$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft File: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft (raw, json) Hash identifier: Z/9uLk8Gl3RFUuGGnyZlHaC59+GGYOlZB+6bERy/L8c= Subject key identifier: B7:66:12:78:BC:A5:C7:BA:98:90:FA:C3:AC:DD:31:DB:15:57:4E:31 Authority key identifier: CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 Certificate issuer: /CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Certificate serial: 7E715626B699AAEC8FA4FD321E8A854B80958774 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 15:07:53 +0000 Manifest this update: Sat 13 Jun 2026 15:02:53 +0000 Manifest next update: Sun 14 Jun 2026 15:22:53 +0000 Files and hashes: 1: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: FIEaDVHIseW71OoASUCYpCwzUw7yf/gVIj4IdH47VZ0=) 2: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: oj9tQCvDwCV4p4Hr9N9eWTF7U8CpjCR1vEULrbqMjA8=) 3: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl (hash: Dkt5CgwFQ+7gwDkH8zFLSLzqIzNI2dPlbaiBCjbexR0=) 4: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: tc2Aw1xglXhbLRMp6kuTfOMbUtYtC4WfWamomx8fpaI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:71:56:26:b6:99:aa:ec:8f:a4:fd:32:1e:8a:85:4b:80:95:87:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Validity Not Before: Jun 13 15:02:53 2026 GMT Not After : Jun 14 15:22:53 2026 GMT Subject: CN=B7661278BCA5C7BA9890FAC3ACDD31DB15574E31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:18:09:19:e5:6b:33:8b:9d:92:8c:9b:ab:04: 7b:92:42:01:cc:de:04:6d:18:7b:b0:76:a6:84:0d: d6:62:a6:0c:01:1d:2f:3e:2b:25:71:a4:d2:56:32: ed:c2:3a:31:2a:fd:b3:31:3a:2c:93:68:35:42:6b: 48:aa:d4:7e:44:ab:3a:38:fd:3c:46:10:12:6c:2d: 49:d8:3e:4f:f4:84:ce:09:c1:a9:04:a0:ca:ad:89: 02:fd:51:cc:be:63:17:8e:5f:07:be:e5:52:65:32: 1d:91:bb:c3:3d:9a:bc:60:09:80:d6:7e:61:c7:80: 95:2f:0f:a5:41:5c:1e:3f:b5:29:cc:08:3c:ad:a9: a0:09:f6:b1:85:ec:79:02:0f:03:df:d7:b3:08:6a: c5:f1:0d:ad:af:bd:49:99:11:8e:16:05:34:c2:e6: 20:a1:00:ff:08:0c:34:67:2e:c8:af:7c:39:db:98: 78:15:82:63:0d:4d:cc:ff:2e:e2:49:b1:3a:4b:e2: 23:86:3a:b7:9e:03:93:b9:cd:ac:ca:ad:40:2f:08: db:dd:4d:c7:22:1e:42:8d:13:fc:b0:68:d7:78:a4: 46:a7:55:27:c7:63:ed:23:78:63:33:2a:86:1f:0b: 6f:3e:8d:57:29:4f:f4:8f:0d:bb:bf:5f:59:f9:ed: 5f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:66:12:78:BC:A5:C7:BA:98:90:FA:C3:AC:DD:31:DB:15:57:4E:31 X509v3 Authority Key Identifier: keyid:CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ee:8a:43:12:68:4d:d4:de:cb:91:41:89:2f:17:af:46:29: 53:31:16:aa:68:55:e2:f2:ba:80:b5:ac:ff:d3:b1:5e:ac:bd: 77:3f:ba:a8:c3:e0:d6:9c:91:6a:7b:0c:aa:7b:eb:c8:17:6e: 10:55:f0:8a:69:5b:c4:a4:5b:69:13:a4:59:97:07:87:e4:69: c5:f3:06:cc:4f:89:7e:cf:5f:4c:e5:ca:f2:84:c1:c4:a1:35: 73:42:da:5f:56:09:6c:18:ce:72:29:cf:2d:fc:0c:b5:d6:ee: b5:84:1e:69:40:ad:e8:7b:0e:53:b1:84:b8:68:bd:8e:d8:24: 7d:2d:a2:f0:9f:a1:8d:a2:e1:9a:fd:40:d9:93:d5:f1:5f:fe: bd:f3:40:d5:9e:83:3b:ce:76:b5:9d:8a:28:8a:96:bc:0e:b9: b9:16:0f:b3:93:20:e6:f2:6b:2c:9e:9b:cc:c8:db:ec:a3:17: 05:ab:14:b5:7e:8e:0d:89:f6:bf:91:67:c1:27:2b:e3:00:dd: e8:cb:7b:90:4c:9d:cf:08:f1:6d:cf:e6:24:46:d4:5c:78:86: 6e:d5:9e:43:00:35:f4:c1:93:d4:17:35:27:f0:33:c5:48:1e: 16:9a:60:e5:71:fe:54:78:26:b0:0c:14:d9:20:a0:79:78:11: 9c:61:f4:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnFWJraZquyPpP0yHoqFS4CVh3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2 N0RBNTc4NDAeFw0yNjA2MTMxNTAyNTNaFw0yNjA2MTQxNTIyNTNaMDMxMTAvBgNV BAMTKEI3NjYxMjc4QkNBNUM3QkE5ODkwRkFDM0FDREQzMURCMTU1NzRFMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDGAkZ5Wszi52SjJurBHuSQgHM 3gRtGHuwdqaEDdZipgwBHS8+KyVxpNJWMu3COjEq/bMxOiyTaDVCa0iq1H5Eqzo4 /TxGEBJsLUnYPk/0hM4JwakEoMqtiQL9Ucy+YxeOXwe+5VJlMh2Ru8M9mrxgCYDW fmHHgJUvD6VBXB4/tSnMCDytqaAJ9rGF7HkCDwPf17MIasXxDa2vvUmZEY4WBTTC 5iChAP8IDDRnLsivfDnbmHgVgmMNTcz/LuJJsTpL4iOGOreeA5O5zazKrUAvCNvd TcciHkKNE/ywaNd4pEanVSfHY+0jeGMzKoYfC28+jVcpT/SPDbu/X1n57V8DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt2YSeLylx7qYkPrDrN0x2xVXTjEwHwYDVR0j BBgwFoAUysOk8hvI9N+nToUVH4s+kWfaV4QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhiOTg3MjItMWNiNC00MGQ0LWFjOGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIx QkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2N0RBNTc4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUMzQTRGMjFCQzhGNERGQTc0RTg1MTUxRjhCM0U5MTY3REE1 Nzg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNF OTE2N0RBNTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXuikMSaE3U3suRQYkvF69GKVMxFqpoVeLy uoC1rP/TsV6svXc/uqjD4NackWp7DKp768gXbhBV8IppW8SkW2kTpFmXB4fkacXz BsxPiX7PX0zlyvKEwcShNXNC2l9WCWwYznIpzy38DLXW7rWEHmlAreh7DlOxhLho vY7YJH0tovCfoY2i4Zr9QNmT1fFf/r3zQNWegzvOdrWdiiiKlrwOubkWD7OTIOby ayyem8zI2+yjFwWrFLV+jg2J9r+RZ8EnK+MA3ejLe5BMnc8I8W3P5iRG1Fx4hm7V nkMANfTBk9QXNSfwM8VIHhaaYOVx/lR4JrAMFNkgoHl4EZxh9Co= -----END CERTIFICATE-----Generated at Sun Jun 14 08:32:11 2026 by rpki-client