$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft File: 221D17C6CE30682D7329C49D1F803292269A742A.mft (raw, json) Hash identifier: lgf1Nv+2ihlaxCtDQbkoCHFbmRikGxRVWp6oflqRF3k= Subject key identifier: FC:1B:C3:48:C7:A2:3F:20:45:7F:B1:93:9A:BE:23:76:19:DB:19:20 Authority key identifier: 22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A Certificate issuer: /CN=221D17C6CE30682D7329C49D1F803292269A742A Certificate serial: 2D5C90E74A83FC57B19BCFFA87BB4BA5B964C3D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 16:19:00 +0000 Manifest this update: Tue 16 Jun 2026 16:14:00 +0000 Manifest next update: Wed 17 Jun 2026 18:06:00 +0000 Files and hashes: 1: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: BTev4pTjb1pwUkqwaS552QJVxBH0Gw6mSTMUfpMFiQ0=) 2: 221D17C6CE30682D7329C49D1F803292269A742A.crl (hash: tv+s6rqmD51yTS8Z4nAG/5BiQP1OMuesRBRC9+2ISqg=) 3: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: uCL8hU03zGsiNeckLg3taG50LeWxCsa9pcNoxXuQ5KM=) 4: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: Lt2+hrkcbaTE1hrTjRZ7aEwzbnRpAkFNEq82KpPU4LQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5c:90:e7:4a:83:fc:57:b1:9b:cf:fa:87:bb:4b:a5:b9:64:c3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221D17C6CE30682D7329C49D1F803292269A742A Validity Not Before: Jun 16 16:14:00 2026 GMT Not After : Jun 17 18:06:00 2026 GMT Subject: CN=FC1BC348C7A23F20457FB1939ABE237619DB1920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:0a:54:55:72:b7:e4:1b:e3:70:1e:fa:23: 0e:a6:63:aa:2f:fc:18:22:85:63:c9:8e:52:b6:ba: c8:5a:14:fb:fd:d8:54:6d:91:fe:ea:09:20:7b:05: 78:5f:6d:4a:0c:56:4f:bc:be:39:8a:18:91:4d:40: 9a:18:5b:df:10:8e:f8:c5:53:b6:e0:0a:8d:38:d7: 55:13:e0:f6:e2:c9:a8:39:51:c8:ec:03:31:39:24: 92:a9:fd:fd:99:53:71:25:2a:77:25:68:3e:e8:fa: 43:fd:2a:51:34:eb:56:35:3f:18:59:24:a2:f3:4e: 4b:6e:79:bd:67:37:6e:5e:d3:0f:30:7b:c1:10:9e: f5:df:27:d2:3c:92:48:65:3c:fd:f4:5d:8c:4a:46: ae:ab:2f:aa:05:ea:cd:50:91:9f:63:ab:c5:60:12: 48:bc:60:08:c7:dd:ae:5b:6c:a3:1d:82:86:f8:90: ae:5c:f3:3e:6e:74:fc:ef:25:db:e5:58:a9:ff:2d: 13:a3:13:ce:ba:bb:c3:5d:d9:3f:a0:ff:ec:69:68: 1d:12:5a:17:41:b6:77:6e:38:33:ae:0d:97:fb:e3: 5a:8e:24:e2:0c:b9:cf:90:38:b6:f3:82:d5:ef:1e: cd:41:47:c5:2a:7f:3b:ba:5a:97:75:6f:d3:99:07: c4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1B:C3:48:C7:A2:3F:20:45:7F:B1:93:9A:BE:23:76:19:DB:19:20 X509v3 Authority Key Identifier: keyid:22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9f:fd:b6:0c:c5:b7:64:18:d3:9f:a6:1a:9d:cd:a1:cf:57: b4:4f:4f:a5:55:23:2e:d7:76:71:a6:8c:92:fe:6f:48:c3:90: 5c:2c:7a:fa:ad:88:11:15:af:28:fa:40:fa:7b:70:2a:1a:8d: 55:d3:17:a4:4d:29:25:de:36:ea:84:e3:eb:f9:39:49:af:51: 6f:44:9d:52:6f:c9:39:fc:e4:1e:54:2c:33:f6:a2:b7:ac:e8: 45:72:08:78:35:54:89:5b:c2:fc:53:6d:8b:99:ff:d3:48:72: 27:26:09:33:b9:db:bb:53:db:53:bf:88:e9:a9:3b:dc:6a:bf: b5:d9:fd:3a:01:f5:f0:b2:c5:77:b6:c5:88:14:26:30:32:37: 21:95:cf:28:27:e1:3e:da:f0:38:05:75:48:04:62:f6:65:5a: 06:d8:8b:6b:81:3f:81:58:52:fd:59:f8:ec:c5:d3:e7:25:01: 8c:e6:32:12:76:79:fd:40:18:c7:45:60:81:4d:46:03:8d:45: 8b:f0:21:9f:7a:5a:a2:ae:c0:8e:95:90:d5:69:39:ba:9a:dc: e7:4e:66:25:43:7e:85:15:e3:dc:fb:b1:9f:9e:ba:ed:36:30: ae:5a:96:0c:15:8a:a9:2a:27:60:1a:a2:33:4d:f2:c8:63:df: 78:80:0d:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVyQ50qD/Fexm8/6h7tLpblkw9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxRDE3QzZDRTMwNjgyRDczMjlDNDlEMUY4MDMyOTIy NjlBNzQyQTAeFw0yNjA2MTYxNjE0MDBaFw0yNjA2MTcxODA2MDBaMDMxMTAvBgNV BAMTKEZDMUJDMzQ4QzdBMjNGMjA0NTdGQjE5MzlBQkUyMzc2MTlEQjE5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmApUVXK35BvjcB76Iw6mY6ov /BgihWPJjlK2ushaFPv92FRtkf7qCSB7BXhfbUoMVk+8vjmKGJFNQJoYW98QjvjF U7bgCo0411UT4Pbiyag5UcjsAzE5JJKp/f2ZU3ElKnclaD7o+kP9KlE061Y1PxhZ JKLzTktueb1nN25e0w8we8EQnvXfJ9I8kkhlPP30XYxKRq6rL6oF6s1QkZ9jq8Vg Eki8YAjH3a5bbKMdgob4kK5c8z5udPzvJdvlWKn/LROjE866u8Nd2T+g/+xpaB0S WhdBtnduODOuDZf741qOJOIMuc+QOLbzgtXvHs1BR8Uqfzu6Wpd1b9OZB8RNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/BvDSMeiPyBFf7GTmr4jdhnbGSAwHwYDVR0j BBgwFoAUIh0Xxs4waC1zKcSdH4AykiaadCowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJlMDQwMzgtYTFiNi00MzJjLTg1NGItY2M2ZThjZjMyZTA2LzAvMjIxRDE3QzZD RTMwNjgyRDczMjlDNDlEMUY4MDMyOTIyNjlBNzQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjFEMTdDNkNFMzA2ODJENzMyOUM0OUQxRjgwMzI5MjI2OUE3 NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvMjIxRDE3QzZDRTMwNjgyRDczMjlDNDlEMUY4MDMy OTIyNjlBNzQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqf/bYMxbdkGNOfphqdzaHPV7RPT6VVIy7X dnGmjJL+b0jDkFwsevqtiBEVryj6QPp7cCoajVXTF6RNKSXeNuqE4+v5OUmvUW9E nVJvyTn85B5ULDP2ores6EVyCHg1VIlbwvxTbYuZ/9NIcicmCTO527tT21O/iOmp O9xqv7XZ/ToB9fCyxXe2xYgUJjAyNyGVzygn4T7a8DgFdUgEYvZlWgbYi2uBP4FY Uv1Z+OzF0+clAYzmMhJ2ef1AGMdFYIFNRgONRYvwIZ96WqKuwI6VkNVpObqa3OdO ZiVDfoUV49z7sZ+euu02MK5algwViqkqJ2AaojNN8shj33iADdQ= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:38 2026 by rpki-client