$ rpki-client -vvf rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft File: B486D413919D8F20144DB8254040D1237E34B8AA.mft (raw, json) Hash identifier: XH7zfKo7jqemxY4F29iAkeLQtZPd90I+SXhhTsjguVw= Subject key identifier: AD:AE:FA:5E:27:D6:83:4A:12:28:45:07:E0:07:F4:37:2E:B0:6A:DC Authority key identifier: B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA Certificate issuer: /CN=B486D413919D8F20144DB8254040D1237E34B8AA Certificate serial: 3AAEDA1F936A6B1A8CDADC5381EE305F3E226F58 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 06:27:36 +0000 Manifest this update: Sat 20 Jun 2026 06:22:36 +0000 Manifest next update: Sun 21 Jun 2026 09:07:36 +0000 Files and hashes: 1: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: I7JOfc7cIihje61qrOhB8mNIVUiXPbuVCLb1xIG81r0=) 2: B486D413919D8F20144DB8254040D1237E34B8AA.crl (hash: J1h4FnuxY/UUdASbdgqi27hggAHuS4MoG+KKt2Rvew8=) 3: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: eldG4bxXfHfHBZuQpQd9deqvI4oVqZUOKXxgD57litE=) 4: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: 7QTUY2NQvJrxF3QQX7LUC6hqv5ttn70Xh40WXHVfruk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 08:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ae:da:1f:93:6a:6b:1a:8c:da:dc:53:81:ee:30:5f:3e:22:6f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B486D413919D8F20144DB8254040D1237E34B8AA Validity Not Before: Jun 20 06:22:36 2026 GMT Not After : Jun 21 09:07:36 2026 GMT Subject: CN=ADAEFA5E27D6834A12284507E007F4372EB06ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a7:85:33:d7:b7:c1:cb:4d:dd:77:31:74:f6: 2e:ab:f4:a1:a6:20:bc:56:ce:1a:1b:3a:cb:69:57: c3:53:ca:44:35:65:85:19:97:90:93:0e:e8:b2:9e: 75:8e:41:21:d4:bb:b2:19:60:d4:1b:ab:80:88:30: 3c:89:b0:6c:9d:f5:b4:30:63:2a:e0:c0:8b:de:35: f4:a7:49:0a:73:40:00:90:1d:c2:7d:4b:7e:d4:6e: 3d:36:aa:9b:cf:36:e6:1a:b1:e7:1c:06:5f:a5:44: 2e:f6:a8:58:f5:dc:70:23:45:1e:2b:58:a0:96:23: 56:d4:f6:5d:34:a3:a7:42:dd:22:01:07:59:2e:f8: 5b:cd:49:49:70:d4:28:2d:80:d7:69:6d:30:5d:78: aa:da:35:a1:48:ba:76:a1:cb:a2:7c:a7:d3:d5:bd: f2:65:25:3c:2a:4f:d7:05:bd:61:62:5d:5b:5e:2e: ee:31:8c:ef:11:81:c1:e0:c1:89:3b:b1:0e:cc:54: 17:80:0b:82:40:c4:9f:9e:50:f5:bb:df:41:a5:55: 1f:97:83:52:26:c8:76:d2:0a:56:d4:e7:40:79:fa: 9f:16:4b:bc:14:7c:e5:0f:ab:c0:5c:5f:5f:cc:2b: 70:a2:b5:80:5c:23:ed:3b:e7:f0:fc:75:ee:a9:42: 5b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AE:FA:5E:27:D6:83:4A:12:28:45:07:E0:07:F4:37:2E:B0:6A:DC X509v3 Authority Key Identifier: keyid:B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:90:57:37:0e:f5:ab:0e:97:8c:57:50:35:ac:bb:c5:8d:6f: 27:d7:81:2a:89:c2:8c:f6:23:38:89:92:50:8e:64:97:9f:6a: 55:b7:dc:6a:87:5c:1f:06:4b:4b:8e:ab:ec:f2:a8:5c:69:00: e9:26:da:62:6f:57:ab:68:50:05:db:2d:a3:45:6b:89:3c:14: b3:a8:0e:ab:2c:f8:cf:e7:13:29:10:7e:ad:a2:a0:44:e2:eb: c6:0a:25:87:bc:de:a0:c1:ac:69:38:64:a2:45:fd:22:87:58: f5:17:7b:d7:12:b9:76:57:7b:1b:6b:38:8c:e9:26:8e:ab:9c: 8f:a1:d8:a4:fa:03:ed:07:93:56:d1:cc:ea:79:fa:f0:84:06: d5:1c:da:a5:55:e2:57:23:ae:3b:21:f1:06:ff:b1:fc:d0:d8: 00:14:61:d2:f8:e7:da:6f:2c:48:a4:57:1b:ba:6a:d9:43:27: b5:b4:61:ca:1f:fa:65:62:88:35:2a:ef:63:47:18:11:c1:b1: 16:9b:83:98:80:25:49:bd:85:48:aa:7c:97:60:4d:c9:b0:a4: 5d:8a:d3:43:2c:a9:14:ac:d9:8e:80:a7:49:67:4c:a7:ec:5a: 57:e4:f5:c2:0c:e2:bb:28:98:09:6a:1f:33:16:36:a0:9d:e7: 81:2c:f2:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOq7aH5NqaxqM2txTge4wXz4ib1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3 RTM0QjhBQTAeFw0yNjA2MjAwNjIyMzZaFw0yNjA2MjEwOTA3MzZaMDMxMTAvBgNV BAMTKEFEQUVGQTVFMjdENjgzNEExMjI4NDUwN0UwMDdGNDM3MkVCMDZBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRp4Uz17fBy03ddzF09i6r9KGm ILxWzhobOstpV8NTykQ1ZYUZl5CTDuiynnWOQSHUu7IZYNQbq4CIMDyJsGyd9bQw YyrgwIveNfSnSQpzQACQHcJ9S37Ubj02qpvPNuYaseccBl+lRC72qFj13HAjRR4r WKCWI1bU9l00o6dC3SIBB1ku+FvNSUlw1CgtgNdpbTBdeKraNaFIunahy6J8p9PV vfJlJTwqT9cFvWFiXVteLu4xjO8RgcHgwYk7sQ7MVBeAC4JAxJ+eUPW730GlVR+X g1ImyHbSClbU50B5+p8WS7wUfOUPq8BcX1/MK3CitYBcI+075/D8de6pQluXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUra76XifWg0oSKEUH4Af0Ny6watwwHwYDVR0j BBgwFoAUtIbUE5GdjyAUTbglQEDRI340uKowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBjMTcxZjQtYmQxMS00OGVkLTg3ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5 MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3RTM0QjhBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDg2RDQxMzkxOUQ4RjIwMTQ0REI4MjU0MDQwRDEyMzdFMzRC OEFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQx MjM3RTM0QjhBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSQVzcO9asOl4xXUDWsu8WNbyfXgSqJwoz2 IziJklCOZJefalW33GqHXB8GS0uOq+zyqFxpAOkm2mJvV6toUAXbLaNFa4k8FLOo Dqss+M/nEykQfq2ioETi68YKJYe83qDBrGk4ZKJF/SKHWPUXe9cSuXZXextrOIzp Jo6rnI+h2KT6A+0Hk1bRzOp5+vCEBtUc2qVV4lcjrjsh8Qb/sfzQ2AAUYdL459pv LEikVxu6atlDJ7W0Ycof+mViiDUq72NHGBHBsRabg5iAJUm9hUiqfJdgTcmwpF2K 00MsqRSs2Y6Ap0lnTKfsWlfk9cIM4rsomAlqHzMWNqCd54Es8oA= -----END CERTIFICATE-----Generated at Sat Jun 20 08:38:06 2026 by rpki-client