$ rpki-client -vvf rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft File: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft (raw, json) Hash identifier: hfNM/E5IvKw3iktCp+kVzxaICtCtozb0erO+dYk2N6o= Subject key identifier: 58:73:51:54:87:51:C9:31:C8:4C:B4:44:0A:9C:C7:82:7E:6D:1A:4A Authority key identifier: 13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42 Certificate issuer: /CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342 Certificate serial: 5CAD3024EC5246D6CB398860F06847A5E2E08467 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 20:25:35 +0000 Manifest this update: Fri 19 Jun 2026 20:20:35 +0000 Manifest next update: Sat 20 Jun 2026 21:37:35 +0000 Files and hashes: 1: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: uVPktCZC8+f+6UT6i6M1uIRYRGCJQ3maVFAM7Hkvn3s=) 2: 1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl (hash: za4FlQ6uBqdDLS2OHmlF+mGnD5YHbrf1pjIN0xA7FD0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ad:30:24:ec:52:46:d6:cb:39:88:60:f0:68:47:a5:e2:e0:84:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1344B81B970D3F90CA09A81F2EA796B9DD09D342 Validity Not Before: Jun 19 20:20:35 2026 GMT Not After : Jun 20 21:37:35 2026 GMT Subject: CN=587351548751C931C84CB4440A9CC7827E6D1A4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:68:37:07:ec:a4:3f:58:f9:a8:ee:ae:61:2e: 62:eb:d9:e2:ce:f1:f4:af:b8:dd:65:5a:c9:a2:ac: 2b:37:51:54:f1:b9:3a:95:e4:8b:86:5f:40:b8:0e: 74:50:e3:80:d4:e5:02:4f:b9:35:89:c3:bc:b1:62: 0e:05:bf:14:ab:11:2c:f4:83:26:71:6f:bf:72:06: e5:45:7b:64:3e:cf:ca:7a:c4:1d:ee:fe:22:33:0d: b9:6f:6e:8b:49:ec:03:16:0a:03:a9:aa:c9:34:f3: 56:05:8e:ab:7a:ea:2c:48:14:ac:33:d7:e8:fd:c1: 8d:b5:a0:f6:f7:91:e1:98:85:5c:3f:0f:c2:64:25: 37:ac:b6:52:d5:de:12:f2:50:06:30:49:ae:88:7a: 7e:36:5c:02:41:10:f2:20:93:7d:6d:4f:78:27:87: d7:45:9a:a4:f9:68:03:cb:be:8b:6a:6e:af:84:a0: 65:1d:9c:c7:37:e7:bb:dc:0d:1d:8b:ce:73:9d:9c: 22:03:75:43:4f:06:56:c4:2c:75:59:6a:16:c0:b8: fb:30:44:68:c1:c9:1f:7a:18:cf:37:79:3a:dd:a7: 81:b4:c0:bb:63:05:44:ae:b8:be:de:c2:a5:94:11: f9:43:cb:65:83:8a:3a:8b:1d:89:c0:a3:40:0f:ea: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:73:51:54:87:51:C9:31:C8:4C:B4:44:0A:9C:C7:82:7E:6D:1A:4A X509v3 Authority Key Identifier: keyid:13:44:B8:1B:97:0D:3F:90:CA:09:A8:1F:2E:A7:96:B9:DD:09:D3:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1344B81B970D3F90CA09A81F2EA796B9DD09D342.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/1344B81B970D3F90CA09A81F2EA796B9DD09D342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9c:8e:e3:fd:ac:0b:f1:37:d4:21:b6:1e:f5:60:7b:94:d2: dd:7e:62:c2:23:b9:f2:3a:56:46:59:a0:23:ac:eb:08:22:ab: f9:f5:63:99:c3:aa:52:83:cb:37:8c:d6:c4:91:7b:f9:b7:d1: 0c:ab:1e:97:c1:4b:8d:73:cd:4e:51:3c:c3:94:6d:49:30:96: f8:1f:8d:20:c2:4b:74:1b:5f:5d:69:99:58:b4:92:b2:4c:11: 25:a5:fb:e0:1d:6d:e9:8b:53:65:1b:49:95:b4:52:92:7a:f8: a8:4b:50:99:91:4d:be:ad:94:62:5d:8d:79:19:71:66:71:29: 47:e7:cf:57:d8:5c:aa:97:09:fb:26:04:66:14:f6:24:d3:96: 1c:8b:e3:29:aa:a7:91:85:6d:b3:09:f0:fe:c0:b1:67:47:14: 07:dd:fa:89:23:39:80:43:cd:cc:33:4f:aa:12:5c:a0:3f:2c: f9:0d:2f:1f:ec:52:19:3e:f7:5f:fe:2c:95:a5:e6:27:d8:41: 8a:33:ea:e8:9e:98:42:49:00:76:c5:67:a8:d2:c9:03:a3:ea: 75:bc:55:17:46:74:41:d7:63:af:2c:3e:74:51:31:11:d4:5e: e2:a3:0c:34:6a:cb:e5:0f:dc:b2:95:a1:be:bb:a0:df:9b:0f: 50:52:30:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXK0wJOxSRtbLOYhg8GhHpeLghGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0NEI4MUI5NzBEM0Y5MENBMDlBODFGMkVBNzk2QjlE RDA5RDM0MjAeFw0yNjA2MTkyMDIwMzVaFw0yNjA2MjAyMTM3MzVaMDMxMTAvBgNV BAMTKDU4NzM1MTU0ODc1MUM5MzFDODRDQjQ0NDBBOUNDNzgyN0U2RDFBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxaDcH7KQ/WPmo7q5hLmLr2eLO 8fSvuN1lWsmirCs3UVTxuTqV5IuGX0C4DnRQ44DU5QJPuTWJw7yxYg4FvxSrESz0 gyZxb79yBuVFe2Q+z8p6xB3u/iIzDblvbotJ7AMWCgOpqsk081YFjqt66ixIFKwz 1+j9wY21oPb3keGYhVw/D8JkJTestlLV3hLyUAYwSa6Ien42XAJBEPIgk31tT3gn h9dFmqT5aAPLvotqbq+EoGUdnMc357vcDR2LznOdnCIDdUNPBlbELHVZahbAuPsw RGjByR96GM83eTrdp4G0wLtjBUSuuL7ewqWUEflDy2WDijqLHYnAo0AP6u+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWHNRVIdRyTHITLRECpzHgn5tGkowHwYDVR0j BBgwFoAUE0S4G5cNP5DKCagfLqeWud0J00IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJhZWM3YzYtMmI4My00Y2YwLThjZDktNTM0Y2U3N2ZmNGIwLzAvMTM0NEI4MUI5 NzBEM0Y5MENBMDlBODFGMkVBNzk2QjlERDA5RDM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzQ0QjgxQjk3MEQzRjkwQ0EwOUE4MUYyRUE3OTZCOUREMDlE MzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMTM0NEI4MUI5NzBEM0Y5MENBMDlBODFGMkVBNzk2 QjlERDA5RDM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJecjuP9rAvxN9Qhth71YHuU0t1+YsIjufI6 VkZZoCOs6wgiq/n1Y5nDqlKDyzeM1sSRe/m30QyrHpfBS41zzU5RPMOUbUkwlvgf jSDCS3QbX11pmVi0krJMESWl++AdbemLU2UbSZW0UpJ6+KhLUJmRTb6tlGJdjXkZ cWZxKUfnz1fYXKqXCfsmBGYU9iTTlhyL4ymqp5GFbbMJ8P7AsWdHFAfd+okjOYBD zcwzT6oSXKA/LPkNLx/sUhk+91/+LJWl5ifYQYoz6uiemEJJAHbFZ6jSyQOj6nW8 VRdGdEHXY68sPnRRMRHUXuKjDDRqy+UP3LKVob67oN+bD1BSMDY= -----END CERTIFICATE-----Generated at Sat Jun 20 11:58:18 2026 by rpki-client