$ rpki-client -vvf rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft File: D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft (raw, json) Hash identifier: 16YQ2NnJ/yUw4ogLKEFStl2pv3TvI3QfKCd+Jveu08g= Subject key identifier: 1E:5B:4E:CA:26:CB:2A:E0:C5:44:B9:E0:35:7F:3C:02:0B:A0:F9:54 Authority key identifier: D3:B0:B1:2C:00:ED:A4:8B:D2:7B:03:AE:46:20:E5:1B:4D:5B:35:B9 Certificate issuer: /CN=D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9 Certificate serial: 3AE1B13688EC2076461AD5CC99BA0D2A5BE5EBD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 13:02:43 +0000 Manifest this update: Thu 18 Jun 2026 12:57:43 +0000 Manifest next update: Fri 19 Jun 2026 15:52:43 +0000 Files and hashes: 1: D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl (hash: FIG43HTBHlynHoJryWcSMzFopZgDHURU/3bVqmwUlB8=) 2: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: UG7HopHAsWszm3vKCwbdEPyJLKZk5ZAofsZVkykHgJs=) 3: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: ppvRL+0RoVt7WTK9nlYvDd18NTyRBb+RqG5BAHWS1Ig=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e1:b1:36:88:ec:20:76:46:1a:d5:cc:99:ba:0d:2a:5b:e5:eb:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9 Validity Not Before: Jun 18 12:57:43 2026 GMT Not After : Jun 19 15:52:43 2026 GMT Subject: CN=1E5B4ECA26CB2AE0C544B9E0357F3C020BA0F954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:10:80:0f:eb:2e:80:af:ab:09:79:36:d0: 9b:35:50:1c:60:aa:d5:aa:4d:5a:dd:b2:36:91:df: f6:0d:22:64:0d:f9:08:48:af:93:f6:22:de:91:d5: 41:37:af:75:b8:70:d9:f8:2f:51:4e:c3:24:4c:1f: 2a:26:97:7a:2b:fd:39:c2:35:20:3d:73:d0:9a:86: c2:c4:3b:8e:e0:05:26:4d:02:71:d5:4d:35:fb:f5: 94:00:69:e5:73:67:08:1f:67:04:92:e6:a5:9c:3d: bd:8b:ec:cc:8f:a5:f4:bd:80:ff:9e:8c:4d:b1:64: b2:33:aa:91:a3:cb:cb:0b:84:43:d5:8d:99:cb:ce: da:99:7c:15:22:63:63:ea:90:52:d3:f9:c6:91:85: d0:02:aa:a3:7f:b0:44:ad:a5:b2:64:67:5c:7d:3b: d6:e5:12:f2:ef:7c:93:20:53:b7:08:a7:ee:99:88: 92:b6:f7:5d:0e:67:fe:2f:e4:0b:22:d5:65:a6:23: cf:f1:c3:fe:7e:b0:da:e3:13:ef:44:07:b7:54:b9: c2:5c:ee:36:d8:e7:f4:c0:a2:cf:bf:57:72:c9:85: d6:ac:e2:a2:89:3d:d9:cb:cc:bd:1a:af:89:29:9c: 6d:18:51:99:ca:92:56:cf:f1:fa:27:a3:15:d1:95: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5B:4E:CA:26:CB:2A:E0:C5:44:B9:E0:35:7F:3C:02:0B:A0:F9:54 X509v3 Authority Key Identifier: keyid:D3:B0:B1:2C:00:ED:A4:8B:D2:7B:03:AE:46:20:E5:1B:4D:5B:35:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/D3B0B12C00EDA48BD27B03AE4620E51B4D5B35B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:22:b9:a5:da:22:33:a2:91:b1:a4:1e:c1:b9:88:63:3d:ee: 37:fc:43:c2:83:21:53:46:cb:f4:54:87:cf:36:61:bd:0e:c1: f6:9a:0f:47:8b:94:75:a6:6d:c7:28:e5:db:19:cf:6f:e4:34: a1:cd:5e:d8:25:69:fe:03:5b:a0:0e:4e:f4:58:d6:4c:6a:0f: 90:15:c3:ac:c8:d6:c0:a3:17:9c:a8:53:c3:58:bd:82:9c:2a: bd:07:1e:b8:17:04:1d:ce:6c:3c:00:6b:e7:18:65:79:9f:41: cf:93:70:65:f7:db:47:19:c6:92:2d:8d:1d:68:29:fd:85:16: 50:48:a1:c8:7f:eb:ae:e9:62:3b:10:fa:f0:8f:ca:a7:0d:45: cd:9d:64:57:3c:c5:b3:2f:7b:d6:0c:87:22:8e:54:f8:b8:89: 27:df:a5:09:2c:76:be:b9:e3:ee:b4:15:c6:15:1c:a1:36:d3: 79:42:07:69:10:d0:8a:10:a3:62:38:bf:9e:b7:6a:0f:5b:5a: 06:32:1c:ce:a1:65:83:cd:4b:cf:d0:76:79:a2:a5:78:70:a7: dd:34:1c:91:04:33:47:40:37:e6:e2:53:23:51:1d:df:8c:10: 4f:64:3e:49:f0:0c:4c:71:19:bf:89:b7:89:3b:3e:bd:94:ef: 21:c4:38:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOuGxNojsIHZGGtXMmboNKlvl69kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEIxMkMwMEVEQTQ4QkQyN0IwM0FFNDYyMEU1MUI0 RDVCMzVCOTAeFw0yNjA2MTgxMjU3NDNaFw0yNjA2MTkxNTUyNDNaMDMxMTAvBgNV BAMTKDFFNUI0RUNBMjZDQjJBRTBDNTQ0QjlFMDM1N0YzQzAyMEJBMEY5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8BCAD+sugK+rCXk20Js1UBxg qtWqTVrdsjaR3/YNImQN+QhIr5P2It6R1UE3r3W4cNn4L1FOwyRMHyoml3or/TnC NSA9c9CahsLEO47gBSZNAnHVTTX79ZQAaeVzZwgfZwSS5qWcPb2L7MyPpfS9gP+e jE2xZLIzqpGjy8sLhEPVjZnLztqZfBUiY2PqkFLT+caRhdACqqN/sEStpbJkZ1x9 O9blEvLvfJMgU7cIp+6ZiJK2910OZ/4v5Asi1WWmI8/xw/5+sNrjE+9EB7dUucJc 7jbY5/TAos+/V3LJhdas4qKJPdnLzL0ar4kpnG0YUZnKklbP8fonoxXRlfsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHltOyibLKuDFRLngNX88Agug+VQwHwYDVR0j BBgwFoAU07CxLADtpIvSewOuRiDlG01bNbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkyZTA3ZjgtMWE0OC00MzkxLWE2YTUtOGU0ZTM5Yzg1ODhhLzAvRDNCMEIxMkMw MEVEQTQ4QkQyN0IwM0FFNDYyMEU1MUI0RDVCMzVCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0IwQjEyQzAwRURBNDhCRDI3QjAzQUU0NjIwRTUxQjRENUIz NUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvRDNCMEIxMkMwMEVEQTQ4QkQyN0IwM0FFNDYyMEU1 MUI0RDVCMzVCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUiuaXaIjOikbGkHsG5iGM97jf8Q8KDIVNG y/RUh882Yb0OwfaaD0eLlHWmbcco5dsZz2/kNKHNXtglaf4DW6AOTvRY1kxqD5AV w6zI1sCjF5yoU8NYvYKcKr0HHrgXBB3ObDwAa+cYZXmfQc+TcGX320cZxpItjR1o Kf2FFlBIoch/667pYjsQ+vCPyqcNRc2dZFc8xbMve9YMhyKOVPi4iSffpQksdr65 4+60FcYVHKE203lCB2kQ0IoQo2I4v563ag9bWgYyHM6hZYPNS8/QdnmipXhwp900 HJEEM0dAN+biUyNRHd+MEE9kPknwDExxGb+Jt4k7Pr2U7yHEOMk= -----END CERTIFICATE-----Generated at Thu Jun 18 19:06:17 2026 by rpki-client