$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft File: D931809BED9AF438E358376B71B803D5CE61B2F5.mft (raw, json) Hash identifier: K2kIPfOKPvTkRXGo5urpYwuUu5nhP8t0ajxgwcxyp1M= Subject key identifier: 8C:1B:67:F4:3A:95:B6:AF:63:82:CA:ED:0F:40:C7:EF:77:8E:67:A0 Authority key identifier: D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5 Certificate issuer: /CN=D931809BED9AF438E358376B71B803D5CE61B2F5 Certificate serial: 53CA921AC0A16F1683E0C76F2AC15E5195A5A447 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:44:27 +0000 Manifest this update: Tue 16 Jun 2026 16:39:27 +0000 Manifest next update: Wed 17 Jun 2026 19:23:27 +0000 Files and hashes: 1: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: JqEBH5YvRn5xbIFqmvyQg68HK5OM9z3ELY7zjQkgJLI=) 2: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: RKwP+mZy2zIyOi9W+fTg2udU4bmegNaF/ZtZIeSMp7c=) 3: D931809BED9AF438E358376B71B803D5CE61B2F5.crl (hash: wLfu5q0Z/taC08G+eASBD/4kp3SHmLb9uiDiWsb12Xo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ca:92:1a:c0:a1:6f:16:83:e0:c7:6f:2a:c1:5e:51:95:a5:a4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D931809BED9AF438E358376B71B803D5CE61B2F5 Validity Not Before: Jun 16 16:39:27 2026 GMT Not After : Jun 17 19:23:27 2026 GMT Subject: CN=8C1B67F43A95B6AF6382CAED0F40C7EF778E67A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:74:af:eb:59:df:41:b7:99:20:0d:d5:28:5c: 56:c8:7b:6f:70:ba:d7:58:68:d6:a1:8a:47:09:03: 03:10:34:65:3c:7e:ae:0b:4b:0f:43:50:a5:ca:3f: ca:d3:98:56:da:33:bb:4d:1f:b9:0f:57:da:6b:a9: 70:9f:0c:63:01:08:6f:6d:60:88:df:c0:77:0e:39: 92:c6:02:0f:2c:3e:7d:99:24:d6:fc:02:52:0a:a1: 17:1a:b5:48:13:c2:22:69:94:f7:62:bd:8e:44:e3: 6e:4f:23:65:f4:4f:b8:2d:9d:cd:af:4a:9c:94:8a: d4:d4:5f:c9:f1:24:bc:c4:4e:0a:d9:c8:ef:5c:52: 5e:13:1d:03:ae:a5:97:b2:57:f5:28:3d:a5:67:2c: f1:7e:60:a3:f9:49:82:32:aa:00:2d:c4:69:90:b8: 75:e8:bf:68:66:51:53:18:b9:4d:75:55:9b:9e:73: 33:bb:6a:4c:8b:60:ed:a7:56:7e:f4:f8:08:a9:c6: db:b7:21:02:45:76:e9:6d:24:ae:5b:d4:72:63:23: 0b:90:5f:cb:7c:da:32:f8:dc:4c:37:37:a4:da:1e: 61:ea:b8:c2:2b:1c:7a:1a:87:03:a1:fd:76:1a:e0: fd:aa:33:13:2b:71:4f:61:12:ae:07:aa:73:04:67: 3e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1B:67:F4:3A:95:B6:AF:63:82:CA:ED:0F:40:C7:EF:77:8E:67:A0 X509v3 Authority Key Identifier: keyid:D9:31:80:9B:ED:9A:F4:38:E3:58:37:6B:71:B8:03:D5:CE:61:B2:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D931809BED9AF438E358376B71B803D5CE61B2F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/D931809BED9AF438E358376B71B803D5CE61B2F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:19:9a:6b:e8:b7:15:11:e6:da:8d:c4:ca:e3:66:1d:2a:bd: e7:21:73:57:ca:db:8c:00:82:cf:19:a9:7b:3f:a8:76:be:2f: 35:95:64:77:ee:74:96:ee:73:ae:82:14:eb:87:02:26:d6:1d: 56:ac:77:f7:e8:1c:b2:f4:df:70:55:e5:21:b2:d8:87:d6:4e: 6c:25:9a:58:66:bb:a0:7c:86:7c:4e:b9:99:bc:15:12:ba:63: 90:44:d5:71:ea:30:d7:8c:ae:8c:fd:b0:53:45:22:51:6c:ad: 89:93:2f:ea:7c:e3:c8:66:f1:06:e3:f0:7d:3b:2f:a0:86:e2: 66:7f:b8:a0:31:5d:7c:ed:11:58:a1:a1:c9:ed:bd:c5:fb:59: 75:be:ea:65:f9:a1:44:ad:0b:d0:4d:ec:d4:9a:2e:bf:67:36: c9:87:a3:52:5c:14:09:ab:b8:9e:8b:d6:e7:75:04:ef:b0:5d: e0:a4:c7:98:b9:ac:ca:ad:e2:2a:0a:47:85:9d:27:b1:dd:65: bb:47:a8:9c:4c:e2:20:35:88:bf:0b:3f:d7:62:79:63:97:12: 89:d7:b9:c9:4c:a9:74:75:d0:9b:7b:dd:11:98:ca:d6:b5:1c: c1:e7:c9:f2:cd:de:44:61:26:39:46:2f:99:0b:6a:2d:c3:1f: 24:c3:0a:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8qSGsChbxaD4MdvKsFeUZWlpEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkzMTgwOUJFRDlBRjQzOEUzNTgzNzZCNzFCODAzRDVD RTYxQjJGNTAeFw0yNjA2MTYxNjM5MjdaFw0yNjA2MTcxOTIzMjdaMDMxMTAvBgNV BAMTKDhDMUI2N0Y0M0E5NUI2QUY2MzgyQ0FFRDBGNDBDN0VGNzc4RTY3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYdK/rWd9Bt5kgDdUoXFbIe29w utdYaNahikcJAwMQNGU8fq4LSw9DUKXKP8rTmFbaM7tNH7kPV9prqXCfDGMBCG9t YIjfwHcOOZLGAg8sPn2ZJNb8AlIKoRcatUgTwiJplPdivY5E425PI2X0T7gtnc2v SpyUitTUX8nxJLzETgrZyO9cUl4THQOupZeyV/UoPaVnLPF+YKP5SYIyqgAtxGmQ uHXov2hmUVMYuU11VZueczO7akyLYO2nVn70+Aipxtu3IQJFdultJK5b1HJjIwuQ X8t82jL43Ew3N6TaHmHquMIrHHoahwOh/XYa4P2qMxMrcU9hEq4HqnMEZz4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjBtn9DqVtq9jgsrtD0DH73eOZ6AwHwYDVR0j BBgwFoAU2TGAm+2a9DjjWDdrcbgD1c5hsvUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBlMTFmZmMtZTc1YS00YmY0LTg0NDgtYzY4ZTIwMzM1ZWU4LzAvRDkzMTgwOUJF RDlBRjQzOEUzNTgzNzZCNzFCODAzRDVDRTYxQjJGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOTMxODA5QkVEOUFGNDM4RTM1ODM3NkI3MUI4MDNENUNFNjFC MkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvRDkzMTgwOUJFRDlBRjQzOEUzNTgzNzZCNzFCODAz RDVDRTYxQjJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoZmmvotxUR5tqNxMrjZh0qvechc1fK24wA gs8ZqXs/qHa+LzWVZHfudJbuc66CFOuHAibWHVasd/foHLL033BV5SGy2IfWTmwl mlhmu6B8hnxOuZm8FRK6Y5BE1XHqMNeMroz9sFNFIlFsrYmTL+p848hm8Qbj8H07 L6CG4mZ/uKAxXXztEVihocntvcX7WXW+6mX5oUStC9BN7NSaLr9nNsmHo1JcFAmr uJ6L1ud1BO+wXeCkx5i5rMqt4ioKR4WdJ7HdZbtHqJxM4iA1iL8LP9dieWOXEonX uclMqXR10Jt73RGYyta1HMHnyfLN3kRhJjlGL5kLai3DHyTDCnY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:32 2026 by rpki-client