$ rpki-client -vvf rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft File: 107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft (raw, json) Hash identifier: eek3+0IRQhvt8UGgFfgOwVZQgiIdQQN4uBeVh3fZhjw= Subject key identifier: 8F:1E:DA:BB:AD:40:1F:DC:22:DD:A1:7F:BB:F8:0B:79:91:F5:62:E0 Authority key identifier: 10:7C:C3:B5:D8:32:F9:C4:95:66:A5:36:14:D4:CD:97:DC:CF:42:2C Certificate issuer: /CN=107CC3B5D832F9C49566A53614D4CD97DCCF422C Certificate serial: 2188FB2A41E278B8FCD30E1D7CF0B939F92AF5F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 19:49:04 +0000 Manifest this update: Tue 02 Jun 2026 19:44:04 +0000 Manifest next update: Wed 03 Jun 2026 22:55:04 +0000 Files and hashes: 1: 107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl (hash: gyr4NWZtcEjtmJbkThHUzO3lBFjaGTPoSxddYJjkuzs=) 2: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: hUbYV74o2po437IyhmufJ2EH4wEuOB+BJKCVuYVEfLs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:88:fb:2a:41:e2:78:b8:fc:d3:0e:1d:7c:f0:b9:39:f9:2a:f5:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107CC3B5D832F9C49566A53614D4CD97DCCF422C Validity Not Before: Jun 2 19:44:04 2026 GMT Not After : Jun 3 22:55:04 2026 GMT Subject: CN=8F1EDABBAD401FDC22DDA17FBBF80B7991F562E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:32:3a:09:23:d0:35:80:24:66:d7:36:a9: 3b:c6:bc:db:d5:31:d0:22:d9:3a:58:78:89:9a:bb: 78:01:e3:bf:e3:aa:d0:1b:ca:fa:eb:1c:c7:39:42: e3:df:40:5e:14:84:de:a3:ad:3f:7f:af:5e:6c:10: f3:5b:49:9f:1a:e8:aa:87:4f:30:db:16:0a:46:87: 75:d8:e6:45:9a:52:ab:77:36:37:0e:0e:25:0f:38: f6:e0:18:8b:79:e0:f4:bf:8c:b1:97:16:70:d6:89: 3f:6d:13:df:93:4d:5d:e0:6d:a0:51:33:4b:d3:73: 9a:de:5c:b6:30:10:8f:79:21:4f:f6:34:78:8c:4c: d3:a1:45:f1:2c:be:7d:4d:ab:9c:b7:24:87:82:f7: 15:c0:c1:5d:28:90:1f:31:0d:db:b9:42:29:9c:3e: f8:57:2e:fe:00:f1:cc:05:8d:c3:f2:d0:20:f2:1f: 1b:e8:69:2c:8c:fc:e0:32:4d:3c:30:f6:54:34:47: d2:e1:38:c0:03:63:85:73:c6:f7:04:e5:ae:a0:a3: 5a:00:72:f3:44:32:bf:72:ba:65:fd:6d:a3:c7:1c: b0:6d:8f:54:0a:24:3a:b0:d5:77:18:8d:36:1e:fb: d0:8b:31:d5:75:9e:8b:68:e6:b4:2d:6a:da:55:e5: 23:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1E:DA:BB:AD:40:1F:DC:22:DD:A1:7F:BB:F8:0B:79:91:F5:62:E0 X509v3 Authority Key Identifier: keyid:10:7C:C3:B5:D8:32:F9:C4:95:66:A5:36:14:D4:CD:97:DC:CF:42:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6b:d0:14:7d:62:a3:32:13:fe:24:cb:45:56:b4:90:0b:8b: 82:f0:4f:62:0c:c1:9b:dd:9f:a2:fe:91:98:11:7d:05:96:f9: 80:05:d0:a6:3e:dc:e4:44:54:7a:58:88:bd:2a:e3:d6:b0:b8: 77:be:55:91:d6:60:ef:d3:75:d9:67:55:7d:68:96:0d:7d:a9: a0:54:8f:c3:dd:22:f1:7b:19:e6:73:31:bc:7d:b6:83:b1:85: fd:f0:52:f5:67:cf:18:44:59:2e:21:ea:95:de:ff:5b:ec:81: 52:3c:3f:c9:bd:30:36:e9:b6:40:2e:29:36:80:23:8d:5d:ca: 75:53:71:01:7d:15:ba:59:e1:59:a3:5d:c4:93:cf:35:58:9e: 79:c1:07:9a:4e:47:74:3b:7c:b9:34:f3:82:05:25:49:18:25: a3:d1:70:58:d2:c1:f3:42:aa:b8:32:37:36:62:87:15:7b:53: 4d:07:f1:8e:72:77:b7:85:b2:e1:cf:16:13:bd:c0:72:29:f5: 51:86:18:c5:df:3f:be:09:0e:88:11:b7:5f:bd:b5:04:38:d6: b2:3c:d5:c9:91:8c:56:d8:50:2b:54:5d:97:8f:a7:34:1d:45: 83:1f:03:a1:71:9b:38:46:d2:ce:8a:6d:5e:d0:af:b4:6b:74: 82:1e:6c:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYj7KkHieLj80w4dfPC5Ofkq9fYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3Q0MzQjVEODMyRjlDNDk1NjZBNTM2MTRENENEOTdE Q0NGNDIyQzAeFw0yNjA2MDIxOTQ0MDRaFw0yNjA2MDMyMjU1MDRaMDMxMTAvBgNV BAMTKDhGMUVEQUJCQUQ0MDFGREMyMkREQTE3RkJCRjgwQjc5OTFGNTYyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8rTI6CSPQNYAkZtc2qTvGvNvV MdAi2TpYeImau3gB47/jqtAbyvrrHMc5QuPfQF4UhN6jrT9/r15sEPNbSZ8a6KqH TzDbFgpGh3XY5kWaUqt3NjcODiUPOPbgGIt54PS/jLGXFnDWiT9tE9+TTV3gbaBR M0vTc5reXLYwEI95IU/2NHiMTNOhRfEsvn1Nq5y3JIeC9xXAwV0okB8xDdu5Qimc PvhXLv4A8cwFjcPy0CDyHxvoaSyM/OAyTTww9lQ0R9LhOMADY4VzxvcE5a6go1oA cvNEMr9yumX9baPHHLBtj1QKJDqw1XcYjTYe+9CLMdV1noto5rQtatpV5SMDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjx7au61AH9wi3aF/u/gLeZH1YuAwHwYDVR0j BBgwFoAUEHzDtdgy+cSVZqU2FNTNl9zPQiwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTU0YjlkMzItM2M1YS00MGUyLWI3ODgtMDY5ZGUwYzNkMmRlLzAvMTA3Q0MzQjVE ODMyRjlDNDk1NjZBNTM2MTRENENEOTdEQ0NGNDIyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDdDQzNCNUQ4MzJGOUM0OTU2NkE1MzYxNEQ0Q0Q5N0RDQ0Y0 MjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3Q0MzQjVEODMyRjlDNDk1NjZBNTM2MTRENENE OTdEQ0NGNDIyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1r0BR9YqMyE/4ky0VWtJALi4LwT2IMwZvd n6L+kZgRfQWW+YAF0KY+3OREVHpYiL0q49awuHe+VZHWYO/TddlnVX1olg19qaBU j8PdIvF7GeZzMbx9toOxhf3wUvVnzxhEWS4h6pXe/1vsgVI8P8m9MDbptkAuKTaA I41dynVTcQF9FbpZ4VmjXcSTzzVYnnnBB5pOR3Q7fLk084IFJUkYJaPRcFjSwfNC qrgyNzZihxV7U00H8Y5yd7eFsuHPFhO9wHIp9VGGGMXfP74JDogRt1+9tQQ41rI8 1cmRjFbYUCtUXZePpzQdRYMfA6FxmzhG0s6KbV7Qr7RrdIIebCw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:37:13 2026 by rpki-client