$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft File: 647AC2310971579801DD46D3B271B994E9E436B8.mft (raw, json) Hash identifier: o5YQxJgaMENAMY/LefqnkPuMx0lkFZ+4ex0djXUi3hQ= Subject key identifier: 94:A7:16:53:7A:34:43:8E:B9:E3:1B:64:95:93:27:34:E5:C9:35:F2 Authority key identifier: 64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8 Certificate issuer: /CN=647AC2310971579801DD46D3B271B994E9E436B8 Certificate serial: 4C42A4A507958AA8BB5CFE205ACD1A889DC65F80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 09:13:22 +0000 Manifest this update: Thu 18 Jun 2026 09:08:22 +0000 Manifest next update: Fri 19 Jun 2026 10:02:22 +0000 Files and hashes: 1: 647AC2310971579801DD46D3B271B994E9E436B8.crl (hash: CvyxLAAnge5ocFQ8vIVCOtucpD0M5SQ27wVdaf9Wrps=) 2: 3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa (hash: yku2OKFmq6fXhF7DFYEYGMGLBbIVUHGQwGNi4OKZMJU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:42:a4:a5:07:95:8a:a8:bb:5c:fe:20:5a:cd:1a:88:9d:c6:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647AC2310971579801DD46D3B271B994E9E436B8 Validity Not Before: Jun 18 09:08:22 2026 GMT Not After : Jun 19 10:02:22 2026 GMT Subject: CN=94A716537A34438EB9E31B6495932734E5C935F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:5a:d0:83:c9:81:f9:38:d6:ad:bc:c0:49: 11:56:37:9d:bc:f5:f9:ff:f5:ee:76:4a:e0:82:6a: 1e:ba:f0:43:91:f8:b1:d2:64:9c:52:19:5c:57:c4: e3:0c:02:fe:17:8d:7d:fd:c3:96:ea:91:f1:7c:3b: 4d:61:6e:59:a6:8a:02:4b:9c:dc:93:e5:b8:ca:92: ea:e3:82:dc:87:9c:48:a3:02:8e:2e:37:12:b1:fe: 42:94:96:0d:b4:28:83:3c:bd:42:88:06:4c:de:04: c9:90:d1:e2:20:e5:21:e2:18:d4:1c:f6:9f:a1:d0: 93:44:b5:67:60:36:8f:78:eb:c6:1b:57:a3:d3:fc: 8b:23:a6:b7:73:b4:73:c3:56:0a:ac:35:ba:6e:91: eb:1d:8d:b2:b8:2d:f5:fd:0f:df:26:58:fd:be:85: f3:82:24:7f:15:3b:b8:c7:29:f5:8b:d4:80:c0:b3: c8:68:ef:66:84:ee:89:6f:e5:04:a4:a1:42:bb:87: c4:f2:39:fc:28:c5:d8:74:dc:f1:25:f9:39:56:62: 8b:e8:21:a4:6e:d8:70:b3:01:d3:36:8c:76:7f:d7: 30:07:e6:0d:fa:d6:e9:4a:fa:f8:67:48:e5:ab:6c: 9b:48:93:95:2e:16:1f:6f:29:9a:e7:9b:60:17:65: 81:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A7:16:53:7A:34:43:8E:B9:E3:1B:64:95:93:27:34:E5:C9:35:F2 X509v3 Authority Key Identifier: keyid:64:7A:C2:31:09:71:57:98:01:DD:46:D3:B2:71:B9:94:E9:E4:36:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/647AC2310971579801DD46D3B271B994E9E436B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/647AC2310971579801DD46D3B271B994E9E436B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:fc:cf:3f:76:98:15:fd:72:a4:2e:24:c2:81:7b:d5:be:51: 49:89:73:0a:58:7b:d3:7d:71:7e:fd:11:9b:82:2a:46:90:f3: 3b:3e:56:54:8a:4e:39:55:cc:d4:4a:ab:69:7b:2e:c1:a7:4f: a0:1d:2a:ed:c9:07:64:89:2e:8c:6e:1b:6b:eb:f3:77:0f:cd: ca:4f:fb:99:1d:cf:06:96:82:45:2a:bb:b6:8a:34:0a:1b:8f: 3e:cf:b3:9c:b6:b6:db:66:e7:27:72:9f:69:90:e9:af:c7:5b: 6f:e9:3a:9e:97:cc:18:0c:85:12:a7:23:02:9d:ff:74:fd:29: 94:24:1b:42:ba:62:b6:69:ce:12:60:f1:a1:27:3b:61:ae:f7: fe:d2:ad:a3:f0:69:44:4f:29:2d:6b:ec:e0:79:d4:62:b0:b3: a2:f7:35:ad:b9:95:4d:0c:79:12:5e:ba:79:f9:ea:72:38:95: 71:4b:a8:37:3b:2b:d9:eb:2a:2a:b3:de:1c:11:ca:c6:2a:c2: a0:d8:c4:4d:2e:1e:88:18:5f:fe:08:e9:73:2f:b7:da:d2:75: 7a:a4:95:13:36:f5:9b:c3:87:bf:68:a9:94:7b:6f:6d:73:ff: 63:e0:bc:7b:85:25:7c:fa:18:83:61:8e:14:1c:4d:4e:83:b1: 54:62:f0:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTEKkpQeViqi7XP4gWs0aiJ3GX4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ3QUMyMzEwOTcxNTc5ODAxREQ0NkQzQjI3MUI5OTRF OUU0MzZCODAeFw0yNjA2MTgwOTA4MjJaFw0yNjA2MTkxMDAyMjJaMDMxMTAvBgNV BAMTKDk0QTcxNjUzN0EzNDQzOEVCOUUzMUI2NDk1OTMyNzM0RTVDOTM1RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYlrQg8mB+TjWrbzASRFWN528 9fn/9e52SuCCah668EOR+LHSZJxSGVxXxOMMAv4XjX39w5bqkfF8O01hblmmigJL nNyT5bjKkurjgtyHnEijAo4uNxKx/kKUlg20KIM8vUKIBkzeBMmQ0eIg5SHiGNQc 9p+h0JNEtWdgNo9468YbV6PT/IsjprdztHPDVgqsNbpukesdjbK4LfX9D98mWP2+ hfOCJH8VO7jHKfWL1IDAs8ho72aE7olv5QSkoUK7h8TyOfwoxdh03PEl+TlWYovo IaRu2HCzAdM2jHZ/1zAH5g361ulK+vhnSOWrbJtIk5UuFh9vKZrnm2AXZYHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlKcWU3o0Q4654xtklZMnNOXJNfIwHwYDVR0j BBgwFoAUZHrCMQlxV5gB3UbTsnG5lOnkNrgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ3OGI1MGItNDQ5Yy00NTRiLTg1MGQtZjIwODAzNzg5YjU4LzAvNjQ3QUMyMzEw OTcxNTc5ODAxREQ0NkQzQjI3MUI5OTRFOUU0MzZCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82NDdBQzIzMTA5NzE1Nzk4MDFERDQ2RDNCMjcxQjk5NEU5RTQz NkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzAvNjQ3QUMyMzEwOTcxNTc5ODAxREQ0NkQzQjI3MUI5 OTRFOUU0MzZCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEj8zz92mBX9cqQuJMKBe9W+UUmJcwpYe9N9 cX79EZuCKkaQ8zs+VlSKTjlVzNRKq2l7LsGnT6AdKu3JB2SJLoxuG2vr83cPzcpP +5kdzwaWgkUqu7aKNAobjz7Ps5y2tttm5ydyn2mQ6a/HW2/pOp6XzBgMhRKnIwKd /3T9KZQkG0K6YrZpzhJg8aEnO2Gu9/7SraPwaURPKS1r7OB51GKws6L3Na25lU0M eRJeunn56nI4lXFLqDc7K9nrKiqz3hwRysYqwqDYxE0uHogYX/4I6XMvt9rSdXqk lRM29ZvDh79oqZR7b21z/2PgvHuFJXz6GINhjhQcTU6DsVRi8Cc= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:57 2026 by rpki-client