$ rpki-client -vvf rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft File: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft (raw, json) Hash identifier: c2QXZQHw9dFcPahz5gHTDQTOGyEs6e969i5BZaGDMDE= Subject key identifier: B3:50:C2:CA:F7:51:7B:99:CB:DE:47:CD:3C:84:DF:C4:43:AD:4C:CA Authority key identifier: C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C Certificate issuer: /CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Certificate serial: 55E331D8F8BB5FE73A6308B32858FACB47279531 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft Manifest number: 36 Signing time: Thu 11 Jun 2026 01:18:11 +0000 Manifest this update: Thu 11 Jun 2026 01:13:11 +0000 Manifest next update: Fri 12 Jun 2026 04:49:11 +0000 Files and hashes: 1: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 67eHKrfnUV+o5bdh8AJ2qRePKkWRvK0EPB7qFbO8S2g=) 2: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: hbxsy5rYM2ui/y8kSQK8vRtJw5Os4ztQgliynYBu9Sg=) 3: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: +rxATWvogOmG58QtPOl3t5ZnCAWvuClI+FAmj6pibBE=) 4: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl (hash: +DbChtvfOmJXm4vYeovdpEPPBbZjGSV5zeJ28O+OGkQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 04:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e3:31:d8:f8:bb:5f:e7:3a:63:08:b3:28:58:fa:cb:47:27:95:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Validity Not Before: Jun 11 01:13:11 2026 GMT Not After : Jun 12 04:49:11 2026 GMT Subject: CN=B350C2CAF7517B99CBDE47CD3C84DFC443AD4CCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a1:12:3e:1a:4a:bc:35:f8:d9:d2:23:48:77: 62:c0:48:c0:db:c6:e5:84:c1:cc:8a:56:5c:fc:53: ab:20:0b:e9:02:2b:86:30:e9:b9:5a:1c:7d:af:8b: 6c:73:a3:bb:b3:f3:73:67:cd:ee:14:5d:50:6f:45: 72:4f:9b:77:83:ca:dd:67:bd:38:10:1c:2b:f8:1f: 91:3c:2c:13:31:ea:17:9d:05:14:cf:f9:00:88:9f: 6b:5d:51:61:b4:85:b3:29:08:96:e6:dd:b9:30:1f: 95:af:c8:96:c3:15:82:8f:bd:54:62:12:4e:2c:ab: 55:d3:da:8c:ef:86:4b:f3:b1:bf:99:34:a2:dc:6f: 1e:80:52:38:09:d8:4b:fd:0a:81:f2:a7:08:a0:81: 87:2a:ae:ef:8c:66:7d:bb:41:d4:36:0c:89:0b:bf: 18:40:58:70:1d:de:ac:16:ac:e3:60:c0:60:1e:3a: 5b:86:8c:b2:d7:05:54:d4:39:70:a3:7c:de:a9:c9: 1c:9b:1a:dc:f1:15:45:c5:60:54:d6:cc:dd:64:73: f6:51:5e:f7:23:d7:cc:20:9b:f6:85:ab:5e:39:44: 90:16:27:63:e5:0f:63:6f:ad:f9:bf:18:81:10:db: bf:d6:d1:24:59:81:bd:39:24:a7:34:f6:b5:6c:19: 68:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:50:C2:CA:F7:51:7B:99:CB:DE:47:CD:3C:84:DF:C4:43:AD:4C:CA X509v3 Authority Key Identifier: keyid:C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b4:04:39:fd:00:ed:28:c1:75:14:5e:68:5f:f1:86:ef:63: fd:c5:34:f9:81:87:1c:71:03:b4:22:a8:3e:98:b3:3a:8e:f2: ad:6a:0d:f2:b0:93:b6:d7:d9:93:df:e6:3c:29:5f:f3:2c:61: 11:81:b4:2c:31:3e:92:cd:b1:26:17:49:c8:40:0b:bf:50:c1: 4e:e5:1b:bf:4b:30:8a:7d:cb:11:73:0b:cf:8a:24:09:59:47: fa:75:17:92:f0:b1:e8:71:9f:f5:8f:fc:ee:73:9e:29:5c:6d: 1d:5e:aa:6d:99:5a:2b:80:20:64:fc:6d:95:d3:cc:50:34:4e: 7e:08:60:0e:c3:cc:ff:ac:d9:c9:6e:74:cd:2b:7b:77:b0:ec: 55:76:27:b8:ba:38:ea:9d:67:6d:6f:78:2e:b9:e2:03:2b:c7: 7b:52:7b:ae:f6:c3:82:0c:48:cd:89:ef:8a:a2:3a:11:81:13: 76:dd:fb:ff:ef:26:c9:6c:28:e3:21:91:9c:69:bf:59:5f:e9: 1d:a3:00:81:63:f8:cf:01:1d:7a:e0:9c:69:14:1e:a2:e3:f8: c6:bc:0c:b0:56:4c:ad:05:c3:4e:e2:b4:b8:37:80:9f:a7:7b: 4a:40:8c:32:65:5e:e6:e0:56:54:ef:65:a0:b2:a3:e1:9b:84: 67:10:59:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVeMx2Pi7X+c6YwizKFj6y0cnlTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzRE MEEwNTI2QzAeFw0yNjA2MTEwMTEzMTFaFw0yNjA2MTIwNDQ5MTFaMDMxMTAvBgNV BAMTKEIzNTBDMkNBRjc1MTdCOTlDQkRFNDdDRDNDODRERkM0NDNBRDRDQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyoRI+Gkq8NfjZ0iNId2LASMDb xuWEwcyKVlz8U6sgC+kCK4Yw6blaHH2vi2xzo7uz83Nnze4UXVBvRXJPm3eDyt1n vTgQHCv4H5E8LBMx6hedBRTP+QCIn2tdUWG0hbMpCJbm3bkwH5WvyJbDFYKPvVRi Ek4sq1XT2ozvhkvzsb+ZNKLcbx6AUjgJ2Ev9CoHypwiggYcqru+MZn27QdQ2DIkL vxhAWHAd3qwWrONgwGAeOluGjLLXBVTUOXCjfN6pyRybGtzxFUXFYFTWzN1kc/ZR Xvcj18wgm/aFq145RJAWJ2PlD2Nvrfm/GIEQ27/W0SRZgb05JKc09rVsGWgLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs1DCyvdRe5nL3kfNPITfxEOtTMowHwYDVR0j BBgwFoAUwEM8/C4GSnf9yze0nCyTxNCgUmwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRjZjYzMmQtZDYxYS00ODI2LWI1NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMy RTA2NEE3N0ZEQ0IzN0I0OUMyQzkzQzREMEEwNTI2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMDQzM0NGQzJFMDY0QTc3RkRDQjM3QjQ5QzJDOTNDNEQwQTA1 MjZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvQzA0MzNDRkMyRTA2NEE3N0ZEQ0IzN0I0OUMyQzkz QzREMEEwNTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC60BDn9AO0owXUUXmhf8YbvY/3FNPmBhxxx A7QiqD6YszqO8q1qDfKwk7bX2ZPf5jwpX/MsYRGBtCwxPpLNsSYXSchAC79QwU7l G79LMIp9yxFzC8+KJAlZR/p1F5Lwsehxn/WP/O5znilcbR1eqm2ZWiuAIGT8bZXT zFA0Tn4IYA7DzP+s2cludM0re3ew7FV2J7i6OOqdZ21veC654gMrx3tSe672w4IM SM2J74qiOhGBE3bd+//vJslsKOMhkZxpv1lf6R2jAIFj+M8BHXrgnGkUHqLj+Ma8 DLBWTK0Fw07itLg3gJ+ne0pAjDJlXubgVlTvZaCyo+GbhGcQWYk= -----END CERTIFICATE-----Generated at Thu Jun 11 20:42:23 2026 by rpki-client