$ rpki-client -vvf rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft File: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft (raw, json) Hash identifier: gl/tCuWlsR9FY+P2UKip4na9vdF0KujU47n0w1E0QUs= Subject key identifier: F7:AD:27:67:F3:7D:F1:8F:B6:97:3B:7D:B7:79:18:35:6B:C5:F2:91 Authority key identifier: C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 Certificate issuer: /CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Certificate serial: 6FFD81F12E710652032E3AFC97F0E6B4CA3C071F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 09:52:17 +0000 Manifest this update: Tue 02 Jun 2026 09:47:17 +0000 Manifest next update: Wed 03 Jun 2026 13:14:17 +0000 Files and hashes: 1: 3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa (hash: ax7Tz8igVzZFs/ShEmAUC7L5azN7xDE8dfSTDwz0nik=) 2: 323430353a623034303a3a2f33322d3332203d3e20313339393531.roa (hash: PA4mCIJ4WVxoHasll6BuHuPox/sleuIONJ29Vq08rHw=) 3: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl (hash: 3aORtKHFZMkRJDxIqh3WG8kvAG1NNWa3j1B3coQHAMk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:fd:81:f1:2e:71:06:52:03:2e:3a:fc:97:f0:e6:b4:ca:3c:07:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Validity Not Before: Jun 2 09:47:17 2026 GMT Not After : Jun 3 13:14:17 2026 GMT Subject: CN=F7AD2767F37DF18FB6973B7DB77918356BC5F291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:10:15:59:f7:e6:1b:9f:4c:d3:8b:1e:67:77: 5c:6c:e0:6c:83:29:40:25:a3:ed:8d:d5:30:e2:b2: 58:ed:c2:43:d5:30:bf:ae:d0:5e:9a:12:4f:6e:89: 11:f7:b0:66:c3:ab:05:d7:ba:52:a8:36:ae:8b:0d: 82:10:c7:d2:8d:35:16:c2:56:3c:65:d8:ae:ed:31: 59:2d:7b:50:f9:43:51:6e:bc:0b:63:46:99:2f:1b: e5:42:a3:71:56:38:71:fa:72:0a:ba:23:e2:0a:1f: 3b:60:71:82:b6:20:9c:f0:ec:2f:ce:5e:33:a9:cd: 35:dd:97:2a:a2:57:e9:50:95:be:76:20:92:bc:b4: 5b:ac:ba:1f:63:d2:45:d6:99:3e:9c:f7:e3:5a:21: cb:86:1a:b0:71:e6:17:94:47:8e:e1:a8:a8:ae:3a: 41:2a:65:1e:9b:0a:d3:5b:c3:09:81:3c:ce:db:65: 9e:c8:8d:ba:6e:d1:8c:43:52:cc:df:f6:b9:c2:1e: 95:9b:9a:b7:96:d7:f9:97:b8:28:09:b1:80:f8:7f: e3:eb:54:df:7f:bc:40:13:f9:15:25:85:17:d4:14: 33:70:8f:5e:ec:fd:a9:c7:c5:35:2e:67:9c:23:89: 8b:85:ca:b1:26:04:7d:50:4d:fa:83:f8:cf:ec:5f: 58:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AD:27:67:F3:7D:F1:8F:B6:97:3B:7D:B7:79:18:35:6B:C5:F2:91 X509v3 Authority Key Identifier: keyid:C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:68:ef:19:76:b2:e9:83:2f:13:94:d1:aa:49:c5:ee:79:83: 3a:65:5b:fa:b4:f3:39:cc:92:f0:c1:4c:35:a6:1d:17:f6:48: 56:40:cb:6a:24:38:0e:2d:96:fe:2b:d3:d4:f5:b1:63:53:6c: dc:e3:ad:62:68:bd:ed:a2:62:b7:ef:ca:01:79:2d:13:1d:65: 98:a8:b2:40:cb:9f:5d:0d:2c:3d:db:17:f6:1c:dd:ab:84:34: 85:b0:9d:6a:e7:e6:fb:31:e7:4a:48:6b:90:d7:e4:e9:98:5d: 7c:b3:4f:c6:c6:82:5b:53:a0:dc:d1:bb:79:8f:cb:ab:38:a8: 51:59:ab:cd:ab:46:1d:b8:15:d2:36:41:e2:af:13:df:f5:52: fe:7d:e7:dd:5d:32:e0:ae:88:d7:6f:b2:ad:d1:81:1a:56:be: 57:49:48:30:4c:f6:c4:ef:a1:3c:35:fa:e2:9f:71:49:42:56: fe:d8:14:0a:0e:d9:ca:a9:7d:5c:67:4d:3b:20:2c:71:76:54: 0b:a3:e0:fc:ba:c1:59:3d:45:d3:20:4b:66:33:14:48:61:4c: 3d:07:4a:d6:e3:d1:b5:ac:f2:5d:cb:83:45:e2:dc:c2:6a:cb: 43:0f:34:d0:34:75:ec:29:fb:e8:aa:c1:63:b7:ad:b2:d8:36: 79:ae:6f:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb/2B8S5xBlIDLjr8l/DmtMo8Bx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1 NUI5OUYyNTAeFw0yNjA2MDIwOTQ3MTdaFw0yNjA2MDMxMzE0MTdaMDMxMTAvBgNV BAMTKEY3QUQyNzY3RjM3REYxOEZCNjk3M0I3REI3NzkxODM1NkJDNUYyOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtEBVZ9+Ybn0zTix5nd1xs4GyD KUAlo+2N1TDisljtwkPVML+u0F6aEk9uiRH3sGbDqwXXulKoNq6LDYIQx9KNNRbC Vjxl2K7tMVkte1D5Q1FuvAtjRpkvG+VCo3FWOHH6cgq6I+IKHztgcYK2IJzw7C/O XjOpzTXdlyqiV+lQlb52IJK8tFusuh9j0kXWmT6c9+NaIcuGGrBx5heUR47hqKiu OkEqZR6bCtNbwwmBPM7bZZ7Ijbpu0YxDUszf9rnCHpWbmreW1/mXuCgJsYD4f+Pr VN9/vEAT+RUlhRfUFDNwj17s/anHxTUuZ5wjiYuFyrEmBH1QTfqD+M/sX1htAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU960nZ/N98Y+2lzt9t3kYNWvF8pEwHwYDVR0j BBgwFoAUw9+0nNcOUuRFDPL+XnISqFW5nyUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY2NTIwMDAtMWYyYy00NzkxLTgxYjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNE NzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1NUI5OUYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0RGQjQ5Q0Q3MEU1MkU0NDUwQ0YyRkU1RTcyMTJBODU1Qjk5 RjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY2NTIwMDAtMWYyYy00NzkxLTgx YjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEy QTg1NUI5OUYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1o7xl2sumDLxOU0apJxe55gzplW/q08znM kvDBTDWmHRf2SFZAy2okOA4tlv4r09T1sWNTbNzjrWJove2iYrfvygF5LRMdZZio skDLn10NLD3bF/Yc3auENIWwnWrn5vsx50pIa5DX5OmYXXyzT8bGgltToNzRu3mP y6s4qFFZq82rRh24FdI2QeKvE9/1Uv59591dMuCuiNdvsq3RgRpWvldJSDBM9sTv oTw1+uKfcUlCVv7YFAoO2cqpfVxnTTsgLHF2VAuj4Py6wVk9RdMgS2YzFEhhTD0H Stbj0bWs8l3Lg0Xi3MJqy0MPNNA0dewp++iqwWO3rbLYNnmub38= -----END CERTIFICATE-----Generated at Wed Jun 3 04:21:00 2026 by rpki-client