$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft File: D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft (raw, json) Hash identifier: CDUCXsyz7t6zN8a7RVFt459qsB0kHprrRPhyFqpDnAg= Subject key identifier: E1:F3:E7:F7:39:CE:44:BC:24:86:93:BA:52:D3:E6:07:B7:9E:35:DD Authority key identifier: D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA Certificate issuer: /CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA Certificate serial: 1DA671C68AABE3DDA6CA8896CB4B19054F17CCA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 06:16:33 +0000 Manifest this update: Sat 13 Jun 2026 06:11:33 +0000 Manifest next update: Sun 14 Jun 2026 09:47:33 +0000 Files and hashes: 1: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: d3+XsStuI4V6Oj2xnH0hFfx5wuWKXEgPdu/mNqcOqsI=) 2: D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl (hash: ECwWuly0ECZW+IbFsF72bCglypzrHwAqB8HTaerLbhE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a6:71:c6:8a:ab:e3:dd:a6:ca:88:96:cb:4b:19:05:4f:17:cc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA Validity Not Before: Jun 13 06:11:33 2026 GMT Not After : Jun 14 09:47:33 2026 GMT Subject: CN=E1F3E7F739CE44BC248693BA52D3E607B79E35DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:20:b3:97:6b:92:0b:13:cc:e4:e8:9b:67: 7d:d7:c4:7a:7d:a7:77:37:14:53:78:3b:aa:98:dc: d1:fc:6b:97:cb:34:9b:d6:76:39:f6:15:bd:9f:7f: 9b:ca:48:85:b0:d5:45:f9:ce:e9:14:b0:83:26:18: 9e:be:5b:38:28:7f:46:fe:78:56:8f:53:30:7a:4e: c6:e9:71:63:7e:7b:89:e6:1e:46:13:59:8c:19:f6: fd:65:5a:f8:22:a9:2b:6b:18:06:47:4f:f1:0b:25: 9b:8a:36:84:73:28:8b:41:69:cf:16:1a:70:99:f5: 33:ae:a8:a1:11:88:d0:4d:c7:be:bd:37:4c:92:d2: 33:75:b2:d0:c8:e7:c7:ed:1d:7d:ed:d5:5a:bd:c3: 15:af:7f:f5:35:24:2a:71:c1:55:74:d9:5b:ac:c8: bb:da:5a:7e:32:82:f3:e8:9e:75:67:16:98:cb:b9: 17:9d:ed:22:27:f4:9a:c0:68:07:fe:b2:15:db:90: 45:0d:82:72:b7:50:c8:82:74:58:9d:bb:a8:26:02: f8:88:0f:fa:7b:b2:ae:14:4d:75:91:e4:94:73:51: f4:de:4c:b8:8a:70:15:8a:bf:40:5b:f2:61:14:9a: 44:02:09:62:6d:fe:f8:de:ca:71:13:93:66:ab:c8: 2b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F3:E7:F7:39:CE:44:BC:24:86:93:BA:52:D3:E6:07:B7:9E:35:DD X509v3 Authority Key Identifier: keyid:D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:53:3a:81:b8:a2:c0:f5:d8:41:dc:00:32:4d:47:0f:16:1f: ae:8c:2c:91:fb:7d:45:b5:29:0d:9c:76:8b:e9:20:07:39:8c: 5f:8f:e2:59:87:b7:ee:df:bc:6c:50:3d:9b:ef:44:f4:74:eb: 6b:46:02:d6:6d:35:1f:86:46:b2:8b:56:57:7d:7c:69:38:5e: f7:e3:0e:67:1f:32:50:9e:d6:9b:05:a7:b8:57:04:83:f1:85: 38:bc:b6:2c:f8:e0:39:e0:32:6d:8a:65:9d:0c:6a:29:2d:5d: d4:e6:a6:f8:f7:5f:bd:b2:76:76:f1:e3:42:5c:2e:94:c6:c2: 29:02:36:ac:19:d4:5e:2c:92:b0:31:3e:39:4d:14:d9:86:a4: 9c:80:70:26:36:3e:f9:1f:b6:f2:c2:66:e6:40:c7:90:a6:17: 68:6f:e4:5e:60:10:31:18:c1:db:2c:6a:c4:6f:21:2a:81:d8: 00:17:58:68:ad:fe:90:3b:46:73:36:f7:9a:9d:1d:16:20:32: cb:20:e2:c0:e7:aa:59:d5:01:d1:4e:41:8b:18:b5:14:e7:d3: 7c:76:3b:ca:3b:f0:08:4a:56:f0:cc:30:4d:41:8f:8a:5b:e2: 79:c4:21:ba:d1:67:55:9b:3a:e0:ea:7e:a2:1e:4a:9d:04:92: 88:95:3e:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHaZxxoqr492myoiWy0sZBU8XzKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNEMUE0QUE0ODUyNUE1QzgzNTI1RUFBNTM3RTQ5RkUy QUY0REZGQTAeFw0yNjA2MTMwNjExMzNaFw0yNjA2MTQwOTQ3MzNaMDMxMTAvBgNV BAMTKEUxRjNFN0Y3MzlDRTQ0QkMyNDg2OTNCQTUyRDNFNjA3Qjc5RTM1REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bCCzl2uSCxPM5OibZ33XxHp9 p3c3FFN4O6qY3NH8a5fLNJvWdjn2Fb2ff5vKSIWw1UX5zukUsIMmGJ6+Wzgof0b+ eFaPUzB6TsbpcWN+e4nmHkYTWYwZ9v1lWvgiqStrGAZHT/ELJZuKNoRzKItBac8W GnCZ9TOuqKERiNBNx769N0yS0jN1stDI58ftHX3t1Vq9wxWvf/U1JCpxwVV02Vus yLvaWn4ygvPonnVnFpjLuRed7SIn9JrAaAf+shXbkEUNgnK3UMiCdFidu6gmAviI D/p7sq4UTXWR5JRzUfTeTLiKcBWKv0Bb8mEUmkQCCWJt/vjeynETk2aryCvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4fPn9znORLwkhpO6UtPmB7eeNd0wHwYDVR0j BBgwFoAU09GkqkhSWlyDUl6qU35J/ir03/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFjYjJlOGUtYTFhMi00Y2EwLTgwYjAtMjI1NTE4ZmZhZTE0LzAvRDNEMUE0QUE0 ODUyNUE1QzgzNTI1RUFBNTM3RTQ5RkUyQUY0REZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0QxQTRBQTQ4NTI1QTVDODM1MjVFQUE1MzdFNDlGRTJBRjRE RkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRDNEMUE0QUE0ODUyNUE1QzgzNTI1RUFBNTM3RTQ5 RkUyQUY0REZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVTOoG4osD12EHcADJNRw8WH66MLJH7fUW1 KQ2cdovpIAc5jF+P4lmHt+7fvGxQPZvvRPR062tGAtZtNR+GRrKLVld9fGk4Xvfj DmcfMlCe1psFp7hXBIPxhTi8tiz44DngMm2KZZ0MaiktXdTmpvj3X72ydnbx40Jc LpTGwikCNqwZ1F4skrAxPjlNFNmGpJyAcCY2PvkftvLCZuZAx5CmF2hv5F5gEDEY wdssasRvISqB2AAXWGit/pA7RnM295qdHRYgMssg4sDnqlnVAdFOQYsYtRTn03x2 O8o78AhKVvDMME1Bj4pb4nnEIbrRZ1WbOuDqfqIeSp0EkoiVPgM= -----END CERTIFICATE-----Generated at Sat Jun 13 22:27:24 2026 by rpki-client