$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft File: 489207A82A4F1A3B6758139186A867CE751999B7.mft (raw, json) Hash identifier: XeugvKdQvM8fC6sQDWGANiKrSwHG2+r5FtARSajmLcI= Subject key identifier: C4:CC:DA:E9:3A:CC:5E:ED:DE:34:12:A4:10:CC:57:94:CA:6E:52:27 Authority key identifier: 48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 Certificate issuer: /CN=489207A82A4F1A3B6758139186A867CE751999B7 Certificate serial: 66F5C53FAA60A6DDFF8C0BB5A99A5BC73F915C1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 02:45:14 +0000 Manifest this update: Thu 18 Jun 2026 02:40:14 +0000 Manifest next update: Fri 19 Jun 2026 04:03:14 +0000 Files and hashes: 1: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: FB472ElcOvg/ylc+xiayFIvGK9fHP8MxdL79QVbGvdA=) 2: 489207A82A4F1A3B6758139186A867CE751999B7.crl (hash: muVkrx8n5hgs4VfTFJgK3HDgo6c/nMhIfTqWRkzrn6w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 04:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f5:c5:3f:aa:60:a6:dd:ff:8c:0b:b5:a9:9a:5b:c7:3f:91:5c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489207A82A4F1A3B6758139186A867CE751999B7 Validity Not Before: Jun 18 02:40:14 2026 GMT Not After : Jun 19 04:03:14 2026 GMT Subject: CN=C4CCDAE93ACC5EEDDE3412A410CC5794CA6E5227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:3c:92:b7:00:17:e8:57:f2:16:a5:27:05: 84:9d:f2:46:69:a9:89:90:67:c9:50:ea:57:2f:fd: 81:0d:7f:7f:93:72:c0:ba:5f:72:93:be:89:bc:38: 73:03:e0:b8:02:4b:e0:10:d5:76:1a:e8:05:90:9e: 63:ab:d2:f3:7e:5c:30:c4:44:dc:5f:c3:51:3f:46: 2d:07:5b:47:fc:d4:cc:ee:ee:d0:87:e6:79:58:bd: 68:89:75:06:35:f7:ff:37:5b:8a:82:53:56:49:1f: 85:1d:23:4a:53:4b:64:50:4f:e0:10:87:7c:8c:cb: 04:b3:e1:e8:20:b2:b7:4b:85:8e:bb:10:24:27:b2: 5b:af:9d:10:97:08:4c:e1:5b:4a:04:97:12:06:a6: 2e:3b:29:49:e9:53:ea:d0:1c:69:ac:90:f8:e0:d2: 79:b0:90:0f:9b:0f:01:11:69:34:d4:ae:f7:f7:7c: 3e:9a:f3:b3:b0:97:bc:30:98:21:0c:c2:b8:29:07: dc:10:d2:a6:84:b3:f4:ed:2b:47:72:fe:2a:54:ab: 89:c8:65:e8:df:d3:50:19:18:70:f1:21:ee:00:7b: 78:b3:a4:60:ad:a9:a0:d9:3f:5e:ce:b1:cb:65:e1: f3:48:44:96:b2:60:78:4a:a3:71:bf:3a:09:6e:9e: e0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CC:DA:E9:3A:CC:5E:ED:DE:34:12:A4:10:CC:57:94:CA:6E:52:27 X509v3 Authority Key Identifier: keyid:48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a4:14:a3:99:66:db:e7:db:13:36:ad:eb:2b:90:9d:38:6e: 87:f3:02:62:ee:68:7d:a9:f5:0b:d2:e8:cf:bc:1a:4b:6a:6d: 39:8b:be:87:a7:f2:27:50:0e:40:04:ff:36:62:d8:c3:c4:11: ce:80:c0:bf:fe:b4:cf:6b:6a:cb:c5:1f:68:a5:37:54:84:50: 4e:6e:40:03:a2:3d:bb:09:4d:ce:72:75:33:61:77:e7:a9:0d: 91:f0:20:2e:fc:f8:cf:3e:8b:d1:1b:fd:53:57:bb:c1:e6:3f: b6:9b:e3:68:4d:42:99:1b:d9:e3:37:9e:12:11:e7:1f:35:ad: 2e:41:44:d2:bd:8b:43:ec:ea:04:35:69:7a:74:60:61:f7:2e: b5:9c:65:20:53:1c:d2:84:0b:b6:7f:73:c7:90:7c:e3:80:13: 99:66:fe:70:1e:b2:a1:ee:44:b4:79:54:c1:02:2f:ba:87:00: b4:86:10:fc:be:c0:6e:d9:ca:0f:84:21:36:3d:88:10:82:7f: 35:db:f5:65:06:c7:c4:98:88:9f:ab:ed:8d:33:46:37:72:7d: e4:0a:21:00:43:b4:a5:90:01:53:4d:93:cc:fd:c1:3f:57:00: 14:db:3f:7c:15:fa:51:5d:cd:78:88:5a:2c:5e:f4:d7:e1:b6: d2:bb:d7:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZvXFP6pgpt3/jAu1qZpbxz+RXBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3 NTE5OTlCNzAeFw0yNjA2MTgwMjQwMTRaFw0yNjA2MTkwNDAzMTRaMDMxMTAvBgNV BAMTKEM0Q0NEQUU5M0FDQzVFRURERTM0MTJBNDEwQ0M1Nzk0Q0E2RTUyMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIgzyStwAX6FfyFqUnBYSd8kZp qYmQZ8lQ6lcv/YENf3+TcsC6X3KTvom8OHMD4LgCS+AQ1XYa6AWQnmOr0vN+XDDE RNxfw1E/Ri0HW0f81Mzu7tCH5nlYvWiJdQY19/83W4qCU1ZJH4UdI0pTS2RQT+AQ h3yMywSz4eggsrdLhY67ECQnsluvnRCXCEzhW0oElxIGpi47KUnpU+rQHGmskPjg 0nmwkA+bDwERaTTUrvf3fD6a87Owl7wwmCEMwrgpB9wQ0qaEs/TtK0dy/ipUq4nI Zejf01AZGHDxIe4Ae3izpGCtqaDZP17Osctl4fNIRJayYHhKo3G/OglunuC5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxMza6TrMXu3eNBKkEMxXlMpuUicwHwYDVR0j BBgwFoAUSJIHqCpPGjtnWBORhqhnznUZmbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgy QTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3NTE5OTlCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80ODkyMDdBODJBNEYxQTNCNjc1ODEzOTE4NkE4NjdDRTc1MTk5 OUI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3 Q0U3NTE5OTlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmkFKOZZtvn2xM2resrkJ04bofzAmLuaH2p 9QvS6M+8GktqbTmLvoen8idQDkAE/zZi2MPEEc6AwL/+tM9rasvFH2ilN1SEUE5u QAOiPbsJTc5ydTNhd+epDZHwIC78+M8+i9Eb/VNXu8HmP7ab42hNQpkb2eM3nhIR 5x81rS5BRNK9i0Ps6gQ1aXp0YGH3LrWcZSBTHNKEC7Z/c8eQfOOAE5lm/nAesqHu RLR5VMECL7qHALSGEPy+wG7Zyg+EITY9iBCCfzXb9WUGx8SYiJ+r7Y0zRjdyfeQK IQBDtKWQAVNNk8z9wT9XABTbP3wV+lFdzXiIWixe9NfhttK716Y= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:02 2026 by rpki-client