$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft File: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft (raw, json) Hash identifier: 9TsF4gMyW0oMkCbjLYM99PPi0c28OKJozoWZghB4pEI= Subject key identifier: 47:9E:DF:FC:EF:CC:67:47:78:75:8B:5A:82:69:7C:04:9D:60:AC:0D Authority key identifier: CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 Certificate issuer: /CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Certificate serial: 770C9E72C2CD151A16A23953D35FDEA263E514C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:54:02 +0000 Manifest this update: Wed 17 Jun 2026 00:49:02 +0000 Manifest next update: Thu 18 Jun 2026 02:14:02 +0000 Files and hashes: 1: CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl (hash: tZZlguf80Lt+17QddnYPGlSvMQBsFjpcn85V8BO4n0k=) 2: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: yc9l1FWLsdkyL80KmG/CENv1nMl40+rlvUGHbaIRcrU=) 3: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: bbQqob1JTbWw2rvNr6s3TBx3HaklMvpVDZzpBLfCECs=) 4: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: wOpjCYu2B/2dvfL2/p92TM51IsDnzUPICTzMvcgVUFY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:0c:9e:72:c2:cd:15:1a:16:a2:39:53:d3:5f:de:a2:63:e5:14:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1 Validity Not Before: Jun 17 00:49:02 2026 GMT Not After : Jun 18 02:14:02 2026 GMT Subject: CN=479EDFFCEFCC674778758B5A82697C049D60AC0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c0:23:7a:c9:ff:74:ed:ad:45:e2:ae:0f:bd: 10:06:15:f1:5d:cd:77:6c:c7:f4:e1:e2:93:0c:33: 19:31:e7:df:76:a3:5a:17:6d:40:df:af:79:a6:c2: b5:54:87:76:c5:57:d5:d8:c2:5d:19:2f:1c:e0:90: 5d:f6:df:5d:c3:b0:de:7e:40:59:23:14:e1:c9:a8: 7b:52:2a:c6:f7:c1:60:1f:c0:f9:ee:54:4a:29:65: b4:8b:38:9b:0f:d2:d0:91:11:6b:07:53:62:13:a3: a0:ae:66:b2:5b:49:f6:59:d3:06:91:a9:74:86:2c: a4:79:59:f0:e6:e8:9c:71:67:f9:3a:2a:5d:b2:e1: b2:75:ce:a4:28:0b:e1:bd:fd:3f:26:54:08:36:e8: b6:80:64:18:49:53:82:03:82:88:92:f9:4a:20:dd: 22:5c:1d:b3:2e:7a:07:24:9f:b0:87:33:c9:9f:ca: 27:c3:80:48:c7:ff:13:02:cb:e0:6b:81:4f:38:ea: c1:e0:2f:f5:c3:8a:0d:ca:00:b4:d5:39:07:f4:40: 21:c7:c5:d9:bf:d2:84:d0:33:7e:e2:9c:9b:24:ce: f3:37:04:18:20:5a:7b:32:5f:79:d1:9d:17:ec:49: 4e:55:59:95:9d:31:66:72:7a:30:22:24:5b:bf:2d: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9E:DF:FC:EF:CC:67:47:78:75:8B:5A:82:69:7C:04:9D:60:AC:0D X509v3 Authority Key Identifier: keyid:CD:47:4E:79:16:37:1A:E6:AC:CF:87:42:2C:4E:A8:D4:E5:3D:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/CD474E7916371AE6ACCF87422C4EA8D4E53D1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:28:90:e1:d4:e5:11:80:1c:51:84:16:60:d2:8e:0c:61:ce: 3c:88:41:fd:24:9c:f2:5d:01:35:43:de:eb:c1:09:85:93:94: b6:0d:61:b7:8c:55:82:b3:9a:21:c0:14:99:84:3d:6e:88:08: 0f:40:cc:09:a0:d5:b2:0b:76:7e:cf:62:b9:f8:70:5c:e7:0f: 3e:08:84:21:fe:43:b7:0f:44:d0:10:7d:21:eb:38:6d:c9:48: ce:ea:b1:cd:11:d9:2f:c0:24:4b:97:b9:17:10:fd:6f:8e:e5: 76:e2:aa:bf:51:f0:e9:d8:33:23:25:3a:3b:d5:a1:4b:12:b9: bb:87:af:94:23:e3:a2:93:de:c6:9f:63:5c:ce:e1:dc:35:aa: 62:09:bf:78:f7:33:da:3d:18:67:8b:d0:8b:60:9b:0d:10:2e: 15:5a:a3:d2:69:66:eb:bd:60:be:0f:60:71:24:c0:eb:63:82: c8:44:0e:75:84:e3:75:a9:fd:68:20:e7:b2:81:bf:80:9c:5f: c1:78:13:e4:41:dd:da:fd:c2:40:0c:44:99:37:f3:0c:9d:7d: db:69:59:c9:8e:5b:f9:0e:4f:3a:58:8f:3d:6b:6d:79:d7:96: 75:59:33:90:b6:f1:b2:3c:25:b7:c2:a6:9e:31:45:b5:50:ec: 87:f5:bb:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwyecsLNFRoWojlT01/eomPlFMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRF NTNEMUVEMTAeFw0yNjA2MTcwMDQ5MDJaFw0yNjA2MTgwMjE0MDJaMDMxMTAvBgNV BAMTKDQ3OUVERkZDRUZDQzY3NDc3ODc1OEI1QTgyNjk3QzA0OUQ2MEFDMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1wCN6yf907a1F4q4PvRAGFfFd zXdsx/Th4pMMMxkx5992o1oXbUDfr3mmwrVUh3bFV9XYwl0ZLxzgkF32313DsN5+ QFkjFOHJqHtSKsb3wWAfwPnuVEopZbSLOJsP0tCREWsHU2ITo6CuZrJbSfZZ0waR qXSGLKR5WfDm6JxxZ/k6Kl2y4bJ1zqQoC+G9/T8mVAg26LaAZBhJU4IDgoiS+Uog 3SJcHbMuegckn7CHM8mfyifDgEjH/xMCy+BrgU846sHgL/XDig3KALTVOQf0QCHH xdm/0oTQM37inJskzvM3BBggWnsyX3nRnRfsSU5VWZWdMWZyejAiJFu/LaqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR57f/O/MZ0d4dYtagml8BJ1grA0wHwYDVR0j BBgwFoAUzUdOeRY3Guasz4dCLE6o1OU9HtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThkZTk0NjMtNjhhNy00NjJkLTk0MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkx NjM3MUFFNkFDQ0Y4NzQyMkM0RUE4RDRFNTNEMUVEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDQ3NEU3OTE2MzcxQUU2QUNDRjg3NDIyQzRFQThENEU1M0Qx RUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvQ0Q0NzRFNzkxNjM3MUFFNkFDQ0Y4NzQyMkM0RUE4 RDRFNTNEMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcokOHU5RGAHFGEFmDSjgxhzjyIQf0knPJd ATVD3uvBCYWTlLYNYbeMVYKzmiHAFJmEPW6ICA9AzAmg1bILdn7PYrn4cFznDz4I hCH+Q7cPRNAQfSHrOG3JSM7qsc0R2S/AJEuXuRcQ/W+O5Xbiqr9R8OnYMyMlOjvV oUsSubuHr5Qj46KT3safY1zO4dw1qmIJv3j3M9o9GGeL0Itgmw0QLhVao9JpZuu9 YL4PYHEkwOtjgshEDnWE43Wp/Wgg57KBv4CcX8F4E+RB3dr9wkAMRJk38wydfdtp WcmOW/kOTzpYjz1rbXnXlnVZM5C28bI8JbfCpp4xRbVQ7If1u8c= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:45 2026 by rpki-client