$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft File: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft (raw, json) Hash identifier: JDNyOy/f3nN0BPwzPq5Nw4gWKV+t3LTTONjX00Nb5Fk= Subject key identifier: 7E:73:A1:51:DD:7C:5A:C6:8D:2E:D6:9C:14:E1:C8:F8:C5:60:82:EB Authority key identifier: 02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 Certificate issuer: /CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Certificate serial: 4E6DAB164F3739361CD3DBB30F6EB66757F26504 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft Manifest number: 37 Signing time: Fri 12 Jun 2026 01:42:46 +0000 Manifest this update: Fri 12 Jun 2026 01:37:46 +0000 Manifest next update: Sat 13 Jun 2026 04:45:46 +0000 Files and hashes: 1: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: Xk7Qw7wFoGRI3rjKCFAl7ffLOSrFJh23uM7+wGfmYww=) 2: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl (hash: wHz26iXE23JP0Kk64ynaDpf2xqcMKSj50/lnwnrYmZU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6d:ab:16:4f:37:39:36:1c:d3:db:b3:0f:6e:b6:67:57:f2:65:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Validity Not Before: Jun 12 01:37:46 2026 GMT Not After : Jun 13 04:45:46 2026 GMT Subject: CN=7E73A151DD7C5AC68D2ED69C14E1C8F8C56082EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:17:38:8a:bf:24:72:d0:a9:ff:5c:93:34: 83:3c:b0:78:11:0d:53:e3:04:80:03:9e:09:d1:a2: 4e:87:86:b7:40:db:23:3d:42:66:2e:99:f3:c6:5c: 46:92:f7:5f:8a:ee:a3:25:d4:95:2f:73:d8:ad:60: a5:ea:a0:08:74:18:60:7f:f5:47:85:00:9f:a7:30: b9:69:2a:34:4b:c8:bf:83:4a:b5:d3:0c:2c:2a:53: 3f:3d:aa:ff:75:60:2f:94:49:01:13:04:40:12:a0: 00:0e:54:c9:e0:05:eb:42:1f:81:2a:13:81:51:71: ee:32:36:41:e2:b6:b2:ac:a9:37:1f:06:ad:4b:df: 44:59:ac:f2:f5:99:f4:91:a8:ca:cd:fe:e8:e7:57: ad:a0:7a:18:54:8f:56:d7:4a:e9:a1:62:42:24:22: ca:2d:3b:d7:19:6d:0c:0d:6a:84:ae:02:95:c2:42: 44:5a:69:4e:f8:e4:58:24:e2:1f:2a:ca:9c:71:56: 23:d6:21:4b:a9:13:c4:37:47:e1:a6:b7:6b:85:1b: c4:0e:3c:ff:ca:43:98:a5:8d:75:18:6a:9a:c1:02: 97:ee:3a:36:f8:0e:9f:6f:fa:c3:7d:01:cc:1f:17: 25:06:e9:5a:c5:c2:25:fd:cf:6e:94:d4:04:ab:50: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:73:A1:51:DD:7C:5A:C6:8D:2E:D6:9C:14:E1:C8:F8:C5:60:82:EB X509v3 Authority Key Identifier: keyid:02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:84:12:5e:ec:e3:41:ea:d8:cb:3d:5b:63:c5:e4:d9:5e:e3: 0b:82:f2:2d:37:01:53:13:d8:79:7d:ae:8d:24:5b:49:10:04: 23:72:26:1b:71:f6:58:98:12:6c:20:a6:1e:c8:c3:91:c6:d6: 3d:0a:94:22:42:3a:a4:66:5e:2e:e8:ee:9e:cf:1c:54:2f:a8: b5:f0:20:fb:13:ca:71:63:39:bd:9e:e1:2d:48:3b:d8:e8:b0: 02:9a:2b:e2:e5:e4:f3:49:b3:37:b0:16:11:05:61:18:55:29: 7b:33:97:81:fe:72:94:9f:0a:21:21:b1:35:ed:c4:e7:0a:4a: 30:6b:67:b7:6b:e1:c6:15:59:c7:94:9f:bc:22:54:99:5c:87: 9a:6a:55:80:4b:02:53:42:fc:68:df:e9:b4:3b:2b:93:f9:49: e6:3a:ca:89:39:1a:b2:ef:60:86:5f:40:fe:f6:d1:8e:34:60: 7f:7b:34:44:03:02:3e:96:f8:f9:aa:4c:b9:47:79:fa:6a:79: 0b:33:27:9e:5d:89:8f:e8:e0:79:0a:01:2e:9e:c2:7b:fd:3e: a9:f3:b3:85:4f:0b:31:7c:da:fa:76:84:95:1f:9d:f6:e4:8c: 8c:1e:d2:6d:fd:80:7a:24:13:fe:e9:fc:71:20:2d:e8:58:66: 16:b7:4f:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTm2rFk83OTYc09uzD262Z1fyZQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0QjczQzY4 RDBBMENCMzAeFw0yNjA2MTIwMTM3NDZaFw0yNjA2MTMwNDQ1NDZaMDMxMTAvBgNV BAMTKDdFNzNBMTUxREQ3QzVBQzY4RDJFRDY5QzE0RTFDOEY4QzU2MDgyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gxc4ir8kctCp/1yTNIM8sHgR DVPjBIADngnRok6HhrdA2yM9QmYumfPGXEaS91+K7qMl1JUvc9itYKXqoAh0GGB/ 9UeFAJ+nMLlpKjRLyL+DSrXTDCwqUz89qv91YC+USQETBEASoAAOVMngBetCH4Eq E4FRce4yNkHitrKsqTcfBq1L30RZrPL1mfSRqMrN/ujnV62gehhUj1bXSumhYkIk IsotO9cZbQwNaoSuApXCQkRaaU745Fgk4h8qypxxViPWIUupE8Q3R+Gmt2uFG8QO PP/KQ5iljXUYaprBApfuOjb4Dp9v+sN9AcwfFyUG6VrFwiX9z26U1ASrUJ5bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfnOhUd18WsaNLtacFOHI+MVgguswHwYDVR0j BBgwFoAUAgYo2xbf3fRCkjsJ0Etzxo0KDLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmM5MDk3MzctMTU2NC00NmNhLTkwMDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIx NkRGRERGNDQyOTIzQjA5RDA0QjczQzY4RDBBMENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjA2MjhEQjE2REZEREY0NDI5MjNCMDlEMDRCNzNDNjhEMEEw Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0Qjcz QzY4RDBBMENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCEEl7s40Hq2Ms9W2PF5Nle4wuC8i03AVMT 2Hl9ro0kW0kQBCNyJhtx9liYEmwgph7Iw5HG1j0KlCJCOqRmXi7o7p7PHFQvqLXw IPsTynFjOb2e4S1IO9josAKaK+Ll5PNJszewFhEFYRhVKXszl4H+cpSfCiEhsTXt xOcKSjBrZ7dr4cYVWceUn7wiVJlch5pqVYBLAlNC/Gjf6bQ7K5P5SeY6yok5GrLv YIZfQP720Y40YH97NEQDAj6W+PmqTLlHefpqeQszJ55diY/o4HkKAS6ewnv9Pqnz s4VPCzF82vp2hJUfnfbkjIwe0m39gHokE/7p/HEgLehYZha3T4g= -----END CERTIFICATE-----Generated at Fri Jun 12 06:03:38 2026 by rpki-client