$ rpki-client -vvf rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft File: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft (raw, json) Hash identifier: Zf4V9TTV3VBNVJXEYND6jm2+n5x6Cu5o63FfQfOggFk= Subject key identifier: 99:FF:45:B6:39:3C:D2:A0:3A:8D:7E:89:01:6F:C1:E9:8B:A9:E0:88 Authority key identifier: 1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA Certificate issuer: /CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Certificate serial: 14422B7D1171F212CB87A72C970DBA23B2541845 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 23:59:57 +0000 Manifest this update: Fri 19 Jun 2026 23:54:57 +0000 Manifest next update: Sun 21 Jun 2026 03:20:57 +0000 Files and hashes: 1: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl (hash: 7YQQq7MkejQN/LddxTX1kAHIivlZqxJLf1vA5yn5wEQ=) 2: 3136332e36312e362e302f32332d3234203d3e20313534343134.roa (hash: y2SWQDiorMVb0CUbtxKzRSTlLsTgGsBsbYUUXmrxSoA=) 3: 3136332e36312e362e302f32342d3234203d3e20313534343134.roa (hash: XD8BvYm1biavlW1Q3HzD/pWFbqnbw6Lp7bWjvS0iO0U=) 4: 3136332e36312e372e302f32342d3234203d3e20313534343134.roa (hash: xZf6NghAkeA3rnWZR27UkazUN/6A+OfxJZ+uYiCfjSs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:42:2b:7d:11:71:f2:12:cb:87:a7:2c:97:0d:ba:23:b2:54:18:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Validity Not Before: Jun 19 23:54:57 2026 GMT Not After : Jun 21 03:20:57 2026 GMT Subject: CN=99FF45B6393CD2A03A8D7E89016FC1E98BA9E088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f4:4c:f9:10:cd:97:ae:d3:ff:b9:47:e2:0e: 28:7d:d5:a4:28:a0:b8:28:50:a1:ec:00:0f:38:e5: 6f:45:0f:e1:3a:16:9b:00:6d:39:4d:a7:c0:dc:d4: 5f:64:01:39:41:dc:61:72:86:77:63:ca:f8:72:ed: f5:97:09:20:2f:3b:b9:a6:f0:f3:77:c7:ad:1d:3f: 78:96:7c:b2:fe:42:1c:bd:f2:51:ad:0b:07:83:34: 30:72:d1:e9:a1:57:55:f4:e4:a4:04:cc:e6:87:55: 25:71:8c:88:2a:b3:87:52:7a:fa:f1:dc:bf:30:b5: 46:d0:a9:31:f0:54:f4:4a:6f:9b:26:1a:38:00:45: 8a:c7:11:1f:94:a2:f9:c3:7a:86:75:77:dd:88:e7: f8:4f:e1:b1:93:c2:3a:12:50:65:e7:25:31:2b:b5: 42:a9:bf:d4:d3:8c:b4:bc:b2:a0:7a:df:51:71:07: d5:37:11:fd:78:74:07:e5:5c:18:0b:57:c5:52:b6: 19:3a:f8:09:a1:2f:63:93:9e:a6:ba:bb:19:28:84: 9f:e6:b0:56:41:dd:34:95:40:65:7b:55:98:c8:ad: c5:75:96:2f:a7:ca:3e:b3:5b:05:57:17:e8:46:6d: ad:f6:10:e4:db:07:18:2f:a8:4a:22:16:61:b7:79: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FF:45:B6:39:3C:D2:A0:3A:8D:7E:89:01:6F:C1:E9:8B:A9:E0:88 X509v3 Authority Key Identifier: keyid:1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:af:00:80:a0:36:dc:c7:bd:69:79:ee:46:3f:8f:ca:1d:2b: 3a:3b:97:d1:bd:62:03:e9:f9:0c:84:22:8c:53:bd:2d:5b:b0: b2:8b:f4:e4:42:04:0e:2b:55:b0:3d:32:f0:9d:d6:f4:8e:29: d9:45:ee:d6:ef:8d:60:f8:a1:82:ac:7d:cb:98:f9:c7:66:c2: 6b:0a:d2:05:75:f5:4f:e1:95:82:41:37:78:a2:ae:a0:d1:eb: 10:ed:eb:60:fd:d7:7c:5f:ad:c8:ca:23:e8:0b:e8:e1:ff:5c: ba:4b:60:64:e1:24:3e:e2:65:85:ca:42:bb:35:9d:a0:f2:51: 4c:c6:62:8a:91:32:3e:81:70:c9:6f:32:48:17:74:26:55:95: a8:bc:1d:33:c3:7f:de:29:f6:cd:6c:a7:4a:1e:70:be:08:a9: 49:64:5d:b7:ed:4c:e1:39:32:48:b4:1d:39:b5:b3:4d:39:ba: c3:d9:c9:76:3c:fb:f5:24:0d:2e:cc:34:21:e4:3b:93:1e:be: 0d:06:7d:b6:ea:68:23:4f:1a:d5:c3:1e:c3:7c:7e:31:29:cc: 31:dc:78:b3:47:2d:1d:22:9b:15:25:28:38:ca:a7:0a:ef:3d: 2b:9a:b0:8c:17:fb:90:f4:40:19:3e:d5:0d:f6:18:69:cd:20: 33:15:4e:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFEIrfRFx8hLLh6cslw26I7JUGEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEy OTEyQTFDQTAeFw0yNjA2MTkyMzU0NTdaFw0yNjA2MjEwMzIwNTdaMDMxMTAvBgNV BAMTKDk5RkY0NUI2MzkzQ0QyQTAzQThEN0U4OTAxNkZDMUU5OEJBOUUwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh9Ez5EM2XrtP/uUfiDih91aQo oLgoUKHsAA845W9FD+E6FpsAbTlNp8Dc1F9kATlB3GFyhndjyvhy7fWXCSAvO7mm 8PN3x60dP3iWfLL+Qhy98lGtCweDNDBy0emhV1X05KQEzOaHVSVxjIgqs4dSevrx 3L8wtUbQqTHwVPRKb5smGjgARYrHER+UovnDeoZ1d92I5/hP4bGTwjoSUGXnJTEr tUKpv9TTjLS8sqB631FxB9U3Ef14dAflXBgLV8VSthk6+AmhL2OTnqa6uxkohJ/m sFZB3TSVQGV7VZjIrcV1li+nyj6zWwVXF+hGba32EOTbBxgvqEoiFmG3eYQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmf9Ftjk80qA6jX6JAW/B6Yup4IgwHwYDVR0j BBgwFoAUHpevvdKpx+Rl0M1j9Xi7ISkSocowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDk2MzIzZGMtYWIyNi00OWRkLThiMmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkRE MkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEyOTEyQTFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTk3QUZCREQyQTlDN0U0NjVEMENENjNGNTc4QkIyMTI5MTJB MUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDk2MzIzZGMtYWIyNi00OWRkLThi MmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJC MjEyOTEyQTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmvAICgNtzHvWl57kY/j8odKzo7l9G9YgPp +QyEIoxTvS1bsLKL9ORCBA4rVbA9MvCd1vSOKdlF7tbvjWD4oYKsfcuY+cdmwmsK 0gV19U/hlYJBN3iirqDR6xDt62D913xfrcjKI+gL6OH/XLpLYGThJD7iZYXKQrs1 naDyUUzGYoqRMj6BcMlvMkgXdCZVlai8HTPDf94p9s1sp0oecL4IqUlkXbftTOE5 Mki0HTm1s005usPZyXY8+/UkDS7MNCHkO5Mevg0GfbbqaCNPGtXDHsN8fjEpzDHc eLNHLR0imxUlKDjKpwrvPSuasIwX+5D0QBk+1Q32GGnNIDMVTpI= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:13 2026 by rpki-client