$ rpki-client -vvf rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft File: 633520AD134E7E67CBB832AE9339B6F7EB07D358.mft (raw, json) Hash identifier: UaNKGe2w0AvSBF6LY11Hvwkr3VoZxE2Lg936gM+NQos= Subject key identifier: 70:47:35:09:CC:2F:3D:3A:F7:09:25:9C:C0:9C:5F:6D:5E:94:7C:10 Authority key identifier: 63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 Certificate issuer: /CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Certificate serial: 483BD732CFA8F118F4B8B7583FD92C457924582F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:39:44 +0000 Manifest this update: Wed 17 Jun 2026 05:34:44 +0000 Manifest next update: Thu 18 Jun 2026 06:55:44 +0000 Files and hashes: 1: 633520AD134E7E67CBB832AE9339B6F7EB07D358.crl (hash: pHqze83e1Ulu6uF2R7Yvk+Oy+/gLOPL06krJyL0EVws=) 2: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: Jg32b0/22RaThrPVItjxadGotzX77G74NzWz3XkVIKw=) 3: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: 5VtG2vjJ8J2at6i5HmvxthdfCCKtz2QyHtIuqxm6OBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:3b:d7:32:cf:a8:f1:18:f4:b8:b7:58:3f:d9:2c:45:79:24:58:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633520AD134E7E67CBB832AE9339B6F7EB07D358 Validity Not Before: Jun 17 05:34:44 2026 GMT Not After : Jun 18 06:55:44 2026 GMT Subject: CN=70473509CC2F3D3AF709259CC09C5F6D5E947C10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:00:7b:a7:66:e7:b8:b3:71:05:a7:90:2e: 39:41:63:9b:1f:b3:fc:7b:bb:e3:c3:cf:03:13:7d: cd:51:0c:50:e4:26:14:a5:78:2b:83:1c:83:f0:66: 65:9b:b2:42:45:b6:a7:d6:96:5b:cb:21:d5:ea:a9: bc:11:b1:42:f6:d2:fe:39:59:c6:8d:72:65:50:50: c6:de:ec:8f:ba:5b:bd:ca:ca:7a:c9:12:5c:cb:b8: 5c:14:9e:06:a3:4b:4e:03:65:d8:21:d6:de:2b:32: 69:98:bf:06:a0:a8:17:2d:6f:f8:a5:c1:4e:40:9f: 0b:62:4f:1e:02:17:a3:f8:00:d3:62:81:0c:a0:a5: 2e:f6:f3:10:9b:b5:88:10:c3:01:b6:9e:1e:b4:0a: e7:c6:52:31:38:e4:1f:b7:5b:d4:08:40:c7:13:7f: c1:21:84:34:75:95:b7:6b:92:5c:43:f6:9f:6a:81: a7:ce:7b:b1:f7:3f:6e:d3:d7:43:6d:f8:88:21:87: bf:92:c6:dd:9a:67:ca:04:39:00:a1:81:2c:c7:ca: 91:d9:28:19:23:49:c0:df:63:a3:5c:1b:5a:4c:27: 77:8d:e9:94:4a:e0:b3:48:15:20:27:55:79:ad:de: f2:8c:98:98:04:02:b2:5e:49:a6:e0:ae:db:3c:53: 6d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:47:35:09:CC:2F:3D:3A:F7:09:25:9C:C0:9C:5F:6D:5E:94:7C:10 X509v3 Authority Key Identifier: keyid:63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:86:3f:97:f0:e4:22:97:c3:b1:c0:7a:53:39:c0:62:2f:a4: b4:0b:d9:d7:0c:ee:99:bd:6a:2a:39:3f:76:7b:41:15:75:f0: b6:5d:65:b7:82:58:3a:1d:72:3d:28:50:ec:ab:94:29:44:40: f5:bc:61:19:bd:00:fa:5e:d1:80:1e:16:52:47:8b:b1:d9:2f: 46:d6:80:7e:81:fc:d9:55:8c:41:4b:1e:28:6f:f4:93:91:fa: 4a:d3:68:74:62:d3:a3:49:47:05:f5:b3:02:fb:57:35:e0:67: b7:46:25:f5:19:b0:3c:77:46:4b:5c:bc:19:43:66:13:47:c0: 5b:69:dc:78:59:1f:59:08:78:65:f2:37:19:5d:7a:36:12:99: 7c:5c:35:1a:42:39:c8:9b:a2:3b:46:0f:6e:59:e9:94:e3:80: 51:d9:68:c6:37:cc:15:ab:48:29:5b:3d:6a:53:20:61:30:86: fb:f1:04:2b:db:9f:bd:b7:d5:da:89:56:4a:ca:ff:1b:9c:a0: b0:b8:95:25:28:de:40:0b:4e:33:4b:9b:a7:66:32:99:9d:a8: a9:b7:80:8f:6a:77:d5:38:87:9f:a4:86:5a:07:01:44:4f:46: d4:38:5e:fa:ce:15:a7:7f:ea:8c:7d:64:81:28:db:21:21:76: 2d:11:99:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSDvXMs+o8Rj0uLdYP9ksRXkkWC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdF QjA3RDM1ODAeFw0yNjA2MTcwNTM0NDRaFw0yNjA2MTgwNjU1NDRaMDMxMTAvBgNV BAMTKDcwNDczNTA5Q0MyRjNEM0FGNzA5MjU5Q0MwOUM1RjZENUU5NDdDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vgB7p2bnuLNxBaeQLjlBY5sf s/x7u+PDzwMTfc1RDFDkJhSleCuDHIPwZmWbskJFtqfWllvLIdXqqbwRsUL20v45 WcaNcmVQUMbe7I+6W73KynrJElzLuFwUngajS04DZdgh1t4rMmmYvwagqBctb/il wU5AnwtiTx4CF6P4ANNigQygpS728xCbtYgQwwG2nh60CufGUjE45B+3W9QIQMcT f8EhhDR1lbdrklxD9p9qgafOe7H3P27T10Nt+Ighh7+Sxt2aZ8oEOQChgSzHypHZ KBkjScDfY6NcG1pMJ3eN6ZRK4LNIFSAnVXmt3vKMmJgEArJeSabgrts8U23HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcEc1CcwvPTr3CSWcwJxfbV6UfBAwHwYDVR0j BBgwFoAUYzUgrRNOfmfLuDKukzm29+sH01gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5MGMzN2UtMjY1NS00MmIxLWJhZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQx MzRFN0U2N0NCQjgzMkFFOTMzOUI2RjdFQjA3RDM1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzM1MjBBRDEzNEU3RTY3Q0JCODMyQUU5MzM5QjZGN0VCMDdE MzU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvNjMzNTIwQUQxMzRFN0U2N0NCQjgzMkFFOTMzOUI2 RjdFQjA3RDM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqGP5fw5CKXw7HAelM5wGIvpLQL2dcM7pm9 aio5P3Z7QRV18LZdZbeCWDodcj0oUOyrlClEQPW8YRm9APpe0YAeFlJHi7HZL0bW gH6B/NlVjEFLHihv9JOR+krTaHRi06NJRwX1swL7VzXgZ7dGJfUZsDx3RktcvBlD ZhNHwFtp3HhZH1kIeGXyNxldejYSmXxcNRpCOcibojtGD25Z6ZTjgFHZaMY3zBWr SClbPWpTIGEwhvvxBCvbn7231dqJVkrK/xucoLC4lSUo3kALTjNLm6dmMpmdqKm3 gI9qd9U4h5+khloHAURPRtQ4XvrOFad/6ox9ZIEo2yEhdi0RmRE= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:17 2026 by rpki-client