$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft File: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft (raw, json) Hash identifier: aqMe7/a8yQygDuaLYkOe+btbMPb/6MPqe21qii6gsF8= Subject key identifier: 3C:50:49:4F:46:2D:B9:3B:E1:DE:33:8F:07:18:15:70:61:D7:F8:BE Authority key identifier: B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC Certificate issuer: /CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Certificate serial: 6B4EFB766423B0F7A6A85C7AA86374ECE13FFEA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 05:49:53 +0000 Manifest this update: Wed 17 Jun 2026 05:44:53 +0000 Manifest next update: Thu 18 Jun 2026 09:30:53 +0000 Files and hashes: 1: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: DOdXqvIf8YC77FzkFbP1ZhH9lDDTTUCUrQuHHws44kQ=) 2: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl (hash: hhPoR7XIPx+xJTXMnNJDAFA9bK+LuJvyRydiKiRqqkM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4e:fb:76:64:23:b0:f7:a6:a8:5c:7a:a8:63:74:ec:e1:3f:fe:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Validity Not Before: Jun 17 05:44:53 2026 GMT Not After : Jun 18 09:30:53 2026 GMT Subject: CN=3C50494F462DB93BE1DE338F0718157061D7F8BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1c:aa:f8:d3:a0:ef:ca:e5:71:04:e2:6d:72: 00:ac:27:52:f4:b7:99:03:63:9a:2c:1a:85:c7:77: 00:d6:2e:92:1d:1a:4e:b3:ae:e6:80:ce:96:47:23: 10:88:7a:4e:69:0c:db:3c:14:54:13:ca:88:13:9a: 0d:93:0e:74:b8:62:2e:77:38:85:24:1b:f7:58:d6: 03:1e:2f:3c:f2:7f:2c:52:c9:12:c2:9f:3d:5c:f4: aa:67:68:3f:d3:82:e6:00:90:2d:ad:0e:d3:eb:a7: f1:64:1a:2c:0c:19:a8:5f:28:3a:1e:77:ee:3d:62: 12:7f:68:b0:80:97:76:5b:9c:d6:a0:bf:94:1c:2a: 10:43:df:13:d2:25:15:70:88:46:7b:4e:f0:55:95: 59:83:1c:f8:1a:c1:ff:7a:d4:1d:d3:7f:4a:0f:29: be:64:e7:6e:27:61:5d:86:6f:82:70:3d:dd:ff:94: ec:a0:0f:40:77:bf:36:ac:17:7d:46:7c:48:27:36: 81:c6:45:73:cd:c7:9f:73:db:c4:78:67:0c:9e:df: 6b:cf:10:0d:db:dc:7c:c9:0f:4e:a4:0c:eb:e9:d4: 5e:ca:85:d8:db:c0:54:70:cc:45:8b:70:11:5f:15: 71:03:50:44:94:18:62:9c:f5:06:a0:49:1c:29:39: f2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:50:49:4F:46:2D:B9:3B:E1:DE:33:8F:07:18:15:70:61:D7:F8:BE X509v3 Authority Key Identifier: keyid:B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:cf:8e:e1:83:e1:5d:f7:a5:5b:32:f1:d0:76:50:61:cc:8a: 35:7e:ee:79:6f:5f:14:eb:72:96:21:c6:a0:1b:69:ec:cb:3a: 9b:dc:84:13:d9:91:d6:3b:e2:b3:7a:c5:1d:d8:22:1b:cf:a2: b3:2a:5f:12:ce:f7:9f:93:7d:37:e5:6c:0c:8a:1b:a5:f5:d6: df:e1:3e:e9:da:98:fc:50:a2:5c:c8:e9:71:7f:db:f4:b8:1a: 88:81:07:62:9f:01:f1:7f:d2:cc:35:18:7f:2d:9c:12:14:9a: 0d:8c:c8:56:ca:d4:5e:84:58:70:cd:4b:13:46:da:8e:bd:74: 45:27:5e:17:54:09:ef:31:ea:81:b9:63:2d:d6:77:5b:64:b6: 97:0a:d4:00:9a:78:cc:58:00:63:7b:e9:fe:01:8b:90:7f:44: bb:7c:a8:e5:8b:e7:f4:b0:1e:1d:5f:b4:1c:de:00:7a:96:2e: 81:28:28:7b:94:4a:3a:ca:68:dc:c5:31:e1:94:ed:b6:8e:a2: a5:07:be:0c:6b:9f:4b:34:25:7f:05:14:de:d7:23:4b:a0:93: 28:4f:a4:cc:90:32:2a:35:5a:39:51:df:85:d1:c3:e0:47:13: 4d:7e:d0:f5:7a:14:0a:12:af:2e:21:d6:08:c1:4a:23:ce:ed: 07:6f:5b:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa077dmQjsPemqFx6qGN07OE//qQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhD RjEyN0NBQzAeFw0yNjA2MTcwNTQ0NTNaFw0yNjA2MTgwOTMwNTNaMDMxMTAvBgNV BAMTKDNDNTA0OTRGNDYyREI5M0JFMURFMzM4RjA3MTgxNTcwNjFEN0Y4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTHKr406DvyuVxBOJtcgCsJ1L0 t5kDY5osGoXHdwDWLpIdGk6zruaAzpZHIxCIek5pDNs8FFQTyogTmg2TDnS4Yi53 OIUkG/dY1gMeLzzyfyxSyRLCnz1c9KpnaD/TguYAkC2tDtPrp/FkGiwMGahfKDoe d+49YhJ/aLCAl3ZbnNagv5QcKhBD3xPSJRVwiEZ7TvBVlVmDHPgawf961B3Tf0oP Kb5k524nYV2Gb4JwPd3/lOygD0B3vzasF31GfEgnNoHGRXPNx59z28R4Zwye32vP EA3b3HzJD06kDOvp1F7KhdjbwFRwzEWLcBFfFXEDUESUGGKc9QagSRwpOfJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPFBJT0YtuTvh3jOPBxgVcGHX+L4wHwYDVR0j BBgwFoAUuZCPWU5jC+oe6g3b9KMNyM8SfKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZlY2M3MmEtZTk1NC00MzAyLTkyYzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0 RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhDRjEyN0NBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTkwOEY1OTRFNjMwQkVBMUVFQTBEREJGNEEzMERDOENGMTI3 Q0FDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBE QzhDRjEyN0NBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXPjuGD4V33pVsy8dB2UGHMijV+7nlvXxTr cpYhxqAbaezLOpvchBPZkdY74rN6xR3YIhvPorMqXxLO95+TfTflbAyKG6X11t/h PunamPxQolzI6XF/2/S4GoiBB2KfAfF/0sw1GH8tnBIUmg2MyFbK1F6EWHDNSxNG 2o69dEUnXhdUCe8x6oG5Yy3Wd1tktpcK1ACaeMxYAGN76f4Bi5B/RLt8qOWL5/Sw Hh1ftBzeAHqWLoEoKHuUSjrKaNzFMeGU7baOoqUHvgxrn0s0JX8FFN7XI0ugkyhP pMyQMio1WjlR34XRw+BHE01+0PV6FAoSry4h1gjBSiPO7QdvW5I= -----END CERTIFICATE-----Generated at Wed Jun 17 10:43:31 2026 by rpki-client