$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft File: 202AE8066C06A8D8247209E512833DDA85B77BB8.mft (raw, json) Hash identifier: RsGzzrzkwmLW3CvKBbD/B0KifT5pk69w3f6R09E4ROk= Subject key identifier: 00:3C:E6:CA:05:15:D4:44:45:9A:A0:4E:D1:5B:71:37:B9:91:02:98 Authority key identifier: 20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 Certificate issuer: /CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Certificate serial: 755B7B99D9DAD437FE3C07C57EFFD434FDAC1082 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:09:12 +0000 Manifest this update: Wed 17 Jun 2026 05:04:12 +0000 Manifest next update: Thu 18 Jun 2026 06:51:12 +0000 Files and hashes: 1: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: VqpFZFZX8l9YzsFUEW1KN7wbhAWqil6y6lntU3UefIg=) 2: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: 7tCfrY+RtB6+WkTyes1RDW6n/IACRq2QGZK0+NvNBQg=) 3: 202AE8066C06A8D8247209E512833DDA85B77BB8.crl (hash: IvPfQWD+uTCIPU2R7BHmjdYyFsIy0qBzzuA3B/YKoDs=) 4: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: cqtnc1i5sl/i5SSZ+1p5ccjOtXsU77bjgEVzGiDIIzQ=) 5: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: Lfhcsuq0sTwRRhPKyKhPGs2CL51mhkSyNfRDvbtgTl8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:5b:7b:99:d9:da:d4:37:fe:3c:07:c5:7e:ff:d4:34:fd:ac:10:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Validity Not Before: Jun 17 05:04:12 2026 GMT Not After : Jun 18 06:51:12 2026 GMT Subject: CN=003CE6CA0515D444459AA04ED15B7137B9910298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4b:7b:ff:d4:fd:ad:c7:15:be:2c:26:e2:76: 30:30:8f:e7:53:7b:36:11:52:9e:90:68:aa:97:a8: b0:c3:f3:93:a5:98:ce:c5:5d:1d:d4:57:dc:53:6e: 4b:1a:b0:de:16:e9:51:1f:16:84:88:9d:36:17:13: 5d:e0:0f:7b:9f:de:06:4b:69:55:a0:b7:2b:53:b5: 7b:6e:f7:32:e8:4f:db:b2:36:63:3c:b1:2f:c3:f4: 0c:94:54:26:c9:15:77:ce:cb:82:48:07:50:a3:2e: 7e:6c:2a:74:cd:98:8f:99:e8:90:2c:29:f5:95:b0: 57:73:c5:16:3e:7f:83:5d:9b:ed:da:57:d9:83:60: b4:59:20:60:7c:49:d4:cb:8d:0a:33:9b:47:ac:16: bb:9c:6f:e3:fd:ae:ed:05:38:b7:5c:61:be:17:56: ac:8b:77:01:69:c7:39:55:ad:81:75:bc:e2:f6:6e: 10:60:5a:96:72:f8:9a:0f:88:12:a5:35:55:e8:b6: 4e:46:40:e5:8a:75:fc:ec:6a:16:78:c9:8c:8e:5f: 2f:1f:a4:c7:2f:8f:74:dc:6c:c8:a2:ae:ec:27:03: be:5e:f3:20:f0:39:e6:cc:a4:20:4b:75:97:c6:c8: bc:c2:f2:fb:bf:33:86:48:15:ad:2b:10:f8:33:e5: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3C:E6:CA:05:15:D4:44:45:9A:A0:4E:D1:5B:71:37:B9:91:02:98 X509v3 Authority Key Identifier: keyid:20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8c:e9:56:d0:78:23:a5:c8:f0:20:52:55:ce:6e:df:cb:8c: fb:69:17:1f:d4:da:4f:c5:88:51:9a:33:13:e5:69:9d:01:aa: 9d:78:0a:78:db:8e:e9:a8:e0:4d:9f:29:12:a1:64:19:be:38: 1f:32:01:c9:e3:98:ea:63:25:23:5c:07:54:94:00:e9:6b:12: e0:f9:d5:96:d1:6e:df:16:3d:1f:de:b5:be:dd:44:19:b6:2d: 49:d7:28:6e:27:a4:30:15:13:27:b7:e0:0a:78:37:67:cd:73: 1e:4a:c9:b4:bb:43:8e:dd:9e:45:54:dd:7e:04:c3:48:6e:7d: 96:fd:55:80:30:3c:65:e8:90:d6:17:ef:54:c5:da:0e:f3:03: 47:04:62:2c:56:e7:bf:e7:98:87:47:ae:b6:07:22:61:0b:d6: 64:eb:67:50:d4:d8:22:ae:ae:0d:60:90:15:7e:ae:77:fa:6a: 5e:66:c7:9c:4a:71:d3:93:cd:84:4f:5b:e7:9f:bd:28:13:63: 13:97:2d:a1:1b:02:06:c4:c1:33:e7:10:29:83:fd:6e:de:7b: d8:2c:eb:30:94:5e:bf:db:04:6d:1b:fe:f2:01:b7:4e:bf:fd: fc:73:0c:39:aa:e9:f0:ab:a3:22:68:f6:95:c3:d5:f7:0c:01: a9:8f:fa:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVt7mdna1Df+PAfFfv/UNP2sEIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNEREE4 NUI3N0JCODAeFw0yNjA2MTcwNTA0MTJaFw0yNjA2MTgwNjUxMTJaMDMxMTAvBgNV BAMTKDAwM0NFNkNBMDUxNUQ0NDQ0NTlBQTA0RUQxNUI3MTM3Qjk5MTAyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLS3v/1P2txxW+LCbidjAwj+dT ezYRUp6QaKqXqLDD85OlmM7FXR3UV9xTbksasN4W6VEfFoSInTYXE13gD3uf3gZL aVWgtytTtXtu9zLoT9uyNmM8sS/D9AyUVCbJFXfOy4JIB1CjLn5sKnTNmI+Z6JAs KfWVsFdzxRY+f4Ndm+3aV9mDYLRZIGB8SdTLjQozm0esFrucb+P9ru0FOLdcYb4X VqyLdwFpxzlVrYF1vOL2bhBgWpZy+JoPiBKlNVXotk5GQOWKdfzsahZ4yYyOXy8f pMcvj3TcbMiiruwnA75e8yDwOebMpCBLdZfGyLzC8vu/M4ZIFa0rEPgz5RrBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUADzmygUV1ERFmqBO0VtxN7mRApgwHwYDVR0j BBgwFoAUICroBmwGqNgkcgnlEoM92oW3e7gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJmMTQxN2EtNTcxOC00MDcxLTlmMzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2 QzA2QThEODI0NzIwOUU1MTI4MzNEREE4NUI3N0JCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDJBRTgwNjZDMDZBOEQ4MjQ3MjA5RTUxMjgzM0REQTg1Qjc3 QkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNE REE4NUI3N0JCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6M6VbQeCOlyPAgUlXObt/LjPtpFx/U2k/F iFGaMxPlaZ0Bqp14Cnjbjumo4E2fKRKhZBm+OB8yAcnjmOpjJSNcB1SUAOlrEuD5 1ZbRbt8WPR/etb7dRBm2LUnXKG4npDAVEye34Ap4N2fNcx5KybS7Q47dnkVU3X4E w0hufZb9VYAwPGXokNYX71TF2g7zA0cEYixW57/nmIdHrrYHImEL1mTrZ1DU2CKu rg1gkBV+rnf6al5mx5xKcdOTzYRPW+efvSgTYxOXLaEbAgbEwTPnECmD/W7ee9gs 6zCUXr/bBG0b/vIBt06//fxzDDmq6fCroyJo9pXD1fcMAamP+iY= -----END CERTIFICATE-----Generated at Wed Jun 17 12:20:04 2026 by rpki-client