$ rpki-client -vvf rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft File: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft (raw, json) Hash identifier: gV6VR/0qcEaxE5mrcwSu0J7dZ2BrMB1KCgSuKNglV5s= Subject key identifier: 3E:88:91:A8:B2:4D:4A:F8:C7:C4:16:0E:06:66:AB:73:16:21:60:7F Authority key identifier: 1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D Certificate issuer: /CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Certificate serial: 4904119D7F0E60A5892E9202287F68D38C0E2159 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 13:33:16 +0000 Manifest this update: Thu 18 Jun 2026 13:28:16 +0000 Manifest next update: Fri 19 Jun 2026 16:10:16 +0000 Files and hashes: 1: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: BX3zo4jm394L+4A0hATz0MD3kr1dhrVpAj21QCDfQYI=) 2: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl (hash: 7oZ35G3zPheTPLbuhHBp4Uip4Ku5Tgom0NH2EoRdycI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:04:11:9d:7f:0e:60:a5:89:2e:92:02:28:7f:68:d3:8c:0e:21:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Validity Not Before: Jun 18 13:28:16 2026 GMT Not After : Jun 19 16:10:16 2026 GMT Subject: CN=3E8891A8B24D4AF8C7C4160E0666AB731621607F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:d3:64:42:18:82:41:d5:fa:8e:00:a5:a7: d9:d9:43:b4:05:ff:ff:d0:d9:cd:b9:56:45:60:2a: a0:85:8c:48:37:3b:ad:0a:09:3c:2e:5c:0a:da:92: 2a:e8:85:ee:9a:8b:df:99:74:22:b8:30:ab:8a:b0: cc:fe:d7:1e:78:83:06:3b:55:5b:03:d8:c9:88:ee: 7a:6e:80:6b:4c:58:0f:99:b6:fc:5a:fd:bb:8a:1f: 10:3d:7d:12:22:c1:a3:53:59:7f:26:15:65:e0:e8: cc:07:27:91:2b:ad:79:e7:02:81:87:db:6e:09:60: 76:2c:af:ed:20:7a:b1:81:d1:cd:25:05:58:1c:db: 1b:51:ee:e9:66:4b:b1:9c:0d:eb:99:09:87:ec:ac: 74:3e:2a:d1:63:83:e1:ee:33:f7:52:92:35:d5:77: b2:97:45:8c:a6:ff:5f:c2:28:d5:c9:a8:2d:6f:65: 1d:9a:2a:4c:b8:ae:28:16:c5:38:31:31:ba:eb:ee: b6:c0:9b:c0:b5:06:f3:ca:00:e1:0e:8c:20:14:de: a5:9d:d1:94:e3:6f:5d:4d:ee:fb:35:9d:f2:cd:98: 46:ad:5c:f0:2b:eb:c3:fe:d8:d9:de:81:de:39:e5: 2d:96:bf:d7:b4:70:0c:a4:25:fd:c7:fb:a1:00:7c: 8c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:88:91:A8:B2:4D:4A:F8:C7:C4:16:0E:06:66:AB:73:16:21:60:7F X509v3 Authority Key Identifier: keyid:1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:43:70:60:14:5d:66:00:62:07:a3:1d:75:ff:4d:ae:40:54: d3:eb:b5:5c:18:e4:07:70:c8:06:5b:a4:d8:c0:21:e5:4b:4f: a6:8c:c3:b9:0e:59:70:62:9a:28:c4:eb:84:da:f5:3a:aa:85: d2:a4:6a:16:ce:5d:99:14:f0:b7:ff:8f:ed:56:37:60:2c:84: f9:49:7b:f0:79:99:e5:7f:4d:31:11:03:be:21:54:23:24:b1: 5a:b5:ca:28:e9:cf:b2:41:28:6d:3e:0d:e3:6f:7f:14:50:73: af:ef:a5:51:5e:d6:29:ff:b3:e4:a7:b4:25:a4:c0:eb:8c:0c: f9:12:dc:d4:43:13:42:c8:57:e7:29:64:bd:18:76:f9:cc:b4: 0c:d7:79:54:48:bc:ea:f4:12:e8:ad:f8:e2:3d:6a:bd:36:a7: c7:8d:8a:a6:44:e9:e7:6e:ff:46:22:dd:62:19:dd:12:40:9f: 94:d7:49:8a:91:45:e9:39:f7:d2:25:40:b9:22:cd:55:1c:75: 9e:c5:5f:4f:0e:6e:d8:ae:9f:10:07:4c:9a:29:dd:2b:9c:08: 59:25:c6:34:cd:6b:06:34:25:f2:f8:b6:5d:51:e2:44:b1:5e: 6a:a8:5b:18:ff:81:ec:b2:64:a4:19:ff:57:07:f4:2e:ba:6f: 9f:a8:36:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQQRnX8OYKWJLpICKH9o04wOIVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4 M0EyNEU3RDAeFw0yNjA2MTgxMzI4MTZaFw0yNjA2MTkxNjEwMTZaMDMxMTAvBgNV BAMTKDNFODg5MUE4QjI0RDRBRjhDN0M0MTYwRTA2NjZBQjczMTYyMTYwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGStNkQhiCQdX6jgClp9nZQ7QF ///Q2c25VkVgKqCFjEg3O60KCTwuXArakirohe6ai9+ZdCK4MKuKsMz+1x54gwY7 VVsD2MmI7npugGtMWA+Ztvxa/buKHxA9fRIiwaNTWX8mFWXg6MwHJ5ErrXnnAoGH 224JYHYsr+0gerGB0c0lBVgc2xtR7ulmS7GcDeuZCYfsrHQ+KtFjg+HuM/dSkjXV d7KXRYym/1/CKNXJqC1vZR2aKky4rigWxTgxMbrr7rbAm8C1BvPKAOEOjCAU3qWd 0ZTjb11N7vs1nfLNmEatXPAr68P+2Nnegd455S2Wv9e0cAykJf3H+6EAfIyBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPoiRqLJNSvjHxBYOBmarcxYhYH8wHwYDVR0j BBgwFoAUHSyeROTl4i6IzQMTUULRdoOiTn0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ODBkZGItM2Q5NC00ZTM0LTkyZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRF NEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4M0EyNEU3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDJDOUU0NEU0RTVFMjJFODhDRDAzMTM1MTQyRDE3NjgzQTI0 RTdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQx NzY4M0EyNEU3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJDcGAUXWYAYgejHXX/Ta5AVNPrtVwY5Adw yAZbpNjAIeVLT6aMw7kOWXBimijE64Ta9TqqhdKkahbOXZkU8Lf/j+1WN2AshPlJ e/B5meV/TTERA74hVCMksVq1yijpz7JBKG0+DeNvfxRQc6/vpVFe1in/s+SntCWk wOuMDPkS3NRDE0LIV+cpZL0YdvnMtAzXeVRIvOr0Euit+OI9ar02p8eNiqZE6edu /0Yi3WIZ3RJAn5TXSYqRRek599IlQLkizVUcdZ7FX08ObtiunxAHTJop3SucCFkl xjTNawY0JfL4tl1R4kSxXmqoWxj/geyyZKQZ/1cH9C66b5+oNsE= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:15 2026 by rpki-client