$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft File: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft (raw, json) Hash identifier: V+BYQ/h7ImAnPJcpQ1FxKIc3cYkCIWiBMEOtfpBMx9w= Subject key identifier: CF:D4:E6:BF:4D:EC:7A:96:C4:70:83:12:D2:66:C4:64:B2:C5:2E:26 Authority key identifier: 00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C Certificate issuer: /CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C Certificate serial: 4145A5F64C3FEDE3DBC983412B2A4FCB79816AAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:18:46 +0000 Manifest this update: Tue 16 Jun 2026 20:13:46 +0000 Manifest next update: Wed 17 Jun 2026 20:31:46 +0000 Files and hashes: 1: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl (hash: AefeCDxx33pTcLTB9pDuA6vI2iJi3JGeddiWBX/oDu4=) 2: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: wNmcHEP7INI2aFk4SmiaXDxMKbebGinF42Oo0vPEfiI=) 3: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: sBUWSQhH/+kN71t/+kxa/DRZ1SSem+XB/ohn5pBy7QU=) 4: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: KYaeVRiuR7REacNL+jOc17uQNgw/wuM1lcqqpw6kOjQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:45:a5:f6:4c:3f:ed:e3:db:c9:83:41:2b:2a:4f:cb:79:81:6a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C Validity Not Before: Jun 16 20:13:46 2026 GMT Not After : Jun 17 20:31:46 2026 GMT Subject: CN=CFD4E6BF4DEC7A96C4708312D266C464B2C52E26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:6e:48:c6:08:4f:7b:2f:b9:57:e1:0e:6e: 88:fc:c2:49:25:07:04:cf:10:6b:41:03:22:36:d9: 11:b3:06:33:7d:2f:64:47:92:89:38:ea:21:3b:a4: b5:aa:ff:f5:8c:f6:b4:6d:ac:27:19:a1:52:8c:74: e3:46:ae:1d:75:06:ea:20:7e:3e:9d:cd:ba:b8:98: 2d:5d:b4:2f:6b:05:59:1d:2f:1a:4c:9c:b0:72:17: 49:65:ce:8b:4c:25:23:94:59:80:2b:3b:af:4d:19: 96:9f:c5:ca:5f:1e:2c:b6:c1:77:59:7f:8b:e9:27: c0:cd:97:c5:e3:81:31:b6:69:99:9a:82:85:47:c7: 99:1f:00:e4:1f:fc:09:c3:5e:f6:c9:20:ae:a4:3b: 64:c2:4d:33:86:21:11:56:3a:13:1d:b1:07:78:51: 9f:d9:d2:c6:35:17:43:86:30:d6:cf:a0:8e:58:ed: 53:f6:42:b7:0f:0b:ff:45:50:e3:72:af:cc:60:df: 20:f5:4d:88:32:1b:9a:8a:67:7b:5e:14:b4:36:0a: d5:43:7e:cd:fd:70:d1:01:59:7b:69:f6:fc:58:6b: f5:9a:cc:f3:65:59:2a:01:f9:4f:46:0a:45:56:7e: 47:f7:9a:81:67:5f:33:fa:c1:de:67:91:7b:bc:29: e7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D4:E6:BF:4D:EC:7A:96:C4:70:83:12:D2:66:C4:64:B2:C5:2E:26 X509v3 Authority Key Identifier: keyid:00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:08:5c:3b:38:df:10:e2:87:42:f5:2a:f5:60:f0:09:f1:4a: 3e:dc:49:b1:53:0a:0b:64:bb:d6:78:d6:fe:67:05:ac:3a:24: 76:4d:d1:f2:45:3f:35:fc:37:70:01:ce:c7:c0:cb:b8:ed:0f: 3c:5c:27:27:05:cd:1c:19:a7:22:92:a9:f3:53:88:66:bc:d5: 50:ea:c2:10:8a:03:f1:6f:b4:11:ba:76:18:f2:ab:14:60:56: 96:43:6b:12:aa:9f:d9:2d:c9:8f:24:2b:4d:73:41:26:d8:8e: 25:cc:df:5b:59:9b:ee:82:ea:39:ba:5f:0f:d6:3b:12:e9:10: 81:65:fb:8d:54:8a:10:1d:9e:52:ee:69:8e:92:57:fb:87:29: 20:b3:79:64:d0:2f:79:26:ee:9c:26:41:3e:c1:c7:90:66:12: 78:a7:de:89:cf:23:f0:09:fc:c1:90:67:b6:78:01:c8:1c:08: d3:80:41:01:f7:bf:fb:9d:76:11:08:88:e9:f7:64:a8:62:e9: 89:76:7a:c5:77:3d:f5:8b:70:1d:f8:d7:5b:58:e4:2f:53:44: c8:c9:af:c0:2b:51:93:a3:b2:7c:40:ff:6f:62:ba:11:32:b5: ce:6b:f1:ac:6d:a5:68:a7:b3:d2:04:ef:92:27:7c:7e:3b:5c: 58:a7:b3:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUWl9kw/7ePbyYNBKypPy3mBaqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwRTdCN0VCRjU0M0YzN0FDRjExMzc1RDI4NDYyQThE Mzg4NEEyQzAeFw0yNjA2MTYyMDEzNDZaFw0yNjA2MTcyMDMxNDZaMDMxMTAvBgNV BAMTKENGRDRFNkJGNERFQzdBOTZDNDcwODMxMkQyNjZDNDY0QjJDNTJFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNG5IxghPey+5V+EOboj8wkkl BwTPEGtBAyI22RGzBjN9L2RHkok46iE7pLWq//WM9rRtrCcZoVKMdONGrh11Buog fj6dzbq4mC1dtC9rBVkdLxpMnLByF0llzotMJSOUWYArO69NGZafxcpfHiy2wXdZ f4vpJ8DNl8XjgTG2aZmagoVHx5kfAOQf/AnDXvbJIK6kO2TCTTOGIRFWOhMdsQd4 UZ/Z0sY1F0OGMNbPoI5Y7VP2QrcPC/9FUONyr8xg3yD1TYgyG5qKZ3teFLQ2CtVD fs39cNEBWXtp9vxYa/WazPNlWSoB+U9GCkVWfkf3moFnXzP6wd5nkXu8KeevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz9Tmv03sepbEcIMS0mbEZLLFLiYwHwYDVR0j BBgwFoAUAA57fr9UPzes8RN10oRiqNOISiwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM0YzMzYjgtOWQ0Mi00MjA4LThhYzQtZjE3MmExNDRkODY4LzAvMDAwRTdCN0VC RjU0M0YzN0FDRjExMzc1RDI4NDYyQThEMzg4NEEyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDBFN0I3RUJGNTQzRjM3QUNGMTEzNzVEMjg0NjJBOEQzODg0 QTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvMDAwRTdCN0VCRjU0M0YzN0FDRjExMzc1RDI4NDYy QThEMzg4NEEyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkIXDs43xDih0L1KvVg8AnxSj7cSbFTCgtk u9Z41v5nBaw6JHZN0fJFPzX8N3ABzsfAy7jtDzxcJycFzRwZpyKSqfNTiGa81VDq whCKA/FvtBG6dhjyqxRgVpZDaxKqn9ktyY8kK01zQSbYjiXM31tZm+6C6jm6Xw/W OxLpEIFl+41UihAdnlLuaY6SV/uHKSCzeWTQL3km7pwmQT7Bx5BmEnin3onPI/AJ /MGQZ7Z4AcgcCNOAQQH3v/uddhEIiOn3ZKhi6Yl2esV3PfWLcB3411tY5C9TRMjJ r8ArUZOjsnxA/29iuhEytc5r8axtpWins9IE75InfH47XFins1I= -----END CERTIFICATE-----Generated at Wed Jun 17 12:21:30 2026 by rpki-client