$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft File: A65A7370A28DA71B1C11B89E09D51753C498246D.mft (raw, json) Hash identifier: rKM/CY1ouZSF9ITYxtXPeBAz5FEb8Symn3JpWz08bLI= Subject key identifier: 1F:9E:7F:01:2D:8D:67:20:67:31:F1:C3:E3:63:3C:B2:D8:4D:D3:7E Authority key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D Certificate issuer: /CN=A65A7370A28DA71B1C11B89E09D51753C498246D Certificate serial: 0C3C7098F98A531D1712E139124AE320E0008DE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 10:47:50 +0000 Manifest this update: Sat 20 Jun 2026 10:42:50 +0000 Manifest next update: Sun 21 Jun 2026 13:40:50 +0000 Files and hashes: 1: 3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa (hash: Ho6tdl1he9FR1/62MiqnACr306KYnR/YSxoabj/m7M4=) 2: 3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa (hash: kTQiZ7hK+M7BbCy/GwseyxlIaws4BXvafRAJzzRJxhc=) 3: A65A7370A28DA71B1C11B89E09D51753C498246D.crl (hash: oCcWDiE2GTQD2yAUkTMTIhqGSXKsy8ZsG4GTSKXy12A=) 4: 3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa (hash: yLjPOFhKt4noRbzRL2MIGaluRq2L7M9f6uyh5pKU9Ec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 11:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3c:70:98:f9:8a:53:1d:17:12:e1:39:12:4a:e3:20:e0:00:8d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65A7370A28DA71B1C11B89E09D51753C498246D Validity Not Before: Jun 20 10:42:50 2026 GMT Not After : Jun 21 13:40:50 2026 GMT Subject: CN=1F9E7F012D8D67206731F1C3E3633CB2D84DD37E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a4:10:26:ff:1c:d2:45:89:dc:96:af:e2:1a: 43:eb:5f:59:ba:8f:b5:ce:fd:63:c1:1e:7c:ba:60: 27:06:0e:74:51:90:27:cc:3a:03:c4:21:2c:6d:66: 08:f4:13:e3:c2:c1:cc:25:af:32:f9:8b:2c:2f:cb: 35:7a:23:93:a2:63:a3:fc:cc:af:fe:b9:47:29:28: 1a:8f:f0:c7:4d:d1:0d:41:43:09:2a:43:9e:db:99: df:30:77:cc:1a:cf:f6:f0:23:ea:af:e0:52:ca:8f: e9:f4:ab:86:ba:21:d0:38:59:7e:39:bd:1e:dc:75: 3b:bb:6b:2c:38:5f:ac:7f:3e:97:7e:da:d0:66:2e: 7c:bc:42:42:fb:8d:c9:9c:32:2f:e0:c5:e7:a9:d6: 0b:78:44:d1:ac:c1:ae:81:5e:17:26:95:be:96:6a: cf:9f:28:0d:d6:3e:1e:1d:70:8f:e7:22:69:0d:5a: 4d:ab:2a:25:90:3d:6b:c9:d7:5d:9f:49:80:ba:4d: 0e:4b:ae:bf:71:8e:30:c0:cd:e7:f7:6a:85:42:df: 1b:b0:dd:4d:20:5e:a0:5c:99:e5:f1:4f:3c:f7:9c: 22:1b:e6:01:0c:50:20:1c:31:65:30:94:53:f5:81: 7f:20:50:e9:1b:0e:2c:ac:3a:41:0a:e4:b6:a7:d1: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9E:7F:01:2D:8D:67:20:67:31:F1:C3:E3:63:3C:B2:D8:4D:D3:7E X509v3 Authority Key Identifier: keyid:A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:91:fe:55:f8:66:7d:c3:81:b5:02:4f:16:b2:e9:5c:b1:cc: b8:92:5b:ca:aa:0c:ab:fb:0a:2b:13:00:73:7b:1f:98:77:cd: c5:50:35:0b:96:bf:dd:7f:a3:ac:66:48:a4:25:4e:d3:2d:2f: e2:ba:87:59:c7:15:e4:d3:0d:00:74:df:67:50:70:e0:80:06: 26:c7:14:06:0f:ca:5d:1b:4f:66:9b:af:40:d8:dc:31:55:86: 01:93:d9:d0:5a:56:24:37:23:df:a6:6c:0a:d8:75:34:3e:f6: 5e:c3:42:38:b1:9c:95:75:35:74:f9:9b:57:c8:36:f6:ab:e9: 9d:0a:4d:85:49:8d:6f:5c:0b:7b:03:b8:79:8c:f0:3b:c9:0f: d3:61:e8:3d:24:31:34:7d:2d:56:4c:29:7f:66:41:58:60:0d: 6a:70:0c:41:a3:15:d9:a4:92:a1:97:88:37:dd:d6:ca:b3:ee: 5e:da:d4:6c:1e:9a:e7:66:6e:95:a9:6b:cc:0d:25:92:56:a1: cd:ea:d9:60:0e:bf:d3:77:83:a4:47:1e:bc:e5:01:55:ea:30: 2f:10:e3:cc:f9:cd:17:a1:c4:c8:9b:b9:ce:bd:77:77:1e:50: 69:f0:e9:69:49:1e:48:28:bb:f3:f2:a9:52:cd:58:0c:3a:7b: ed:13:42:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDxwmPmKUx0XEuE5EkrjIOAAjeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3NTND NDk4MjQ2RDAeFw0yNjA2MjAxMDQyNTBaFw0yNjA2MjExMzQwNTBaMDMxMTAvBgNV BAMTKDFGOUU3RjAxMkQ4RDY3MjA2NzMxRjFDM0UzNjMzQ0IyRDg0REQzN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZpBAm/xzSRYnclq/iGkPrX1m6 j7XO/WPBHny6YCcGDnRRkCfMOgPEISxtZgj0E+PCwcwlrzL5iywvyzV6I5OiY6P8 zK/+uUcpKBqP8MdN0Q1BQwkqQ57bmd8wd8waz/bwI+qv4FLKj+n0q4a6IdA4WX45 vR7cdTu7ayw4X6x/Ppd+2tBmLny8QkL7jcmcMi/gxeep1gt4RNGswa6BXhcmlb6W as+fKA3WPh4dcI/nImkNWk2rKiWQPWvJ112fSYC6TQ5Lrr9xjjDAzef3aoVC3xuw 3U0gXqBcmeXxTzz3nCIb5gEMUCAcMWUwlFP1gX8gUOkbDiysOkEK5Lan0RL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH55/AS2NZyBnMfHD42M8sthN034wHwYDVR0j BBgwFoAUplpzcKKNpxscEbieCdUXU8SYJG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBB MjhEQTcxQjFDMTFCODlFMDlENTE3NTNDNDk4MjQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9BNjVBNzM3MEEyOERBNzFCMUMxMUI4OUUwOUQ1MTc1M0M0OTgy NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3 NTNDNDk4MjQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWR/lX4Zn3DgbUCTxay6VyxzLiSW8qqDKv7 CisTAHN7H5h3zcVQNQuWv91/o6xmSKQlTtMtL+K6h1nHFeTTDQB032dQcOCABibH FAYPyl0bT2abr0DY3DFVhgGT2dBaViQ3I9+mbArYdTQ+9l7DQjixnJV1NXT5m1fI Nvar6Z0KTYVJjW9cC3sDuHmM8DvJD9Nh6D0kMTR9LVZMKX9mQVhgDWpwDEGjFdmk kqGXiDfd1sqz7l7a1GwemudmbpWpa8wNJZJWoc3q2WAOv9N3g6RHHrzlAVXqMC8Q 48z5zRehxMibuc69d3ceUGnw6WlJHkgou/PyqVLNWAw6e+0TQmw= -----END CERTIFICATE-----Generated at Sat Jun 20 13:17:47 2026 by rpki-client