$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft File: 297248FCECD7534E50147B8F048420E637A10C3B.mft (raw, json) Hash identifier: u9tJ/nLV+wjOXiF7qY+iysXgw00oILEICBPks5BEpbc= Subject key identifier: 18:77:99:FA:64:2F:37:FF:34:95:B8:35:23:C5:CD:03:5D:FF:9D:FF Authority key identifier: 29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B Certificate issuer: /CN=297248FCECD7534E50147B8F048420E637A10C3B Certificate serial: 35F5D2D3F178F1F901FAAA416255471A23E69CCE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:36:37 +0000 Manifest this update: Sat 20 Jun 2026 01:31:37 +0000 Manifest next update: Sun 21 Jun 2026 04:58:37 +0000 Files and hashes: 1: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: 20fCkguAbqvRTSySsq+/45gChYsBUHF6oH8avUHMm98=) 2: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: o2D89SHonpDeTNoYqCdnV9a5Dvq6OVmwktk4FXHsfdM=) 3: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: vbWvmbfXyDXP8OYXwRYd8ewAC5pZZAMFd2A+j8XIRO0=) 4: 297248FCECD7534E50147B8F048420E637A10C3B.crl (hash: GVadO87hthUXr1+23xjE5Y+TGuwEMZSvIzjWHWY4ulc=) 5: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: oo4ZcfhhW+jQdvMEKA+FggmiNv1c+DnGSDh7E0qxnXk=) 6: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: 6aYUJ+FNHyAIseZkPJnJdcJkRNhk0jl4taXFBkoPhy4=) 7: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: WyHWzOQjnsC2hpvAqyEJHrmMYVhTQqPIZfmDPtTVAjE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f5:d2:d3:f1:78:f1:f9:01:fa:aa:41:62:55:47:1a:23:e6:9c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297248FCECD7534E50147B8F048420E637A10C3B Validity Not Before: Jun 20 01:31:37 2026 GMT Not After : Jun 21 04:58:37 2026 GMT Subject: CN=187799FA642F37FF3495B83523C5CD035DFF9DFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:ab:a8:41:88:72:4e:70:b6:5c:66:74:db: 05:e4:37:35:cc:d1:54:e2:ec:af:8f:44:7c:c9:5b: 28:50:09:24:79:61:e7:fa:1c:05:63:fd:5f:3f:af: 96:f0:62:7d:3f:11:7c:b9:53:5a:bf:f0:e9:31:6e: 41:4e:b6:65:25:bd:b5:1c:2f:2c:14:fd:1a:8f:ef: e4:dd:a9:52:33:40:0b:5d:42:59:4a:2e:e5:76:5e: 66:e5:a1:e8:d1:24:3e:d9:16:17:97:5f:6f:41:e7: c4:b3:32:e0:f8:65:9b:ba:b4:1a:6e:79:0a:f5:5f: 99:fa:bc:9d:cd:45:8b:a3:d5:06:a2:57:68:2a:5f: a2:d9:bb:db:b9:0a:f4:ba:41:99:e2:e2:b5:a6:6c: 16:bc:71:47:3e:4c:ea:e7:c4:4d:8a:9f:4b:9b:a4: 32:08:f0:5c:24:6a:07:98:60:cd:4e:03:f8:36:ba: 43:b4:22:8e:01:68:26:28:9d:dd:4d:48:79:f8:38: 0f:91:7f:f1:ed:86:c0:cc:a4:23:1a:32:af:f6:6c: ea:79:ce:79:3e:c5:36:7c:d3:3b:58:ac:c6:4c:0c: 56:31:c4:7e:aa:40:2b:d9:5e:02:9a:46:f5:ac:9a: 72:df:57:66:08:99:39:61:1f:1a:72:a9:3c:95:50: 62:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:77:99:FA:64:2F:37:FF:34:95:B8:35:23:C5:CD:03:5D:FF:9D:FF X509v3 Authority Key Identifier: keyid:29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c7:cb:5f:c1:7f:66:1f:3c:ec:5c:ac:a7:71:ff:89:9f:68: 4d:b8:e0:49:4b:7a:7e:15:28:d2:76:6c:34:d5:77:36:75:a7: 4b:ca:5f:81:17:d7:cc:eb:97:bb:4d:aa:42:5c:a0:0b:25:2f: 62:55:e9:97:0c:fe:ab:99:5c:0e:da:a3:e1:ae:d7:9b:f5:a4: 4b:ea:cf:50:e0:77:72:47:db:c2:16:1f:95:27:f7:ce:c0:75: 8f:f9:06:d6:75:73:17:75:ec:bd:02:2d:6a:7e:43:fd:b9:42: 69:a8:2a:96:a0:e9:10:8c:d9:43:68:16:cd:96:aa:74:06:e3: c2:82:89:e7:db:cc:0c:9b:25:a4:fe:eb:7b:fc:0c:af:bc:f5: 39:a8:c0:58:3b:85:6e:90:ea:58:81:40:ec:7c:e2:3c:0b:78: 67:1a:86:95:7c:97:31:e9:e8:69:e9:c3:56:65:a7:33:5a:4c: 1b:1a:e0:20:22:e9:b6:09:f5:4e:55:94:5f:35:19:a2:cc:36: 96:1b:9f:45:67:56:72:0d:5a:3f:2e:97:93:88:a4:53:7c:52: fa:c7:8b:cb:f6:81:3b:68:74:71:53:32:5c:36:1e:e5:98:1d: f8:11:59:80:60:77:8e:1c:42:d0:68:ff:df:89:89:06:72:b5: 05:48:24:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfXS0/F48fkB+qpBYlVHGiPmnM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MjQ4RkNFQ0Q3NTM0RTUwMTQ3QjhGMDQ4NDIwRTYz N0ExMEMzQjAeFw0yNjA2MjAwMTMxMzdaFw0yNjA2MjEwNDU4MzdaMDMxMTAvBgNV BAMTKDE4Nzc5OUZBNjQyRjM3RkYzNDk1QjgzNTIzQzVDRDAzNURGRjlERkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28auoQYhyTnC2XGZ02wXkNzXM 0VTi7K+PRHzJWyhQCSR5Yef6HAVj/V8/r5bwYn0/EXy5U1q/8OkxbkFOtmUlvbUc LywU/RqP7+TdqVIzQAtdQllKLuV2XmbloejRJD7ZFheXX29B58SzMuD4ZZu6tBpu eQr1X5n6vJ3NRYuj1QaiV2gqX6LZu9u5CvS6QZni4rWmbBa8cUc+TOrnxE2Kn0ub pDII8FwkageYYM1OA/g2ukO0Io4BaCYond1NSHn4OA+Rf/HthsDMpCMaMq/2bOp5 znk+xTZ80ztYrMZMDFYxxH6qQCvZXgKaRvWsmnLfV2YImTlhHxpyqTyVUGLPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGHeZ+mQvN/80lbg1I8XNA13/nf8wHwYDVR0j BBgwFoAUKXJI/OzXU05QFHuPBIQg5jehDDswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ0ODczNjAtODczNS00MWQ3LTk3YTgtZGJiMzRkNzllZmY0LzAvMjk3MjQ4RkNF Q0Q3NTM0RTUwMTQ3QjhGMDQ4NDIwRTYzN0ExMEMzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTcyNDhGQ0VDRDc1MzRFNTAxNDdCOEYwNDg0MjBFNjM3QTEw QzNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvMjk3MjQ4RkNFQ0Q3NTM0RTUwMTQ3QjhGMDQ4NDIw RTYzN0ExMEMzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfHy1/Bf2YfPOxcrKdx/4mfaE244ElLen4V KNJ2bDTVdzZ1p0vKX4EX18zrl7tNqkJcoAslL2JV6ZcM/quZXA7ao+Gu15v1pEvq z1Dgd3JH28IWH5Un987AdY/5BtZ1cxd17L0CLWp+Q/25QmmoKpag6RCM2UNoFs2W qnQG48KCiefbzAybJaT+63v8DK+89TmowFg7hW6Q6liBQOx84jwLeGcahpV8lzHp 6Gnpw1ZlpzNaTBsa4CAi6bYJ9U5VlF81GaLMNpYbn0VnVnINWj8ul5OIpFN8UvrH i8v2gTtodHFTMlw2HuWYHfgRWYBgd44cQtBo/9+JiQZytQVIJNs= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:30 2026 by rpki-client