$ rpki-client -vvf rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft File: B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft (raw, json) Hash identifier: IR8OYWIqjgnIsRhN1vBrUb8sytNRiT2F8qj/yKaC9NU= Subject key identifier: BE:E3:D3:7A:42:9F:5A:B0:81:D5:3A:7F:89:A6:07:AE:6C:3D:BA:FB Authority key identifier: B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A Certificate issuer: /CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Certificate serial: 4993F5230EF5BD295AEAABFB47F982EDB9A00349 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 18:32:49 +0000 Manifest this update: Fri 12 Jun 2026 18:27:49 +0000 Manifest next update: Sat 13 Jun 2026 20:17:49 +0000 Files and hashes: 1: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (hash: 437bd6cfCi4QfkyxcuG38VNcn0yO3ZKj6CESWVC/jyw=) 2: B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl (hash: WDA8KbZapI+HxHu2x+6QMkxQPH4IqFaY09Gqj2kMQx4=) 3: 3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (hash: ahISTiCVoc+28My7h8uDRC0QvRMDpO2sYZ/b3hjHSLM=) 4: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (hash: F/oy8su27rCM1WBmuMCn8wfDlNFF1ZO6cFWNdzyAW6M=) 5: 323430373a396363303a3a2f33322d3332203d3e20313431393833.roa (hash: K9ZXJ5o5f3vYvyXmfnPwnT8NeUbIoGsEKpT0pUSErho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:93:f5:23:0e:f5:bd:29:5a:ea:ab:fb:47:f9:82:ed:b9:a0:03:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Validity Not Before: Jun 12 18:27:49 2026 GMT Not After : Jun 13 20:17:49 2026 GMT Subject: CN=BEE3D37A429F5AB081D53A7F89A607AE6C3DBAFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:d7:de:e2:7e:fb:67:64:21:8a:83:c9:75: 15:c0:2d:97:38:41:14:a5:13:c9:ea:c9:f7:b4:94: 69:5d:2f:d2:79:64:a4:19:34:f1:cf:3e:5e:93:f0: 57:93:50:8b:c4:21:4b:82:be:25:9b:80:2c:3a:de: e0:83:44:0a:a5:3d:0a:0d:fd:7f:1c:2f:49:bf:23: b9:bc:09:3b:3d:13:a0:04:ab:d2:10:18:78:94:0b: fe:fd:f0:e9:48:55:0b:6a:b1:6b:8f:b2:66:aa:48: bb:ea:3d:69:25:93:e9:fb:2c:3f:a5:18:d4:1e:78: ba:a9:00:62:7c:a9:81:7e:75:ab:d8:49:18:17:df: 08:6a:9b:c1:d2:70:8e:06:e0:54:21:84:2a:52:7e: 31:dc:42:53:db:9b:ba:26:27:c2:1e:09:e6:4e:a3: 73:e5:c5:82:1f:d0:19:e9:1b:e3:8f:c2:4c:99:79: f1:c9:22:b0:6b:85:14:c8:47:af:2f:12:57:8d:ba: 92:e0:94:f1:4d:97:a7:ad:61:2a:d6:7c:e8:4d:5c: 94:43:c5:9a:20:87:10:9e:46:c3:74:7f:53:8a:a1: 9e:8f:31:b1:bb:f7:a2:44:66:58:dd:5e:83:ee:94: 0b:b5:21:6b:cd:cf:de:32:da:2e:55:cf:4e:66:ab: 1d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E3:D3:7A:42:9F:5A:B0:81:D5:3A:7F:89:A6:07:AE:6C:3D:BA:FB X509v3 Authority Key Identifier: keyid:B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d4:69:18:7a:e8:df:a4:98:77:4c:d8:aa:a3:a6:4f:e1:f5: da:04:c8:20:08:a8:dd:47:1e:ff:e0:33:88:e8:cb:b8:fe:75: fb:a1:d3:a9:88:b0:4d:dd:7f:52:94:fa:48:95:6d:6d:89:25: 20:0a:e2:3b:79:ea:a3:ed:9a:64:3d:9b:c9:25:7a:47:8c:44: 77:24:20:02:c5:a7:65:70:41:6c:fc:07:44:61:32:c3:3b:cd: 89:00:e9:ab:d1:29:d8:51:b5:13:f2:c4:f0:bd:11:9d:1c:8d: 3a:cb:f6:21:13:89:1a:de:b4:ae:34:3d:c4:54:9e:0e:2c:6d: b0:0c:30:28:52:7b:39:8d:b6:3a:69:78:d8:e7:ce:54:72:fc: 7a:7e:de:b4:d6:fe:a9:83:2e:46:bc:b8:d2:26:e5:5c:a1:e7: 31:d1:41:48:c5:67:0c:ab:6c:3c:4a:e1:34:3f:72:5c:0d:ad: ed:c8:9b:19:4e:19:1a:0e:e5:ea:96:a4:fe:32:b9:fd:93:11: 39:88:7a:35:51:36:a5:c7:76:61:d4:7f:1f:b5:43:92:f6:36: db:25:45:34:a0:64:ee:c5:8d:84:61:bf:2b:06:d7:6e:64:cb: 1b:c0:3e:60:e0:dd:0d:af:2d:08:25:94:83:52:f7:10:dd:01: 57:78:6b:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZP1Iw71vSla6qv7R/mC7bmgA0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJG MTMzNzE2QTAeFw0yNjA2MTIxODI3NDlaFw0yNjA2MTMyMDE3NDlaMDMxMTAvBgNV BAMTKEJFRTNEMzdBNDI5RjVBQjA4MUQ1M0E3Rjg5QTYwN0FFNkMzREJBRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6tfe4n77Z2QhioPJdRXALZc4 QRSlE8nqyfe0lGldL9J5ZKQZNPHPPl6T8FeTUIvEIUuCviWbgCw63uCDRAqlPQoN /X8cL0m/I7m8CTs9E6AEq9IQGHiUC/798OlIVQtqsWuPsmaqSLvqPWklk+n7LD+l GNQeeLqpAGJ8qYF+davYSRgX3whqm8HScI4G4FQhhCpSfjHcQlPbm7omJ8IeCeZO o3PlxYIf0BnpG+OPwkyZefHJIrBrhRTIR68vEleNupLglPFNl6etYSrWfOhNXJRD xZoghxCeRsN0f1OKoZ6PMbG796JEZljdXoPulAu1IWvNz94y2i5Vz05mqx0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvuPTekKfWrCB1Tp/iaYHrmw9uvswHwYDVR0j BBgwFoAUuDWodGOEdJvzuae67DCh6/EzcWowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDZiZWRmM2EtZDdkMS00OWE2LTkzZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2 Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJGMTMzNzE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODM1QTg3NDYzODQ3NDlCRjNCOUE3QkFFQzMwQTFFQkYxMzM3 MTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDZiZWRmM2EtZDdkMS00OWE2LTkz ZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEEx RUJGMTMzNzE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrUaRh66N+kmHdM2Kqjpk/h9doEyCAIqN1H Hv/gM4joy7j+dfuh06mIsE3df1KU+kiVbW2JJSAK4jt56qPtmmQ9m8klekeMRHck IALFp2VwQWz8B0RhMsM7zYkA6avRKdhRtRPyxPC9EZ0cjTrL9iETiRretK40PcRU ng4sbbAMMChSezmNtjppeNjnzlRy/Hp+3rTW/qmDLka8uNIm5Vyh5zHRQUjFZwyr bDxK4TQ/clwNre3ImxlOGRoO5eqWpP4yuf2TETmIejVRNqXHdmHUfx+1Q5L2Ntsl RTSgZO7FjYRhvysG125kyxvAPmDg3Q2vLQgllINS9xDdAVd4a3w= -----END CERTIFICATE-----Generated at Sat Jun 13 02:19:18 2026 by rpki-client