$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft File: D713503939D2573A44FA29703CDDCC704F03A75E.mft (raw, json) Hash identifier: MKFpVXKrhv9/aj6z3SUUqI2G6cmbZnjk/cI6LjEH78Y= Subject key identifier: 29:0C:5D:74:98:F6:2C:92:88:89:C9:11:4D:10:BD:DE:8B:D8:22:35 Authority key identifier: D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E Certificate issuer: /CN=D713503939D2573A44FA29703CDDCC704F03A75E Certificate serial: 1853032B52EA96AA253EC28E09A4AA56E609323D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft Manifest number: 43 Signing time: Sat 20 Jun 2026 00:25:26 +0000 Manifest this update: Sat 20 Jun 2026 00:20:26 +0000 Manifest next update: Sun 21 Jun 2026 01:37:26 +0000 Files and hashes: 1: D713503939D2573A44FA29703CDDCC704F03A75E.crl (hash: rHIoi+xkgpEKrheouIZ57XnG5JNYBfwiHhRxvjPgtiY=) 2: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: GTWGWiGFFFL7qU1osUGFkofRdRSFUHbSkHuzGVb3rSI=) 3: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: cciT2cLODhuCXSq6f7ZeF3BxK19X9kDtH1Tm4E9hM34=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:53:03:2b:52:ea:96:aa:25:3e:c2:8e:09:a4:aa:56:e6:09:32:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D713503939D2573A44FA29703CDDCC704F03A75E Validity Not Before: Jun 20 00:20:26 2026 GMT Not After : Jun 21 01:37:26 2026 GMT Subject: CN=290C5D7498F62C928889C9114D10BDDE8BD82235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3a:c2:c5:61:29:f9:b1:ed:3d:33:27:5e:ce: 66:50:fc:53:35:13:8f:d3:fe:6f:64:31:75:89:53: f8:1e:a9:38:70:23:50:51:b8:a4:19:49:f6:77:bb: d6:c5:71:aa:c0:4a:03:f0:a3:d4:66:60:4c:cb:a5: 67:fc:96:84:fa:71:47:df:a7:a4:60:4b:a3:93:5e: 89:49:47:8f:f1:4b:e2:6e:8d:65:36:c2:1c:c5:7e: a6:0a:36:44:8d:57:0f:62:a0:85:53:2a:21:f8:ca: d2:73:78:fc:bd:26:bd:b5:d9:b2:d2:d0:22:4c:3c: f2:94:0e:69:0d:a3:5d:b1:47:9c:8e:b2:42:e7:a4: 15:5e:eb:3d:a5:ac:e4:4f:64:ba:07:4d:fe:e8:bc: 65:04:ae:a6:97:2a:2b:47:3c:df:e2:5a:14:4e:b5: 77:5f:e9:fe:b6:89:b1:62:07:eb:c3:f2:ed:50:83: 0c:4a:76:06:01:04:d4:5f:8a:66:71:77:b4:3e:cd: 01:a4:b3:8a:d9:df:86:3b:87:7a:06:b8:a9:9f:d5: b5:f1:0f:42:ef:84:68:46:97:5a:0d:a3:ce:ac:1b: 88:10:82:d8:ad:16:91:1a:fc:75:c1:57:02:55:73: 11:54:dc:23:d7:7a:f2:82:15:e4:44:80:33:f8:76: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0C:5D:74:98:F6:2C:92:88:89:C9:11:4D:10:BD:DE:8B:D8:22:35 X509v3 Authority Key Identifier: keyid:D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:06:87:0a:19:09:ba:bf:5b:f4:a6:cf:45:b4:30:8b:08:0b: a4:30:34:4c:f8:32:3d:5e:27:4e:3e:ce:07:6f:cb:2c:fa:03: f6:2f:be:a7:ae:5d:06:a7:8c:4b:9d:6f:99:33:20:d0:a4:c0: 32:c4:01:92:49:82:32:35:7e:77:9a:1c:f8:16:9e:dd:47:06: 13:f3:af:f3:ec:a3:1c:2e:85:f4:8d:fa:b4:ba:cd:45:54:26: fe:d9:b1:b0:66:c3:11:3c:41:6a:81:f6:d9:d5:b4:27:34:c5: 31:b9:78:fa:32:9c:df:0b:4b:d7:54:77:68:68:7e:a3:c0:fd: 57:4b:85:b7:e0:1b:b8:d1:f9:4e:2b:3b:40:97:82:a7:d0:eb: fb:7f:88:d1:fe:23:cb:cb:53:bf:20:fe:92:af:ca:f7:48:a8: a4:77:d8:89:d6:61:a9:90:54:96:39:0f:ad:a6:95:f7:09:77: 45:74:b8:91:62:6d:1c:95:d2:3c:35:6d:e5:ca:88:f9:45:76: 0c:c1:61:68:f5:6a:ff:7f:77:51:40:8e:ce:59:78:92:98:d9: 52:13:16:5e:e1:65:e5:f2:82:d9:16:9d:4d:07:a4:6c:e2:49: 22:a7:c6:e9:2b:19:2b:ff:6c:e0:4a:24:17:27:db:8e:e8:c7: eb:7e:1d:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFMDK1LqlqolPsKOCaSqVuYJMj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NERENDNzA0 RjAzQTc1RTAeFw0yNjA2MjAwMDIwMjZaFw0yNjA2MjEwMTM3MjZaMDMxMTAvBgNV BAMTKDI5MEM1RDc0OThGNjJDOTI4ODg5QzkxMTREMTBCRERFOEJEODIyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMOsLFYSn5se09MydezmZQ/FM1 E4/T/m9kMXWJU/geqThwI1BRuKQZSfZ3u9bFcarASgPwo9RmYEzLpWf8loT6cUff p6RgS6OTXolJR4/xS+JujWU2whzFfqYKNkSNVw9ioIVTKiH4ytJzePy9Jr212bLS 0CJMPPKUDmkNo12xR5yOskLnpBVe6z2lrORPZLoHTf7ovGUErqaXKitHPN/iWhRO tXdf6f62ibFiB+vD8u1QgwxKdgYBBNRfimZxd7Q+zQGks4rZ34Y7h3oGuKmf1bXx D0LvhGhGl1oNo86sG4gQgtitFpEa/HXBVwJVcxFU3CPXevKCFeREgDP4dq0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKQxddJj2LJKIickRTRC93ovYIjUwHwYDVR0j BBgwFoAU1xNQOTnSVzpE+ilwPN3McE8Dp14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I5MDU3NjYtNDQwZS00YmNiLWFlNzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkz OUQyNTczQTQ0RkEyOTcwM0NERENDNzA0RjAzQTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEzNTAzOTM5RDI1NzNBNDRGQTI5NzAzQ0REQ0M3MDRGMDNB NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NEREND NzA0RjAzQTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUGhwoZCbq/W/Smz0W0MIsIC6QwNEz4Mj1e J04+zgdvyyz6A/YvvqeuXQanjEudb5kzINCkwDLEAZJJgjI1fneaHPgWnt1HBhPz r/PsoxwuhfSN+rS6zUVUJv7ZsbBmwxE8QWqB9tnVtCc0xTG5ePoynN8LS9dUd2ho fqPA/VdLhbfgG7jR+U4rO0CXgqfQ6/t/iNH+I8vLU78g/pKvyvdIqKR32InWYamQ VJY5D62mlfcJd0V0uJFibRyV0jw1beXKiPlFdgzBYWj1av9/d1FAjs5ZeJKY2VIT Fl7hZeXygtkWnU0HpGziSSKnxukrGSv/bOBKJBcn247ox+t+HYA= -----END CERTIFICATE-----Generated at Sat Jun 20 15:47:35 2026 by rpki-client