$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft File: 228D8D937BBC58B186163CE4DD0333EF171136B5.mft (raw, json) Hash identifier: /IvxvoT423ULoZkTzcgaCVptj+zpV/AqOcX0nuhqTF4= Subject key identifier: 16:CD:91:E8:21:BF:9E:59:75:DB:55:01:7F:D3:63:33:E7:4C:B6:54 Authority key identifier: 22:8D:8D:93:7B:BC:58:B1:86:16:3C:E4:DD:03:33:EF:17:11:36:B5 Certificate issuer: /CN=228D8D937BBC58B186163CE4DD0333EF171136B5 Certificate serial: 4E0FA089D9496C6F075BD595D5B3C91BA533DC52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 03:47:27 +0000 Manifest this update: Wed 17 Jun 2026 03:42:27 +0000 Manifest next update: Thu 18 Jun 2026 05:47:27 +0000 Files and hashes: 1: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: Dk+nSXFZDNacuokslAhQOKnR2rRHLun2ihG3BWOPCgU=) 2: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: MTpdy0CYG7SIZe6cOf6a6b9EOLMRkXO/tTUBIEJ2xwQ=) 3: 228D8D937BBC58B186163CE4DD0333EF171136B5.crl (hash: vkIlKdwSNgjoW5kLlzG/vtQpOITPagCIeD43mxefCn8=) 4: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: JM/02KXvppUFA6M2lfoMyS0PaD1KXTG0P2tE2Kswrq4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.crl rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0f:a0:89:d9:49:6c:6f:07:5b:d5:95:d5:b3:c9:1b:a5:33:dc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228D8D937BBC58B186163CE4DD0333EF171136B5 Validity Not Before: Jun 17 03:42:27 2026 GMT Not After : Jun 18 05:47:27 2026 GMT Subject: CN=16CD91E821BF9E5975DB55017FD36333E74CB654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:61:33:42:9c:2a:4f:00:5e:6f:bd:5f:d1:ed: d7:a8:59:1d:0e:a9:1f:53:e6:74:66:76:8d:a4:0e: d3:6f:0e:45:65:a7:69:0d:20:13:86:fc:01:48:79: f9:1e:d1:8e:0e:e2:62:63:13:ac:d0:99:55:05:19: b1:d6:80:16:86:49:bf:3e:37:ea:09:61:96:f5:d7: b2:b4:4e:9d:4c:d2:81:3f:05:11:7d:a5:14:01:98: 71:b5:22:ef:ed:b0:3d:03:5e:16:06:f5:d2:62:b7: be:29:6e:e8:43:3c:8f:bd:ff:f3:56:32:2d:2e:40: 1e:f9:cb:cd:91:96:b3:c6:35:c9:1f:d9:98:c0:d7: 44:ed:da:c6:a1:6d:2d:00:fa:87:a4:5a:12:b0:62: 1c:0d:64:6c:56:d5:26:cb:7e:a0:2a:03:8e:52:2a: e0:bd:db:2e:f1:a1:fc:39:0a:f3:28:2b:f2:d3:f9: 0c:a2:74:92:6e:bd:d5:09:92:ad:5a:12:e4:84:8e: 40:77:c4:f1:df:4f:85:06:ed:17:a7:51:3c:24:b7: 17:53:ba:ef:08:da:73:fa:24:6f:70:f9:da:c9:f6: bd:7f:82:f5:3b:1f:3e:ea:fb:76:da:57:34:08:df: d9:4b:69:12:d0:fc:d1:cb:01:96:8a:be:08:da:f1: 94:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CD:91:E8:21:BF:9E:59:75:DB:55:01:7F:D3:63:33:E7:4C:B6:54 X509v3 Authority Key Identifier: keyid:22:8D:8D:93:7B:BC:58:B1:86:16:3C:E4:DD:03:33:EF:17:11:36:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ac:13:b1:ec:e6:1b:f7:3c:b2:77:e1:e3:c7:4b:1c:c1:72: af:3c:9d:88:98:c6:c4:ec:2a:7a:cb:20:72:67:2d:ff:40:4e: 5c:17:1a:72:12:6a:ff:8f:be:e7:f2:0b:3b:db:ad:bb:f3:5e: b1:93:b5:12:2b:08:dc:fc:d0:05:f6:d4:26:f8:89:d5:d0:98: d7:d3:48:a0:8d:a0:9a:22:42:90:a8:42:b1:f3:a3:c0:e1:e6: 80:ad:58:85:37:f4:5b:e7:c6:71:d5:35:a3:32:6b:2f:31:b3: 66:49:d6:da:23:96:1b:a3:a5:b9:9a:0c:b0:f7:47:d5:5d:98: b9:ad:6e:2d:47:44:1d:05:13:fd:bd:d1:0f:26:13:8d:d5:dd: e3:cd:b1:3a:00:92:5b:c5:dc:36:c6:1b:09:18:87:a1:bc:2b: 2d:30:6b:e9:36:3e:50:1b:de:99:0e:60:be:01:46:32:9b:2c: ee:c8:01:f4:36:ad:00:e7:1d:7a:f9:e4:59:69:0b:11:49:6d: cc:12:62:3c:42:df:a8:a5:19:f1:21:52:75:c8:41:59:4c:98: 27:bf:36:df:6a:cd:32:28:dd:11:02:a3:33:c3:ab:95:2b:af: c5:57:ef:a8:27:11:6a:7e:e2:bd:28:fe:6f:0b:ec:c4:95:77: 52:48:e7:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTg+gidlJbG8HW9WV1bPJG6Uz3FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RDhEOTM3QkJDNThCMTg2MTYzQ0U0REQwMzMzRUYx NzExMzZCNTAeFw0yNjA2MTcwMzQyMjdaFw0yNjA2MTgwNTQ3MjdaMDMxMTAvBgNV BAMTKDE2Q0Q5MUU4MjFCRjlFNTk3NURCNTUwMTdGRDM2MzMzRTc0Q0I2NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmYTNCnCpPAF5vvV/R7deoWR0O qR9T5nRmdo2kDtNvDkVlp2kNIBOG/AFIefke0Y4O4mJjE6zQmVUFGbHWgBaGSb8+ N+oJYZb117K0Tp1M0oE/BRF9pRQBmHG1Iu/tsD0DXhYG9dJit74pbuhDPI+9//NW Mi0uQB75y82RlrPGNckf2ZjA10Tt2sahbS0A+oekWhKwYhwNZGxW1SbLfqAqA45S KuC92y7xofw5CvMoK/LT+QyidJJuvdUJkq1aEuSEjkB3xPHfT4UG7RenUTwktxdT uu8I2nP6JG9w+drJ9r1/gvU7Hz7q+3baVzQI39lLaRLQ/NHLAZaKvgja8ZQ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFs2R6CG/nll121UBf9NjM+dMtlQwHwYDVR0j BBgwFoAUIo2Nk3u8WLGGFjzk3QMz7xcRNrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDliODk5YWMtNDg3MC00ZTI4LThlNGUtMmMyMzc1MmE0YTYwLzAvMjI4RDhEOTM3 QkJDNThCMTg2MTYzQ0U0REQwMzMzRUYxNzExMzZCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjhEOEQ5MzdCQkM1OEIxODYxNjNDRTRERDAzMzNFRjE3MTEz NkI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMjI4RDhEOTM3QkJDNThCMTg2MTYzQ0U0REQwMzMz RUYxNzExMzZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2sE7Hs5hv3PLJ34ePHSxzBcq88nYiYxsTs KnrLIHJnLf9ATlwXGnISav+PvufyCzvbrbvzXrGTtRIrCNz80AX21Cb4idXQmNfT SKCNoJoiQpCoQrHzo8Dh5oCtWIU39FvnxnHVNaMyay8xs2ZJ1tojlhujpbmaDLD3 R9VdmLmtbi1HRB0FE/290Q8mE43V3ePNsToAklvF3DbGGwkYh6G8Ky0wa+k2PlAb 3pkOYL4BRjKbLO7IAfQ2rQDnHXr55FlpCxFJbcwSYjxC36ilGfEhUnXIQVlMmCe/ Nt9qzTIo3RECozPDq5Urr8VX76gnEWp+4r0o/m8L7MSVd1JI53k= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:21 2026 by rpki-client