$ rpki-client -vvf rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft File: C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft (raw, json) Hash identifier: hx/OfQLa2C9cOEdzlKUIGAwJ4ksWnDXTCPO2E8FSBOI= Subject key identifier: F3:66:A8:CA:FD:EA:02:C5:EC:AD:70:E8:33:6C:E2:64:EB:2E:C0:B0 Authority key identifier: C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B Certificate issuer: /CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B Certificate serial: 7A0BFC275924D58655D9DA30E22D7942A93341B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft Manifest number: 47 Signing time: Wed 24 Jun 2026 00:56:39 +0000 Manifest this update: Wed 24 Jun 2026 00:51:39 +0000 Manifest next update: Thu 25 Jun 2026 01:01:39 +0000 Files and hashes: 1: C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl (hash: Y37jUwVZ+iN0VY7hGnT4Q9VLK36fbBnShzEk+njECbw=) 2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: /TEOvHICrNlzqHKdTSQimWH4eZASaMfqjyKyEfSs2B4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0b:fc:27:59:24:d5:86:55:d9:da:30:e2:2d:79:42:a9:33:41:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B Validity Not Before: Jun 24 00:51:39 2026 GMT Not After : Jun 25 01:01:39 2026 GMT Subject: CN=F366A8CAFDEA02C5ECAD70E8336CE264EB2EC0B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fd:61:4d:71:ae:5a:6c:dd:4f:1a:58:5a:9b: ab:7d:0b:df:87:15:cd:4f:d3:0c:0b:2b:68:24:cc: 2c:03:5f:38:a7:f1:2f:56:8d:c7:b1:db:42:37:eb: a0:a0:20:76:8a:08:f1:81:88:21:a2:ea:d4:c9:96: f1:ed:7b:3a:79:11:43:e0:6f:3d:73:2f:5b:a3:a7: 5d:75:93:dc:5f:e5:d2:4b:0d:a3:af:3d:40:89:e9: 56:64:76:18:91:37:53:75:fe:e0:04:c0:af:14:dc: 7a:ef:27:36:1a:06:07:ff:3c:38:eb:4e:30:2a:0c: 70:96:b9:80:3e:a5:f1:51:a8:1f:c7:4c:40:32:dd: ad:24:42:13:f5:fc:93:c3:83:02:b3:7a:37:e9:12: 0c:99:4a:d9:2e:5e:b1:47:27:8b:31:02:da:f1:a6: c8:28:3b:9e:93:2a:eb:f3:f5:cc:87:62:91:32:ba: fe:f7:0f:46:4c:47:07:b8:9a:ef:13:ba:d9:3b:e4: 95:ee:af:26:88:92:27:d2:a6:bb:de:c4:01:a9:34: a2:2b:48:f5:06:63:45:8b:d3:56:8e:7d:c6:be:f7: fe:27:54:7d:48:a1:6a:fb:50:74:ab:86:88:a6:da: ba:7d:57:5e:1b:b4:3c:5e:d4:3d:9f:9f:0b:c3:a8: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:66:A8:CA:FD:EA:02:C5:EC:AD:70:E8:33:6C:E2:64:EB:2E:C0:B0 X509v3 Authority Key Identifier: keyid:C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6a:c1:df:7c:b9:c4:3f:15:61:cb:6c:0a:47:2e:41:b0:2a: 77:02:b0:69:82:75:6c:c7:63:75:c8:fa:12:cb:4e:40:d7:13: 92:4b:6b:ed:9b:83:e6:ae:4a:60:a2:ba:83:4b:ff:50:e8:b6: 32:8c:0e:60:b8:f0:86:6d:be:d2:d8:60:ce:a7:77:0d:86:e6: 43:1c:8f:b5:11:6f:2f:88:4a:33:e9:f2:5e:b1:3f:28:f0:4e: 8a:72:9d:d1:55:77:7b:64:e6:4e:d8:a9:3a:d9:f6:f0:4e:b2: 62:2a:d7:91:56:12:db:b6:fd:55:5b:c4:dc:ef:95:5e:39:8e: 54:62:23:44:6e:04:82:ed:08:c7:43:de:59:9d:c3:80:b5:6a: 48:b6:3d:3e:19:3e:74:76:03:61:5d:81:28:c7:f5:d4:dc:81: 26:f2:cb:a7:6f:7c:b3:cf:39:ce:6d:2d:45:6e:3f:9d:26:24: 4c:df:72:cb:9a:0d:29:e4:86:3f:8e:47:e9:de:a3:fe:9c:aa: 01:fc:6e:e8:45:22:da:c7:a1:e5:47:7b:64:b5:1f:6c:6a:d5: 01:39:5b:ce:ed:2f:42:a5:cd:9d:02:96:d1:3e:bb:f4:64:33: b3:d4:a6:22:18:6d:3d:74:29:13:fa:8e:df:d0:80:8b:b3:a1: 61:25:73:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUegv8J1kk1YZV2dow4i15QqkzQbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NUVGODZDM0VFRDM2NDZCMjZEREE3MTc5NTJDREJD MUFGOTM4QjAeFw0yNjA2MjQwMDUxMzlaFw0yNjA2MjUwMTAxMzlaMDMxMTAvBgNV BAMTKEYzNjZBOENBRkRFQTAyQzVFQ0FENzBFODMzNkNFMjY0RUIyRUMwQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM/WFNca5abN1PGlham6t9C9+H Fc1P0wwLK2gkzCwDXzin8S9Wjcex20I366CgIHaKCPGBiCGi6tTJlvHtezp5EUPg bz1zL1ujp111k9xf5dJLDaOvPUCJ6VZkdhiRN1N1/uAEwK8U3HrvJzYaBgf/PDjr TjAqDHCWuYA+pfFRqB/HTEAy3a0kQhP1/JPDgwKzejfpEgyZStkuXrFHJ4sxAtrx psgoO56TKuvz9cyHYpEyuv73D0ZMRwe4mu8Tutk75JXuryaIkifSprvexAGpNKIr SPUGY0WL01aOfca+9/4nVH1IoWr7UHSrhoim2rp9V14btDxe1D2fnwvDqLn/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU82aoyv3qAsXsrXDoM2ziZOsuwLAwHwYDVR0j BBgwFoAUxoXvhsPu02RrJt2nF5Us28Gvk4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3ZTViMGUtNTk2NC00NjNmLTgwNDEtMzM3ZjgwNTU2NDNjLzAvQzY4NUVGODZD M0VFRDM2NDZCMjZEREE3MTc5NTJDREJDMUFGOTM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg1RUY4NkMzRUVEMzY0NkIyNkREQTcxNzk1MkNEQkMxQUY5 MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvQzY4NUVGODZDM0VFRDM2NDZCMjZEREE3MTc5NTJD REJDMUFGOTM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9qwd98ucQ/FWHLbApHLkGwKncCsGmCdWzH Y3XI+hLLTkDXE5JLa+2bg+auSmCiuoNL/1DotjKMDmC48IZtvtLYYM6ndw2G5kMc j7URby+ISjPp8l6xPyjwTopyndFVd3tk5k7YqTrZ9vBOsmIq15FWEtu2/VVbxNzv lV45jlRiI0RuBILtCMdD3lmdw4C1aki2PT4ZPnR2A2FdgSjH9dTcgSbyy6dvfLPP Oc5tLUVuP50mJEzfcsuaDSnkhj+OR+neo/6cqgH8buhFItrHoeVHe2S1H2xq1QE5 W87tL0KlzZ0CltE+u/RkM7PUpiIYbT10KRP6jt/QgIuzoWElc4A= -----END CERTIFICATE-----Generated at Wed Jun 24 15:38:22 2026 by rpki-client