$ rpki-client -vvf rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft File: A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft (raw, json) Hash identifier: 8zzWJgN8A58eOVj5JLD4/rU85UrqL8a7zEjYIF6GovU= Subject key identifier: D1:32:11:94:33:27:F9:86:D4:4F:40:67:38:B4:6F:DE:F4:F3:11:6F Authority key identifier: A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A Certificate issuer: /CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A Certificate serial: 41AF4D36EDB223CB7C040A653ECCE554925B39AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft Manifest number: 50 Signing time: Tue 30 Jun 2026 07:03:59 +0000 Manifest this update: Tue 30 Jun 2026 06:58:59 +0000 Manifest next update: Wed 01 Jul 2026 08:31:59 +0000 Files and hashes: 1: A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl (hash: gnSFFCgThLz8dIug+A5KrIxEsnl1eOeqjoDNUo9HQTY=) 2: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: UXHn8bg4Zb9U+P+TCueeNhsm/n24BjvW6TOuDV9tWgQ=) 3: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: g3SYguF2gjNopDU5fkgr7wfvMxsOOXZGBV4A3PJx+Es=) 4: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 0vj1+ur+imczmOrtruw1pJmka20ZQffLE5EcHd3zqlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:af:4d:36:ed:b2:23:cb:7c:04:0a:65:3e:cc:e5:54:92:5b:39:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A Validity Not Before: Jun 30 06:58:59 2026 GMT Not After : Jul 1 08:31:59 2026 GMT Subject: CN=D13211943327F986D44F406738B46FDEF4F3116F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f5:28:03:11:57:88:0e:12:02:28:19:9c:73: 43:df:68:65:57:e9:aa:e5:ba:68:2e:b9:26:f9:b2: e0:49:ea:9f:35:1d:bf:ad:64:c9:e3:1f:97:2a:f4: 72:5f:8b:55:28:38:1d:ac:cb:9d:d2:56:34:b6:fa: 8a:b1:71:90:06:ce:fe:4a:ad:42:97:de:76:d9:12: 7d:d6:1a:36:66:ee:1e:61:45:16:62:c0:74:ad:94: 76:25:2d:c0:c7:e9:e2:55:ff:78:b9:16:60:af:a3: 8d:e5:7b:02:65:7c:48:dd:17:0b:2c:ec:c7:cd:25: 4b:63:0d:72:2a:ff:46:9c:7c:8f:8a:0d:24:96:d8: ea:6d:79:c6:5c:4f:57:ae:4b:9e:5d:c8:19:bd:41: f1:ab:2d:ed:fd:d7:db:2c:4a:63:7b:fc:fb:3f:8d: 58:cb:d3:f0:ad:a8:42:5a:ca:e9:63:d5:98:42:cf: 83:fe:fb:08:57:36:5c:c7:79:31:af:b8:54:07:eb: cd:57:92:14:9c:cc:8e:8d:40:27:9b:c8:ba:4a:28: 03:d6:f9:3f:44:db:b2:1c:1d:b0:65:e7:f2:8a:b8: 76:2a:d2:fb:43:db:d1:38:b2:0b:b0:e3:a8:99:26: ea:e4:f5:52:18:70:21:80:ac:a5:bf:4d:49:55:4d: 81:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:32:11:94:33:27:F9:86:D4:4F:40:67:38:B4:6F:DE:F4:F3:11:6F X509v3 Authority Key Identifier: keyid:A8:4B:BD:78:BD:AD:07:C8:55:4B:D7:0C:A6:3D:BD:C8:4A:37:D6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/A84BBD78BDAD07C8554BD70CA63DBDC84A37D63A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:28:c1:7e:fc:bb:a0:b9:d0:00:83:0c:22:f7:dc:a7:3b:29: c5:06:2e:de:06:86:b7:b5:1f:24:84:ac:42:4a:03:4f:c4:fc: 78:b9:48:0c:58:cf:0d:a9:60:41:c0:db:10:46:8c:c4:dd:48: bf:3f:69:ea:8a:13:8b:da:5c:d2:f3:45:c6:51:07:44:6e:20: b4:bf:68:31:74:37:9c:1a:16:fe:8d:4e:2f:04:b2:af:e0:ce: ab:92:f0:32:0d:cb:cb:f5:82:4a:7c:f0:6a:a7:2d:3f:b3:55: b4:ca:df:bd:ef:ee:2f:6c:3e:33:d4:29:f1:a8:43:79:ed:ec: 6a:30:ac:d2:e2:0e:54:99:ad:ce:99:9a:ee:ee:0d:c4:65:c7: 49:f3:f9:3c:f0:32:bd:f9:ad:61:0c:8f:69:a8:a4:01:a3:75: 47:1e:54:65:ad:33:67:8a:90:16:74:2f:89:31:51:10:20:89: af:a6:f8:54:3d:be:49:82:4a:73:3d:0e:6c:81:08:e2:e4:6e: dd:cc:fe:89:ba:52:a9:8b:e8:f4:64:59:7c:fd:bc:e4:96:72: ae:cd:08:e9:4f:b6:cd:2c:f4:e6:81:8b:72:c3:16:bd:2a:fc: b5:42:c3:d9:06:e6:2e:52:64:02:cc:a3:28:0a:1d:46:b9:da: 45:e4:51:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQa9NNu2yI8t8BAplPszlVJJbOaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg0QkJENzhCREFEMDdDODU1NEJENzBDQTYzREJEQzg0 QTM3RDYzQTAeFw0yNjA2MzAwNjU4NTlaFw0yNjA3MDEwODMxNTlaMDMxMTAvBgNV BAMTKEQxMzIxMTk0MzMyN0Y5ODZENDRGNDA2NzM4QjQ2RkRFRjRGMzExNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn9SgDEVeIDhICKBmcc0PfaGVX 6arlumguuSb5suBJ6p81Hb+tZMnjH5cq9HJfi1UoOB2sy53SVjS2+oqxcZAGzv5K rUKX3nbZEn3WGjZm7h5hRRZiwHStlHYlLcDH6eJV/3i5FmCvo43lewJlfEjdFwss 7MfNJUtjDXIq/0acfI+KDSSW2OptecZcT1euS55dyBm9QfGrLe3919ssSmN7/Ps/ jVjL0/CtqEJayulj1ZhCz4P++whXNlzHeTGvuFQH681XkhSczI6NQCebyLpKKAPW +T9E27IcHbBl5/KKuHYq0vtD29E4sguw46iZJurk9VIYcCGArKW/TUlVTYETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0TIRlDMn+YbUT0BnOLRv3vTzEW8wHwYDVR0j BBgwFoAUqEu9eL2tB8hVS9cMpj29yEo31jowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgxZTkyMzgtNDI2Ny00OGVmLWIwMmUtMWQ3ZDA0NDAwOTQxLzAvQTg0QkJENzhC REFEMDdDODU1NEJENzBDQTYzREJEQzg0QTM3RDYzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODRCQkQ3OEJEQUQwN0M4NTU0QkQ3MENBNjNEQkRDODRBMzdE NjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQTg0QkJENzhCREFEMDdDODU1NEJENzBDQTYzREJE Qzg0QTM3RDYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIowX78u6C50ACDDCL33Kc7KcUGLt4Ghre1 HySErEJKA0/E/Hi5SAxYzw2pYEHA2xBGjMTdSL8/aeqKE4vaXNLzRcZRB0RuILS/ aDF0N5waFv6NTi8Esq/gzquS8DINy8v1gkp88GqnLT+zVbTK373v7i9sPjPUKfGo Q3nt7GowrNLiDlSZrc6Zmu7uDcRlx0nz+TzwMr35rWEMj2mopAGjdUceVGWtM2eK kBZ0L4kxURAgia+m+FQ9vkmCSnM9DmyBCOLkbt3M/om6UqmL6PRkWXz9vOSWcq7N COlPts0s9OaBi3LDFr0q/LVCw9kG5i5SZALMoygKHUa52kXkUeU= -----END CERTIFICATE-----Generated at Tue Jun 30 14:19:37 2026 by rpki-client