$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft File: 996D7371455A834C9B196DACD041DB7C6E779021.mft (raw, json) Hash identifier: wseQ64IKxjRR8wLer6314R33eLAUuwsNSHdB3YJFLiM= Subject key identifier: DB:DE:EC:2B:C1:13:47:4B:58:07:B7:F2:2A:9E:0C:76:1C:0C:50:13 Authority key identifier: 99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 Certificate issuer: /CN=996D7371455A834C9B196DACD041DB7C6E779021 Certificate serial: 0F2BC35FC056348DD3D1D378D06578A7757990D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 12:51:27 +0000 Manifest this update: Fri 19 Jun 2026 12:46:27 +0000 Manifest next update: Sat 20 Jun 2026 15:16:27 +0000 Files and hashes: 1: 996D7371455A834C9B196DACD041DB7C6E779021.crl (hash: MjuiI4NM6GhVpNsHQayZfr5vrGBTX8dfs/qH5YhK04U=) 2: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: CbnjGUXd5+J6hJMKbj+3ua0RtVbeM/SLewiagXzRFOs=) 3: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: y81kh0KeqX5r1jHre6tsGWtKJonbTr6cZ5My00O1C1k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 15:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2b:c3:5f:c0:56:34:8d:d3:d1:d3:78:d0:65:78:a7:75:79:90:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996D7371455A834C9B196DACD041DB7C6E779021 Validity Not Before: Jun 19 12:46:27 2026 GMT Not After : Jun 20 15:16:27 2026 GMT Subject: CN=DBDEEC2BC113474B5807B7F22A9E0C761C0C5013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:eb:40:ed:54:39:5c:62:87:7c:d9:1b:55:38: fe:f0:87:24:35:d3:67:16:64:50:f1:03:14:bd:a0: a8:a2:d7:94:d2:88:8b:ed:10:94:ca:e7:d8:ac:9d: b2:37:62:58:38:69:3b:99:b1:56:80:82:36:58:14: 7c:71:89:8f:d2:5d:5a:24:54:51:9b:61:e6:9c:03: 8b:4a:80:a9:14:90:e9:e6:6d:f6:b5:17:b5:ac:8b: ff:ec:fd:f0:bc:c5:eb:f8:c7:3d:14:92:4b:3b:f2: ac:19:ed:2a:b6:4b:76:2d:c4:bd:cc:f8:75:e0:13: 1a:98:e5:ce:e1:f7:67:ea:a9:82:fe:31:83:f6:89: 57:c6:e9:85:70:26:c1:a5:c9:e3:da:fd:ab:0d:5c: 4a:48:b4:a9:22:24:cf:9e:f7:3c:10:57:8a:01:bb: 3b:13:eb:65:06:bf:d0:53:6e:a0:6e:07:bd:c5:ea: 7b:c2:ec:0b:40:5e:bc:1a:e9:a2:7b:ee:aa:dc:44: 95:5a:bb:a9:f7:db:f9:63:6f:b8:64:b5:f3:2b:7e: 56:79:3b:fa:82:bb:c8:2f:78:77:19:c9:e0:f7:2b: c6:a4:b4:2d:61:47:a7:dd:c7:9d:ae:5d:19:2f:ec: 91:66:9f:b3:db:09:c2:06:f4:19:7c:a1:19:be:e6: 36:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DE:EC:2B:C1:13:47:4B:58:07:B7:F2:2A:9E:0C:76:1C:0C:50:13 X509v3 Authority Key Identifier: keyid:99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:8e:36:f2:0f:34:09:ad:33:d9:72:3c:ec:57:33:9a:26:b5: 8c:58:3d:00:2a:e4:46:eb:62:ad:04:cc:37:ef:ee:60:c6:ee: ce:29:f6:a8:de:3a:6b:82:fb:3e:f1:af:65:2e:31:a0:42:3a: d7:37:1d:fe:27:3d:4b:f9:7f:79:64:39:f8:60:fd:53:b1:dc: 1e:f7:36:df:71:0e:4b:21:d3:78:df:59:6a:e7:f7:0b:53:d0: c0:74:4f:7a:2c:e0:b1:52:0a:25:39:7f:21:a5:d1:e0:68:7b: 6c:7f:f2:77:31:4d:a5:91:fe:15:08:b4:76:61:cc:ae:27:e6: fb:88:d2:9d:ff:de:75:21:83:a7:30:21:34:88:82:de:dc:1a: 4b:c8:c8:87:da:a0:51:3e:a7:ee:6e:4e:51:63:6a:a1:3f:93: 63:9b:38:e1:6d:cb:1b:74:e8:c6:d3:63:af:52:4f:0b:14:90: d6:3d:61:d3:04:5a:66:66:7f:3b:d0:c1:76:ef:61:69:03:76: 40:ee:47:ec:fd:32:46:22:5c:b3:b3:7b:98:49:df:26:f6:7b: b2:7b:32:b9:9f:93:cc:5d:be:a6:2e:dd:96:5e:29:2c:75:76: 73:26:e0:80:79:b9:78:4f:dd:b4:fc:fc:38:55:b8:25:98:04: bd:5f:1e:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDyvDX8BWNI3T0dN40GV4p3V5kNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURCN0M2 RTc3OTAyMTAeFw0yNjA2MTkxMjQ2MjdaFw0yNjA2MjAxNTE2MjdaMDMxMTAvBgNV BAMTKERCREVFQzJCQzExMzQ3NEI1ODA3QjdGMjJBOUUwQzc2MUMwQzUwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc60DtVDlcYod82RtVOP7whyQ1 02cWZFDxAxS9oKii15TSiIvtEJTK59isnbI3Ylg4aTuZsVaAgjZYFHxxiY/SXVok VFGbYeacA4tKgKkUkOnmbfa1F7Wsi//s/fC8xev4xz0Ukks78qwZ7Sq2S3YtxL3M +HXgExqY5c7h92fqqYL+MYP2iVfG6YVwJsGlyePa/asNXEpItKkiJM+e9zwQV4oB uzsT62UGv9BTbqBuB73F6nvC7AtAXrwa6aJ77qrcRJVau6n32/ljb7hktfMrflZ5 O/qCu8gveHcZyeD3K8aktC1hR6fdx52uXRkv7JFmn7PbCcIG9Bl8oRm+5jZNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU297sK8ETR0tYB7fyKp4MdhwMUBMwHwYDVR0j BBgwFoAUmW1zcUVag0ybGW2s0EHbfG53kCEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2YzYxNGYtZDBmZi00MWE5LTkyZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0 NTVBODM0QzlCMTk2REFDRDA0MURCN0M2RTc3OTAyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTZENzM3MTQ1NUE4MzRDOUIxOTZEQUNEMDQxREI3QzZFNzc5 MDIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvOTk2RDczNzE0NTVBODM0QzlCMTk2REFDRDA0MURC N0M2RTc3OTAyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiONvIPNAmtM9lyPOxXM5omtYxYPQAq5Ebr Yq0EzDfv7mDG7s4p9qjeOmuC+z7xr2UuMaBCOtc3Hf4nPUv5f3lkOfhg/VOx3B73 Nt9xDksh03jfWWrn9wtT0MB0T3os4LFSCiU5fyGl0eBoe2x/8ncxTaWR/hUItHZh zK4n5vuI0p3/3nUhg6cwITSIgt7cGkvIyIfaoFE+p+5uTlFjaqE/k2ObOOFtyxt0 6MbTY69STwsUkNY9YdMEWmZmfzvQwXbvYWkDdkDuR+z9MkYiXLOze5hJ3yb2e7J7 Mrmfk8xdvqYu3ZZeKSx1dnMm4IB5uXhP3bT8/DhVuCWYBL1fHiU= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:32 2026 by rpki-client