$ rpki-client -vvf rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft File: 988BEA205B597B525439E1C7DF548E148BDF5DE3.mft (raw, json) Hash identifier: w/wB9hDhI/CAkl8LbRYx7LFOvYNqGWPZujuCAmolDNU= Subject key identifier: EC:E9:94:BA:A0:5B:CC:D5:6E:02:BE:42:43:37:CC:69:30:3D:92:EC Authority key identifier: 98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 Certificate issuer: /CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Certificate serial: 6F5372C0F8464CCAA4BBEB935B952449537D523A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 12:41:21 +0000 Manifest this update: Fri 19 Jun 2026 12:36:21 +0000 Manifest next update: Sat 20 Jun 2026 15:47:21 +0000 Files and hashes: 1: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: KyMbOLP8QXcvGQ9MezBY9LjyWg2SLWeZUDh4Qo5TXWQ=) 2: 988BEA205B597B525439E1C7DF548E148BDF5DE3.crl (hash: vrL/Mdv1PFtg+YD4xuIdTqcmKRK/UmeGbLvhAxEMiV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.crl rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 15:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:53:72:c0:f8:46:4c:ca:a4:bb:eb:93:5b:95:24:49:53:7d:52:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Validity Not Before: Jun 19 12:36:21 2026 GMT Not After : Jun 20 15:47:21 2026 GMT Subject: CN=ECE994BAA05BCCD56E02BE424337CC69303D92EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:dd:22:e5:46:ba:2a:71:80:67:ba:3b:3e: fd:a9:3c:da:0b:61:72:fb:dc:1f:92:d6:2e:5d:48: b1:fe:0d:c7:7a:37:c9:0f:79:e8:25:34:d8:98:b8: ba:cb:b9:d6:be:03:72:3c:ee:67:f5:8c:a3:ba:64: 08:3b:60:63:34:e2:83:44:fc:a5:4b:5a:6e:cb:66: ab:8b:3c:95:b0:68:57:39:d1:b7:af:21:bb:39:ea: 50:15:8a:54:8b:d2:6b:b9:cb:d1:55:f8:c9:33:2b: 49:4c:21:82:09:45:da:a7:26:f2:4e:19:66:42:ef: 47:de:c8:1c:5e:4c:e4:c1:b6:b6:4e:c2:ea:33:af: 21:0d:47:95:5a:09:51:8b:a5:bf:af:16:12:21:2a: 61:29:f8:05:9a:9f:56:20:5a:3d:b5:02:aa:c4:f6: 82:63:f7:a3:2d:da:d4:56:90:e7:78:63:9d:3e:97: 78:90:5e:76:60:65:1e:5d:3b:f4:e6:9a:e6:37:4b: 91:5b:43:b9:96:73:75:e1:e1:d4:d1:f9:47:b5:24: 20:99:8c:27:01:1c:ea:76:ee:a3:39:98:80:6e:89: d8:4c:ba:f8:80:eb:f0:f6:c5:e9:e1:d2:45:b4:b9: be:87:e3:39:4c:b5:34:44:71:fd:91:13:5e:26:17: c9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E9:94:BA:A0:5B:CC:D5:6E:02:BE:42:43:37:CC:69:30:3D:92:EC X509v3 Authority Key Identifier: keyid:98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:52:57:4d:f1:a9:60:a9:f2:7a:4a:74:d2:3b:0b:fd:75:a0: a1:f3:ab:53:5e:d7:2c:0e:0f:43:6e:ae:0f:a7:a4:42:c3:0b: 90:ad:53:54:66:78:2a:ea:2f:3d:42:93:65:f7:6d:dd:c1:c3: cf:aa:9a:4c:31:fe:75:52:b6:bf:13:e4:a3:ee:34:9a:01:85: be:a8:d4:6d:69:25:1c:2f:74:e7:50:c6:e1:12:8f:94:b2:99: 56:d7:1c:c4:a4:f8:fe:ce:69:46:a1:1e:9a:61:5f:4a:a6:a3: 58:1d:e7:e2:75:eb:d8:e9:a4:6d:f2:1d:bd:e5:b7:38:fe:0a: d9:03:ac:ea:d6:0f:19:26:11:c2:02:91:ae:c9:6e:d4:b0:95: 5b:1a:89:59:e3:8b:da:bc:bf:dc:b5:d2:52:f8:24:57:0b:ae: 63:be:c1:21:ac:40:ac:58:7f:61:ad:c2:71:bf:0a:7f:6e:22: 23:df:37:fb:d3:96:b4:2a:95:f3:20:33:0f:0c:09:36:c5:32: 04:8c:a8:52:30:bf:2a:0f:25:a5:17:1f:08:8c:7e:da:1c:81: 78:07:55:15:b5:60:74:1e:b6:65:9e:77:57:dd:52:d2:60:9f: 4b:a3:a3:f1:90:41:34:7e:55:97:d3:c0:50:27:48:42:2b:db: e2:27:ad:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1NywPhGTMqku+uTW5UkSVN9UjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4QkVBMjA1QjU5N0I1MjU0MzlFMUM3REY1NDhFMTQ4 QkRGNURFMzAeFw0yNjA2MTkxMjM2MjFaFw0yNjA2MjAxNTQ3MjFaMDMxMTAvBgNV BAMTKEVDRTk5NEJBQTA1QkNDRDU2RTAyQkU0MjQzMzdDQzY5MzAzRDkyRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy390i5Ua6KnGAZ7o7Pv2pPNoL YXL73B+S1i5dSLH+Dcd6N8kPeeglNNiYuLrLuda+A3I87mf1jKO6ZAg7YGM04oNE /KVLWm7LZquLPJWwaFc50bevIbs56lAVilSL0mu5y9FV+MkzK0lMIYIJRdqnJvJO GWZC70feyBxeTOTBtrZOwuozryENR5VaCVGLpb+vFhIhKmEp+AWan1YgWj21AqrE 9oJj96Mt2tRWkOd4Y50+l3iQXnZgZR5dO/TmmuY3S5FbQ7mWc3Xh4dTR+Ue1JCCZ jCcBHOp27qM5mIBuidhMuviA6/D2xenh0kW0ub6H4zlMtTREcf2RE14mF8kTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7OmUuqBbzNVuAr5CQzfMaTA9kuwwHwYDVR0j BBgwFoAUmIvqIFtZe1JUOeHH31SOFIvfXeMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBhNzhjMDYtMWQ2ZS00M2I2LWJmMzAtODYwY2ViZGRmYjMyLzAvOTg4QkVBMjA1 QjU5N0I1MjU0MzlFMUM3REY1NDhFMTQ4QkRGNURFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODhCRUEyMDVCNTk3QjUyNTQzOUUxQzdERjU0OEUxNDhCREY1 REUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTg4QkVBMjA1QjU5N0I1MjU0MzlFMUM3REY1NDhF MTQ4QkRGNURFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtSV03xqWCp8npKdNI7C/11oKHzq1Ne1ywO D0Nurg+npELDC5CtU1RmeCrqLz1Ck2X3bd3Bw8+qmkwx/nVStr8T5KPuNJoBhb6o 1G1pJRwvdOdQxuESj5SymVbXHMSk+P7OaUahHpphX0qmo1gd5+J169jppG3yHb3l tzj+CtkDrOrWDxkmEcICka7JbtSwlVsaiVnji9q8v9y10lL4JFcLrmO+wSGsQKxY f2GtwnG/Cn9uIiPfN/vTlrQqlfMgMw8MCTbFMgSMqFIwvyoPJaUXHwiMftocgXgH VRW1YHQetmWed1fdUtJgn0ujo/GQQTR+VZfTwFAnSEIr2+InrfI= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:01 2026 by rpki-client