$ rpki-client -vvf rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft File: D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft (raw, json) Hash identifier: B5XqVhVWYqIU1JW5rqtd0A69k5sMSMbJSSkkmpxrTLI= Subject key identifier: 48:93:6A:4F:42:2B:BD:5C:0D:43:76:09:83:72:0D:F0:A2:F6:B0:F6 Authority key identifier: D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 Certificate issuer: /CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Certificate serial: 1A0C57DA7B4B13614E02F53E2D2FB541345B20DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:49:56 +0000 Manifest this update: Wed 17 Jun 2026 01:44:56 +0000 Manifest next update: Thu 18 Jun 2026 02:44:56 +0000 Files and hashes: 1: D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl (hash: KDdtcGVkNVcTM6sgAI5ovjpTqruFUlewATdiNr2HjmE=) 2: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: nih8Qs0LKBkZCWGMFeuGnh3q/46VGBkvPVPuLWWc1eE=) 3: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: tYzh/ONrnE/vB4p4w+wsr7jUrg+O1DSqJcNbYqdE1O4=) 4: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: Mz/HLsc5z0NW9is9cK/jPV/c2edacNGieAld99v6XRg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:0c:57:da:7b:4b:13:61:4e:02:f5:3e:2d:2f:b5:41:34:5b:20:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Validity Not Before: Jun 17 01:44:56 2026 GMT Not After : Jun 18 02:44:56 2026 GMT Subject: CN=48936A4F422BBD5C0D43760983720DF0A2F6B0F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5c:c9:54:98:67:11:30:9a:53:c7:67:19:ef: ba:69:26:24:6f:3a:2a:08:f2:b5:78:04:b5:5f:ba: c3:57:2b:cb:6e:55:98:cd:57:5a:d0:bf:1d:27:6a: 62:bb:dc:70:e7:29:d9:90:7f:88:fa:73:04:c5:20: 6c:7d:1e:5d:b7:0e:38:ce:ca:84:eb:89:b3:85:0f: 8d:0f:74:31:c8:13:c2:7e:ae:15:76:41:08:da:48: 3d:98:76:30:44:41:22:49:d3:c5:5a:e1:8c:1c:68: 41:d0:d1:4e:c3:99:92:66:42:2d:00:7b:05:70:85: 18:7d:6c:b0:cc:df:94:b5:3b:74:63:fc:df:3d:85: 00:97:6c:dd:cc:b8:c5:1a:7e:2b:9f:d7:83:9f:82: dc:c9:80:8c:b0:68:2e:4b:d9:ec:10:8a:30:5d:f0: d3:ef:63:25:68:7c:4b:a9:bb:d3:90:08:7c:e2:ef: 8d:e2:37:41:dd:0f:c4:3c:bf:d4:5f:3d:3f:ea:30: 79:2c:04:15:68:c5:ee:82:11:31:9e:56:62:6b:43: a7:b6:29:78:d4:40:1a:99:44:d1:58:f1:bd:b4:f1: f4:81:d9:dd:a2:43:e8:76:dc:11:64:5f:a1:e4:b3: 6d:b3:85:f6:78:d0:e0:b9:05:0d:9a:99:a9:a2:dd: 5f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:93:6A:4F:42:2B:BD:5C:0D:43:76:09:83:72:0D:F0:A2:F6:B0:F6 X509v3 Authority Key Identifier: keyid:D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:59:7c:6a:8f:f0:33:e9:50:d9:3d:5f:6f:8b:6d:ed:50:32: 21:64:2e:5f:ce:8d:a5:87:3c:20:ed:53:b7:f4:c7:2a:94:fc: 0d:3d:81:6c:d0:28:77:b8:ba:3f:a6:54:81:82:48:24:a6:b7: f7:96:a1:b5:d3:3b:c4:42:0b:d0:b3:b4:dd:77:1b:6c:b5:23: 0a:03:31:55:ae:e2:d0:36:76:33:da:ef:88:78:0c:83:b2:06: 68:56:79:79:a0:1c:56:02:eb:a9:9b:bf:43:46:e1:73:2e:34: 3d:a3:6e:c1:6d:b5:70:44:1b:e4:c3:7d:42:4f:52:8f:1b:fe: 74:1f:2e:45:8f:66:63:9a:c4:1a:a8:f9:cb:b4:85:aa:8b:c0: 72:2b:e9:84:c8:b4:a3:e2:4c:02:ac:25:76:82:93:0c:88:8c: 48:c6:ff:6c:34:99:e4:09:ef:d8:ae:d6:f8:0d:3a:f5:f4:03: e0:94:0f:c1:08:65:5f:d7:d3:1f:c5:1e:3b:79:17:2d:a9:6b: cc:9c:15:f2:bb:08:57:26:43:16:1b:4e:e3:39:cc:2e:c9:5a: 05:22:ec:80:d4:ff:09:7c:c3:15:1d:ce:33:98:4b:99:bd:5a: 53:21:e1:79:e1:86:68:72:94:a5:2b:8a:4a:98:57:42:2c:c6: c9:12:7e:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgxX2ntLE2FOAvU+LS+1QTRbIN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNF MUQyQjJDMDAeFw0yNjA2MTcwMTQ0NTZaFw0yNjA2MTgwMjQ0NTZaMDMxMTAvBgNV BAMTKDQ4OTM2QTRGNDIyQkJENUMwRDQzNzYwOTgzNzIwREYwQTJGNkIwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtXMlUmGcRMJpTx2cZ77ppJiRv OioI8rV4BLVfusNXK8tuVZjNV1rQvx0namK73HDnKdmQf4j6cwTFIGx9Hl23DjjO yoTribOFD40PdDHIE8J+rhV2QQjaSD2YdjBEQSJJ08Va4YwcaEHQ0U7DmZJmQi0A ewVwhRh9bLDM35S1O3Rj/N89hQCXbN3MuMUafiuf14OfgtzJgIywaC5L2ewQijBd 8NPvYyVofEupu9OQCHzi743iN0HdD8Q8v9RfPT/qMHksBBVoxe6CETGeVmJrQ6e2 KXjUQBqZRNFY8b208fSB2d2iQ+h23BFkX6Hks22zhfZ40OC5BQ2amami3V/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSJNqT0IrvVwNQ3YJg3IN8KL2sPYwHwYDVR0j BBgwFoAU1xDkdDjgmeaw7SRWdO0iM+HSssAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU0ZTQ1NmQtZGJlMi00NjBjLTg2ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQz OEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNFMUQyQjJDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEwRTQ3NDM4RTA5OUU2QjBFRDI0NTY3NEVEMjIzM0UxRDJC MkMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIy MzNFMUQyQjJDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJZfGqP8DPpUNk9X2+Lbe1QMiFkLl/OjaWH PCDtU7f0xyqU/A09gWzQKHe4uj+mVIGCSCSmt/eWobXTO8RCC9CztN13G2y1IwoD MVWu4tA2djPa74h4DIOyBmhWeXmgHFYC66mbv0NG4XMuND2jbsFttXBEG+TDfUJP Uo8b/nQfLkWPZmOaxBqo+cu0haqLwHIr6YTItKPiTAKsJXaCkwyIjEjG/2w0meQJ 79iu1vgNOvX0A+CUD8EIZV/X0x/FHjt5Fy2pa8ycFfK7CFcmQxYbTuM5zC7JWgUi 7IDU/wl8wxUdzjOYS5m9WlMh4XnhhmhylKUrikqYV0IsxskSfpE= -----END CERTIFICATE-----Generated at Wed Jun 17 12:06:55 2026 by rpki-client