$ rpki-client -vvf rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft File: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft (raw, json) Hash identifier: xlKI2JXhq+7JioX42XmLyq12zNpx5iwI7SOhQFT9WC8= Subject key identifier: 76:41:8E:74:D4:A7:DA:42:10:EA:1A:34:E6:9F:4B:ED:64:37:3A:AB Authority key identifier: B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 Certificate issuer: /CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Certificate serial: 34681AA258E8794620C05E2C31221B9BAB31E598 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 13:32:14 +0000 Manifest this update: Fri 19 Jun 2026 13:27:14 +0000 Manifest next update: Sat 20 Jun 2026 15:56:14 +0000 Files and hashes: 1: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: Tw0jthlgL7LR2s7HS7uvGtTnI6qmhp1zcR5Xc7WR+2U=) 2: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: JdCU8fnwLyrsbyZUM+2ErkfTDZvbcugmKa8c+7GG/sA=) 3: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl (hash: cm9aOJu1ewuQx5KGmxdj8wI/KXjHVVWm+RFp09avlk0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 15:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:68:1a:a2:58:e8:79:46:20:c0:5e:2c:31:22:1b:9b:ab:31:e5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Validity Not Before: Jun 19 13:27:14 2026 GMT Not After : Jun 20 15:56:14 2026 GMT Subject: CN=76418E74D4A7DA4210EA1A34E69F4BED64373AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fc:86:cb:9d:36:a8:43:83:ae:34:f1:99:0b: 75:df:90:b8:9e:da:16:72:2d:a5:3b:14:32:63:a0: 7e:e9:d6:09:d9:c5:f4:06:15:a0:b7:4d:9e:7b:8c: 5a:37:ee:dc:c0:22:e6:8d:e9:6c:f5:04:b4:13:55: 6e:5c:f7:bd:41:47:a4:95:9b:80:12:2f:b5:cd:da: f1:43:cb:a9:c6:3d:55:e9:dd:0a:a2:83:3d:4d:9f: d3:d4:1f:e0:86:2d:e3:c1:9e:03:b7:b8:43:ba:e3: ae:b7:b4:05:8c:ca:5a:2e:cf:17:79:bc:5f:1c:d6: 0c:db:98:d4:d9:57:16:de:df:9f:72:87:53:79:e5: 4a:e8:ef:57:1f:dc:ae:33:fa:36:32:30:3e:b8:68: 48:02:6d:55:bc:85:e3:39:b2:01:52:d9:19:0e:1d: 0a:5a:d6:79:6c:7a:8f:74:42:3c:13:4f:30:a4:59: 3c:d2:b9:53:38:f0:ec:ca:19:f8:36:51:67:18:ac: bc:c2:8b:d9:c5:1d:f9:87:47:4c:80:6a:17:81:50: 34:79:b6:b8:f4:a0:6f:26:d3:ca:bf:80:6d:47:ad: aa:77:3b:96:5b:7c:08:b9:bd:76:af:c7:cf:15:69: 72:18:ac:17:68:3c:5e:06:b7:c4:fa:35:c4:93:e7: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:41:8E:74:D4:A7:DA:42:10:EA:1A:34:E6:9F:4B:ED:64:37:3A:AB X509v3 Authority Key Identifier: keyid:B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:38:de:51:1e:be:11:7e:4a:72:a3:a4:e9:17:ea:cf:db:a7: 1b:41:59:c5:82:8b:dc:6f:5c:d3:fb:ff:4f:fe:dc:aa:a8:86: cd:6f:75:2e:24:b4:f8:31:b1:39:03:fd:43:fe:52:55:99:de: 75:cf:db:73:10:c1:29:8b:2a:2d:57:e8:dc:ac:6a:65:47:1e: 2d:11:9f:e4:d4:e1:12:8f:c9:3e:9f:9c:0d:4c:7e:21:d0:55: 05:55:56:dc:b9:fd:81:01:3a:66:a3:89:c0:db:20:e4:46:e6: 23:c2:a3:6f:3e:3c:b9:6a:ce:02:0f:3b:58:42:4c:67:d5:76: 96:ac:d1:bd:c4:b9:0e:44:04:a1:b0:7e:90:a9:18:ec:46:77: f2:41:2e:e5:92:84:e0:22:c0:00:29:8f:8b:e0:bf:2c:96:36: 82:0e:cc:a4:d7:1d:f3:5b:49:18:97:41:da:42:27:99:93:62: 1d:5d:7e:2a:ce:dd:f6:c5:a1:f8:17:e2:a6:b3:17:e4:4c:7e: ac:99:92:c3:d8:02:71:a4:6d:f2:15:bf:07:09:7d:97:ad:97: 00:1e:d7:06:1f:b3:c5:ee:a4:9c:8c:24:b8:cb:46:7e:b6:8e: e1:38:76:6d:8f:d0:f4:fb:a8:1d:94:71:99:63:0c:2e:14:2e: 5d:ea:20:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGgaoljoeUYgwF4sMSIbm6sx5ZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdENTg0MjBERTUzRUE5RTI0MEEwM0YzRTNFODFGM0Q3 NEMwNTk3MjAeFw0yNjA2MTkxMzI3MTRaFw0yNjA2MjAxNTU2MTRaMDMxMTAvBgNV BAMTKDc2NDE4RTc0RDRBN0RBNDIxMEVBMUEzNEU2OUY0QkVENjQzNzNBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl/IbLnTaoQ4OuNPGZC3XfkLie 2hZyLaU7FDJjoH7p1gnZxfQGFaC3TZ57jFo37tzAIuaN6Wz1BLQTVW5c971BR6SV m4ASL7XN2vFDy6nGPVXp3Qqigz1Nn9PUH+CGLePBngO3uEO64663tAWMylouzxd5 vF8c1gzbmNTZVxbe359yh1N55Uro71cf3K4z+jYyMD64aEgCbVW8heM5sgFS2RkO HQpa1nlseo90QjwTTzCkWTzSuVM48OzKGfg2UWcYrLzCi9nFHfmHR0yAaheBUDR5 trj0oG8m08q/gG1Hrap3O5ZbfAi5vXavx88VaXIYrBdoPF4Gt8T6NcST50MXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdkGOdNSn2kIQ6ho05p9L7WQ3OqswHwYDVR0j BBgwFoAUt9WEIN5T6p4kCgPz4+gfPXTAWXIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWE1OGFmMjQtNDYzYi00NGQ4LWI2ZjAtMzliODJiNDU4Zjc1LzAvQjdENTg0MjBE RTUzRUE5RTI0MEEwM0YzRTNFODFGM0Q3NEMwNTk3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0Q1ODQyMERFNTNFQTlFMjQwQTAzRjNFM0U4MUYzRDc0QzA1 OTcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvQjdENTg0MjBERTUzRUE5RTI0MEEwM0YzRTNFODFG M0Q3NEMwNTk3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABg43lEevhF+SnKjpOkX6s/bpxtBWcWCi9xv XNP7/0/+3Kqohs1vdS4ktPgxsTkD/UP+UlWZ3nXP23MQwSmLKi1X6NysamVHHi0R n+TU4RKPyT6fnA1MfiHQVQVVVty5/YEBOmajicDbIORG5iPCo28+PLlqzgIPO1hC TGfVdpas0b3EuQ5EBKGwfpCpGOxGd/JBLuWShOAiwAApj4vgvyyWNoIOzKTXHfNb SRiXQdpCJ5mTYh1dfirO3fbFofgX4qazF+RMfqyZksPYAnGkbfIVvwcJfZetlwAe 1wYfs8XupJyMJLjLRn62juE4dm2P0PT7qB2UcZljDC4ULl3qIOc= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:11 2026 by rpki-client