$ rpki-client -vvf rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft File: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft (raw, json) Hash identifier: ecW+YqWArMIJ5mZP+0zvjHaHfhWtSNT0BSvbK0qDpk0= Subject key identifier: 01:CA:5C:FA:90:6A:A4:E7:C8:EB:0D:3A:87:84:85:AB:E8:B3:C1:84 Authority key identifier: 1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 Certificate issuer: /CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Certificate serial: 0E38082C467E65C083EF137D2C0DDF83DCCAA735 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 23:05:36 +0000 Manifest this update: Wed 17 Jun 2026 23:00:36 +0000 Manifest next update: Fri 19 Jun 2026 00:47:36 +0000 Files and hashes: 1: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: 3BHAnWW4TLEpO1A4dud6ZoedASP5ZMDsQskvXQSf2zg=) 2: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl (hash: w4MKUShbxWSYRgDWNOjgIU0kbSS7ZenZfgzOKh2vukc=) 3: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: uWBx9zBBtj0stXgPd31iD2z2lhamwuv83R9Ofcw0CoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 00:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:38:08:2c:46:7e:65:c0:83:ef:13:7d:2c:0d:df:83:dc:ca:a7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Validity Not Before: Jun 17 23:00:36 2026 GMT Not After : Jun 19 00:47:36 2026 GMT Subject: CN=01CA5CFA906AA4E7C8EB0D3A878485ABE8B3C184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b8:0e:e4:0b:5a:b8:0a:07:cf:77:af:fd:e7: c3:4b:9b:ba:41:f3:69:cf:33:06:df:86:4e:e1:07: 3c:5b:25:39:e5:bc:5c:49:aa:75:46:9f:27:ce:66: 8c:0a:18:fd:14:32:48:d6:30:7f:b6:a3:f4:f1:ad: 79:90:b1:f3:3c:72:d4:d4:a9:9c:d7:12:3c:2d:eb: ca:f0:e0:9d:48:dd:ee:27:94:cb:31:e6:1f:64:bc: e8:69:78:9a:cc:60:22:b2:71:ba:55:02:de:b8:62: 36:ab:87:02:ef:9b:c5:6b:64:e4:9a:42:4f:ec:02: 9c:41:fa:a1:e1:9a:12:18:c0:0f:43:a4:17:ac:36: b2:30:9a:21:7c:96:70:75:74:8c:c8:32:b5:f1:d7: 56:1e:d1:d2:be:5e:58:95:85:77:b5:34:54:7d:7e: 7a:f4:64:0c:bf:58:9b:96:fe:3e:1a:86:ce:cf:b4: 11:d8:f1:83:6e:13:55:01:2d:25:9a:b8:66:f7:f8: f6:22:88:06:10:24:53:e7:e4:3f:81:41:28:19:28: ae:81:dd:5d:ed:85:c2:03:81:78:bd:50:e3:a8:75: 2a:bd:d4:c4:08:65:5f:1d:eb:02:a4:c6:a5:3d:73: fc:e4:b9:df:1e:6b:15:e7:9f:cd:cf:fc:77:09:d6: 22:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CA:5C:FA:90:6A:A4:E7:C8:EB:0D:3A:87:84:85:AB:E8:B3:C1:84 X509v3 Authority Key Identifier: keyid:1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a2:0d:a8:c2:a8:58:4f:71:b3:19:8f:a4:c5:4e:dd:00:1d: 7a:6b:4a:c8:3f:b5:b1:d6:a3:52:97:1d:99:41:ba:92:79:19: ef:c3:9b:00:0c:d5:a9:5b:2f:ad:b7:9c:5c:e6:33:97:44:c7: 62:26:e9:21:6c:b8:de:84:e8:7b:7d:67:15:38:d1:40:23:56: f3:d5:2c:ed:0a:29:c9:10:70:b6:58:8f:5f:45:90:18:2a:ce: 14:fa:d2:5c:9a:56:d0:11:e1:30:48:3f:5f:4b:69:18:0a:40: ed:bc:bc:58:25:10:61:b1:d1:05:eb:bb:08:67:d8:df:9d:11: d4:75:7f:f2:e9:4a:2e:6d:0e:55:aa:2a:1c:b6:c8:db:3d:db: b3:98:64:15:f5:75:41:65:ff:ae:f8:0d:f6:d5:ad:26:2d:18: 4a:12:29:e4:67:4c:d1:1f:e0:a4:3c:79:36:24:e9:cb:32:58: 45:26:ed:88:e0:ff:72:27:ad:b0:5a:d3:fd:9a:ad:e3:4c:47: 96:f9:9a:22:79:7f:ad:88:d5:dd:da:2c:24:95:d5:01:ed:25: 1a:bb:e1:c8:e6:fb:a9:c9:02:85:4a:d5:0f:4e:33:9d:9b:dd: 6f:da:36:aa:ee:57:7e:de:3b:ae:f7:56:b7:3c:f3:62:fc:17: 4f:af:5c:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjgILEZ+ZcCD7xN9LA3fg9zKpzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4MkRD MEJBRDhBMDAeFw0yNjA2MTcyMzAwMzZaFw0yNjA2MTkwMDQ3MzZaMDMxMTAvBgNV BAMTKDAxQ0E1Q0ZBOTA2QUE0RTdDOEVCMEQzQTg3ODQ4NUFCRThCM0MxODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVuA7kC1q4CgfPd6/958NLm7pB 82nPMwbfhk7hBzxbJTnlvFxJqnVGnyfOZowKGP0UMkjWMH+2o/TxrXmQsfM8ctTU qZzXEjwt68rw4J1I3e4nlMsx5h9kvOhpeJrMYCKycbpVAt64YjarhwLvm8VrZOSa Qk/sApxB+qHhmhIYwA9DpBesNrIwmiF8lnB1dIzIMrXx11Ye0dK+XliVhXe1NFR9 fnr0ZAy/WJuW/j4ahs7PtBHY8YNuE1UBLSWauGb3+PYiiAYQJFPn5D+BQSgZKK6B 3V3thcIDgXi9UOOodSq91MQIZV8d6wKkxqU9c/zkud8eaxXnn83P/HcJ1iI7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAcpc+pBqpOfI6w06h4SFq+izwYQwHwYDVR0j BBgwFoAUGyKCTiolbkE+Z53sVB/oLcC62KAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg2ZmYyNjQtZmYyNS00ZmU2LTg2ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUy QTI1NkU0MTNFNjc5REVDNTQxRkU4MkRDMEJBRDhBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjIyODI0RTJBMjU2RTQxM0U2NzlERUM1NDFGRTgyREMwQkFE OEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4 MkRDMEJBRDhBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaiDajCqFhPcbMZj6TFTt0AHXprSsg/tbHW o1KXHZlBupJ5Ge/DmwAM1albL623nFzmM5dEx2Im6SFsuN6E6Ht9ZxU40UAjVvPV LO0KKckQcLZYj19FkBgqzhT60lyaVtAR4TBIP19LaRgKQO28vFglEGGx0QXruwhn 2N+dEdR1f/LpSi5tDlWqKhy2yNs927OYZBX1dUFl/674DfbVrSYtGEoSKeRnTNEf 4KQ8eTYk6csyWEUm7Yjg/3InrbBa0/2areNMR5b5miJ5f62I1d3aLCSV1QHtJRq7 4cjm+6nJAoVK1Q9OM52b3W/aNqruV37eO673Vrc882L8F0+vXDY= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:56 2026 by rpki-client