$ rpki-client -vvf rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft File: F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft (raw, json) Hash identifier: d0oDAklD3c8Lq91VQKaoYp6wSVrJ8BAyTyuEsKQ8c/0= Subject key identifier: 8A:0E:DD:5F:A2:43:7A:1E:3A:61:76:F7:80:DA:3B:1A:29:48:05:3E Authority key identifier: F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 Certificate issuer: /CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Certificate serial: 29635E829E37E3386F838C798AFB6C731C4F38B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft Manifest number: 43 Signing time: Sat 20 Jun 2026 08:19:42 +0000 Manifest this update: Sat 20 Jun 2026 08:14:42 +0000 Manifest next update: Sun 21 Jun 2026 10:02:42 +0000 Files and hashes: 1: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: 42WVpxt8kPPzhN9E9uDvoLlTM1AZ+xhmNg0V+4liwbw=) 2: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: kbVyFpYowQRxd/2pyb5bI0NF4XwTRcPV5F3s1QVQKnw=) 3: F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl (hash: IvH0oEsEE8y9VGUeJwZQXgtb5MptUjFoIlSRs4maQss=) 4: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: TvZUkrrCi0RH2KouESWHnYo6zKTg2B7NXoPHY3tduXU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 10:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:63:5e:82:9e:37:e3:38:6f:83:8c:79:8a:fb:6c:73:1c:4f:38:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Validity Not Before: Jun 20 08:14:42 2026 GMT Not After : Jun 21 10:02:42 2026 GMT Subject: CN=8A0EDD5FA2437A1E3A6176F780DA3B1A2948053E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9d:aa:89:91:ff:3b:87:24:ea:8f:37:27:12: 38:7b:72:28:00:e6:ae:80:e4:3a:7f:c3:c9:f9:c6: b4:3a:ef:ef:02:96:35:e8:44:98:f9:c5:2c:5c:31: 64:ad:90:30:75:56:30:21:5d:83:3d:b3:c7:56:19: b8:e6:91:d5:88:d4:94:36:85:40:c5:0d:30:9c:74: eb:99:f0:db:04:50:24:0b:d6:e6:eb:ff:85:64:10: 05:89:0d:4f:b6:5e:1d:87:6e:fd:3f:58:96:1c:af: bc:e1:d3:7b:f9:89:aa:66:b1:ac:53:b3:ba:a1:65: b2:56:b7:65:68:86:d3:8f:c1:ad:f7:9e:18:e9:46: 9d:98:a0:02:aa:e6:59:8d:e4:67:20:08:e6:fe:0a: 4f:12:63:75:13:de:58:10:c9:35:4f:06:29:b6:aa: e9:c0:9c:80:40:d1:3a:77:37:95:89:fb:41:7d:35: d5:87:14:96:1a:6e:73:d0:25:7e:77:d3:24:7f:10: 61:88:8c:89:8c:80:b1:31:9d:2a:c8:13:22:52:5e: 95:8a:65:19:c5:e6:fe:ed:d3:ed:a5:f7:ed:46:d9: 8d:e1:ac:cd:61:04:e5:ce:ab:5b:08:11:69:11:d4: 58:c4:ae:d1:a0:0c:31:44:1a:85:8e:6f:f8:dc:e0: 46:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0E:DD:5F:A2:43:7A:1E:3A:61:76:F7:80:DA:3B:1A:29:48:05:3E X509v3 Authority Key Identifier: keyid:F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:92:02:cc:eb:07:94:64:67:16:3f:ec:cf:c0:fb:40:d0:79: d1:ce:27:0d:a4:60:8c:75:da:d3:f3:71:b7:67:ee:ac:37:51: f4:11:cc:37:4f:d7:7d:96:ee:67:91:2e:da:f3:0f:38:12:89: eb:7b:a7:61:87:33:de:bf:28:f8:3d:1b:7d:c0:4a:e2:f1:05: b3:0b:31:b0:ef:01:3a:e7:e8:fd:04:a1:77:2c:12:2f:4a:80: ee:ea:5c:db:6d:06:2d:63:9c:85:8a:15:88:84:fc:d5:d6:b4: 35:b0:a7:13:bc:45:ec:49:ea:c3:f8:ef:54:99:7e:61:a0:9d: c1:3a:39:b7:ed:0a:f4:0c:b4:22:21:ba:49:5b:1b:5d:02:c3: b0:45:82:05:df:07:99:0d:c9:c7:8b:47:43:9a:3c:d0:1b:6f: 23:c0:e1:8d:c5:4d:e8:17:a5:73:84:5a:57:fd:bb:64:bd:19: 45:6d:27:99:1a:21:b8:75:b9:36:e9:64:1b:40:91:8c:7d:c4: 0f:61:fe:8e:6a:3e:49:35:c0:ea:4e:63:6c:c1:e3:fa:14:5a: dc:c1:fa:c0:13:ca:a5:38:1a:d9:67:75:a1:77:48:32:96:89: aa:b5:4d:df:bf:af:09:1a:7c:79:ab:dd:d1:2a:8a:36:1c:e5: 07:b5:8e:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWNegp434zhvg4x5ivtscxxPOLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3 NjgxNjNGNzAeFw0yNjA2MjAwODE0NDJaFw0yNjA2MjExMDAyNDJaMDMxMTAvBgNV BAMTKDhBMEVERDVGQTI0MzdBMUUzQTYxNzZGNzgwREEzQjFBMjk0ODA1M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKnaqJkf87hyTqjzcnEjh7cigA 5q6A5Dp/w8n5xrQ67+8CljXoRJj5xSxcMWStkDB1VjAhXYM9s8dWGbjmkdWI1JQ2 hUDFDTCcdOuZ8NsEUCQL1ubr/4VkEAWJDU+2Xh2Hbv0/WJYcr7zh03v5iapmsaxT s7qhZbJWt2VohtOPwa33nhjpRp2YoAKq5lmN5GcgCOb+Ck8SY3UT3lgQyTVPBim2 qunAnIBA0Tp3N5WJ+0F9NdWHFJYabnPQJX530yR/EGGIjImMgLExnSrIEyJSXpWK ZRnF5v7t0+2l9+1G2Y3hrM1hBOXOq1sIEWkR1FjErtGgDDFEGoWOb/jc4EYrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUig7dX6JDeh46YXb3gNo7GilIBT4wHwYDVR0j BBgwFoAU+Yj0qdAAjE2EySsP8ZoAc3aBY/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIxZjk5OWItYWJjZS00ZmE5LThlNzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlE MDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3NjgxNjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTg4RjRBOUQwMDA4QzREODRDOTJCMEZGMTlBMDA3Mzc2ODE2 M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAw NzM3NjgxNjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6SAszrB5RkZxY/7M/A+0DQedHOJw2kYIx1 2tPzcbdn7qw3UfQRzDdP132W7meRLtrzDzgSiet7p2GHM96/KPg9G33ASuLxBbML MbDvATrn6P0EoXcsEi9KgO7qXNttBi1jnIWKFYiE/NXWtDWwpxO8RexJ6sP471SZ fmGgncE6ObftCvQMtCIhuklbG10Cw7BFggXfB5kNyceLR0OaPNAbbyPA4Y3FTegX pXOEWlf9u2S9GUVtJ5kaIbh1uTbpZBtAkYx9xA9h/o5qPkk1wOpOY2zB4/oUWtzB +sATyqU4GtlndaF3SDKWiaq1Td+/rwkafHmr3dEqijYc5Qe1jgY= -----END CERTIFICATE-----Generated at Sat Jun 20 11:24:59 2026 by rpki-client