$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft File: DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft (raw, json) Hash identifier: N8Bmw18yW02zJp1eiOF4iJmR90hn1F2DeDqjjihSdqw= Subject key identifier: 9E:8E:2A:7E:B1:55:E2:55:15:E4:0F:16:A4:C9:A1:3D:55:F2:D9:70 Authority key identifier: DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76 Certificate issuer: /CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76 Certificate serial: 7D54DF5857498B4A6822B1D34AAF95202E9757DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:38:26 +0000 Manifest this update: Wed 17 Jun 2026 04:33:26 +0000 Manifest next update: Thu 18 Jun 2026 06:44:26 +0000 Files and hashes: 1: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: hgyoReewnJKW4nr6+Jg49Hdij/Yxck5vrTJyyAU/fpU=) 2: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: CdzPgARwHWVAiNVpWfYHHcwq4khjb1oCYEqwBbuFJZI=) 3: DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl (hash: G8LD0L8jTVEU+TVYMzf6gzteboCtuWF1qisIip2KsxQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:54:df:58:57:49:8b:4a:68:22:b1:d3:4a:af:95:20:2e:97:57:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCAA500E56DF59B6817ADE1D51B5605F52264D76 Validity Not Before: Jun 17 04:33:26 2026 GMT Not After : Jun 18 06:44:26 2026 GMT Subject: CN=9E8E2A7EB155E25515E40F16A4C9A13D55F2D970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:57:63:fe:6d:22:61:86:2d:8a:67:06:97: 27:52:b6:65:bc:75:1c:9e:26:56:c0:d5:69:bb:c1: 0e:90:87:99:c8:94:f2:2a:c3:e2:26:99:9f:22:d6: c6:34:38:bb:2a:0d:5a:fb:f2:db:cc:29:46:a7:44: 34:86:e0:1b:6f:a0:08:ec:a8:40:e9:c4:71:85:c8: db:0b:f5:aa:b7:1a:e2:3d:0e:6f:c1:bf:26:33:3a: fe:08:0c:24:f1:27:95:ae:d7:4a:27:0e:01:cf:19: 5b:a1:30:fb:e0:b0:b5:4d:05:35:b9:21:40:93:be: 70:8e:19:8a:99:06:89:ba:44:b8:15:b2:ce:ff:96: 6b:37:a3:68:77:12:7d:79:92:d9:04:b8:76:d7:b3: 42:93:91:10:23:21:7b:d0:1e:bd:3e:13:9f:e1:2c: c8:53:fc:ed:39:06:31:15:88:1d:7d:a7:1f:4a:99: 72:de:58:72:93:49:3b:68:28:b7:5c:34:df:7f:12: 72:ce:63:86:b0:6d:31:85:c5:4c:b4:1f:87:2f:76: ca:a4:b4:6e:ec:0c:04:ea:a1:a4:8b:a8:6b:ed:31: 3b:c9:a0:87:d9:6b:79:51:85:70:c1:33:ad:a4:60: 44:2a:8b:42:d6:cc:71:d4:2b:c9:fc:49:4b:64:6d: 43:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8E:2A:7E:B1:55:E2:55:15:E4:0F:16:A4:C9:A1:3D:55:F2:D9:70 X509v3 Authority Key Identifier: keyid:DC:AA:50:0E:56:DF:59:B6:81:7A:DE:1D:51:B5:60:5F:52:26:4D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCAA500E56DF59B6817ADE1D51B5605F52264D76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/DCAA500E56DF59B6817ADE1D51B5605F52264D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:11:51:a5:a8:9f:2d:6e:7a:33:67:1d:e7:ba:45:bb:cd:3f: 14:2b:87:97:f6:6d:df:ee:4c:ab:93:9f:91:e7:69:ca:cf:66: 35:7a:77:06:a6:bf:48:d7:e3:d8:61:f6:4f:27:d1:0a:ac:4e: 21:f0:30:05:8a:29:d1:99:68:3e:f1:4b:d6:d3:91:e4:81:5f: e1:0b:8e:05:be:5d:a8:66:4d:74:64:e9:f4:2d:a0:61:a2:24: 09:14:1d:c9:15:03:48:2d:8a:02:97:7b:5c:3f:3c:b7:5a:86: ec:12:ac:5c:8a:68:19:8e:cb:45:79:90:b1:26:b8:a8:62:7c: 73:1a:d7:4d:9f:17:3a:49:88:d0:fa:b9:fd:09:fa:a8:db:4b: 04:ac:91:ae:ba:eb:c0:ed:ea:a5:29:92:8f:d4:c5:72:23:9c: ed:d8:88:15:f3:0f:71:36:b6:82:fa:0b:06:66:27:9f:49:99: a7:b6:16:fd:aa:b5:0e:3d:25:43:9c:a9:26:0c:f5:2e:54:a4: 9f:28:d9:21:22:0b:87:d9:2e:18:06:5f:9e:46:29:10:da:c7: 71:d0:76:3c:31:99:e0:38:bb:65:7a:c2:89:d5:0c:b9:ed:62: fc:c6:75:d0:ea:3f:c4:6e:8b:ee:cc:7b:35:a4:c7:01:d7:ba: 1b:18:57:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfVTfWFdJi0poIrHTSq+VIC6XV90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBQTUwMEU1NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1 MjI2NEQ3NjAeFw0yNjA2MTcwNDMzMjZaFw0yNjA2MTgwNjQ0MjZaMDMxMTAvBgNV BAMTKDlFOEUyQTdFQjE1NUUyNTUxNUU0MEYxNkE0QzlBMTNENTVGMkQ5NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbFdj/m0iYYYtimcGlydStmW8 dRyeJlbA1Wm7wQ6Qh5nIlPIqw+ImmZ8i1sY0OLsqDVr78tvMKUanRDSG4BtvoAjs qEDpxHGFyNsL9aq3GuI9Dm/BvyYzOv4IDCTxJ5Wu10onDgHPGVuhMPvgsLVNBTW5 IUCTvnCOGYqZBom6RLgVss7/lms3o2h3En15ktkEuHbXs0KTkRAjIXvQHr0+E5/h LMhT/O05BjEViB19px9KmXLeWHKTSTtoKLdcNN9/EnLOY4awbTGFxUy0H4cvdsqk tG7sDATqoaSLqGvtMTvJoIfZa3lRhXDBM62kYEQqi0LWzHHUK8n8SUtkbUMJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUno4qfrFV4lUV5A8WpMmhPVXy2XAwHwYDVR0j BBgwFoAU3KpQDlbfWbaBet4dUbVgX1ImTXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMyOTVkZTYtMjA1OC00NmE3LTkzNmItMDUyY2YyZmE5MjBkLzAvRENBQTUwMEU1 NkRGNTlCNjgxN0FERTFENTFCNTYwNUY1MjI2NEQ3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0FBNTAwRTU2REY1OUI2ODE3QURFMUQ1MUI1NjA1RjUyMjY0 RDc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvRENBQTUwMEU1NkRGNTlCNjgxN0FERTFENTFCNTYw NUY1MjI2NEQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgRUaWony1uejNnHee6RbvNPxQrh5f2bd/u TKuTn5HnacrPZjV6dwamv0jX49hh9k8n0QqsTiHwMAWKKdGZaD7xS9bTkeSBX+EL jgW+XahmTXRk6fQtoGGiJAkUHckVA0gtigKXe1w/PLdahuwSrFyKaBmOy0V5kLEm uKhifHMa102fFzpJiND6uf0J+qjbSwSska6668Dt6qUpko/UxXIjnO3YiBXzD3E2 toL6CwZmJ59Jmae2Fv2qtQ49JUOcqSYM9S5UpJ8o2SEiC4fZLhgGX55GKRDax3HQ djwxmeA4u2V6wonVDLntYvzGddDqP8Rui+7MezWkxwHXuhsYV84= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:19 2026 by rpki-client