$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft File: 489207A82A4F1A3B6758139186A867CE751999B7.mft (raw, json) Hash identifier: eCqaadwcG9uLfRGmvbQ0lFzozCAWdmQIysd/WyVLPGA= Subject key identifier: C7:F5:C7:73:29:3D:9E:8C:A7:68:87:00:A8:0A:38:78:25:E8:E7:03 Authority key identifier: 48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 Certificate issuer: /CN=489207A82A4F1A3B6758139186A867CE751999B7 Certificate serial: 2DF24C8702C1E0BD78F23390E4386505E4D0AE7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:48:27 +0000 Manifest this update: Tue 16 Jun 2026 15:43:27 +0000 Manifest next update: Wed 17 Jun 2026 18:21:27 +0000 Files and hashes: 1: 489207A82A4F1A3B6758139186A867CE751999B7.crl (hash: /ThiWdSpUbYtCHtkUkSEehEb1IOHaQyAdEWD09CvTwY=) 2: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: FB472ElcOvg/ylc+xiayFIvGK9fHP8MxdL79QVbGvdA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f2:4c:87:02:c1:e0:bd:78:f2:33:90:e4:38:65:05:e4:d0:ae:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489207A82A4F1A3B6758139186A867CE751999B7 Validity Not Before: Jun 16 15:43:27 2026 GMT Not After : Jun 17 18:21:27 2026 GMT Subject: CN=C7F5C773293D9E8CA7688700A80A387825E8E703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f5:f4:31:c7:0d:ae:5e:d6:e0:a9:a5:2b:f8: a0:cd:49:05:b4:7f:d1:08:89:2b:e1:e7:f8:6a:0d: 30:f2:e2:1c:7c:c0:82:c1:1b:0e:e4:10:2f:59:79: 5f:a9:4d:3e:59:0e:8e:59:b9:67:29:80:f2:8a:cd: 4b:85:73:28:43:88:b3:b6:8c:54:34:da:92:36:35: 86:3b:c9:bc:9a:53:22:13:cc:80:0c:43:ab:ac:a4: 6d:3b:e5:f4:12:66:68:4e:88:0c:9b:26:01:7c:f5: 74:3b:8f:65:d8:c7:ee:38:ad:07:d0:f6:88:a8:0e: 8c:8d:79:69:2f:66:ff:dc:79:06:fd:d2:12:58:30: 0f:3a:62:7d:79:9f:70:33:80:b5:64:4d:54:be:ff: fa:ad:72:a1:f4:3c:1f:29:7c:97:c2:94:0a:2a:f7: e8:10:07:b6:f7:02:b8:da:f9:0f:ed:28:6c:90:7d: a4:5f:dc:23:fe:14:7b:ca:a6:4d:84:87:e6:a3:7c: ad:77:bd:31:49:42:90:82:1f:15:8f:65:f0:db:6c: ab:fd:99:4d:24:80:20:ab:59:0a:ab:4c:5f:c5:51: 49:46:1e:f5:dd:27:ac:07:22:9b:ac:84:01:13:ab: c0:74:ae:33:f6:da:bb:64:1a:39:6c:61:2e:83:a0: d2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F5:C7:73:29:3D:9E:8C:A7:68:87:00:A8:0A:38:78:25:E8:E7:03 X509v3 Authority Key Identifier: keyid:48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ae:c7:13:52:de:1f:4c:3b:0e:c8:2f:3a:c1:e6:64:67:3b: fb:9d:72:40:3f:e3:26:03:8e:25:3e:26:99:04:74:92:58:2a: c2:d9:e9:6d:50:48:99:ab:82:a3:2b:55:be:ea:d0:b3:02:5e: e0:48:ee:a5:3b:17:09:66:17:f5:fc:a4:8c:24:ac:03:6c:d3: c9:e4:5e:3b:00:d6:29:78:9c:e6:be:57:2c:37:13:6f:f8:e3: a0:3c:2f:8f:9e:21:cd:60:1a:5f:31:bb:a6:ec:f7:4a:6e:09: a8:7d:9d:2f:a4:15:d5:e4:88:0f:28:62:84:4f:c7:f0:3d:f0: 43:3d:8c:28:b0:89:10:d5:da:8f:0f:28:36:95:8a:ba:89:55: f7:78:b7:4d:bd:bb:47:2c:09:a0:78:33:38:de:fe:be:f2:bc: f5:67:fb:ad:53:13:26:5b:23:01:e3:05:b5:e3:bd:39:74:bb: 8c:57:13:3c:ba:ff:04:bc:48:d2:b6:b1:1e:54:e6:18:96:3b: 46:6a:51:ea:35:e3:25:f6:2e:1c:88:e6:da:06:9a:f4:9e:a4: 8e:2d:7c:8d:07:94:8d:f0:36:2f:67:cc:9d:f3:c5:3d:57:b5: d9:e2:92:4d:ca:03:a1:61:be:22:c0:4f:d7:d9:22:b7:ab:cf: 0b:d6:40:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULfJMhwLB4L148jOQ5DhlBeTQrn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3 NTE5OTlCNzAeFw0yNjA2MTYxNTQzMjdaFw0yNjA2MTcxODIxMjdaMDMxMTAvBgNV BAMTKEM3RjVDNzczMjkzRDlFOENBNzY4ODcwMEE4MEEzODc4MjVFOEU3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO9fQxxw2uXtbgqaUr+KDNSQW0 f9EIiSvh5/hqDTDy4hx8wILBGw7kEC9ZeV+pTT5ZDo5ZuWcpgPKKzUuFcyhDiLO2 jFQ02pI2NYY7ybyaUyITzIAMQ6uspG075fQSZmhOiAybJgF89XQ7j2XYx+44rQfQ 9oioDoyNeWkvZv/ceQb90hJYMA86Yn15n3AzgLVkTVS+//qtcqH0PB8pfJfClAoq 9+gQB7b3Arja+Q/tKGyQfaRf3CP+FHvKpk2Eh+ajfK13vTFJQpCCHxWPZfDbbKv9 mU0kgCCrWQqrTF/FUUlGHvXdJ6wHIpushAETq8B0rjP22rtkGjlsYS6DoNKDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx/XHcyk9noynaIcAqAo4eCXo5wMwHwYDVR0j BBgwFoAUSJIHqCpPGjtnWBORhqhnznUZmbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgy QTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3NTE5OTlCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80ODkyMDdBODJBNEYxQTNCNjc1ODEzOTE4NkE4NjdDRTc1MTk5 OUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3 Q0U3NTE5OTlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuuxxNS3h9MOw7ILzrB5mRnO/udckA/4yYD jiU+JpkEdJJYKsLZ6W1QSJmrgqMrVb7q0LMCXuBI7qU7FwlmF/X8pIwkrANs08nk XjsA1il4nOa+Vyw3E2/446A8L4+eIc1gGl8xu6bs90puCah9nS+kFdXkiA8oYoRP x/A98EM9jCiwiRDV2o8PKDaVirqJVfd4t029u0csCaB4Mzje/r7yvPVn+61TEyZb IwHjBbXjvTl0u4xXEzy6/wS8SNK2sR5U5hiWO0ZqUeo14yX2LhyI5toGmvSepI4t fI0HlI3wNi9nzJ3zxT1Xtdnikk3KA6FhviLAT9fZIrerzwvWQDQ= -----END CERTIFICATE-----Generated at Wed Jun 17 11:49:30 2026 by rpki-client