$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft File: F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft (raw, json) Hash identifier: Im6x76a5OUkjxemzZ/I2OnrqtcXc18v3h1/H7Lv2r38= Subject key identifier: 3C:79:15:EB:74:B9:EE:2B:14:25:AA:B4:7E:4D:71:92:7A:15:75:7B Authority key identifier: F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA Certificate issuer: /CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA Certificate serial: 0229B9721E3C5C3100A422DA5E272A6A596A8DB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 21:55:40 +0000 Manifest this update: Sat 13 Jun 2026 21:50:40 +0000 Manifest next update: Sun 14 Jun 2026 22:37:40 +0000 Files and hashes: 1: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: L3cIXraAYD+X61M80u3EN1YnS4lFY60of97apaWfA78=) 2: F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl (hash: 8XjO+yvDJy6ojamxUkYeI0vZMRteTq8FcqBNlScCBKk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:29:b9:72:1e:3c:5c:31:00:a4:22:da:5e:27:2a:6a:59:6a:8d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA Validity Not Before: Jun 13 21:50:40 2026 GMT Not After : Jun 14 22:37:40 2026 GMT Subject: CN=3C7915EB74B9EE2B1425AAB47E4D71927A15757B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:e8:96:ee:56:46:d4:88:6d:e4:97:d5:6d: e0:f4:72:36:46:f7:eb:eb:60:93:a2:4c:5e:d7:e8: 48:c5:e5:5d:12:5e:07:7d:0c:0a:f0:e6:83:4a:66: 24:59:db:6a:6f:cf:59:c0:8e:6b:cd:25:9b:c4:8b: 49:1a:97:a4:8f:9e:d1:b6:45:f2:a9:d2:e5:dc:bd: 14:f1:a0:d8:fc:fb:08:7e:72:df:e0:01:14:ea:49: ee:65:9d:2c:8f:b9:45:1a:7c:60:37:72:ec:9b:0e: d9:a5:74:f3:05:65:06:77:52:02:ac:e7:c6:00:f2: d7:5a:ba:a5:53:4e:cd:f1:6b:18:b1:53:6f:65:62: 30:65:19:6c:0f:31:b4:ad:07:aa:54:a2:d7:6a:37: f1:3d:5b:9d:f8:53:0a:b4:53:f4:6d:73:1c:a6:27: 3a:1c:55:e4:e0:c0:3a:8f:81:6d:77:b4:2a:15:d4: 8d:f7:11:d6:b6:3e:4a:32:de:8f:7d:10:63:0a:4d: f0:f9:33:c8:c6:3c:14:a0:97:88:bb:e9:61:6b:70: b5:0b:a4:55:e5:f5:00:a2:5a:75:15:7c:1a:7c:65: 87:41:e3:ca:b4:10:6c:85:a5:66:de:db:04:f6:ad: f5:68:da:5c:d7:38:f8:37:2b:51:14:c6:88:8a:51: d8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:79:15:EB:74:B9:EE:2B:14:25:AA:B4:7E:4D:71:92:7A:15:75:7B X509v3 Authority Key Identifier: keyid:F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ee:e0:4b:3e:17:5c:10:bd:d7:5a:66:95:98:78:35:6c:aa: 38:56:0c:4b:95:69:c6:46:44:69:eb:29:7a:b5:4d:5b:79:43: 9f:2d:51:c3:3f:0a:37:ce:28:b1:5b:f0:22:5a:ea:f4:c8:e8: be:55:54:fb:7e:d4:95:4b:40:ba:db:4f:73:76:dc:ab:a7:df: c0:04:76:af:a6:83:da:07:e6:92:1a:ee:69:5b:a1:63:ce:f6: da:3a:93:ea:88:f8:41:bb:91:d2:6f:74:e1:af:1e:2b:2c:71: 9e:39:1d:25:46:7d:79:1e:53:27:88:d2:a1:b5:a6:fb:a0:67: 9c:fe:2d:b3:07:1d:90:5d:a1:d0:0f:00:0f:7e:94:8c:b1:bb: 85:db:ce:cb:99:66:c1:7b:bb:d5:4c:36:47:fa:b2:d7:61:c1: 16:2a:8e:69:0c:c9:39:58:0e:60:ea:ac:53:c7:87:a6:db:5e: 73:af:e4:50:a8:7b:1f:8b:4f:a2:6c:99:f8:dd:c4:97:94:84: 82:a8:1c:da:d9:1e:2e:44:8e:db:13:5b:fc:c1:c2:c7:44:02: 33:06:02:3c:4e:d7:cb:44:9d:40:7a:62:0f:e1:21:5f:db:45: 68:b7:52:1f:82:e6:27:2b:75:12:7b:4f:0b:f9:02:c0:19:92: 36:56:cf:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAim5ch48XDEApCLaXicqallqjbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQzMTAzNzUyQTQ2ODc2QzI3NDdFOTRFMEYzQzRGN0Y4 QUU3RDFFQTAeFw0yNjA2MTMyMTUwNDBaFw0yNjA2MTQyMjM3NDBaMDMxMTAvBgNV BAMTKDNDNzkxNUVCNzRCOUVFMkIxNDI1QUFCNDdFNEQ3MTkyN0ExNTc1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0OiW7lZG1Iht5JfVbeD0cjZG 9+vrYJOiTF7X6EjF5V0SXgd9DArw5oNKZiRZ22pvz1nAjmvNJZvEi0kal6SPntG2 RfKp0uXcvRTxoNj8+wh+ct/gARTqSe5lnSyPuUUafGA3cuybDtmldPMFZQZ3UgKs 58YA8tdauqVTTs3xaxixU29lYjBlGWwPMbStB6pUotdqN/E9W534Uwq0U/Rtcxym JzocVeTgwDqPgW13tCoV1I33Eda2Pkoy3o99EGMKTfD5M8jGPBSgl4i76WFrcLUL pFXl9QCiWnUVfBp8ZYdB48q0EGyFpWbe2wT2rfVo2lzXOPg3K1EUxoiKUdj7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPHkV63S57isUJaq0fk1xknoVdXswHwYDVR0j BBgwFoAU9DEDdSpGh2wnR+lODzxPf4rn0eowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThhOTIzN2EtNzI2Yy00YzE5LTliNGUtN2I5NGIxNDI0YzRiLzAvRjQzMTAzNzUy QTQ2ODc2QzI3NDdFOTRFMEYzQzRGN0Y4QUU3RDFFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNDMxMDM3NTJBNDY4NzZDMjc0N0U5NEUwRjNDNEY3RjhBRTdE MUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRjQzMTAzNzUyQTQ2ODc2QzI3NDdFOTRFMEYzQzRG N0Y4QUU3RDFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGju4Es+F1wQvddaZpWYeDVsqjhWDEuVacZG RGnrKXq1TVt5Q58tUcM/CjfOKLFb8CJa6vTI6L5VVPt+1JVLQLrbT3N23Kun38AE dq+mg9oH5pIa7mlboWPO9to6k+qI+EG7kdJvdOGvHisscZ45HSVGfXkeUyeI0qG1 pvugZ5z+LbMHHZBdodAPAA9+lIyxu4XbzsuZZsF7u9VMNkf6stdhwRYqjmkMyTlY DmDqrFPHh6bbXnOv5FCoex+LT6JsmfjdxJeUhIKoHNrZHi5EjtsTW/zBwsdEAjMG AjxO18tEnUB6Yg/hIV/bRWi3Uh+C5icrdRJ7Twv5AsAZkjZWz2o= -----END CERTIFICATE-----Generated at Sun Jun 14 02:22:56 2026 by rpki-client