$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft File: DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft (raw, json) Hash identifier: gQ2rx/y/v8PSVqTRzuniETk++ej7Wxn5DC+RQC3cvK8= Subject key identifier: 34:0C:83:B0:C2:C7:1D:A3:CC:A6:B5:46:41:04:27:04:96:7A:88:8F Authority key identifier: DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60 Certificate issuer: /CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60 Certificate serial: 7AEDA3A0A9AED8714E40BB2850FFA03873CC7E65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:59:40 +0000 Manifest this update: Tue 16 Jun 2026 20:54:40 +0000 Manifest next update: Wed 17 Jun 2026 23:11:40 +0000 Files and hashes: 1: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (hash: Sq/TPHjnHcU8BdlRhTUGNyaSgFRduqyHP60YOl+s/e4=) 2: DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl (hash: nloiwBw825gBQGsL5Fy1bPEf/2ePweEBvWqNvtXhxUg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ed:a3:a0:a9:ae:d8:71:4e:40:bb:28:50:ff:a0:38:73:cc:7e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60 Validity Not Before: Jun 16 20:54:40 2026 GMT Not After : Jun 17 23:11:40 2026 GMT Subject: CN=340C83B0C2C71DA3CCA6B54641042704967A888F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c6:07:56:f7:74:3c:b2:ff:92:12:6a:3f:f0: 3e:14:33:52:5c:91:01:d8:b1:04:c2:27:a5:b6:41: 2d:47:b0:00:3e:7d:ba:eb:13:29:bb:a2:06:ff:93: 0b:21:e3:89:ae:1a:21:44:83:f8:c0:c1:fe:26:25: 2e:29:33:4b:1b:cd:b3:d0:95:d6:00:7b:6f:b6:ee: 9c:d4:4c:b7:c0:76:73:84:f6:6f:69:79:c5:95:51: 30:40:80:6e:60:fb:06:16:e0:42:d8:f4:5b:dc:0b: f7:2a:2a:26:98:6e:f1:93:8c:93:26:50:a0:4d:8a: 61:49:a3:1f:19:9a:27:4e:44:ab:4d:83:c3:e8:d6: 67:42:f8:fe:36:df:07:92:37:f3:cc:c7:28:a8:d2: bd:c4:03:b9:dd:00:68:57:87:95:76:6b:58:43:fd: 42:19:fb:16:f6:20:88:f5:28:ec:66:56:c7:42:01: c1:7e:80:b1:6b:05:f6:57:1a:70:d0:46:6f:f1:88: 42:0e:3b:27:38:65:17:26:51:61:1c:81:09:a2:be: cc:88:3a:16:95:4f:70:58:00:3d:46:c1:80:ff:b7: 31:48:a0:71:0a:73:87:ff:4e:21:87:26:a8:cc:96: 80:38:d8:7f:c6:7a:a1:38:5c:d5:aa:a8:2c:a5:be: f3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0C:83:B0:C2:C7:1D:A3:CC:A6:B5:46:41:04:27:04:96:7A:88:8F X509v3 Authority Key Identifier: keyid:DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:56:25:d1:ca:c2:3b:c8:e7:9e:43:12:c8:06:36:3c:cd:e0: c0:1f:72:e0:b6:44:bd:75:cd:ec:1e:08:e8:3e:0f:de:75:51: 88:1a:63:91:fa:9d:e9:bb:21:92:e1:89:df:9b:40:7e:06:36: b7:bf:42:40:87:52:55:d4:e6:16:56:08:f2:ea:53:21:55:f9: 71:86:de:fe:ac:67:79:34:3c:bc:9b:b0:7f:c4:f4:39:0e:23: d4:89:55:62:25:31:a0:33:05:ef:45:c4:50:eb:99:d7:ca:8a: d9:93:a9:06:f4:b6:7d:c0:34:57:7c:47:3d:83:11:60:7f:f7: 32:65:50:e2:dc:71:42:7e:49:14:ed:df:30:f9:62:b8:cc:8d: a5:9e:40:80:e1:e9:f4:7a:99:08:64:41:52:2f:c9:7a:b2:8c: 29:0b:ac:d1:d5:4a:b6:19:2b:c0:a5:b0:fe:de:45:60:e3:12: 1d:c2:14:36:dd:9f:e9:ca:20:75:dc:7c:90:91:8a:75:8c:6a: c9:20:54:b1:36:a3:47:8e:74:1f:df:31:42:d6:92:1d:57:bf: 34:a3:b4:da:7a:8c:e9:7f:a7:1e:ba:72:22:6e:f4:4b:e5:db: 4f:96:49:78:11:21:4c:fe:cf:71:95:3d:bf:67:6e:fe:8e:53: d0:d4:62:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeu2joKmu2HFOQLsoUP+gOHPMfmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2NDhEQjAzRUM1NjQxNDgxMjhDNzBGQkI2QTBDQzg3 NzNBRUY2MDAeFw0yNjA2MTYyMDU0NDBaFw0yNjA2MTcyMzExNDBaMDMxMTAvBgNV BAMTKDM0MEM4M0IwQzJDNzFEQTNDQ0E2QjU0NjQxMDQyNzA0OTY3QTg4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxgdW93Q8sv+SEmo/8D4UM1Jc kQHYsQTCJ6W2QS1HsAA+fbrrEym7ogb/kwsh44muGiFEg/jAwf4mJS4pM0sbzbPQ ldYAe2+27pzUTLfAdnOE9m9pecWVUTBAgG5g+wYW4ELY9FvcC/cqKiaYbvGTjJMm UKBNimFJox8ZmidORKtNg8Po1mdC+P423weSN/PMxyio0r3EA7ndAGhXh5V2a1hD /UIZ+xb2IIj1KOxmVsdCAcF+gLFrBfZXGnDQRm/xiEIOOyc4ZRcmUWEcgQmivsyI OhaVT3BYAD1GwYD/tzFIoHEKc4f/TiGHJqjMloA42H/GeqE4XNWqqCylvvONAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNAyDsMLHHaPMprVGQQQnBJZ6iI8wHwYDVR0j BBgwFoAU32SNsD7FZBSBKMcPu2oMyHc672AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkYjZjNGYtOWZkZi00N2Y2LWIyNGMtMDMzZmUzYTQ0ZDUwLzAvREY2NDhEQjAz RUM1NjQxNDgxMjhDNzBGQkI2QTBDQzg3NzNBRUY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjY0OERCMDNFQzU2NDE0ODEyOEM3MEZCQjZBMENDODc3M0FF RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkYjZjNGYtOWZkZi00N2Y2LWIy NGMtMDMzZmUzYTQ0ZDUwLzAvREY2NDhEQjAzRUM1NjQxNDgxMjhDNzBGQkI2QTBD Qzg3NzNBRUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFWJdHKwjvI555DEsgGNjzN4MAfcuC2RL11 zeweCOg+D951UYgaY5H6nem7IZLhid+bQH4GNre/QkCHUlXU5hZWCPLqUyFV+XGG 3v6sZ3k0PLybsH/E9DkOI9SJVWIlMaAzBe9FxFDrmdfKitmTqQb0tn3ANFd8Rz2D EWB/9zJlUOLccUJ+SRTt3zD5YrjMjaWeQIDh6fR6mQhkQVIvyXqyjCkLrNHVSrYZ K8ClsP7eRWDjEh3CFDbdn+nKIHXcfJCRinWMaskgVLE2o0eOdB/fMULWkh1XvzSj tNp6jOl/px66ciJu9Evl20+WSXgRIUz+z3GVPb9nbv6OU9DUYrY= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:17 2026 by rpki-client