$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft File: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft (raw, json) Hash identifier: 4V1I/rCGJgrfY1JuA4jwitD8u+dUB4zvKxQWJ4CTbrY= Subject key identifier: 98:63:8D:8B:05:97:E9:7C:E4:64:F8:5A:AA:FA:77:B5:1F:96:63:70 Authority key identifier: DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 Certificate issuer: /CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Certificate serial: 454E246B839A0BA9C91370FDAFA3C8542A1ED21D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 19:49:53 +0000 Manifest this update: Fri 19 Jun 2026 19:44:53 +0000 Manifest next update: Sat 20 Jun 2026 21:02:53 +0000 Files and hashes: 1: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: SGuts0/+uyJce0bHFyKC5/STYlo5gf3uXrTdV1Kngrs=) 2: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: Bl/k50LueSgJjg8VDKjdeOLA5vAz35PavygXYOL9fXU=) 3: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: cHi+wDASSXBvEYUwne4ghJo+D7FzU4toHGViW0cqxos=) 4: DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl (hash: l0iLpH+HAcBxLRRov5y/8SpcoaC5AdlOLCHy3Fh5Ttc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4e:24:6b:83:9a:0b:a9:c9:13:70:fd:af:a3:c8:54:2a:1e:d2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425 Validity Not Before: Jun 19 19:44:53 2026 GMT Not After : Jun 20 21:02:53 2026 GMT Subject: CN=98638D8B0597E97CE464F85AAAFA77B51F966370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:72:d3:3b:e9:e5:e3:b8:11:e3:9b:56:1c:8c: 69:71:03:7e:03:65:52:a6:b3:8a:ab:bc:58:eb:cd: c9:58:70:a1:f7:d4:f6:75:21:c9:2d:d4:b9:62:c5: 0b:4a:67:52:ef:13:5d:dd:01:44:52:9f:09:81:d6: 34:bb:11:8e:75:60:c6:6a:9a:62:50:b1:94:78:bb: c4:0c:51:83:c5:fa:79:f7:8a:8a:09:05:0d:8d:f0: 3e:c2:48:f1:0b:6a:bf:f3:b2:66:f5:09:a9:34:07: c3:f1:db:4d:b8:c3:aa:36:82:5e:61:43:68:14:39: 06:f4:3b:77:14:10:e6:1f:aa:30:81:e0:09:43:e9: af:a1:a7:c2:f4:9e:79:e7:04:5f:60:95:ea:b6:7c: 6b:26:e3:51:d2:7b:5d:4d:d0:39:44:8e:02:dc:84: b4:fa:58:32:3d:6d:83:de:b2:3f:31:5e:54:b2:6d: 25:92:4a:35:e0:c8:b8:0d:36:f4:1c:42:d2:94:40: 04:26:14:44:cf:42:4c:7c:73:96:c7:ce:0a:1a:43: ff:d4:0f:24:65:ef:c4:02:af:cc:c9:52:38:f7:d6: 90:01:09:91:aa:60:a3:ca:2c:ca:2c:c4:e1:4a:8d: e6:98:02:5c:cc:96:ea:08:77:f8:b0:fe:4d:b5:b9: 2f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:63:8D:8B:05:97:E9:7C:E4:64:F8:5A:AA:FA:77:B5:1F:96:63:70 X509v3 Authority Key Identifier: keyid:DF:34:17:50:0C:E0:95:64:B4:A4:CE:AF:ED:E4:A7:6C:DF:A5:A4:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/DF3417500CE09564B4A4CEAFEDE4A76CDFA5A425.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:3f:81:2b:d2:f1:4a:90:56:6d:f0:4f:86:f2:2d:5a:42:45: 91:4d:29:d1:40:49:ee:de:c7:7b:80:c1:73:69:10:cf:69:d4: f4:e1:65:28:e3:27:f9:1d:4e:f1:d1:42:29:08:0e:b6:e2:6c: 58:9c:92:08:03:2e:9e:cd:5f:da:ee:26:bb:b7:92:ee:b5:62: d6:8e:25:e5:90:48:ef:42:14:79:8a:5f:2b:b7:9e:33:a8:2b: e6:bf:59:e8:d2:96:25:2a:d6:a5:e8:85:a9:78:4b:ba:28:7d: d6:8a:7e:50:1b:f7:18:3a:e5:d8:10:5d:5b:54:22:9e:ac:e0: 82:77:af:75:fa:0c:7e:87:52:b7:11:d7:42:c6:18:5a:8c:76: b0:67:75:a1:ed:23:73:1c:6e:ad:7a:e7:c0:bf:23:a8:f3:30: 6e:97:76:f3:5e:ae:61:a1:6c:0e:59:b4:53:2a:9a:37:0f:a7: 58:f1:63:59:dd:bc:e2:26:29:fe:5d:7f:ef:42:8c:85:af:9c: 30:cb:69:e7:c6:3b:08:fd:84:d4:7b:f4:b2:e1:8f:b4:3c:2f: af:20:e6:bb:33:55:23:ec:0b:5d:8c:26:15:23:83:5d:ac:53: 46:47:77:db:df:52:e4:2c:06:99:69:7d:b4:69:db:04:b7:14: e2:b2:48:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURU4ka4OaC6nJE3D9r6PIVCoe0h0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3NkNE RkE1QTQyNTAeFw0yNjA2MTkxOTQ0NTNaFw0yNjA2MjAyMTAyNTNaMDMxMTAvBgNV BAMTKDk4NjM4RDhCMDU5N0U5N0NFNDY0Rjg1QUFBRkE3N0I1MUY5NjYzNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuctM76eXjuBHjm1YcjGlxA34D ZVKms4qrvFjrzclYcKH31PZ1Ickt1LlixQtKZ1LvE13dAURSnwmB1jS7EY51YMZq mmJQsZR4u8QMUYPF+nn3iooJBQ2N8D7CSPELar/zsmb1Cak0B8Px2024w6o2gl5h Q2gUOQb0O3cUEOYfqjCB4AlD6a+hp8L0nnnnBF9gleq2fGsm41HSe11N0DlEjgLc hLT6WDI9bYPesj8xXlSybSWSSjXgyLgNNvQcQtKUQAQmFETPQkx8c5bHzgoaQ//U DyRl78QCr8zJUjj31pABCZGqYKPKLMosxOFKjeaYAlzMluoId/iw/k21uS8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmGONiwWX6XzkZPhaqvp3tR+WY3AwHwYDVR0j BBgwFoAU3zQXUAzglWS0pM6v7eSnbN+lpCUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM3ODVlNjUtNTFlMi00YjFiLTgyZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAw Q0UwOTU2NEI0QTRDRUFGRURFNEE3NkNERkE1QTQyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjM0MTc1MDBDRTA5NTY0QjRBNENFQUZFREU0QTc2Q0RGQTVB NDI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvREYzNDE3NTAwQ0UwOTU2NEI0QTRDRUFGRURFNEE3 NkNERkE1QTQyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGA/gSvS8UqQVm3wT4byLVpCRZFNKdFASe7e x3uAwXNpEM9p1PThZSjjJ/kdTvHRQikIDrbibFickggDLp7NX9ruJru3ku61YtaO JeWQSO9CFHmKXyu3njOoK+a/WejSliUq1qXohal4S7oofdaKflAb9xg65dgQXVtU Ip6s4IJ3r3X6DH6HUrcR10LGGFqMdrBndaHtI3Mcbq1658C/I6jzMG6XdvNermGh bA5ZtFMqmjcPp1jxY1ndvOImKf5df+9CjIWvnDDLaefGOwj9hNR79LLhj7Q8L68g 5rszVSPsC12MJhUjg12sU0ZHd9vfUuQsBplpfbRp2wS3FOKySP4= -----END CERTIFICATE-----Generated at Sat Jun 20 09:14:56 2026 by rpki-client