$ rpki-client -vvf rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft File: A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft (raw, json) Hash identifier: 2GApycC6XsaVocY1CS27zWWea9qXaRQf8mtVSQ3iRac= Subject key identifier: D5:13:50:D9:42:18:CE:AA:6E:D7:6D:B2:22:98:F3:98:86:6C:87:D7 Authority key identifier: A9:78:8B:28:1E:44:81:BB:EF:C7:DC:CD:C6:D1:8C:F4:D3:6B:3D:6E Certificate issuer: /CN=A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E Certificate serial: 60F781C5EBA8323D3A4F7E24E11C4B0B0A0800DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 05:00:57 +0000 Manifest this update: Sat 20 Jun 2026 04:55:57 +0000 Manifest next update: Sun 21 Jun 2026 07:25:57 +0000 Files and hashes: 1: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: +X4DdSQ9xtq8kPseZiuCwH6E+1VNqzzRG0A2Dn7OrXc=) 2: A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl (hash: zevKyqPfczA+v3H3HNR+syoMuPOEj47XqOGheLHfqRU=) 3: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: LzRdfO8uQHGjjJx+IZG72L+49qDt2LuDV7Qzeoi9vMg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f7:81:c5:eb:a8:32:3d:3a:4f:7e:24:e1:1c:4b:0b:0a:08:00:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E Validity Not Before: Jun 20 04:55:57 2026 GMT Not After : Jun 21 07:25:57 2026 GMT Subject: CN=D51350D94218CEAA6ED76DB22298F398866C87D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:aa:75:64:24:5f:49:59:65:41:f0:ca:8f:09: 5c:95:45:fe:74:cd:aa:69:4c:47:b5:77:0d:c8:7b: a7:a3:c2:d4:f0:fa:d7:34:aa:85:93:a2:50:a5:63: c8:ee:fe:b0:08:de:79:5b:10:ec:47:1b:ad:68:4a: 04:c9:1c:cb:87:79:3f:64:ba:e4:9e:cf:df:f1:3e: 4a:dd:1b:e4:18:98:a8:a3:28:1f:5a:9c:19:49:e9: e1:b0:fc:25:df:a6:19:35:af:90:63:20:14:c7:8c: f1:cf:c2:e1:83:96:35:f6:77:ee:b3:8e:09:a6:f1: 4b:41:ed:bc:cd:78:98:9e:cf:b3:00:3c:6c:b7:08: f8:f7:be:fd:26:8b:46:83:d8:d5:8e:e8:be:85:78: 42:b9:5d:2e:97:a1:0a:6e:99:37:33:55:30:35:74: 02:74:cf:7d:d6:fd:50:2e:5f:2e:1c:40:29:14:81: 8e:f0:3e:8b:33:3e:db:01:e1:0a:7f:60:69:7a:af: 14:be:af:a4:1b:f6:33:33:ee:c5:01:df:89:a0:d9: 99:b6:b2:65:51:d5:2f:da:e9:0f:88:0c:17:50:c7: f4:90:21:b4:c6:7a:01:be:45:ba:f3:86:87:1a:1a: 64:52:52:48:b5:52:33:cc:a5:c8:29:23:86:33:62: b0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:13:50:D9:42:18:CE:AA:6E:D7:6D:B2:22:98:F3:98:86:6C:87:D7 X509v3 Authority Key Identifier: keyid:A9:78:8B:28:1E:44:81:BB:EF:C7:DC:CD:C6:D1:8C:F4:D3:6B:3D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/A9788B281E4481BBEFC7DCCDC6D18CF4D36B3D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:27:47:33:95:e4:a5:88:38:a3:e8:15:78:f5:bb:9c:45:dd: 98:1f:f8:ea:3c:cb:50:5f:eb:f0:d2:80:58:2c:2d:36:a7:24: 56:de:db:51:78:67:62:99:0f:64:40:f4:99:5f:67:86:e8:fe: 5c:12:22:b8:12:ed:e3:ca:0a:b3:f9:fa:93:1f:bc:03:ec:65: ac:2b:a6:02:6a:14:7f:21:85:40:62:56:16:53:a7:66:81:9f: a0:58:30:99:89:f1:a0:83:27:57:12:9f:fe:63:ec:ee:b6:ec: 41:91:37:79:17:44:93:29:03:da:81:5e:9f:ad:ab:82:72:82: 7a:57:c8:64:22:41:05:26:22:46:ad:32:22:da:f9:78:54:b2: 3f:11:18:79:a4:c1:34:05:05:92:dc:4f:05:23:93:df:20:d7: 3f:59:d4:12:a3:47:3f:72:f9:52:7e:41:ee:89:b6:c0:fc:e8: af:37:67:eb:ee:f3:c5:53:17:4c:fc:3f:01:1b:af:7a:a8:ac: 9e:51:04:c7:f7:26:ec:4f:70:69:a9:19:7e:4d:c6:6f:7f:b5: 6a:6e:a9:1e:fc:c5:31:3d:80:7b:be:df:03:4b:8c:95:4b:51: 43:15:0d:7f:11:d0:1a:b9:8e:85:00:aa:b8:27:19:68:4d:87: 5d:3e:d5:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPeBxeuoMj06T34k4RxLCwoIANwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk3ODhCMjgxRTQ0ODFCQkVGQzdEQ0NEQzZEMThDRjRE MzZCM0Q2RTAeFw0yNjA2MjAwNDU1NTdaFw0yNjA2MjEwNzI1NTdaMDMxMTAvBgNV BAMTKEQ1MTM1MEQ5NDIxOENFQUE2RUQ3NkRCMjIyOThGMzk4ODY2Qzg3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOqnVkJF9JWWVB8MqPCVyVRf50 zappTEe1dw3Ie6ejwtTw+tc0qoWTolClY8ju/rAI3nlbEOxHG61oSgTJHMuHeT9k uuSez9/xPkrdG+QYmKijKB9anBlJ6eGw/CXfphk1r5BjIBTHjPHPwuGDljX2d+6z jgmm8UtB7bzNeJiez7MAPGy3CPj3vv0mi0aD2NWO6L6FeEK5XS6XoQpumTczVTA1 dAJ0z33W/VAuXy4cQCkUgY7wPoszPtsB4Qp/YGl6rxS+r6Qb9jMz7sUB34mg2Zm2 smVR1S/a6Q+IDBdQx/SQIbTGegG+RbrzhocaGmRSUki1UjPMpcgpI4YzYrCHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1RNQ2UIYzqpu122yIpjzmIZsh9cwHwYDVR0j BBgwFoAUqXiLKB5Egbvvx9zNxtGM9NNrPW4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjkyMjY5NDgtYjFhMS00Mjk0LTkxNTAtNmFmMGUwYmViZmI4LzAvQTk3ODhCMjgx RTQ0ODFCQkVGQzdEQ0NEQzZEMThDRjREMzZCM0Q2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTc4OEIyODFFNDQ4MUJCRUZDN0RDQ0RDNkQxOENGNEQzNkIz RDZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvQTk3ODhCMjgxRTQ0ODFCQkVGQzdEQ0NEQzZEMThD RjREMzZCM0Q2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAnRzOV5KWIOKPoFXj1u5xF3Zgf+Oo8y1Bf 6/DSgFgsLTanJFbe21F4Z2KZD2RA9JlfZ4bo/lwSIrgS7ePKCrP5+pMfvAPsZawr pgJqFH8hhUBiVhZTp2aBn6BYMJmJ8aCDJ1cSn/5j7O627EGRN3kXRJMpA9qBXp+t q4JygnpXyGQiQQUmIkatMiLa+XhUsj8RGHmkwTQFBZLcTwUjk98g1z9Z1BKjRz9y +VJ+Qe6JtsD86K83Z+vu88VTF0z8PwEbr3qorJ5RBMf3JuxPcGmpGX5Nxm9/tWpu qR78xTE9gHu+3wNLjJVLUUMVDX8R0Bq5joUAqrgnGWhNh10+1RE= -----END CERTIFICATE-----Generated at Sat Jun 20 08:51:42 2026 by rpki-client