$ rpki-client -vvf rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft File: D626CC25972BF9948C6B3BDE4E354C71F2570880.mft (raw, json) Hash identifier: FUPTMJZJ0J264V+/Lk6h1YvEyApyuUP99ZrYLfNbeTc= Subject key identifier: 5C:53:FA:68:E9:A5:D7:1C:41:33:D9:04:8E:83:C5:FC:BF:C2:20:93 Authority key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80 Certificate issuer: /CN=D626CC25972BF9948C6B3BDE4E354C71F2570880 Certificate serial: 3A85E7ACC6D3C67EF1342C331BF6320D21B3D473 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:22:30 +0000 Manifest this update: Tue 16 Jun 2026 19:17:30 +0000 Manifest next update: Wed 17 Jun 2026 20:20:30 +0000 Files and hashes: 1: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: nb8z2N9rnH96t5B0H624NhPlR7I0KYPMhvCR0O/fhs4=) 2: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: yo9Rg0RIu4bi5AvFSf1HgeoEO2ptRcGKCjbNNgnoU1A=) 3: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: 0aDHxXMr4KUimzxt4JkDC404Ezku76mxRU40fEJqQUU=) 4: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: +bc1aSBLcX6ZQm4jECmlMCivSavxhqXkBTLrz820pWg=) 5: D626CC25972BF9948C6B3BDE4E354C71F2570880.crl (hash: VkaiHF4+MDR+H2YdNERBiTL6uKiQ0Sl6F3t2W9SKDrw=) 6: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: jRI7u+pgcEtmrDDRmjulrcR4SRRZM/aGtsQfGUXuJ24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:85:e7:ac:c6:d3:c6:7e:f1:34:2c:33:1b:f6:32:0d:21:b3:d4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880 Validity Not Before: Jun 16 19:17:30 2026 GMT Not After : Jun 17 20:20:30 2026 GMT Subject: CN=5C53FA68E9A5D71C4133D9048E83C5FCBFC22093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:eb:96:6b:ad:9c:a1:b3:df:1c:61:28:bd: ff:bb:7b:ed:ae:68:a4:68:c3:37:00:c4:7a:f3:51: e4:f8:6a:c5:80:a8:e7:be:ea:48:26:52:cf:e8:e5: 48:c3:30:8c:d7:3a:13:9c:b4:3a:9d:37:ee:ff:7b: ee:40:a5:fa:31:07:59:a2:48:7d:f7:e7:2f:5b:3f: 94:6b:67:7c:f2:28:68:b3:89:33:57:ce:94:31:1b: fb:ea:63:b2:c4:b8:c8:4e:67:4f:48:71:eb:99:4f: c9:d3:67:24:4a:79:c6:0f:3f:12:35:b5:12:b3:24: 07:b1:2b:26:6a:3c:4b:61:37:97:cb:23:d8:64:08: 34:d4:d3:37:2e:cc:d4:c8:e2:86:5a:0a:91:86:b4: 8f:16:07:b0:44:ae:fd:f7:6a:e4:d3:9a:de:98:1e: 3b:64:a1:db:db:67:53:b1:4d:4a:27:10:8e:54:62: 05:63:63:c1:dd:61:d6:e0:c2:0a:33:c6:e2:b6:db: 6a:fc:db:9d:cf:ad:2c:b8:45:91:f2:20:60:8a:ca: 3a:5f:3a:d6:15:e4:7b:19:c4:08:43:77:60:c0:4b: a1:2b:22:e1:ea:b8:1b:cd:9c:53:07:a6:6d:5d:b4: b8:24:ac:68:ce:a2:f7:f6:bb:21:62:eb:08:da:57: 12:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:53:FA:68:E9:A5:D7:1C:41:33:D9:04:8E:83:C5:FC:BF:C2:20:93 X509v3 Authority Key Identifier: keyid:D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c9:4b:88:53:05:09:01:00:55:0c:5b:3a:b7:7b:2a:95:3d: 12:ac:c5:45:c1:56:3f:68:8e:80:a9:86:66:a2:65:e0:d2:9b: 18:a5:13:c7:97:eb:f3:02:73:e6:a0:57:b6:47:69:de:29:3b: 68:3b:67:3b:42:e7:fa:04:ce:60:a1:ba:82:04:d3:b5:dd:cf: 21:57:a0:08:85:83:97:df:32:8b:28:1d:cb:89:99:0a:55:e1: a4:8b:b3:d1:79:5d:75:45:5c:9d:75:53:c6:05:92:04:74:5b: b2:85:27:06:42:d5:be:a3:e4:c2:e8:14:7a:fb:32:de:1b:12: 00:b0:13:18:ea:ae:8c:40:0e:53:c2:3c:2a:42:69:16:e2:e1: 89:26:f4:99:a5:cb:98:db:29:7b:1a:dd:1d:ec:a0:c0:79:e5: 0f:c7:0f:95:e2:a7:b9:c8:8b:d8:77:f2:03:e2:0d:7d:c4:e0: c4:58:31:2b:5b:1b:36:49:05:3b:fa:43:69:b7:2f:77:6e:79: 6d:86:a7:91:a8:b8:3d:6c:9f:00:dd:3b:02:a3:05:f3:0c:fa: 1c:e2:04:71:7e:9d:53:74:76:f2:3b:8a:87:9c:c5:b2:56:de: 6e:87:f0:f0:f8:d3:a1:c2:5a:44:f4:c4:15:f7:cf:22:60:9d: 46:45:c5:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOoXnrMbTxn7xNCwzG/YyDSGz1HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYyNkNDMjU5NzJCRjk5NDhDNkIzQkRFNEUzNTRDNzFG MjU3MDg4MDAeFw0yNjA2MTYxOTE3MzBaFw0yNjA2MTcyMDIwMzBaMDMxMTAvBgNV BAMTKDVDNTNGQTY4RTlBNUQ3MUM0MTMzRDkwNDhFODNDNUZDQkZDMjIwOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChn+uWa62cobPfHGEovf+7e+2u aKRowzcAxHrzUeT4asWAqOe+6kgmUs/o5UjDMIzXOhOctDqdN+7/e+5ApfoxB1mi SH335y9bP5RrZ3zyKGiziTNXzpQxG/vqY7LEuMhOZ09IceuZT8nTZyRKecYPPxI1 tRKzJAexKyZqPEthN5fLI9hkCDTU0zcuzNTI4oZaCpGGtI8WB7BErv33auTTmt6Y HjtkodvbZ1OxTUonEI5UYgVjY8HdYdbgwgozxuK222r8253PrSy4RZHyIGCKyjpf OtYV5HsZxAhDd2DAS6ErIuHquBvNnFMHpm1dtLgkrGjOovf2uyFi6wjaVxJvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXFP6aOml1xxBM9kEjoPF/L/CIJMwHwYDVR0j BBgwFoAU1ibMJZcr+ZSMazveTjVMcfJXCIAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIzMWU2YjEtMTg0MS00NzZkLWI0NmItYjQ0YjljYjk2OGIwLzAvRDYyNkNDMjU5 NzJCRjk5NDhDNkIzQkRFNEUzNTRDNzFGMjU3MDg4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjI2Q0MyNTk3MkJGOTk0OEM2QjNCREU0RTM1NEM3MUYyNTcw ODgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDYyNkNDMjU5NzJCRjk5NDhDNkIzQkRFNEUzNTRD NzFGMjU3MDg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbJS4hTBQkBAFUMWzq3eyqVPRKsxUXBVj9o joCphmaiZeDSmxilE8eX6/MCc+agV7ZHad4pO2g7ZztC5/oEzmChuoIE07XdzyFX oAiFg5ffMosoHcuJmQpV4aSLs9F5XXVFXJ11U8YFkgR0W7KFJwZC1b6j5MLoFHr7 Mt4bEgCwExjqroxADlPCPCpCaRbi4Ykm9Jmly5jbKXsa3R3soMB55Q/HD5Xip7nI i9h38gPiDX3E4MRYMStbGzZJBTv6Q2m3L3dueW2Gp5GouD1snwDdOwKjBfMM+hzi BHF+nVN0dvI7ioecxbJW3m6H8PD406HCWkT0xBX3zyJgnUZFxa0= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:14 2026 by rpki-client