$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft File: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft (raw, json) Hash identifier: FoV0cZtuggBxvM0EdIqa0+nh3cjgQpVDACWsMstcDHA= Subject key identifier: EF:EE:BF:54:A5:CC:59:60:DE:4C:59:3A:EE:2A:47:78:3C:A9:9F:39 Authority key identifier: D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC Certificate issuer: /CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Certificate serial: 0F8B9F12A61AF3E849ED39FD7EBB66BD6476C5A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:08:49 +0000 Manifest this update: Tue 16 Jun 2026 16:03:49 +0000 Manifest next update: Wed 17 Jun 2026 19:17:49 +0000 Files and hashes: 1: D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl (hash: rXJIojMtMjiBnmDkmlyUHXzktTq9dspXJpaYGjsTbGY=) 2: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: KLJKltDFBgSRycUEiUgW7XKQBHKRYM0bmiK8DEJJdYA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:8b:9f:12:a6:1a:f3:e8:49:ed:39:fd:7e:bb:66:bd:64:76:c5:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2861B66142D51B5DE4E39CDC5E1644159BC7BBC Validity Not Before: Jun 16 16:03:49 2026 GMT Not After : Jun 17 19:17:49 2026 GMT Subject: CN=EFEEBF54A5CC5960DE4C593AEE2A47783CA99F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:ce:8c:c8:a9:5d:38:81:5b:30:91:f7:5a: 53:92:4a:e4:1f:2b:4f:5a:23:da:98:a9:c3:dc:95: 99:52:a5:1e:dd:09:64:d3:c3:01:d7:f2:f8:11:65: 07:09:ba:c3:49:d0:7c:27:8b:2c:84:5b:cb:0b:35: 58:20:32:eb:b5:9d:8f:0a:5e:85:10:9f:a8:56:35: 32:a6:98:53:35:99:f1:33:0d:75:a0:e1:fb:79:e5: 67:17:7f:73:07:ab:fa:9e:57:c1:9c:d6:5c:e8:99: ae:48:04:73:48:cc:6e:17:d3:90:a3:0a:87:31:9b: fb:87:28:37:05:e3:75:01:a3:f3:26:ea:42:cc:fc: d3:2e:16:5d:20:c3:04:ac:91:12:d2:ca:64:67:f9: 59:3d:b5:d1:35:2b:6d:d5:87:62:42:1e:05:8c:70: d3:ee:6e:00:b1:b7:79:c7:be:29:d2:b6:ab:e0:28: 04:af:4f:aa:b8:38:be:6f:b5:f4:45:39:6b:fe:89: 27:fc:0f:b0:e0:08:1d:13:6e:c4:91:3c:c7:a1:36: 8a:c3:b9:a7:f1:56:4b:e3:86:de:cc:37:a8:a5:5d: a7:01:c7:8b:a2:c3:b8:52:49:ac:36:a3:0e:32:55: 59:5e:c3:54:8f:cc:1e:f1:f4:ce:7f:a3:a2:9b:e5: fb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EE:BF:54:A5:CC:59:60:DE:4C:59:3A:EE:2A:47:78:3C:A9:9F:39 X509v3 Authority Key Identifier: keyid:D2:86:1B:66:14:2D:51:B5:DE:4E:39:CD:C5:E1:64:41:59:BC:7B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/D2861B66142D51B5DE4E39CDC5E1644159BC7BBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:90:4e:5c:15:91:34:61:ef:2d:ba:6a:f2:12:31:90:8a:17: 74:d3:6d:79:8a:a2:40:cd:09:4a:d6:19:c5:95:02:d8:8c:96: ff:06:e8:68:89:fa:fa:8a:4d:f7:36:18:e5:19:f8:17:d1:b5: 20:b8:2f:e2:6a:60:3f:f0:80:e7:41:58:72:f8:5b:22:d0:4b: a9:83:c7:a4:a3:39:d2:67:78:0d:40:d0:33:8a:13:f7:13:b5: 24:59:66:67:05:4c:e5:d9:55:d3:73:0b:84:32:27:ef:06:a4: fb:4c:a4:a6:ca:b4:40:10:b5:18:c0:5b:9d:58:25:a2:ff:bb: d1:36:21:66:c3:98:c5:06:d7:c7:13:c0:64:96:20:a1:3b:59: 40:5d:73:83:97:2b:03:f4:2b:68:30:6d:f8:5d:3d:35:2d:f4: a2:65:65:21:20:0a:dc:a2:45:cc:9f:19:45:3c:3c:43:dc:2c: 8d:a4:2b:89:0c:68:02:86:f7:59:9f:a4:f0:bf:32:04:7d:31: 39:c0:cb:99:20:43:7d:a8:d0:f1:7e:74:93:87:be:14:b4:4a: b9:37:e4:b2:7b:bc:b3:cb:c9:c2:69:e4:f7:07:1b:4f:c3:a5: 1e:71:62:4a:8b:65:a2:17:b0:4c:a1:62:c9:3a:49:ae:7c:82: 0e:9f:c9:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4ufEqYa8+hJ7Tn9frtmvWR2xaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0NDE1 OUJDN0JCQzAeFw0yNjA2MTYxNjAzNDlaFw0yNjA2MTcxOTE3NDlaMDMxMTAvBgNV BAMTKEVGRUVCRjU0QTVDQzU5NjBERTRDNTkzQUVFMkE0Nzc4M0NBOTlGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXs6MyKldOIFbMJH3WlOSSuQf K09aI9qYqcPclZlSpR7dCWTTwwHX8vgRZQcJusNJ0HwniyyEW8sLNVggMuu1nY8K XoUQn6hWNTKmmFM1mfEzDXWg4ft55WcXf3MHq/qeV8Gc1lzoma5IBHNIzG4X05Cj Cocxm/uHKDcF43UBo/Mm6kLM/NMuFl0gwwSskRLSymRn+Vk9tdE1K23Vh2JCHgWM cNPubgCxt3nHvinStqvgKASvT6q4OL5vtfRFOWv+iSf8D7DgCB0TbsSRPMehNorD uafxVkvjht7MN6ilXacBx4uiw7hSSaw2ow4yVVlew1SPzB7x9M5/o6Kb5fsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7+6/VKXMWWDeTFk67ipHeDypnzkwHwYDVR0j BBgwFoAU0oYbZhQtUbXeTjnNxeFkQVm8e7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkZDI1MTktMzA3OC00N2QzLTllODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYx NDJENTFCNURFNEUzOUNEQzVFMTY0NDE1OUJDN0JCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjg2MUI2NjE0MkQ1MUI1REU0RTM5Q0RDNUUxNjQ0MTU5QkM3 QkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzEvRDI4NjFCNjYxNDJENTFCNURFNEUzOUNEQzVFMTY0 NDE1OUJDN0JCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaQTlwVkTRh7y26avISMZCKF3TTbXmKokDN CUrWGcWVAtiMlv8G6GiJ+vqKTfc2GOUZ+BfRtSC4L+JqYD/wgOdBWHL4WyLQS6mD x6SjOdJneA1A0DOKE/cTtSRZZmcFTOXZVdNzC4QyJ+8GpPtMpKbKtEAQtRjAW51Y JaL/u9E2IWbDmMUG18cTwGSWIKE7WUBdc4OXKwP0K2gwbfhdPTUt9KJlZSEgCtyi RcyfGUU8PEPcLI2kK4kMaAKG91mfpPC/MgR9MTnAy5kgQ32o0PF+dJOHvhS0Srk3 5LJ7vLPLycJp5PcHG0/DpR5xYkqLZaIXsEyhYsk6Sa58gg6fyaI= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:16 2026 by rpki-client