$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft File: D21FEA1A58BBE03288B8857877AB42210C1B816B.mft (raw, json) Hash identifier: /Zc3Yx240oHxhCMnEepJ+XM+HILdVfiiG0Yqbt3hawc= Subject key identifier: 6B:0B:96:F3:09:92:8E:B0:C8:56:47:78:37:66:8A:DF:9A:76:A7:E2 Authority key identifier: D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B Certificate issuer: /CN=D21FEA1A58BBE03288B8857877AB42210C1B816B Certificate serial: 27C9AAA175C784D1B397C3FED585229107528CEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:43:37 +0000 Manifest this update: Wed 17 Jun 2026 04:38:37 +0000 Manifest next update: Thu 18 Jun 2026 07:30:37 +0000 Files and hashes: 1: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: n/NFSto6DR1M2MbEoIzv13Er2v00d7K3BFa5q9qEbBw=) 2: D21FEA1A58BBE03288B8857877AB42210C1B816B.crl (hash: Fmy+UkkF34XQjefg7f/uvvK1FfuVJ6+KkJFMcnWB8Lk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c9:aa:a1:75:c7:84:d1:b3:97:c3:fe:d5:85:22:91:07:52:8c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21FEA1A58BBE03288B8857877AB42210C1B816B Validity Not Before: Jun 17 04:38:37 2026 GMT Not After : Jun 18 07:30:37 2026 GMT Subject: CN=6B0B96F309928EB0C856477837668ADF9A76A7E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:11:0c:28:ee:99:2c:89:d6:9e:48:76:f3: 05:22:28:23:4e:54:8d:c5:83:71:e6:15:c6:7d:b7: eb:76:98:b7:78:b0:23:c5:e3:97:7c:d4:80:18:2a: 4e:b1:5c:0b:49:2b:b2:27:f2:04:fa:eb:6d:7b:fe: 36:ee:ad:53:53:3b:b3:26:25:6b:1f:b0:11:c0:c1: aa:b0:5b:59:a6:2d:9b:42:09:4f:b0:37:8c:85:d2: e4:34:43:60:4c:cc:c4:a9:a6:83:52:88:17:a7:79: e1:28:59:c5:fb:7a:a9:fb:be:e1:8d:6e:1b:b2:e8: 7b:7a:eb:a8:85:5e:91:25:a5:c2:55:28:40:12:a7: 24:67:34:06:82:a2:68:28:53:8a:95:e1:3d:20:0e: c4:19:3d:15:24:e9:58:1e:81:90:92:9c:64:d0:99: 96:2a:9b:ed:00:87:e6:e3:d5:80:39:a4:66:56:9a: 38:cd:b2:34:b6:5c:a5:1c:b5:d5:39:d3:a1:be:e5: 4b:3b:62:38:e7:36:c0:66:d4:15:7f:5c:b0:80:7e: 72:36:cb:19:85:96:e5:bf:bd:07:77:38:23:f2:31: 76:08:f0:2b:c8:d2:5b:fd:93:a3:05:dc:a6:4d:00: 15:ae:01:45:06:a9:86:6b:45:66:d8:35:18:c5:5a: 25:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0B:96:F3:09:92:8E:B0:C8:56:47:78:37:66:8A:DF:9A:76:A7:E2 X509v3 Authority Key Identifier: keyid:D2:1F:EA:1A:58:BB:E0:32:88:B8:85:78:77:AB:42:21:0C:1B:81:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D21FEA1A58BBE03288B8857877AB42210C1B816B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/D21FEA1A58BBE03288B8857877AB42210C1B816B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:be:96:eb:b5:b6:c9:82:77:2a:0f:3c:a9:29:63:df:7f:3e: a6:85:14:20:8b:f2:fa:9e:28:7b:5e:ae:fd:e3:a4:d1:c9:e5: e4:bd:cd:1e:7c:89:47:30:cf:d9:50:4b:f0:23:15:89:72:bd: b3:11:2f:3b:bf:be:8c:62:1e:4a:77:4f:a1:fe:a5:b7:b7:2c: e0:78:c7:31:84:15:d0:c7:c2:9c:ed:d7:39:81:3a:0e:6a:a6: 2e:74:21:58:83:d2:d4:d5:77:1f:90:1b:fb:b7:e6:f8:5b:be: 40:01:3f:e1:79:67:fd:ba:32:f0:1e:68:9b:a9:61:d2:9e:32: 18:ff:16:8d:63:22:cd:10:8e:0e:7d:e5:34:2b:0d:61:fb:b0: bd:18:8b:b5:74:45:b1:ad:5f:72:16:16:2a:db:6c:56:45:a3: 3c:a8:e9:ca:01:bd:ef:ec:4b:e7:34:61:12:6b:9f:8e:f3:db: e5:f9:b5:c8:5e:a9:3d:dd:d1:dc:f2:a0:59:2d:49:8f:23:3b: 66:9e:30:e8:7e:27:2b:63:b5:1a:d6:3e:d8:22:eb:ea:dc:dd: 2a:26:f2:f6:17:4d:a5:4b:4a:b8:b0:a2:13:2e:db:da:3d:df: 0f:05:8f:24:db:81:f0:66:66:99:7e:52:ad:93:59:f1:57:fa: a1:23:f9:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8mqoXXHhNGzl8P+1YUikQdSjOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxRkVBMUE1OEJCRTAzMjg4Qjg4NTc4NzdBQjQyMjEw QzFCODE2QjAeFw0yNjA2MTcwNDM4MzdaFw0yNjA2MTgwNzMwMzdaMDMxMTAvBgNV BAMTKDZCMEI5NkYzMDk5MjhFQjBDODU2NDc3ODM3NjY4QURGOUE3NkE3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5khEMKO6ZLInWnkh28wUiKCNO VI3Fg3HmFcZ9t+t2mLd4sCPF45d81IAYKk6xXAtJK7In8gT66217/jburVNTO7Mm JWsfsBHAwaqwW1mmLZtCCU+wN4yF0uQ0Q2BMzMSppoNSiBeneeEoWcX7eqn7vuGN bhuy6Ht666iFXpElpcJVKEASpyRnNAaComgoU4qV4T0gDsQZPRUk6VgegZCSnGTQ mZYqm+0Ah+bj1YA5pGZWmjjNsjS2XKUctdU506G+5Us7YjjnNsBm1BV/XLCAfnI2 yxmFluW/vQd3OCPyMXYI8CvI0lv9k6MF3KZNABWuAUUGqYZrRWbYNRjFWiXDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUawuW8wmSjrDIVkd4N2aK35p2p+IwHwYDVR0j BBgwFoAU0h/qGli74DKIuIV4d6tCIQwbgWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNkYWUwYTUtYjRmNi00ZTA4LThiZWItNjNlYmUwODUzZGYzLzAvRDIxRkVBMUE1 OEJCRTAzMjg4Qjg4NTc4NzdBQjQyMjEwQzFCODE2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjFGRUExQTU4QkJFMDMyODhCODg1Nzg3N0FCNDIyMTBDMUI4 MTZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvRDIxRkVBMUE1OEJCRTAzMjg4Qjg4NTc4NzdBQjQy MjEwQzFCODE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEy+luu1tsmCdyoPPKkpY99/PqaFFCCL8vqe KHterv3jpNHJ5eS9zR58iUcwz9lQS/AjFYlyvbMRLzu/voxiHkp3T6H+pbe3LOB4 xzGEFdDHwpzt1zmBOg5qpi50IViD0tTVdx+QG/u35vhbvkABP+F5Z/26MvAeaJup YdKeMhj/Fo1jIs0Qjg595TQrDWH7sL0Yi7V0RbGtX3IWFirbbFZFozyo6coBve/s S+c0YRJrn47z2+X5tcheqT3d0dzyoFktSY8jO2aeMOh+JytjtRrWPtgi6+rc3Som 8vYXTaVLSriwohMu29o93w8FjyTbgfBmZpl+Uq2TWfFX+qEj+TM= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:19 2026 by rpki-client