$ rpki-client -vvf rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft File: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft (raw, json) Hash identifier: lpTL/xH6Ce96keJJnaXInnKJ1t+AB+pRlhn6/bwtiVk= Subject key identifier: 2D:42:B8:0C:4E:72:02:2A:09:C7:95:49:0B:70:45:77:38:A8:DE:A9 Authority key identifier: D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 Certificate issuer: /CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Certificate serial: 666B0FCE1A76EF3C31DF06D7FC4316F4E0D63198 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft Manifest number: 47 Signing time: Wed 24 Jun 2026 13:01:08 +0000 Manifest this update: Wed 24 Jun 2026 12:56:08 +0000 Manifest next update: Thu 25 Jun 2026 15:36:08 +0000 Files and hashes: 1: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl (hash: Z2Rr4hkvm3fxaAJaE3mnAPQ55fLBX8Op5ddBT4GRwl8=) 2: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: EtsVHdeAuCEUKToYyc1AboiXRpshf+Ge4ld5y69utbM=) 3: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: 7YRFkgWqBTb6xXfqMpSxUz7NK51JToKbqOBLvR25NTc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 06:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6b:0f:ce:1a:76:ef:3c:31:df:06:d7:fc:43:16:f4:e0:d6:31:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Validity Not Before: Jun 24 12:56:08 2026 GMT Not After : Jun 25 15:36:08 2026 GMT Subject: CN=2D42B80C4E72022A09C795490B70457738A8DEA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:14:cf:f5:48:53:4c:7e:60:59:a9:6d:d0: 66:48:c6:71:62:46:cb:ca:d9:39:8f:8f:f2:02:fb: c1:cc:1e:7c:41:00:7d:3b:44:41:2a:54:be:c9:d5: fd:58:57:af:a6:51:c9:33:cc:cb:c6:95:1f:99:41: 5e:7f:2e:dc:b2:1b:80:74:0a:10:99:19:a3:7e:34: b9:32:dc:f6:e6:08:c0:72:64:44:fc:00:57:21:47: 72:1a:02:53:3d:25:1e:ba:79:31:f3:15:d0:67:5d: ef:9e:8a:0a:79:24:75:15:96:34:2c:cd:69:ba:d7: b7:32:87:13:76:28:3a:12:54:c0:f2:f4:30:53:df: ef:bf:bb:24:c0:fc:a3:ed:8e:36:1a:4b:06:59:23: 5a:62:cd:33:ad:73:f0:1c:13:41:ab:36:78:45:7e: 75:f4:e0:86:5d:70:d4:42:1d:bd:28:33:1b:1e:65: 1c:9a:03:89:8f:69:5a:03:56:8e:55:6d:be:75:d3: af:10:a5:2b:fe:84:26:11:33:b8:e9:e7:89:a2:44: 4c:c1:e2:b8:c1:a3:4e:6f:16:6a:45:53:44:e5:40: 70:71:57:79:e2:64:c4:13:15:aa:95:7c:51:17:13: 66:af:fc:a3:b6:97:66:c4:e5:24:be:24:56:1b:32: 1f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:42:B8:0C:4E:72:02:2A:09:C7:95:49:0B:70:45:77:38:A8:DE:A9 X509v3 Authority Key Identifier: keyid:D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:3a:58:79:03:c3:cf:fa:24:7e:d0:7b:2c:ea:26:08:7e:c3: 45:4d:63:99:62:3c:a8:12:b8:70:5a:0c:e0:5d:da:bf:62:0c: d1:0f:80:fd:a7:de:9a:97:59:c3:ce:5f:c0:fd:dc:ff:51:73: 76:81:fe:d1:41:88:59:2c:8e:68:5c:26:d4:f5:f9:7f:1a:b4: 9b:14:8d:93:48:3d:f5:62:c1:37:f4:42:40:9e:23:74:ed:f0: 0b:66:cf:60:5f:03:dc:90:2c:a9:5b:15:ae:eb:27:62:51:f6: 2f:14:df:5c:04:dc:03:2b:8f:e3:9b:71:08:90:ab:3e:65:ba: ee:1d:fa:e9:96:64:15:1a:85:ac:4e:17:36:36:68:e2:84:19: 61:8f:a5:8b:8f:8a:4d:10:3a:85:c4:fd:d7:e5:6d:dc:70:c3: cd:42:e1:5a:16:92:72:70:83:69:b8:d2:d3:7e:b9:24:ae:4a: 55:a4:1b:d3:03:f8:f0:51:63:ba:f0:0e:5e:80:2d:cb:77:4c: 98:ec:5f:6e:d0:bd:f1:39:b0:2f:f6:90:db:d6:99:03:0c:74: 9c:a1:7e:e9:a4:d0:5c:af:c8:ee:20:17:0b:43:98:e0:67:99: b8:e3:2b:36:e5:08:ea:c2:75:7d:64:1e:ad:34:e5:f9:8e:ff: e5:ef:c7:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZmsPzhp27zwx3wbX/EMW9ODWMZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUz NkRDNDQ3MzAeFw0yNjA2MjQxMjU2MDhaFw0yNjA2MjUxNTM2MDhaMDMxMTAvBgNV BAMTKDJENDJCODBDNEU3MjAyMkEwOUM3OTU0OTBCNzA0NTc3MzhBOERFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gBTP9UhTTH5gWalt0GZIxnFi RsvK2TmPj/IC+8HMHnxBAH07REEqVL7J1f1YV6+mUckzzMvGlR+ZQV5/LtyyG4B0 ChCZGaN+NLky3PbmCMByZET8AFchR3IaAlM9JR66eTHzFdBnXe+eigp5JHUVljQs zWm617cyhxN2KDoSVMDy9DBT3++/uyTA/KPtjjYaSwZZI1pizTOtc/AcE0GrNnhF fnX04IZdcNRCHb0oMxseZRyaA4mPaVoDVo5Vbb51068QpSv+hCYRM7jp54miREzB 4rjBo05vFmpFU0TlQHBxV3niZMQTFaqVfFEXE2av/KO2l2bE5SS+JFYbMh/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULUK4DE5yAioJx5VJC3BFdzio3qkwHwYDVR0j BBgwFoAU0+wyfVZpvAsPsqQkVhfkTjbcRHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTIzMDczOTAtNmVmMy00NDc2LWE2YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1 NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUzNkRDNDQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0VDMzI3RDU2NjlCQzBCMEZCMkE0MjQ1NjE3RTQ0RTM2REM0 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0 NEUzNkRDNDQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMo6WHkDw8/6JH7QeyzqJgh+w0VNY5liPKgS uHBaDOBd2r9iDNEPgP2n3pqXWcPOX8D93P9Rc3aB/tFBiFksjmhcJtT1+X8atJsU jZNIPfViwTf0QkCeI3Tt8Atmz2BfA9yQLKlbFa7rJ2JR9i8U31wE3AMrj+ObcQiQ qz5luu4d+umWZBUahaxOFzY2aOKEGWGPpYuPik0QOoXE/dflbdxww81C4VoWknJw g2m40tN+uSSuSlWkG9MD+PBRY7rwDl6ALct3TJjsX27QvfE5sC/2kNvWmQMMdJyh fumk0FyvyO4gFwtDmOBnmbjjKzblCOrCdX1kHq005fmO/+Xvx3E= -----END CERTIFICATE-----Generated at Wed Jun 24 15:40:16 2026 by rpki-client