$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft File: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft (raw, json) Hash identifier: Z3DC4alv6NiUUaDbqFEO75A66tZzykor/YSbj3wrAXE= Subject key identifier: 00:ED:BA:71:03:89:3D:89:48:4B:D7:BA:81:D0:80:2C:53:F0:15:26 Authority key identifier: 60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 Certificate issuer: /CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Certificate serial: 5C0121B7303A809F08EB2FF697DCB7090302B887 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 21:54:07 +0000 Manifest this update: Wed 17 Jun 2026 21:49:07 +0000 Manifest next update: Fri 19 Jun 2026 01:31:07 +0000 Files and hashes: 1: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: hlIEpb1QvuixIbQLzMUMoA0W+7btuV0cgzPbAs+Iw5M=) 2: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: 7YQRPlXdULMyA1HYWK14T5iCJHvbhMELTTePtHF2CN4=) 3: 602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl (hash: Kh5wwO7iEB8A4V9iTmUS2aC06wruhZX+/zb+HA0Rfzk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 01:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:01:21:b7:30:3a:80:9f:08:eb:2f:f6:97:dc:b7:09:03:02:b8:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602DC3C042450989509B4BAEFDB4AA291EB6F8F6 Validity Not Before: Jun 17 21:49:07 2026 GMT Not After : Jun 19 01:31:07 2026 GMT Subject: CN=00EDBA7103893D89484BD7BA81D0802C53F01526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:93:61:f0:cd:9b:27:51:0e:c4:27:3c:91: 0e:cb:c4:24:95:81:58:ab:9c:d4:5f:1a:ed:56:fa: 04:d7:f7:a5:84:fd:18:a8:c0:b9:17:6d:89:5d:61: 3a:d6:e8:4a:24:3e:c1:a8:62:ae:67:9c:2c:c3:e8: 6d:45:f8:9c:fa:a9:8a:4e:6a:3f:09:70:2e:a5:f5: 5b:73:c3:54:b1:44:b8:c3:fa:ce:03:a6:b9:f9:07: 63:80:7c:8f:9f:eb:ed:e2:78:21:6e:c5:a0:88:84: 95:50:ea:52:e6:e0:a7:60:2a:0f:51:99:30:2b:1b: 17:f6:a1:1b:76:7e:da:d6:63:57:0d:d5:8c:cd:72: 92:5e:bf:88:12:09:72:10:b5:93:99:9a:dc:5c:54: a0:d2:68:34:66:9e:58:24:9d:71:cb:df:a7:0a:95: e5:26:15:6f:12:60:c7:6c:96:a6:82:56:ca:e5:f1: 80:a3:c4:ec:e8:ab:5c:77:0b:7f:44:72:0c:1b:4b: 55:5c:e9:bd:b7:cb:c4:ea:1d:c3:d4:fe:3f:30:05: b7:85:cd:c2:02:4d:86:cb:12:d2:4a:af:37:43:4f: 1e:ba:b4:08:62:4c:11:3d:5b:58:6b:cb:9a:f1:1f: 3f:42:27:bf:36:a7:1d:31:8e:66:e5:94:ec:6f:cd: a8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:ED:BA:71:03:89:3D:89:48:4B:D7:BA:81:D0:80:2C:53:F0:15:26 X509v3 Authority Key Identifier: keyid:60:2D:C3:C0:42:45:09:89:50:9B:4B:AE:FD:B4:AA:29:1E:B6:F8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/602DC3C042450989509B4BAEFDB4AA291EB6F8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:61:04:f5:ba:bd:64:69:a2:59:7e:bb:22:00:5b:48:f4:a6: 5e:29:bf:89:d8:8b:17:c7:ee:2b:fb:36:6f:e9:20:47:da:83: a8:0f:43:2d:31:9f:fe:b0:f7:09:30:b6:68:f7:ee:55:14:60: b8:8d:36:0a:48:46:b9:a3:b9:6f:27:1f:64:f3:c4:4c:2d:2c: 34:e4:9f:7d:98:96:6c:74:0d:73:50:30:c6:6e:05:97:7a:6d: e3:71:20:00:a1:da:b7:64:63:87:96:d5:74:1f:ce:81:eb:e2: 0d:12:77:1c:64:09:10:0d:86:f2:e1:ce:e1:6d:05:3f:f2:2a: c4:5b:c5:d4:70:6c:f1:ad:ff:be:9c:e2:9e:14:a0:8b:e5:68: 71:cc:78:7e:bf:8b:54:5c:4e:39:11:d6:52:04:d0:3d:cc:7d: 67:2d:3a:aa:8c:17:44:9d:ef:d2:f0:be:0d:1a:bf:1c:b3:1f: 01:4e:50:46:f3:54:17:29:bf:ec:12:77:49:10:5f:48:a5:69: 85:fa:44:1e:4c:e2:15:ab:f4:43:61:b1:62:58:b4:07:b8:10: 11:e0:95:64:b3:96:21:07:c4:aa:b7:d2:53:0a:ff:b4:7f:86: 3f:f9:4e:a1:7d:c1:89:41:e9:e5:73:ff:31:bf:03:58:c2:64: 14:8f:15:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXAEhtzA6gJ8I6y/2l9y3CQMCuIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkx RUI2RjhGNjAeFw0yNjA2MTcyMTQ5MDdaFw0yNjA2MTkwMTMxMDdaMDMxMTAvBgNV BAMTKDAwRURCQTcxMDM4OTNEODk0ODRCRDdCQTgxRDA4MDJDNTNGMDE1MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nZNh8M2bJ1EOxCc8kQ7LxCSV gVirnNRfGu1W+gTX96WE/RiowLkXbYldYTrW6EokPsGoYq5nnCzD6G1F+Jz6qYpO aj8JcC6l9Vtzw1SxRLjD+s4Dprn5B2OAfI+f6+3ieCFuxaCIhJVQ6lLm4KdgKg9R mTArGxf2oRt2ftrWY1cN1YzNcpJev4gSCXIQtZOZmtxcVKDSaDRmnlgknXHL36cK leUmFW8SYMdslqaCVsrl8YCjxOzoq1x3C39EcgwbS1Vc6b23y8TqHcPU/j8wBbeF zcICTYbLEtJKrzdDTx66tAhiTBE9W1hry5rxHz9CJ782px0xjmbllOxvzaiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAO26cQOJPYlIS9e6gdCALFPwFSYwHwYDVR0j BBgwFoAUYC3DwEJFCYlQm0uu/bSqKR62+PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlN2RhY2MtMmI0NS00MTQxLTk3NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0 MjQ1MDk4OTUwOUI0QkFFRkRCNEFBMjkxRUI2RjhGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MDJEQzNDMDQyNDUwOTg5NTA5QjRCQUVGREI0QUEyOTFFQjZG OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvNjAyREMzQzA0MjQ1MDk4OTUwOUI0QkFFRkRCNEFB MjkxRUI2RjhGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5hBPW6vWRpoll+uyIAW0j0pl4pv4nYixfH 7iv7Nm/pIEfag6gPQy0xn/6w9wkwtmj37lUUYLiNNgpIRrmjuW8nH2TzxEwtLDTk n32Ylmx0DXNQMMZuBZd6beNxIACh2rdkY4eW1XQfzoHr4g0SdxxkCRANhvLhzuFt BT/yKsRbxdRwbPGt/76c4p4UoIvlaHHMeH6/i1RcTjkR1lIE0D3MfWctOqqMF0Sd 79Lwvg0avxyzHwFOUEbzVBcpv+wSd0kQX0ilaYX6RB5M4hWr9ENhsWJYtAe4EBHg lWSzliEHxKq30lMK/7R/hj/5TqF9wYlB6eVz/zG/A1jCZBSPFUw= -----END CERTIFICATE-----Generated at Thu Jun 18 17:09:21 2026 by rpki-client