:f3:28:7d:98:a9:32:a0:74:20:e5:4c:f9:67: 51:2b:64:60:08:b9:29:b6:ed:f4:5e:c4:0c:e1:18:dd:8e:79: 9e:19:4f:55:d2:31:f2:fc:3a:ab:d9:2d:0a:3d:0b:8a:86:87: f5:18:d0:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKFR1YyOBaREhZkBTzL5KWA6aegwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzEwNDM3MjEzNzc0QzdDMkJCNUJDOUJBNzY0OUI3MkQ3 NjQ2RjgxQzAeFw0yNjA2MTYxNDQ3MTJaFw0yNjA2MTcxNzM1MTJaMDMxMTAvBgNV BAMTKEQ0MDU4QUYyOUJGNEM2NTQ3OEFBNTJBREEyRDYzRTYzQUIyNEVBNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DMxnARIkrKEnP8W/zOnVGmoE VOElY1Sj2IFO9//082JaJlC9eeSgWJtPt5xROhrhqNyXW5Yd2hSABkrRzzZYPmZG 01kM25bit9lAO+lHIjhE3moHF5gX0QJFdbceV8m2zMPtJ+WPu7k2rk1FJoYLoUJi sOzvK5mYZgTDAamsMrO8TpLSnWxYOmak/b1xbzHLgshnkOcUYwwQqVRX5dwaHXna gd+48K/EHJxY5XVNbg565QqsSPysQyeWuHnmIVoGpmkguIEdWZcKF4oMrAuT530I rjxk09U7o1kRWnmU0/OL9C2Fegl9VXnyW+RgZvm39wOS+jQZqXvF4vVB9SAfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1AWK8pv0xlR4qlKtotY+Y6sk6lowHwYDVR0j BBgwFoAUwQQ3ITd0x8K7W8m6dkm3LXZG+BwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDBhOGNlNmMtODI5MC00YjlkLTlhZWQtMDc1NGQzZmQ4ZDMyLzAvQzEwNDM3MjEz Nzc0QzdDMkJCNUJDOUJBNzY0OUI3MkQ3NjQ2RjgxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMTA0MzcyMTM3NzRDN0MyQkI1QkM5QkE3NjQ5QjcyRDc2NDZG ODFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvQzEwNDM3MjEzNzc0QzdDMkJCNUJDOUJBNzY0OUI3 MkQ3NjQ2RjgxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAksGfiSyO5Ymgc9ZhDv5xnEPcW0qBIiQTQz TDJPXOnSQUSgW+YgipDFeiCTtvMlwFFprOpX/nn8L/efx0JKBfI+vNV11zJnNHQE Y2qtv86Wv2DT2iSiLxydqrccvKvwyIny5P0mg0INDLiYA7iwqI0qWQhil96oBPMv 65aP3oqhYVhn4Jkvrc6geGUFxLbAcJmYmLN540AANANDUqT73RtBlbNjopsO+TEc Ggufi1uJY717nBuO5dqydIaSmHbvUx9JGS9EWeYwH8HK8yh9mKkyoHQg5Uz5Z1Er ZGAIuSm27fRexAzhGN2OeZ4ZT1XSMfL8OqvZLQo9C4qGh/UY0L4= -----END CERTIFICATE-----Generated at Wed Jun 17 11:11:56 2026 by rpki-client