$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft File: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft (raw, json) Hash identifier: mWCXzS3wwsroQwgsj86cB12BYHNRAhcliQZTxZEr3UY= Subject key identifier: 0E:58:CC:55:10:02:F6:08:FA:59:1F:D5:E5:CC:93:44:BA:98:CD:BF Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Certificate serial: 13E3E1580A9E21E2A3A07DAD8F88E8162606AF95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 23:23:44 +0000 Manifest this update: Fri 12 Jun 2026 23:18:44 +0000 Manifest next update: Sat 13 Jun 2026 23:51:44 +0000 Files and hashes: 1: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: g/M/W8nBgP5S2ayXN1SiAqh0ligQCCsMJq/IueYk4OY=) 2: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: hKC4O+Dbys8awahI6Y0F2x8aosLXlC3tFEHhosWplhc=) 3: D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl (hash: iK5W42kWPhy2GtbmaZAyqcllMqLq9Mi2u/cgy1u7iis=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e3:e1:58:0a:9e:21:e2:a3:a0:7d:ad:8f:88:e8:16:26:06:af:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Validity Not Before: Jun 12 23:18:44 2026 GMT Not After : Jun 13 23:51:44 2026 GMT Subject: CN=0E58CC551002F608FA591FD5E5CC9344BA98CDBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:3a:00:38:3c:0f:79:b7:bb:b9:69:40:99: 9a:fc:f9:18:ae:60:a2:7b:13:33:6e:9c:5d:ba:11: 0f:70:dc:7f:59:c2:a6:e6:d7:63:d8:1f:41:33:c0: 5e:b1:09:ce:36:7e:3f:e4:09:37:dc:e5:9f:1c:23: e0:a7:34:51:87:49:64:a8:3c:38:d8:8b:78:05:25: f9:f7:a0:61:d0:6f:22:01:70:66:b6:54:73:1c:b0: 7b:f2:c9:57:d2:8b:71:8c:89:5c:c3:27:f7:2e:6e: 7c:d6:26:78:d7:ad:7f:3c:ae:5e:10:9e:fb:fe:3d: 7b:e1:1d:e5:7b:be:3f:8c:d4:5f:c7:3e:98:be:84: a9:47:b6:93:8a:16:9c:8c:4f:fe:a9:4b:ce:34:e7: 78:b7:fd:27:58:e2:8e:49:89:2b:08:65:5f:3f:45: b0:c7:49:c8:f1:6d:1a:51:00:b4:9b:02:14:61:fe: 46:97:dd:b4:eb:ec:10:2e:a4:17:72:50:01:ff:a5: c5:98:2a:74:25:44:f3:e8:b5:80:51:07:23:49:18: d2:3f:8a:c9:cc:c7:10:fd:a0:0d:d8:43:38:94:38: ba:56:e3:6a:fe:31:c1:d9:f0:7e:aa:c4:5e:e7:6b: 46:32:29:10:b0:c8:96:8e:80:3c:44:40:06:f4:92: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:58:CC:55:10:02:F6:08:FA:59:1F:D5:E5:CC:93:44:BA:98:CD:BF X509v3 Authority Key Identifier: keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:2c:ae:f7:8e:49:01:c1:f2:23:62:d7:db:cd:31:1d:d9:9e: ee:43:94:ce:9f:b1:a9:ef:2d:9c:ec:88:c5:b6:88:eb:e3:5d: e6:68:de:4c:86:bd:3a:11:b0:c9:cb:04:60:ed:89:6d:11:fd: 26:4a:0b:21:e9:f8:c3:3f:48:8b:fe:a7:3e:34:58:75:e2:9b: 95:0f:aa:c5:2a:ed:eb:6b:b2:26:0c:78:c2:13:19:50:19:ab: 6a:37:84:66:1f:a2:6e:c2:25:7e:95:47:b8:c6:33:8b:8c:75: 36:11:f2:0c:b2:10:e3:e6:ff:9f:dd:b4:5a:d5:3a:28:57:30: e2:ec:a8:88:14:c2:ae:7a:97:e5:96:b5:87:cb:d6:70:52:24: 24:03:a5:69:0a:00:3b:c2:86:2e:e2:50:78:0e:df:0b:8d:13: f6:f9:48:32:fc:a0:1f:34:61:81:b8:94:cd:51:a8:3d:b5:ba: ce:99:5b:d9:33:32:3e:c4:13:ba:09:50:60:fc:49:66:c5:6b: 7e:18:c7:8b:d5:7d:4c:65:82:f1:34:a0:43:80:3f:0b:d1:ca: 7a:af:aa:83:47:9b:ef:fb:a9:76:c2:73:20:6f:34:ce:fa:a0: 29:7f:63:9e:43:81:0e:51:66:db:f5:17:fe:f1:95:35:30:f1: ff:bf:b8:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+PhWAqeIeKjoH2tj4joFiYGr5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZD OUJEOENCRjAeFw0yNjA2MTIyMzE4NDRaFw0yNjA2MTMyMzUxNDRaMDMxMTAvBgNV BAMTKDBFNThDQzU1MTAwMkY2MDhGQTU5MUZENUU1Q0M5MzQ0QkE5OENEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nToAODwPebe7uWlAmZr8+Riu YKJ7EzNunF26EQ9w3H9Zwqbm12PYH0EzwF6xCc42fj/kCTfc5Z8cI+CnNFGHSWSo PDjYi3gFJfn3oGHQbyIBcGa2VHMcsHvyyVfSi3GMiVzDJ/cubnzWJnjXrX88rl4Q nvv+PXvhHeV7vj+M1F/HPpi+hKlHtpOKFpyMT/6pS84053i3/SdY4o5JiSsIZV8/ RbDHScjxbRpRALSbAhRh/kaX3bTr7BAupBdyUAH/pcWYKnQlRPPotYBRByNJGNI/ isnMxxD9oA3YQziUOLpW42r+McHZ8H6qxF7na0YyKRCwyJaOgDxEQAb0ktvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDljMVRAC9gj6WR/V5cyTRLqYzb8wHwYDVR0j BBgwFoAU1g+9KxtRUcP0BzSuSpUnf8m9jL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVmNWVmMTgtNmZmYS00ZDY5LThjMGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIx QjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZDOUJEOENCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjBGQkQyQjFCNTE1MUMzRjQwNzM0QUU0QTk1Mjc3RkM5QkQ4 Q0JGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3 N0ZDOUJEOENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYsrveOSQHB8iNi19vNMR3Znu5DlM6fsanv LZzsiMW2iOvjXeZo3kyGvToRsMnLBGDtiW0R/SZKCyHp+MM/SIv+pz40WHXim5UP qsUq7etrsiYMeMITGVAZq2o3hGYfom7CJX6VR7jGM4uMdTYR8gyyEOPm/5/dtFrV OihXMOLsqIgUwq56l+WWtYfL1nBSJCQDpWkKADvChi7iUHgO3wuNE/b5SDL8oB80 YYG4lM1RqD21us6ZW9kzMj7EE7oJUGD8SWbFa34Yx4vVfUxlgvE0oEOAPwvRynqv qoNHm+/7qXbCcyBvNM76oCl/Y55DgQ5RZtv1F/7xlTUw8f+/uMg= -----END CERTIFICATE-----Generated at Sat Jun 13 12:41:26 2026 by rpki-client