$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft File: D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft (raw, json) Hash identifier: FFGlj1J68JpzK/FWSpRZNmDpvCgcI8bidnB2ByQPDGM= Subject key identifier: C6:8A:DF:0E:26:40:12:2C:ED:23:7C:C0:63:B6:40:C3:24:FA:DA:DD Authority key identifier: D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA Certificate issuer: /CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA Certificate serial: 2C7E9E28691B8C4C216B0845BD5615778CBB2802 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft Manifest number: 37 Signing time: Thu 11 Jun 2026 16:41:43 +0000 Manifest this update: Thu 11 Jun 2026 16:36:43 +0000 Manifest next update: Fri 12 Jun 2026 20:16:43 +0000 Files and hashes: 1: D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl (hash: SQ65eIU7FQRC1qplXLjOqM06LesR+e6IFx072JYjXxw=) 2: 3130332e3136392e3133362e302f32332d3234203d3e203538383231.roa (hash: d3+XsStuI4V6Oj2xnH0hFfx5wuWKXEgPdu/mNqcOqsI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 20:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:7e:9e:28:69:1b:8c:4c:21:6b:08:45:bd:56:15:77:8c:bb:28:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA Validity Not Before: Jun 11 16:36:43 2026 GMT Not After : Jun 12 20:16:43 2026 GMT Subject: CN=C68ADF0E2640122CED237CC063B640C324FADADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:47:d2:1c:e3:fb:bc:d0:79:77:af:ae:7e:d9: 21:09:f3:d9:a6:79:92:9a:f2:c4:6e:77:2c:3d:69: b3:76:cd:a9:5c:07:4f:a1:6b:6a:92:0c:61:a0:4d: 16:3b:70:87:16:bd:4c:5b:a7:66:e7:dd:10:da:a3: a9:67:14:1e:b2:d9:e9:4a:27:d1:f2:f7:c8:dc:72: 4d:07:1f:5b:9a:73:83:da:72:a8:61:5a:0c:4b:2e: 3c:34:1f:88:49:b0:2f:6c:ee:a3:86:15:bb:10:d9: f7:5a:dc:7d:ea:17:a4:3d:eb:d3:ff:96:cc:5b:e9: 29:b1:8c:25:3b:82:51:db:4d:0d:47:2e:44:4b:d7: 35:d2:39:70:43:8d:a0:0b:0d:7c:0a:71:49:d8:9b: 41:97:13:5c:7f:53:92:7d:11:ec:11:fa:9b:79:6c: 9d:75:30:fb:44:2c:5e:ae:8a:9c:0d:c2:24:57:33: dc:9d:04:cf:0a:79:ac:9f:a0:f6:05:bf:81:50:73: 8f:aa:43:b9:a3:3a:e7:53:fd:45:22:c4:98:8c:56: 45:0a:27:45:a0:99:fe:3a:16:a4:e8:1b:a4:41:67: 54:d9:0e:6d:e6:68:e6:19:b8:10:0b:ed:82:c2:c7: 3c:14:41:80:07:ea:fc:84:e6:1c:22:54:51:bb:49: 8a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8A:DF:0E:26:40:12:2C:ED:23:7C:C0:63:B6:40:C3:24:FA:DA:DD X509v3 Authority Key Identifier: keyid:D3:D1:A4:AA:48:52:5A:5C:83:52:5E:AA:53:7E:49:FE:2A:F4:DF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1cb2e8e-a1a2-4ca0-80b0-225518ffae14/0/D3D1A4AA48525A5C83525EAA537E49FE2AF4DFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:bf:45:41:d0:8b:4e:d2:15:51:4a:c2:3d:6b:0d:11:3b:a1: 59:91:82:65:1a:a3:59:da:7e:59:50:85:1b:ec:36:8e:0b:50: 9c:33:9a:8d:a8:fa:ca:ab:54:26:be:4f:a0:45:12:57:8c:a8: 09:35:27:71:7b:e5:5c:58:df:e6:07:4e:4e:41:08:e5:52:f4: f4:0c:1e:9a:15:cb:dd:d6:9f:2e:b5:52:c0:8b:62:35:6d:5e: 39:d3:a0:b3:e3:74:bb:20:75:56:b6:f1:30:13:5d:98:cc:6e: 1d:47:ff:c7:11:13:5c:58:e6:b1:e1:bf:eb:3b:94:42:29:06: 2d:ed:88:79:10:10:5a:95:84:aa:ee:d7:db:4c:b4:9c:5f:b0: ff:d6:d5:74:62:cb:d5:1e:df:13:29:28:ad:49:7e:a5:9d:c2: 49:81:70:c1:51:f8:0b:b4:49:b3:5a:2f:42:d4:cd:b2:83:6d: 4e:fc:79:c2:e5:6a:28:5e:c5:a6:04:ce:1d:b0:bf:22:51:e5: 5c:db:7f:98:4f:34:d2:40:8b:d7:b3:d2:fa:92:74:df:e6:76: 2e:16:57:9b:07:2a:d8:7e:1e:e0:57:e0:c5:10:bb:86:d2:a2: 91:4b:ec:b3:e3:38:a6:64:da:6d:d9:2f:28:2f:d8:3b:ce:76: c8:e2:4b:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULH6eKGkbjEwhawhFvVYVd4y7KAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNEMUE0QUE0ODUyNUE1QzgzNTI1RUFBNTM3RTQ5RkUy QUY0REZGQTAeFw0yNjA2MTExNjM2NDNaFw0yNjA2MTIyMDE2NDNaMDMxMTAvBgNV BAMTKEM2OEFERjBFMjY0MDEyMkNFRDIzN0NDMDYzQjY0MEMzMjRGQURBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQR9Ic4/u80Hl3r65+2SEJ89mm eZKa8sRudyw9abN2zalcB0+ha2qSDGGgTRY7cIcWvUxbp2bn3RDao6lnFB6y2elK J9Hy98jcck0HH1uac4PacqhhWgxLLjw0H4hJsC9s7qOGFbsQ2fda3H3qF6Q969P/ lsxb6SmxjCU7glHbTQ1HLkRL1zXSOXBDjaALDXwKcUnYm0GXE1x/U5J9EewR+pt5 bJ11MPtELF6uipwNwiRXM9ydBM8KeayfoPYFv4FQc4+qQ7mjOudT/UUixJiMVkUK J0Wgmf46FqToG6RBZ1TZDm3maOYZuBAL7YLCxzwUQYAH6vyE5hwiVFG7SYp9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxorfDiZAEiztI3zAY7ZAwyT62t0wHwYDVR0j BBgwFoAU09GkqkhSWlyDUl6qU35J/ir03/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFjYjJlOGUtYTFhMi00Y2EwLTgwYjAtMjI1NTE4ZmZhZTE0LzAvRDNEMUE0QUE0 ODUyNUE1QzgzNTI1RUFBNTM3RTQ5RkUyQUY0REZGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0QxQTRBQTQ4NTI1QTVDODM1MjVFQUE1MzdFNDlGRTJBRjRE RkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFjYjJlOGUtYTFhMi00Y2EwLTgw YjAtMjI1NTE4ZmZhZTE0LzAvRDNEMUE0QUE0ODUyNUE1QzgzNTI1RUFBNTM3RTQ5 RkUyQUY0REZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJS/RUHQi07SFVFKwj1rDRE7oVmRgmUao1na fllQhRvsNo4LUJwzmo2o+sqrVCa+T6BFEleMqAk1J3F75VxY3+YHTk5BCOVS9PQM HpoVy93Wny61UsCLYjVtXjnToLPjdLsgdVa28TATXZjMbh1H/8cRE1xY5rHhv+s7 lEIpBi3tiHkQEFqVhKru19tMtJxfsP/W1XRiy9Ue3xMpKK1JfqWdwkmBcMFR+Au0 SbNaL0LUzbKDbU78ecLlaihexaYEzh2wvyJR5Vzbf5hPNNJAi9ez0vqSdN/mdi4W V5sHKth+HuBX4MUQu4bSopFL7LPjOKZk2m3ZLygv2DvOdsjiS/U= -----END CERTIFICATE-----Generated at Fri Jun 12 06:03:40 2026 by rpki-client