$ rpki-client -vvf rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft File: C3CDEFC1D42DBC526894B49382D693AB81922151.mft (raw, json) Hash identifier: VfGVSeOWxJermBCydR6cgXpemmljDGnhf8OXdFOT37o= Subject key identifier: 96:02:B2:7A:B6:83:1B:2C:5F:4C:F0:0D:87:35:70:83:70:D4:06:0E Authority key identifier: C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51 Certificate issuer: /CN=C3CDEFC1D42DBC526894B49382D693AB81922151 Certificate serial: 2FE7E9887FCC173419E84A9AEDC57A2A5B03F431 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 12:51:25 +0000 Manifest this update: Fri 19 Jun 2026 12:46:25 +0000 Manifest next update: Sat 20 Jun 2026 15:34:25 +0000 Files and hashes: 1: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: U7/0nIu+Bj5x9bRwZDPcfh3tl44rRdCnsM5J63akTiA=) 2: C3CDEFC1D42DBC526894B49382D693AB81922151.crl (hash: 1cNrK9vz6X57n8oyjdZYWB/DBVYUw1Lr8xld2Iy/y4I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 15:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e7:e9:88:7f:cc:17:34:19:e8:4a:9a:ed:c5:7a:2a:5b:03:f4:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CDEFC1D42DBC526894B49382D693AB81922151 Validity Not Before: Jun 19 12:46:25 2026 GMT Not After : Jun 20 15:34:25 2026 GMT Subject: CN=9602B27AB6831B2C5F4CF00D8735708370D4060E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f2:43:23:d2:aa:4c:bc:90:13:b3:48:a7:a1: 53:06:f7:20:fb:85:ef:48:78:25:78:dd:a3:74:70: 49:cc:15:06:6c:cb:e3:af:97:c9:43:1a:5b:33:ca: ec:c4:15:9b:e0:fb:b7:f8:f7:06:aa:d7:2d:59:cb: fc:9d:cc:8b:35:95:11:2f:11:35:c6:21:84:6b:32: e3:61:41:fe:f3:51:ce:e0:00:a4:fe:d1:db:a8:2e: 9b:c1:d4:88:cc:f3:a9:2e:96:f5:2b:72:2b:7f:d8: 00:79:0f:a4:d1:2a:b4:0a:74:66:fa:1b:b6:1e:16: 7a:f3:e1:bd:1e:16:6c:54:6f:b8:ee:13:20:ac:43: 1f:b0:bf:ff:44:8a:f5:8a:c5:00:97:26:bb:5a:ea: b9:cf:f7:46:2b:9f:88:cb:63:20:e8:5a:6a:8c:bd: 94:bf:91:cc:57:ae:3b:5d:66:b6:1c:93:75:81:17: c2:09:31:2b:0a:17:dc:1b:70:e8:99:b7:f6:86:65: 5e:b1:27:74:6f:9b:69:ab:14:df:6b:7c:3b:c4:3b: 9a:35:8b:43:33:00:5b:78:89:49:82:3b:47:9b:e7: 99:bf:18:a0:e3:2d:69:8e:60:75:c7:ab:5a:22:5f: a0:8f:9c:c1:f7:d3:5b:e5:17:7c:fd:61:5f:a0:58: 91:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:02:B2:7A:B6:83:1B:2C:5F:4C:F0:0D:87:35:70:83:70:D4:06:0E X509v3 Authority Key Identifier: keyid:C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:42:bd:b0:34:97:49:4f:ab:4c:2b:69:c6:cd:38:58:b5:2f: 00:d4:88:ea:2f:a1:7f:61:39:52:fd:76:6f:35:c8:af:98:b7: d1:30:cd:1f:f8:d6:3c:a4:09:ce:bb:eb:35:36:d9:8b:69:44: 5f:1a:cb:46:95:fc:de:81:ed:8c:b0:96:0a:58:51:f6:9c:c1: 05:97:08:33:2c:86:75:1f:c9:fc:fd:72:53:2f:f4:05:2b:15: 0b:9b:51:88:c7:bf:f3:52:92:e7:7a:b8:23:e7:0f:cb:4f:c7: ff:b1:96:92:78:f9:cb:fd:06:20:94:b3:7a:7d:1f:c6:a1:37: 44:6f:37:2a:35:40:ad:a9:01:02:38:09:cc:8f:e0:76:7c:42: 09:29:e1:df:6d:ae:1f:81:fd:a8:b3:2d:1e:20:12:8d:d1:e7: 4d:24:0e:fc:08:6b:2a:76:50:d2:84:57:39:f7:cc:15:14:01: a9:bf:0f:eb:b4:5d:cf:da:35:e5:14:e9:e3:84:dc:a7:02:49: d1:ce:a1:99:09:61:b4:07:5b:9e:9b:9b:53:23:01:ea:08:c5: 27:38:93:9c:91:54:08:0a:72:97:10:8f:17:76:4a:ac:e4:de: 87:1b:a9:bb:91:a7:0c:fc:d4:02:2c:c1:0d:5d:8c:e7:79:3a: 06:92:0f:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+fpiH/MFzQZ6Eqa7cV6KlsD9DEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDREVGQzFENDJEQkM1MjY4OTRCNDkzODJENjkzQUI4 MTkyMjE1MTAeFw0yNjA2MTkxMjQ2MjVaFw0yNjA2MjAxNTM0MjVaMDMxMTAvBgNV BAMTKDk2MDJCMjdBQjY4MzFCMkM1RjRDRjAwRDg3MzU3MDgzNzBENDA2MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR8kMj0qpMvJATs0inoVMG9yD7 he9IeCV43aN0cEnMFQZsy+Ovl8lDGlszyuzEFZvg+7f49waq1y1Zy/ydzIs1lREv ETXGIYRrMuNhQf7zUc7gAKT+0duoLpvB1IjM86kulvUrcit/2AB5D6TRKrQKdGb6 G7YeFnrz4b0eFmxUb7juEyCsQx+wv/9EivWKxQCXJrta6rnP90Yrn4jLYyDoWmqM vZS/kcxXrjtdZrYck3WBF8IJMSsKF9wbcOiZt/aGZV6xJ3Rvm2mrFN9rfDvEO5o1 i0MzAFt4iUmCO0eb55m/GKDjLWmOYHXHq1oiX6CPnMH301vlF3z9YV+gWJGlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlgKyeraDGyxfTPANhzVwg3DUBg4wHwYDVR0j BBgwFoAUw83vwdQtvFJolLSTgtaTq4GSIVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVkZjUxMmYtMGQxYS00YjA5LWI5YTQtYTljNTI1ZWMyODE3LzAvQzNDREVGQzFE NDJEQkM1MjY4OTRCNDkzODJENjkzQUI4MTkyMjE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0NERUZDMUQ0MkRCQzUyNjg5NEI0OTM4MkQ2OTNBQjgxOTIy MTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvQzNDREVGQzFENDJEQkM1MjY4OTRCNDkzODJENjkz QUI4MTkyMjE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdCvbA0l0lPq0wracbNOFi1LwDUiOovoX9h OVL9dm81yK+Yt9EwzR/41jykCc676zU22YtpRF8ay0aV/N6B7YywlgpYUfacwQWX CDMshnUfyfz9clMv9AUrFQubUYjHv/NSkud6uCPnD8tPx/+xlpJ4+cv9BiCUs3p9 H8ahN0RvNyo1QK2pAQI4CcyP4HZ8Qgkp4d9trh+B/aizLR4gEo3R500kDvwIayp2 UNKEVzn3zBUUAam/D+u0Xc/aNeUU6eOE3KcCSdHOoZkJYbQHW56bm1MjAeoIxSc4 k5yRVAgKcpcQjxd2Sqzk3ocbqbuRpwz81AIswQ1djOd5OgaSDww= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:48 2026 by rpki-client