$ rpki-client -vvf rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft File: FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft (raw, json) Hash identifier: 3XgockeTp+esJHJ+j8RUsTCazx30S2Bcy2Lce1OsegQ= Subject key identifier: 9C:0E:36:76:B0:4D:DA:2C:AA:02:7C:4D:F3:D6:74:51:F1:30:56:F9 Authority key identifier: FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13 Certificate issuer: /CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113 Certificate serial: 627735C26193BF185B75DA631E48638205D98E3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:12:50 +0000 Manifest this update: Fri 19 Jun 2026 18:07:50 +0000 Manifest next update: Sat 20 Jun 2026 20:18:50 +0000 Files and hashes: 1: FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl (hash: xbJypa+JI1F5c94hK5qyr15XSBzDffRVYXg7vsyXtoM=) 2: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: DzuRo4UVpWSsuuvSZCPx+QPp1mXNSgbHMp2M3XRIA7s=) 3: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: pv5zffL4ZCBhJD+aFjjZDdz/CPK6N+eA7QhskPfJHEg=) 4: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: tqhtPy0pDXrbRO+/m8ay5h7+qXG3yJPzUoTIyb8m2MU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:77:35:c2:61:93:bf:18:5b:75:da:63:1e:48:63:82:05:d9:8e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113 Validity Not Before: Jun 19 18:07:50 2026 GMT Not After : Jun 20 20:18:50 2026 GMT Subject: CN=9C0E3676B04DDA2CAA027C4DF3D67451F13056F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:14:f2:58:03:a2:43:07:01:3e:5c:44:ce: 5c:60:aa:ed:30:7a:4f:de:67:d2:c9:e0:08:37:3b: 01:f5:d8:f8:88:ab:d2:fc:c8:d3:65:8c:52:30:4d: 4a:1c:7e:08:4d:2c:b8:63:04:e5:e0:13:2e:1a:a0: c3:9d:0c:a0:1b:69:f2:95:87:71:6e:22:8f:ff:98: 32:a5:68:1c:a1:c5:dc:2c:0a:95:45:a1:85:e2:b0: 0c:c0:0c:d3:0e:87:97:62:a8:65:8f:08:49:4f:66: ad:c2:83:93:2a:f8:2a:24:d5:08:ec:67:6a:90:f5: 8a:e1:b5:54:b0:be:76:c4:5a:6b:70:4b:31:34:eb: 17:f7:2c:cc:e5:d3:d9:94:29:fd:09:f2:83:18:98: 57:40:88:ec:1c:9b:9b:17:b4:c1:04:da:f4:db:74: 02:66:30:c7:f8:04:fd:99:3a:4d:19:18:92:e6:83: 9a:ed:a7:57:18:c6:90:0e:f6:a9:7b:c2:72:30:96: a7:2d:a1:5f:51:1f:ce:34:dd:47:14:42:31:ff:80: c4:ab:84:5b:7d:b5:aa:da:00:b0:ae:7b:60:3e:76: 31:9c:26:56:8d:c1:d4:e6:2d:4e:48:73:d2:e9:6c: b2:f7:4c:79:28:c0:c7:a9:d6:49:df:9b:cf:5a:20: 6c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0E:36:76:B0:4D:DA:2C:AA:02:7C:4D:F3:D6:74:51:F1:30:56:F9 X509v3 Authority Key Identifier: keyid:FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ae:c0:c9:b6:50:02:91:80:9a:ae:b4:a7:82:54:4e:0c:3e: dd:20:17:26:47:1d:20:f3:55:29:e8:4e:82:ca:32:60:a8:46: a3:96:6e:9e:18:f1:7e:2e:1c:45:a2:43:d3:7e:df:37:c7:0f: 68:e0:29:53:7d:5e:eb:ab:ae:55:ab:44:13:a1:1e:ff:bf:b8: e3:6c:79:9f:b7:7b:ea:d4:e0:c7:59:b3:ec:7a:03:47:ec:a7: 67:f6:2d:78:21:41:2d:16:4b:35:31:24:78:c7:dd:5a:94:ef: d8:fe:c0:cc:d9:75:a0:28:ae:1e:a1:96:9e:33:39:41:86:5c: 7a:71:c0:c6:8c:7a:12:cd:5a:71:61:88:54:74:05:8e:da:a9: c2:f4:38:39:91:aa:d5:3e:db:00:f1:ab:c9:51:1a:a3:01:14: c3:e8:5a:a9:20:a5:94:cd:33:89:72:f6:30:da:1f:b5:db:1f: a2:54:b1:f3:10:7f:bd:b1:9a:be:df:f0:71:16:59:82:cd:6f: db:27:74:b8:5b:4d:d8:bf:47:aa:b0:e0:88:19:ad:5b:28:09: 80:5d:a8:47:28:ea:48:a0:f2:81:87:46:02:67:15:7a:d2:5d: bb:da:ca:96:21:9f:93:2b:f4:89:67:30:1e:25:e2:39:7e:12: be:2a:bc:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYnc1wmGTvxhbddpjHkhjggXZjj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGNDY2MjlCRERCNEYzQTFDNkQ3OEYyNTNFM0I2M0M5 QjgzNDExMzAeFw0yNjA2MTkxODA3NTBaFw0yNjA2MjAyMDE4NTBaMDMxMTAvBgNV BAMTKDlDMEUzNjc2QjA0RERBMkNBQTAyN0M0REYzRDY3NDUxRjEzMDU2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGghTyWAOiQwcBPlxEzlxgqu0w ek/eZ9LJ4Ag3OwH12PiIq9L8yNNljFIwTUocfghNLLhjBOXgEy4aoMOdDKAbafKV h3FuIo//mDKlaByhxdwsCpVFoYXisAzADNMOh5diqGWPCElPZq3Cg5Mq+Cok1Qjs Z2qQ9YrhtVSwvnbEWmtwSzE06xf3LMzl09mUKf0J8oMYmFdAiOwcm5sXtMEE2vTb dAJmMMf4BP2ZOk0ZGJLmg5rtp1cYxpAO9ql7wnIwlqctoV9RH8403UcUQjH/gMSr hFt9taraALCue2A+djGcJlaNwdTmLU5Ic9LpbLL3THkowMep1knfm89aIGyNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnA42drBN2iyqAnxN89Z0UfEwVvkwHwYDVR0j BBgwFoAU//RmKb3bTzocbXjyU+O2PJuDQRMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZlZGIyOGYtZjNmOS00MTk5LTg1YTMtYzliZjlhN2E3ZGY4LzAvRkZGNDY2MjlC RERCNEYzQTFDNkQ3OEYyNTNFM0I2M0M5QjgzNDExMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkY0NjYyOUJEREI0RjNBMUM2RDc4RjI1M0UzQjYzQzlCODM0 MTEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvRkZGNDY2MjlCRERCNEYzQTFDNkQ3OEYyNTNFM0I2 M0M5QjgzNDExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiuwMm2UAKRgJqutKeCVE4MPt0gFyZHHSDz VSnoToLKMmCoRqOWbp4Y8X4uHEWiQ9N+3zfHD2jgKVN9XuurrlWrRBOhHv+/uONs eZ+3e+rU4MdZs+x6A0fsp2f2LXghQS0WSzUxJHjH3VqU79j+wMzZdaAorh6hlp4z OUGGXHpxwMaMehLNWnFhiFR0BY7aqcL0ODmRqtU+2wDxq8lRGqMBFMPoWqkgpZTN M4ly9jDaH7XbH6JUsfMQf72xmr7f8HEWWYLNb9sndLhbTdi/R6qw4IgZrVsoCYBd qEco6kig8oGHRgJnFXrSXbvaypYhn5Mr9IlnMB4l4jl+Er4qvDc= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:03 2026 by rpki-client