$ rpki-client -vvf rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft File: 12215616BDEA90F45AB43FFCB676AA254601358F.mft (raw, json) Hash identifier: cpVT/VUYsrbgjyZvshqe/ow0edGQjfD4VZhW8t+ozqg= Subject key identifier: 57:DC:F5:11:7C:EA:0F:D9:DF:E6:C7:E2:92:6C:01:FC:A6:34:AC:31 Authority key identifier: 12:21:56:16:BD:EA:90:F4:5A:B4:3F:FC:B6:76:AA:25:46:01:35:8F Certificate issuer: /CN=12215616BDEA90F45AB43FFCB676AA254601358F Certificate serial: 2626ADDEE79C080E2E173CB9DB4384BD4A9D1169 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 20:25:37 +0000 Manifest this update: Fri 19 Jun 2026 20:20:37 +0000 Manifest next update: Sat 20 Jun 2026 20:26:37 +0000 Files and hashes: 1: 12215616BDEA90F45AB43FFCB676AA254601358F.crl (hash: EWxHuwb3Ghn1ncmUJC/4knNo89xGACJbQTDvEmc++TE=) 2: 3130332e3137342e3132322e302f32332d3233203d3e20313437303936.roa (hash: gTzJVLzwHZfB2XlD0ZDAGkf7sC4mGSUZJV6Nnni5S1g=) 3: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: 19Gxe0C+BqrJZYT7+O9ydX/09JgmXPG6bcNyUMxys/Q=) 4: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: BIL+aGZm0f2cNvuuhG7zFnc4Iz00ZUgKA3IGqeW+Vp0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.crl rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:26:ad:de:e7:9c:08:0e:2e:17:3c:b9:db:43:84:bd:4a:9d:11:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12215616BDEA90F45AB43FFCB676AA254601358F Validity Not Before: Jun 19 20:20:37 2026 GMT Not After : Jun 20 20:26:37 2026 GMT Subject: CN=57DCF5117CEA0FD9DFE6C7E2926C01FCA634AC31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f0:f0:88:ef:92:3c:b5:aa:a0:03:bb:aa:3f: 4d:4b:38:77:a5:6e:66:e6:d6:82:d8:71:90:69:d2: 3d:62:d8:50:94:51:57:e9:a4:44:5b:d0:f8:f6:36: 81:29:f0:5b:2c:19:e8:bf:c9:48:91:3c:ec:0c:74: 4b:f1:26:6f:4d:75:69:c7:1c:6e:5a:fd:fd:64:d0: d9:0f:78:92:fb:5c:6f:46:26:a9:b1:92:db:f3:4b: a3:5d:6f:13:fd:a6:d3:31:22:f6:45:b0:a5:d8:ba: 10:d1:eb:ae:b1:02:7a:9f:15:68:95:75:83:7c:1f: 60:da:fc:bb:55:61:e4:6d:0b:ac:ad:e2:45:d3:ef: c1:d7:3a:8e:69:f5:16:a6:25:f4:71:3b:65:c7:a4: 28:d0:0a:6d:b9:ac:c1:c3:65:6d:0b:53:28:66:2e: eb:14:7e:cc:85:90:28:28:e7:c4:22:05:f5:cc:a0: c8:15:a7:97:ae:64:a5:23:9b:f2:29:c4:20:0e:7f: 99:21:a7:76:bf:90:c6:58:ba:e3:2c:56:d8:50:23: 87:6e:ef:a1:ee:c2:bb:29:5a:7b:bf:c7:fd:be:74: 2c:9f:21:4d:0d:d2:4d:15:69:76:c6:ec:94:15:4e: 9a:a4:00:cb:3e:78:df:b6:11:ed:ee:e5:1a:98:da: 36:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DC:F5:11:7C:EA:0F:D9:DF:E6:C7:E2:92:6C:01:FC:A6:34:AC:31 X509v3 Authority Key Identifier: keyid:12:21:56:16:BD:EA:90:F4:5A:B4:3F:FC:B6:76:AA:25:46:01:35:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:5c:75:6f:17:9a:23:0f:df:0d:56:3a:c4:ba:73:e3:08:93: 6a:90:b8:10:c1:76:e8:7b:c4:1f:fd:18:93:67:33:05:e4:a6: 25:e3:fa:e1:a5:e0:b6:a9:b5:0f:f4:85:1a:86:49:40:13:ac: c8:19:46:34:86:b8:4e:a3:44:02:9c:6b:b1:ff:da:02:16:fd: bb:c6:95:f6:bd:f7:84:8d:41:0c:48:2c:cc:bc:b2:b0:5f:4b: 02:a8:1f:ff:6e:ae:4f:c8:27:9c:37:9f:ca:47:3d:02:57:0e: b1:24:89:33:a9:7b:7f:6b:6f:4b:47:f3:fb:0a:85:94:e5:a7: 75:43:ec:21:5c:1f:88:3c:ab:db:4e:44:d4:ff:8c:c5:52:d3: 2e:0e:86:78:ee:40:44:83:90:65:40:9e:49:f9:9b:06:de:d0: 4d:91:c0:82:be:3c:06:bf:19:ba:fb:af:84:2c:9e:7e:a9:a5: 99:58:31:6b:e2:be:66:6d:4f:bb:67:c7:5c:f2:d4:49:da:b8: 6d:a7:aa:e2:31:de:59:33:1f:94:5c:7d:9a:55:37:52:2c:44: f4:f1:9b:f0:a8:a0:0d:52:c6:8e:14:4b:b7:9d:1b:f0:ac:c0: 6e:a5:9f:c1:d1:8a:22:b2:d9:c8:39:6e:5c:d9:52:2c:34:74: 58:d2:2f:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJiat3uecCA4uFzy520OEvUqdEWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyMTU2MTZCREVBOTBGNDVBQjQzRkZDQjY3NkFBMjU0 NjAxMzU4RjAeFw0yNjA2MTkyMDIwMzdaFw0yNjA2MjAyMDI2MzdaMDMxMTAvBgNV BAMTKDU3RENGNTExN0NFQTBGRDlERkU2QzdFMjkyNkMwMUZDQTYzNEFDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN8PCI75I8taqgA7uqP01LOHel bmbm1oLYcZBp0j1i2FCUUVfppERb0Pj2NoEp8FssGei/yUiRPOwMdEvxJm9NdWnH HG5a/f1k0NkPeJL7XG9GJqmxktvzS6NdbxP9ptMxIvZFsKXYuhDR666xAnqfFWiV dYN8H2Da/LtVYeRtC6yt4kXT78HXOo5p9RamJfRxO2XHpCjQCm25rMHDZW0LUyhm LusUfsyFkCgo58QiBfXMoMgVp5euZKUjm/IpxCAOf5khp3a/kMZYuuMsVthQI4du 76HuwrspWnu/x/2+dCyfIU0N0k0VaXbG7JQVTpqkAMs+eN+2Ee3u5RqY2jblAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV9z1EXzqD9nf5sfikmwB/KY0rDEwHwYDVR0j BBgwFoAUEiFWFr3qkPRatD/8tnaqJUYBNY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI3MzAyN2EtMDk2Yi00ZTk1LWE2NTYtZGFiZTk4YWM2ZjZkLzAvMTIyMTU2MTZC REVBOTBGNDVBQjQzRkZDQjY3NkFBMjU0NjAxMzU4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjIxNTYxNkJERUE5MEY0NUFCNDNGRkNCNjc2QUEyNTQ2MDEz NThGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMTIyMTU2MTZCREVBOTBGNDVBQjQzRkZDQjY3NkFB MjU0NjAxMzU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM5cdW8XmiMP3w1WOsS6c+MIk2qQuBDBduh7 xB/9GJNnMwXkpiXj+uGl4LaptQ/0hRqGSUATrMgZRjSGuE6jRAKca7H/2gIW/bvG lfa994SNQQxILMy8srBfSwKoH/9urk/IJ5w3n8pHPQJXDrEkiTOpe39rb0tH8/sK hZTlp3VD7CFcH4g8q9tORNT/jMVS0y4OhnjuQESDkGVAnkn5mwbe0E2RwIK+PAa/ Gbr7r4Qsnn6ppZlYMWvivmZtT7tnx1zy1EnauG2nquIx3lkzH5RcfZpVN1IsRPTx m/CooA1Sxo4US7edG/CswG6ln8HRiiKy2cg5blzZUiw0dFjSLz0= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:01 2026 by rpki-client