$ rpki-client -vvf rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft File: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft (raw, json) Hash identifier: 1xBD+RqFY8nHu0FxGVIM9G5hONX9KCABKKDQrhgYviw= Subject key identifier: 26:D9:A7:6F:FF:15:8E:41:78:B0:7C:FB:16:E7:88:AF:94:66:78:0C Authority key identifier: D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 Certificate issuer: /CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Certificate serial: 4C2A14C8A597935557620ECD5252C0E5CD1BDC91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 12:22:00 +0000 Manifest this update: Thu 18 Jun 2026 12:17:00 +0000 Manifest next update: Fri 19 Jun 2026 13:38:00 +0000 Files and hashes: 1: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: yiKtjyaJg+/4RrQVJVpsjcN53nYqA/23WnoDn5hFEmM=) 2: D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl (hash: M+yvcXqa7jgqBc98QrexvHxsMEiZtzvbnzf27PE3Q3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:2a:14:c8:a5:97:93:55:57:62:0e:cd:52:52:c0:e5:cd:1b:dc:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D551D58F2876BBDA9C36678EFF8D271A14EAD8A3 Validity Not Before: Jun 18 12:17:00 2026 GMT Not After : Jun 19 13:38:00 2026 GMT Subject: CN=26D9A76FFF158E4178B07CFB16E788AF9466780C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8f:3a:dc:c0:aa:2f:60:24:de:28:ee:40:6b: 17:0f:b7:6e:4f:ad:13:0c:18:80:78:85:5a:ca:eb: 03:a9:aa:4f:2d:6d:55:94:7b:2b:57:42:2e:ff:7e: 55:28:e3:1b:05:d2:f2:e2:0f:46:0d:98:cf:1f:63: 26:60:22:2d:1d:7c:21:98:24:bb:4d:8b:0e:42:25: bf:e5:99:2a:d8:a7:f5:6e:5c:67:df:8d:01:72:11: 96:40:f5:d6:32:02:9a:3c:43:ed:16:fa:0d:6b:f4: 79:80:73:db:ab:48:e5:28:89:a4:d7:34:0b:d5:9d: df:01:fc:e7:34:f1:71:d3:6d:05:c5:77:bf:35:6e: 2c:4b:f0:05:76:0a:9e:7f:10:2c:1b:2b:55:53:ee: 8f:20:16:2b:3a:8d:61:e7:c9:fb:41:34:aa:de:f3: c3:30:e5:dd:54:1b:f7:7e:ad:b6:f5:e9:d4:35:b4: 21:e8:d1:e4:60:85:cc:5a:11:05:08:e9:77:6a:3e: 78:eb:70:c8:e1:93:11:d9:d0:70:2e:ea:0b:54:8f: 09:8b:7f:45:76:0f:0e:25:ff:b3:31:77:d1:67:b7: 0e:55:52:bd:e5:1c:92:31:bd:11:10:67:8f:75:f0: 2e:b1:51:a5:2e:ff:72:51:c3:66:aa:ac:f1:5b:6b: b7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D9:A7:6F:FF:15:8E:41:78:B0:7C:FB:16:E7:88:AF:94:66:78:0C X509v3 Authority Key Identifier: keyid:D5:51:D5:8F:28:76:BB:DA:9C:36:67:8E:FF:8D:27:1A:14:EA:D8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/D551D58F2876BBDA9C36678EFF8D271A14EAD8A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c1:d9:f8:9c:11:f6:5c:ae:86:93:07:a7:63:cf:f3:3b:a2: 4d:f9:07:7d:de:16:32:14:e3:fd:6f:5c:85:ce:97:e3:b1:25: 24:2a:ff:25:fa:5c:89:97:59:d4:e6:e2:50:e3:73:a3:18:0d: 31:03:4b:88:80:f2:80:16:4d:8d:67:ef:ad:17:76:eb:a0:eb: 5e:67:1e:d0:52:e7:30:99:0d:71:b5:34:2d:24:83:79:58:23: fb:a1:53:d7:52:01:82:e6:bc:c0:a4:35:d5:81:29:e7:3c:bf: 81:ee:21:cb:66:03:09:60:78:c8:df:f6:6c:95:2b:84:96:5d: 38:eb:73:fb:9a:ae:f5:2f:8c:0e:ce:d9:f2:26:d9:b8:dd:2a: f8:e3:e1:72:af:b1:6d:35:27:4d:ba:d0:ad:5b:64:35:18:44: a9:2d:94:08:bb:c5:83:79:6a:90:e2:e6:32:3b:55:1b:57:19: 61:30:ad:e1:24:df:f8:9b:0e:59:64:43:e0:68:8e:90:b3:be: a5:6e:00:29:7a:79:8f:ca:66:30:f8:d1:93:3e:f2:26:d9:6b: 22:dd:30:3f:66:ec:a1:58:b6:14:cc:50:0d:6f:76:1b:61:b1: 9a:08:e8:26:e4:4d:30:0c:f7:20:2a:a7:e8:09:ca:27:01:31: 32:7a:93:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTCoUyKWXk1VXYg7NUlLA5c0b3JEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3MUEx NEVBRDhBMzAeFw0yNjA2MTgxMjE3MDBaFw0yNjA2MTkxMzM4MDBaMDMxMTAvBgNV BAMTKDI2RDlBNzZGRkYxNThFNDE3OEIwN0NGQjE2RTc4OEFGOTQ2Njc4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBjzrcwKovYCTeKO5AaxcPt25P rRMMGIB4hVrK6wOpqk8tbVWUeytXQi7/flUo4xsF0vLiD0YNmM8fYyZgIi0dfCGY JLtNiw5CJb/lmSrYp/VuXGffjQFyEZZA9dYyApo8Q+0W+g1r9HmAc9urSOUoiaTX NAvVnd8B/Oc08XHTbQXFd781bixL8AV2Cp5/ECwbK1VT7o8gFis6jWHnyftBNKre 88Mw5d1UG/d+rbb16dQ1tCHo0eRghcxaEQUI6XdqPnjrcMjhkxHZ0HAu6gtUjwmL f0V2Dw4l/7Mxd9Fntw5VUr3lHJIxvREQZ4918C6xUaUu/3JRw2aqrPFba7e5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJtmnb/8VjkF4sHz7FueIr5RmeAwwHwYDVR0j BBgwFoAU1VHVjyh2u9qcNmeO/40nGhTq2KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYy ODc2QkJEQTlDMzY2NzhFRkY4RDI3MUExNEVBRDhBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENTUxRDU4RjI4NzZCQkRBOUMzNjY3OEVGRjhEMjcxQTE0RUFE OEEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvRDU1MUQ1OEYyODc2QkJEQTlDMzY2NzhFRkY4RDI3 MUExNEVBRDhBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvB2ficEfZcroaTB6djz/M7ok35B33eFjIU 4/1vXIXOl+OxJSQq/yX6XImXWdTm4lDjc6MYDTEDS4iA8oAWTY1n760Xduug615n HtBS5zCZDXG1NC0kg3lYI/uhU9dSAYLmvMCkNdWBKec8v4HuIctmAwlgeMjf9myV K4SWXTjrc/uarvUvjA7O2fIm2bjdKvjj4XKvsW01J0260K1bZDUYRKktlAi7xYN5 apDi5jI7VRtXGWEwreEk3/ibDllkQ+BojpCzvqVuACl6eY/KZjD40ZM+8ibZayLd MD9m7KFYthTMUA1vdhthsZoI6CbkTTAM9yAqp+gJyicBMTJ6k6w= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:57 2026 by rpki-client