$ rpki-client -vvf rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft File: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft (raw, json) Hash identifier: gfjzf+3CGnh64uTTpspR6FkSxEP+l4zU8OBAqWwru4A= Subject key identifier: 11:53:BA:02:17:AA:EA:75:85:17:D8:F1:A0:0D:DB:E2:C0:5F:77:01 Authority key identifier: C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 Certificate issuer: /CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Certificate serial: 122FA3818089D7720538E6B3494B3D6F56733B51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 00:37:33 +0000 Manifest this update: Thu 18 Jun 2026 00:32:33 +0000 Manifest next update: Fri 19 Jun 2026 04:32:33 +0000 Files and hashes: 1: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl (hash: VCA+IJR03n7k+MDRQ6gLT70NlIIEFIrJQFzhRTCTM7c=) 2: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: NFuKh4QURKhti5ts/RHCyWk9MjNgIHs/zpDCkdJPOO8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 04:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:2f:a3:81:80:89:d7:72:05:38:e6:b3:49:4b:3d:6f:56:73:3b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Validity Not Before: Jun 18 00:32:33 2026 GMT Not After : Jun 19 04:32:33 2026 GMT Subject: CN=1153BA0217AAEA758517D8F1A00DDBE2C05F7701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2f:53:44:b3:1c:74:5f:c2:9e:3b:62:16:df: 4f:f3:8c:b7:45:8a:7b:5e:2a:61:c1:61:71:78:f1: cd:62:e5:49:45:02:47:0a:ef:8c:20:31:f3:e5:c0: b5:d9:05:a7:df:c0:9d:75:84:0e:ed:b0:0e:22:cf: 80:15:87:ab:0d:80:9c:51:48:ea:b1:a2:8a:d8:73: f0:a0:33:c9:2d:88:79:7e:52:7f:dc:6b:e4:64:c0: 38:f0:b1:11:07:5f:8e:35:38:e0:c4:f9:ae:10:3f: e9:51:cc:fe:99:b4:a4:71:68:92:d5:2a:65:2f:e6: a5:9b:eb:31:c4:00:64:5f:28:87:ec:41:f7:8a:14: e1:38:ae:e1:18:5e:58:66:db:21:1f:09:11:2d:65: 58:18:19:df:0a:ca:64:72:7e:25:e2:c9:b1:a0:a1: 8d:cc:8e:52:47:5f:80:5b:30:56:ea:28:34:c1:3c: 86:0f:71:d3:23:49:f9:31:6c:d3:e0:e2:89:7c:12: 4f:d9:78:de:21:9a:60:74:33:b3:fc:57:a9:5e:ae: 70:1e:f3:2d:34:04:30:33:23:0d:48:fe:44:d9:44: 22:b4:ca:ae:db:56:ca:71:e8:57:37:17:cc:ab:7b: 73:1a:b3:8b:3e:3f:78:56:86:f5:f3:60:59:7a:e8: 06:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:53:BA:02:17:AA:EA:75:85:17:D8:F1:A0:0D:DB:E2:C0:5F:77:01 X509v3 Authority Key Identifier: keyid:C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:d4:c7:43:23:c2:5f:1d:71:e4:fb:17:e9:1f:0b:fb:e7:57: ca:73:cd:24:7e:e9:e3:7f:c2:83:8f:cb:dc:78:18:4b:59:56: d0:24:c3:7f:2b:2b:6f:f2:37:af:e3:ba:09:4f:46:c0:87:82: ab:7a:29:23:a6:9d:18:30:31:33:fa:e1:2a:7e:89:4f:73:aa: 13:d2:46:88:a4:0c:ff:0a:8d:5a:43:a1:90:22:29:b7:6b:51: b0:c5:a1:ac:f5:bc:65:d2:68:cb:66:49:49:2a:e3:01:f4:a8: e7:15:06:dd:d2:62:3a:42:6f:ec:90:51:c5:9d:81:d5:3d:b4: 9c:45:9f:50:c1:d7:08:4f:ee:be:f2:4b:d3:b7:69:30:fe:df: c7:49:20:cc:e1:b8:e5:ba:b8:24:4b:2d:9b:a1:55:db:8e:19: 3a:03:9b:0f:29:24:93:d1:e9:13:6b:45:9e:12:72:38:47:3a: 49:0c:63:57:2f:29:4b:74:ac:ba:00:b1:aa:03:29:76:1c:62: 80:c0:8d:c3:6a:3d:0f:88:d4:bf:57:84:92:79:74:0f:d4:65: dd:05:98:40:fe:64:30:8c:44:05:c3:ed:05:48:af:97:6c:21: 57:92:82:f3:6b:92:87:4d:ce:e8:b6:9c:38:a9:b6:54:de:fb: 68:1f:0f:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEi+jgYCJ13IFOOazSUs9b1ZzO1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNGRDRG QTZGMzBDMTAeFw0yNjA2MTgwMDMyMzNaFw0yNjA2MTkwNDMyMzNaMDMxMTAvBgNV BAMTKDExNTNCQTAyMTdBQUVBNzU4NTE3RDhGMUEwMEREQkUyQzA1Rjc3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqL1NEsxx0X8KeO2IW30/zjLdF inteKmHBYXF48c1i5UlFAkcK74wgMfPlwLXZBaffwJ11hA7tsA4iz4AVh6sNgJxR SOqxoorYc/CgM8ktiHl+Un/ca+RkwDjwsREHX441OODE+a4QP+lRzP6ZtKRxaJLV KmUv5qWb6zHEAGRfKIfsQfeKFOE4ruEYXlhm2yEfCREtZVgYGd8KymRyfiXiybGg oY3MjlJHX4BbMFbqKDTBPIYPcdMjSfkxbNPg4ol8Ek/ZeN4hmmB0M7P8V6lernAe 8y00BDAzIw1I/kTZRCK0yq7bVspx6Fc3F8yre3Mas4s+P3hWhvXzYFl66AZbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEVO6Aheq6nWFF9jxoA3b4sBfdwEwHwYDVR0j BBgwFoAUwP0DMLBmWjJL7e9Xk/c/1PpvMMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVjMmExYWMtNWFlNC00N2FkLThkYjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBC MDY2NUEzMjRCRURFRjU3OTNGNzNGRDRGQTZGMzBDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMEZEMDMzMEIwNjY1QTMyNEJFREVGNTc5M0Y3M0ZENEZBNkYz MEMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNG RDRGQTZGMzBDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDUx0Mjwl8dceT7F+kfC/vnV8pzzSR+6eN/ woOPy9x4GEtZVtAkw38rK2/yN6/juglPRsCHgqt6KSOmnRgwMTP64Sp+iU9zqhPS RoikDP8KjVpDoZAiKbdrUbDFoaz1vGXSaMtmSUkq4wH0qOcVBt3SYjpCb+yQUcWd gdU9tJxFn1DB1whP7r7yS9O3aTD+38dJIMzhuOW6uCRLLZuhVduOGToDmw8pJJPR 6RNrRZ4ScjhHOkkMY1cvKUt0rLoAsaoDKXYcYoDAjcNqPQ+I1L9XhJJ5dA/UZd0F mED+ZDCMRAXD7QVIr5dsIVeSgvNrkodNzui2nDiptlTe+2gfD7I= -----END CERTIFICATE-----Generated at Thu Jun 18 17:08:57 2026 by rpki-client