$ rpki-client -vvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft File: D3CDCB356F94C51B241188653C7ADC2C79D79424.mft (raw, json) Hash identifier: vUBZr1flE6oFUL6RbBd32aP1ahvNF/GFOQfA7fzQy1A= Subject key identifier: E3:74:68:60:15:30:AC:7E:CB:5B:61:A5:AB:C1:7D:42:30:29:F1:F9 Authority key identifier: D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 Certificate issuer: /CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Certificate serial: 08B95429BE3815B0FDA537F6D5BD38713A73D11B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 11:46:20 +0000 Manifest this update: Thu 18 Jun 2026 11:41:20 +0000 Manifest next update: Fri 19 Jun 2026 13:49:20 +0000 Files and hashes: 1: D3CDCB356F94C51B241188653C7ADC2C79D79424.crl (hash: dkzBvBUzDAbuPn/QlmUHtmwbZwxxFSCkqRvTLhafTuk=) 2: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: 83bYI1z3e7ETkpXnXGTkrnk19/a7Qfy/7K16nNObwH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b9:54:29:be:38:15:b0:fd:a5:37:f6:d5:bd:38:71:3a:73:d1:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Validity Not Before: Jun 18 11:41:20 2026 GMT Not After : Jun 19 13:49:20 2026 GMT Subject: CN=E37468601530AC7ECB5B61A5ABC17D423029F1F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:04:0d:5d:e8:08:0d:d8:84:fa:84:5a:10:e3: f9:e7:e2:cd:3c:3f:b4:2d:71:6a:2f:3f:bb:4d:a5: c6:47:c6:ca:c9:d8:56:d5:42:e8:1a:76:b3:af:58: f1:bc:b0:4f:a3:e5:98:42:89:cb:61:6e:31:02:ea: cb:1a:06:89:65:ab:fa:95:02:47:30:b6:d5:51:e4: e6:f9:65:44:6e:29:c6:b6:b6:07:d3:df:8f:23:e7: f9:38:bd:00:17:ce:4e:4b:72:17:c9:5e:19:12:6a: fb:3c:ba:ef:6c:06:d1:10:a2:54:0e:44:6a:93:60: ed:65:04:93:33:1c:ee:74:4b:c9:ff:86:50:62:6e: 77:fc:26:60:ff:d3:f2:bb:63:d1:f8:f0:12:f0:e6: 8e:7c:ea:ad:f3:dc:6a:5e:f3:cc:bc:0b:87:0d:a2: f1:09:05:10:88:24:d3:29:ea:b8:76:a4:8f:9b:de: c1:50:06:4b:27:f1:07:36:3b:e3:e3:e5:60:97:44: 03:1a:d2:65:dc:bc:c1:66:0b:b0:7b:5a:c4:5f:f5: 74:e6:f7:d4:bd:56:68:5a:d4:98:9a:f9:6a:33:aa: c9:9d:d7:ed:f0:dd:5c:11:6d:f7:23:99:a9:3f:5a: 6f:48:0c:96:63:47:b2:d7:97:a1:30:fa:f3:7c:7d: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:74:68:60:15:30:AC:7E:CB:5B:61:A5:AB:C1:7D:42:30:29:F1:F9 X509v3 Authority Key Identifier: keyid:D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:2a:70:5f:45:d0:f2:aa:f5:05:38:f1:1b:c7:d2:98:8b:73: 2c:f8:5c:78:06:e6:40:8b:ff:af:4f:36:91:de:95:f2:98:78: 17:d9:fa:39:c3:5b:c0:da:b1:1d:09:7a:b3:31:b9:71:56:23: cf:b1:47:3c:26:55:68:00:35:78:85:c6:0d:fa:09:3a:52:3a: b4:4c:bb:f4:c3:9e:35:40:25:3e:58:4d:29:bc:7e:35:06:90: 32:50:cf:06:0a:7d:d5:69:df:d8:5e:14:ec:6f:eb:23:be:6c: 01:71:d9:a8:e0:3f:c3:c6:42:a4:ae:d7:62:d2:ba:fc:80:a1: f7:a7:54:f2:51:bd:20:15:34:e7:55:25:c1:73:16:c0:bd:a2: e2:28:2c:ca:5c:ec:de:43:cd:29:91:a7:f2:52:78:52:55:c6: fc:a4:c7:49:b7:ef:a8:ee:4b:11:29:cb:c4:e4:ad:b2:f3:90: c4:42:5e:bf:14:ab:af:dc:2f:67:7a:2c:b6:95:89:9f:12:dd: 7b:51:06:a2:a3:95:61:6c:08:fb:3c:30:86:fc:09:34:b2:61: fb:7a:56:da:f3:6e:ec:4f:ba:61:f3:56:7c:eb:dd:91:f5:b7: 35:ca:47:90:db:f5:80:bb:21:db:bc:ad:3b:1a:7f:96:44:9a: d0:8c:21:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCLlUKb44FbD9pTf21b04cTpz0RswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3 OUQ3OTQyNDAeFw0yNjA2MTgxMTQxMjBaFw0yNjA2MTkxMzQ5MjBaMDMxMTAvBgNV BAMTKEUzNzQ2ODYwMTUzMEFDN0VDQjVCNjFBNUFCQzE3RDQyMzAyOUYxRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiBA1d6AgN2IT6hFoQ4/nn4s08 P7QtcWovP7tNpcZHxsrJ2FbVQugadrOvWPG8sE+j5ZhCicthbjEC6ssaBollq/qV AkcwttVR5Ob5ZURuKca2tgfT348j5/k4vQAXzk5LchfJXhkSavs8uu9sBtEQolQO RGqTYO1lBJMzHO50S8n/hlBibnf8JmD/0/K7Y9H48BLw5o586q3z3Gpe88y8C4cN ovEJBRCIJNMp6rh2pI+b3sFQBksn8Qc2O+Pj5WCXRAMa0mXcvMFmC7B7WsRf9XTm 99S9Vmha1Jia+Wozqsmd1+3w3VwRbfcjmak/Wm9IDJZjR7LXl6Ew+vN8fWkBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU43RoYBUwrH7LW2Glq8F9QjAp8fkwHwYDVR0j BBgwFoAU083LNW+UxRskEYhlPHrcLHnXlCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2 Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3OUQ3OTQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EM0NEQ0IzNTZGOTRDNTFCMjQxMTg4NjUzQzdBREMyQzc5RDc5 NDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURD MkM3OUQ3OTQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAqcF9F0PKq9QU48RvH0piLcyz4XHgG5kCL /69PNpHelfKYeBfZ+jnDW8DasR0JerMxuXFWI8+xRzwmVWgANXiFxg36CTpSOrRM u/TDnjVAJT5YTSm8fjUGkDJQzwYKfdVp39heFOxv6yO+bAFx2ajgP8PGQqSu12LS uvyAofenVPJRvSAVNOdVJcFzFsC9ouIoLMpc7N5DzSmRp/JSeFJVxvykx0m376ju SxEpy8TkrbLzkMRCXr8Uq6/cL2d6LLaViZ8S3XtRBqKjlWFsCPs8MIb8CTSyYft6 VtrzbuxPumHzVnzr3ZH1tzXKR5Db9YC7Idu8rTsaf5ZEmtCMIZc= -----END CERTIFICATE-----Generated at Thu Jun 18 17:11:16 2026 by rpki-client