$ rpki-client -vvf rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft File: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft (raw, json) Hash identifier: yf7keUDEoVrzc3cDXiKhI+h3xjLg24IcttaqAz9kGV0= Subject key identifier: CC:02:BC:F6:E1:E8:36:F2:C5:48:AF:80:84:CA:37:48:D7:7A:12:3F Authority key identifier: A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 Certificate issuer: /CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Certificate serial: 65E8A65900257E4DD09C7469077F1454447B586A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 23:08:57 +0000 Manifest this update: Fri 19 Jun 2026 23:03:57 +0000 Manifest next update: Sun 21 Jun 2026 02:36:57 +0000 Files and hashes: 1: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: eZWOfDrRyxrGj36EawOrumVWs/n0x3oAEO6+YE8bAMk=) 2: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: d3fL4T6FzL/T0DkQ+Ng+5zSK+zJSGTl7uPkkzl2dqNM=) 3: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl (hash: SdGIXokRik3sbmgRYDTZ32OA6V9HRbrCrfP3s7kxqMU=) 4: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: NdabufunGirMkyu0ATmpWQ6Rl+f746AXGi5jkT6y7RY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e8:a6:59:00:25:7e:4d:d0:9c:74:69:07:7f:14:54:44:7b:58:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Validity Not Before: Jun 19 23:03:57 2026 GMT Not After : Jun 21 02:36:57 2026 GMT Subject: CN=CC02BCF6E1E836F2C548AF8084CA3748D77A123F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:6e:68:b0:6c:da:43:af:05:7a:d4:7d:34: 3c:c4:71:48:7e:7f:f1:25:d9:df:2d:95:74:bd:db: 71:b3:ff:28:7c:65:f8:d3:7b:cf:f3:2a:2a:b2:9c: 6e:c6:6c:dd:e6:93:49:82:0e:42:9d:b4:79:fa:dd: c2:0b:87:3b:45:64:de:16:fd:f3:97:83:60:05:ff: f8:3c:35:86:ea:76:04:3b:6c:dd:ca:49:88:42:e2: 51:be:4b:8c:54:3b:84:cc:c2:b0:31:72:e3:01:d5: 64:64:0c:20:0c:87:e1:05:79:05:e4:b1:17:f5:3d: eb:51:ae:8c:32:a6:c9:af:80:29:8f:4b:2c:89:cf: 61:c6:6c:6a:de:5f:f2:30:66:71:01:99:3d:b5:2a: fe:dc:f2:40:8c:92:c4:e2:7f:9f:3a:4d:4d:f7:93: 50:0d:59:c5:71:5f:81:a5:b0:87:d2:be:da:70:9d: 55:b5:61:16:11:c6:5a:cb:3c:d8:b4:4b:cd:f1:58: 6b:60:f7:74:5f:aa:98:55:75:b2:6c:be:0f:22:26: 01:38:b5:85:fb:a4:e4:51:c4:80:0b:23:e6:78:33: c7:de:cb:51:50:90:5c:aa:10:0a:a0:3f:67:12:4f: 0e:1b:9f:74:9d:93:ca:7a:6c:b5:91:d9:65:85:d4: 6c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:02:BC:F6:E1:E8:36:F2:C5:48:AF:80:84:CA:37:48:D7:7A:12:3F X509v3 Authority Key Identifier: keyid:A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7e:7b:ac:44:fa:36:b7:81:9b:24:51:16:6e:1b:56:8c:28: 7c:15:c6:1d:19:27:30:fa:68:e0:5f:98:89:e8:ba:db:ad:43: b2:61:04:9a:85:85:37:0d:26:46:94:34:05:f7:6d:34:c0:2e: 06:21:6f:90:c6:16:89:87:45:83:ae:fe:9a:7d:e5:28:74:21: b2:2c:97:41:99:ec:ef:41:01:ce:86:db:66:d3:a3:88:44:7f: c0:3b:42:a0:40:09:31:0b:9d:36:9c:e7:f8:b6:7d:ac:53:40: e3:6e:0f:fc:05:a0:31:c2:8f:2f:31:4c:44:df:35:c6:39:9d: 42:09:51:61:2c:31:8a:40:c5:cb:56:af:d3:84:95:c6:20:db: 73:7b:cf:f0:b9:0e:3e:f9:8a:1b:49:f1:59:6e:b2:eb:0e:e5: b7:a7:83:4e:10:6c:7f:bc:b6:74:69:cc:f8:2f:18:d7:79:62: 21:2e:3a:a2:fe:07:29:3d:32:7b:26:e0:4a:9e:3f:a8:4d:41: 01:94:e1:0a:a6:84:29:ac:4d:6c:f5:0c:ec:62:1d:fe:17:91: 66:e2:9a:d4:c3:11:79:e3:7e:2f:81:35:2f:12:5c:fc:58:68: a5:f4:85:00:80:24:c7:e4:a8:d0:1a:50:ba:6f:64:87:89:4a: 71:d2:56:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZeimWQAlfk3QnHRpB38UVER7WGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MjdBMUY4QUNBNjBGOUFGN0Y4ODkyMEY4OUVFNTMz NTNGQTQ1MDAeFw0yNjA2MTkyMzAzNTdaFw0yNjA2MjEwMjM2NTdaMDMxMTAvBgNV BAMTKENDMDJCQ0Y2RTFFODM2RjJDNTQ4QUY4MDg0Q0EzNzQ4RDc3QTEyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3W5osGzaQ68FetR9NDzEcUh+ f/El2d8tlXS923Gz/yh8ZfjTe8/zKiqynG7GbN3mk0mCDkKdtHn63cILhztFZN4W /fOXg2AF//g8NYbqdgQ7bN3KSYhC4lG+S4xUO4TMwrAxcuMB1WRkDCAMh+EFeQXk sRf1PetRrowypsmvgCmPSyyJz2HGbGreX/IwZnEBmT21Kv7c8kCMksTif586TU33 k1ANWcVxX4GlsIfSvtpwnVW1YRYRxlrLPNi0S83xWGtg93RfqphVdbJsvg8iJgE4 tYX7pORRxIALI+Z4M8fey1FQkFyqEAqgP2cSTw4bn3Sdk8p6bLWR2WWF1GwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzAK89uHoNvLFSK+AhMo3SNd6Ej8wHwYDVR0j BBgwFoAUoUJ6H4rKYPmvf4iSD4nuUzU/pFAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTY4Y2MwNTktNWU2Yy00NTAxLWI4OTQtMTRhODJkMThkMjFlLzAvQTE0MjdBMUY4 QUNBNjBGOUFGN0Y4ODkyMEY4OUVFNTMzNTNGQTQ1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTQyN0ExRjhBQ0E2MEY5QUY3Rjg4OTIwRjg5RUU1MzM1M0ZB NDUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQTE0MjdBMUY4QUNBNjBGOUFGN0Y4ODkyMEY4OUVF NTMzNTNGQTQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACp+e6xE+ja3gZskURZuG1aMKHwVxh0ZJzD6 aOBfmInoututQ7JhBJqFhTcNJkaUNAX3bTTALgYhb5DGFomHRYOu/pp95Sh0IbIs l0GZ7O9BAc6G22bTo4hEf8A7QqBACTELnTac5/i2faxTQONuD/wFoDHCjy8xTETf NcY5nUIJUWEsMYpAxctWr9OElcYg23N7z/C5Dj75ihtJ8VlususO5beng04QbH+8 tnRpzPgvGNd5YiEuOqL+Byk9Mnsm4EqeP6hNQQGU4QqmhCmsTWz1DOxiHf4XkWbi mtTDEXnjfi+BNS8SXPxYaKX0hQCAJMfkqNAaULpvZIeJSnHSVvY= -----END CERTIFICATE-----Generated at Sat Jun 20 08:38:04 2026 by rpki-client