$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft File: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft (raw, json) Hash identifier: PhnOKXb2T3sG2eoqgkL6M2vOlwQE06XnpgCLhuJkrZQ= Subject key identifier: 18:C7:01:A4:7B:1A:11:DB:5B:55:60:51:E1:52:EA:BB:40:09:5A:59 Authority key identifier: D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C Certificate issuer: /CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Certificate serial: 512EDA33A772155BB6F831F7CE6802BE878244C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 20:59:32 +0000 Manifest this update: Sat 13 Jun 2026 20:54:32 +0000 Manifest next update: Sun 14 Jun 2026 21:15:32 +0000 Files and hashes: 1: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: ecWkSgSwkV2u+u82kb3iMyEyHidsVg9ktP1OUEc0RVY=) 2: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl (hash: GP2J5lUEoFfkBcOqePXSBQ25BkH4coGyZOhe6RzjGUU=) 3: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: mtrDV4mqgTGdX3FIVkCoXVE0ERKQErVYoLX9nuzS4rw=) 4: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: n33ojlZr3PPZOfsVvz1esHOzCxGjqSWfrz4yQc92lmw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2e:da:33:a7:72:15:5b:b6:f8:31:f7:ce:68:02:be:87:82:44:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Validity Not Before: Jun 13 20:54:32 2026 GMT Not After : Jun 14 21:15:32 2026 GMT Subject: CN=18C701A47B1A11DB5B556051E152EABB40095A59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:60:b2:d7:7a:0b:60:f8:bc:63:b9:3a:08:c7: a4:12:b8:96:53:63:d9:bb:26:96:d9:00:98:c7:58: ec:8e:ea:ba:a1:20:54:27:76:b9:88:42:ed:c6:21: 4a:6e:b4:6f:d8:ee:49:15:ad:ac:3d:29:32:2d:e6: d6:6f:5c:bb:9e:ea:25:fd:a0:b5:de:1a:56:8c:ee: d9:27:b6:e1:5f:68:9f:3f:93:10:22:76:e2:1c:56: 7c:1e:8d:e2:fe:98:cd:bc:22:f6:1c:16:1c:aa:bb: 6f:dd:93:47:66:9f:65:f8:6c:f0:de:34:e1:f6:08: 00:7a:e0:ec:8c:54:74:bc:e5:b7:1d:35:59:2f:cc: d5:78:20:59:ee:59:8a:7b:3b:51:fe:b7:8d:21:14: c0:91:42:07:ef:fe:a5:6a:c0:87:b2:5f:42:53:31: 56:ba:a9:92:14:e0:41:a4:e7:5f:00:50:82:92:be: 96:17:60:d5:32:01:ad:09:11:68:7e:6e:77:eb:df: b6:84:4a:f3:b9:92:2a:5c:49:d5:5d:5b:eb:72:e9: 82:42:c7:43:75:47:00:d8:d2:37:a0:27:d3:7c:77: 6f:c6:e9:9f:16:b3:dd:34:97:9b:94:80:a7:5b:ee: 1e:e3:8f:b6:68:3e:f5:50:a1:68:da:26:9a:e6:81: ae:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C7:01:A4:7B:1A:11:DB:5B:55:60:51:E1:52:EA:BB:40:09:5A:59 X509v3 Authority Key Identifier: keyid:D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e6:67:fd:dc:82:6c:5f:3a:51:98:31:a2:68:7d:a7:ee:17: 86:c9:8b:dd:b7:4b:ce:ba:f5:a7:cf:aa:90:d6:c0:ee:37:e8: 47:2c:4a:58:18:04:b4:43:5e:44:01:9f:02:83:86:fa:9e:34: 64:f1:e5:5e:de:27:ba:56:5c:17:67:a5:91:e2:7a:1d:3a:f7: 50:ac:88:3f:2c:16:cb:fe:92:8f:39:5a:a4:89:74:55:fa:58: 45:1d:3d:6e:02:c0:a2:d3:9d:f2:bc:0c:6a:dc:ca:4c:b6:1b: 9b:d6:71:0a:10:f8:f9:ae:78:57:1c:77:22:40:5d:71:1f:24: a6:b5:0f:73:01:cd:f0:96:93:f5:72:bd:34:d0:ea:1a:19:01: 1d:42:b9:7c:f1:52:36:53:6a:6a:10:eb:4f:8f:ae:08:a2:b5: 94:7e:d2:3e:ba:4e:70:a4:54:36:e3:e1:81:48:e1:1b:b1:b0: d2:11:6c:09:d5:9e:4e:8a:6e:b4:fd:6d:3d:31:6a:20:ce:7a: f9:30:f8:8d:58:21:78:de:57:92:8e:6f:24:7c:24:c6:57:8a: 95:ec:d7:ea:b2:36:47:d8:53:55:f2:77:7a:2a:bc:14:46:bb: f5:6f:9a:5b:4b:5f:b9:0f:73:4c:65:01:86:81:88:71:b4:6e: 4b:0d:2e:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUS7aM6dyFVu2+DH3zmgCvoeCRMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4 NDg3Q0YyQzAeFw0yNjA2MTMyMDU0MzJaFw0yNjA2MTQyMTE1MzJaMDMxMTAvBgNV BAMTKDE4QzcwMUE0N0IxQTExREI1QjU1NjA1MUUxNTJFQUJCNDAwOTVBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3YLLXegtg+LxjuToIx6QSuJZT Y9m7JpbZAJjHWOyO6rqhIFQndrmIQu3GIUputG/Y7kkVraw9KTIt5tZvXLue6iX9 oLXeGlaM7tkntuFfaJ8/kxAiduIcVnwejeL+mM28IvYcFhyqu2/dk0dmn2X4bPDe NOH2CAB64OyMVHS85bcdNVkvzNV4IFnuWYp7O1H+t40hFMCRQgfv/qVqwIeyX0JT MVa6qZIU4EGk518AUIKSvpYXYNUyAa0JEWh+bnfr37aESvO5kipcSdVdW+ty6YJC x0N1RwDY0jegJ9N8d2/G6Z8Ws900l5uUgKdb7h7jj7ZoPvVQoWjaJprmga5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGMcBpHsaEdtbVWBR4VLqu0AJWlkwHwYDVR0j BBgwFoAU05ghQ/y6RCDAeqXO61DtsoSHzywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlZTgyYjctYzE4Mi00ZTgzLTg5N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNG Q0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4NDg3Q0YyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzk4MjE0M0ZDQkE0NDIwQzA3QUE1Q0VFQjUwRURCMjg0ODdD RjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVE QjI4NDg3Q0YyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATmZ/3cgmxfOlGYMaJofafuF4bJi923S866 9afPqpDWwO436EcsSlgYBLRDXkQBnwKDhvqeNGTx5V7eJ7pWXBdnpZHieh0691Cs iD8sFsv+ko85WqSJdFX6WEUdPW4CwKLTnfK8DGrcyky2G5vWcQoQ+PmueFccdyJA XXEfJKa1D3MBzfCWk/VyvTTQ6hoZAR1CuXzxUjZTamoQ60+PrgiitZR+0j66TnCk VDbj4YFI4RuxsNIRbAnVnk6KbrT9bT0xaiDOevkw+I1YIXjeV5KObyR8JMZXipXs 1+qyNkfYU1Xyd3oqvBRGu/VvmltLX7kPc0xlAYaBiHG0bksNLlc= -----END CERTIFICATE-----Generated at Sun Jun 14 04:45:20 2026 by rpki-client