$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft File: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft (raw, json) Hash identifier: 6nL6YVY8dxl7OGthIlyvjtL2Q/2YjXq/KyaFPkcsQUU= Subject key identifier: A0:C4:E6:41:6D:EC:E4:EC:58:7F:48:F8:FA:F6:CF:DA:D2:4E:37:7B Authority key identifier: 60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 Certificate issuer: /CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Certificate serial: 64CDABD3BBACD154457E71D8FACB3A908FD70D6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 07:48:23 +0000 Manifest this update: Sat 13 Jun 2026 07:43:23 +0000 Manifest next update: Sun 14 Jun 2026 10:23:23 +0000 Files and hashes: 1: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl (hash: CnPDA3lWuUbU2C0mGpaEAH5IXytRswbzohYQnh6TDZs=) 2: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: hlIEpb1QvuixIbQLzMUMoA0W+7btuV0cgzPbAs+Iw5M=) 3: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: 7YQRPlXdULMyA1HYWK14T5iCJHvbhMELTTePtHF2CN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:cd:ab:d3:bb:ac:d1:54:45:7e:71:d8:fa:cb:3a:90:8f:d7:0d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Validity Not Before: Jun 13 07:43:23 2026 GMT Not After : Jun 14 10:23:23 2026 GMT Subject: CN=A0C4E6416DECE4EC587F48F8FAF6CFDAD24E377B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:85:55:ce:74:d9:d0:8b:4d:58:54:9a:7d: da:81:b3:e7:37:75:0e:8f:a1:5a:11:a2:cd:07:e6: f3:be:81:69:7c:80:60:cd:8a:06:d1:de:f3:f7:d4: f3:d3:a6:6b:1b:06:98:c8:a0:41:b9:59:55:69:ba: 4d:03:42:84:02:85:30:ee:7f:0a:f0:e4:55:00:e0: 10:f5:12:c9:5d:a2:29:be:bb:29:db:83:52:12:05: f9:39:f8:4a:69:cc:8b:98:54:eb:f4:3e:e8:67:7b: 05:88:c8:68:19:eb:24:c9:92:34:3a:d2:d9:e8:20: 70:86:ec:b5:4b:89:17:b6:ec:55:cd:ba:54:a6:28: 73:de:45:c8:7f:eb:b6:2a:fd:5e:07:51:eb:6a:41: 03:8b:bf:b5:24:0c:2c:ce:39:bf:e8:38:f1:2b:83: d7:d9:ed:d3:b1:1a:85:8d:e7:66:fb:bc:ec:f7:bb: 8c:5c:42:16:c1:54:cd:1e:e9:9b:65:19:15:86:19: 03:39:72:fe:cc:7d:46:23:a7:72:ca:79:78:99:8a: ab:11:7a:f9:25:f7:44:9f:92:7c:17:d5:34:d6:d3: c7:cc:9b:68:ed:10:00:0f:cf:eb:5e:8e:4a:d4:4a: 54:34:1e:da:22:4c:db:e9:9f:70:5a:de:bc:94:33: d5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C4:E6:41:6D:EC:E4:EC:58:7F:48:F8:FA:F6:CF:DA:D2:4E:37:7B X509v3 Authority Key Identifier: keyid:60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bf:61:09:5c:74:3c:c1:a0:41:6e:e1:65:5d:f0:20:b7:9f: 6c:6b:b1:94:61:04:ef:ef:95:4b:4d:31:4b:1e:a5:a2:72:53: 6f:09:7d:fe:9f:84:0f:c8:e7:4a:23:f8:a0:11:1a:ad:79:5d: 46:78:cb:6c:50:df:30:d4:4c:e0:fd:2c:7e:68:80:d8:64:fd: 96:8a:b6:2e:92:1c:34:10:0f:43:4d:04:70:38:2c:d2:d7:24: d3:b3:39:4a:69:ee:89:05:fd:28:44:2a:6c:67:03:a7:76:26: 98:51:f6:60:68:67:58:81:ee:70:8c:72:3b:97:ae:9a:07:ba: 9c:5c:5a:0c:4b:b4:7e:21:9d:c8:e3:9c:5b:e6:92:16:3b:af: 49:e9:ab:78:c9:d7:47:c1:66:44:59:33:0c:11:c8:87:99:1a: 8d:9f:53:16:bb:34:22:e0:68:2e:f8:5e:23:6f:7a:f9:f1:4c: 9e:1d:57:db:12:63:a4:33:8d:53:f1:65:72:a9:28:b8:d3:56: 7b:7a:93:28:ed:a5:4b:a1:67:a7:a7:e1:d1:02:00:76:6e:1e: 7c:3e:aa:e5:83:f3:35:1e:19:cd:3f:ea:41:29:63:db:eb:94: f3:38:a0:d6:bc:33:ef:8c:9c:63:79:d9:0f:a9:41:50:ee:e7: 3b:a4:eb:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZM2r07us0VRFfnHY+ss6kI/XDWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkx RUI2RjhGNjAeFw0yNjA2MTMwNzQzMjNaFw0yNjA2MTQxMDIzMjNaMDMxMTAvBgNV BAMTKEEwQzRFNjQxNkRFQ0U0RUM1ODdGNDhGOEZBRjZDRkRBRDI0RTM3N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkF4VVznTZ0ItNWFSafdqBs+c3 dQ6PoVoRos0H5vO+gWl8gGDNigbR3vP31PPTpmsbBpjIoEG5WVVpuk0DQoQChTDu fwrw5FUA4BD1Esldoim+uynbg1ISBfk5+EppzIuYVOv0PuhnewWIyGgZ6yTJkjQ6 0tnoIHCG7LVLiRe27FXNulSmKHPeRch/67Yq/V4HUetqQQOLv7UkDCzOOb/oOPEr g9fZ7dOxGoWN52b7vOz3u4xcQhbBVM0e6ZtlGRWGGQM5cv7MfUYjp3LKeXiZiqsR evkl90SfknwX1TTW08fMm2jtEAAPz+tejkrUSlQ0HtoiTNvpn3Ba3ryUM9VBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoMTmQW3s5OxYf0j4+vbP2tJON3swHwYDVR0j BBgwFoAUYC3DwEJFCYlQm0uu/bSqKR62+PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlN2RhY2MtMmI0NS00MTQxLTk3NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0 MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkxRUI2RjhGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MDJEQzNDMDQyNDUwOTg5NTA5QjRCQUVGREI0QUEyOTFFQjZG OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFB MjkxRUI2RjhGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy/YQlcdDzBoEFu4WVd8CC3n2xrsZRhBO/v lUtNMUsepaJyU28Jff6fhA/I50oj+KARGq15XUZ4y2xQ3zDUTOD9LH5ogNhk/ZaK ti6SHDQQD0NNBHA4LNLXJNOzOUpp7okF/ShEKmxnA6d2JphR9mBoZ1iB7nCMcjuX rpoHupxcWgxLtH4hncjjnFvmkhY7r0npq3jJ10fBZkRZMwwRyIeZGo2fUxa7NCLg aC74XiNvevnxTJ4dV9sSY6QzjVPxZXKpKLjTVnt6kyjtpUuhZ6en4dECAHZuHnw+ quWD8zUeGc0/6kEpY9vrlPM4oNa8M++MnGN52Q+pQVDu5zuk62A= -----END CERTIFICATE-----Generated at Sat Jun 13 12:55:50 2026 by rpki-client