$ rpki-client -vvf rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft File: D14C74B06D9A4D3A47662DA76625CD3537D00471.mft (raw, json) Hash identifier: +XofKw2Yibl8Drsxc0BfStJxMJWFpr8UXU9XcomavzY= Subject key identifier: 74:23:30:AB:66:5A:28:00:4F:A1:51:5A:DE:3D:00:11:BA:10:6E:1F Authority key identifier: D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71 Certificate issuer: /CN=D14C74B06D9A4D3A47662DA76625CD3537D00471 Certificate serial: 35C46903D635D9F9FE1E3855531410D27754BC93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 19:44:51 +0000 Manifest this update: Fri 19 Jun 2026 19:39:51 +0000 Manifest next update: Sat 20 Jun 2026 21:28:51 +0000 Files and hashes: 1: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: sR5YvjfokmmdEnTZTCAPYVCi8TZ9C5R9A7CXeqBE8Bo=) 2: D14C74B06D9A4D3A47662DA76625CD3537D00471.crl (hash: 8r9B0ZwyaWGFYSVYiRxVqJ9e2szoT+lKRTNLpEDZJvo=) 3: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: juHK8q2FxwMCfB0XDh4dieyd+WbhEL+tRuypaniEX8M=) 4: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: x+7pzkIkAAYum6CK13j4jNfXi0Fn68V8sWzEUq8++EQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c4:69:03:d6:35:d9:f9:fe:1e:38:55:53:14:10:d2:77:54:bc:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D14C74B06D9A4D3A47662DA76625CD3537D00471 Validity Not Before: Jun 19 19:39:51 2026 GMT Not After : Jun 20 21:28:51 2026 GMT Subject: CN=742330AB665A28004FA1515ADE3D0011BA106E1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:c4:8a:8b:8b:37:0c:1d:c2:16:5d:d4:0f: 97:45:50:89:8a:20:f7:17:4d:27:7e:83:31:b0:e7: c4:a7:a4:0e:63:41:55:bd:1a:5e:3b:91:09:b0:58: a7:3c:17:6b:e4:7c:57:25:b8:d6:5a:38:17:4c:18: 36:c4:81:d3:97:b4:71:18:b5:b4:fd:79:a7:e6:d2: 17:c8:b8:46:8e:38:85:04:93:30:cc:a4:60:cf:d8: 0e:b8:c0:51:81:f9:cc:5b:08:5f:82:b0:b1:c4:63: 88:40:7c:f7:30:2a:21:f0:09:e8:e6:0f:d4:a3:b7: a3:3f:c1:0f:ca:42:47:d2:1e:e4:c9:cb:97:fe:e8: 73:6d:6d:45:14:aa:46:e2:3f:ac:b9:13:34:de:9c: eb:49:51:98:bc:60:4c:af:e0:2d:d8:36:55:74:25: 5e:9b:a4:08:47:2f:9e:0d:3c:ba:1b:71:7b:4f:d4: 4e:04:d5:7e:62:93:14:fe:53:93:8e:31:9c:fe:8d: 9e:48:4d:c8:80:c4:48:1f:9c:e2:02:c7:8b:64:9d: b3:12:1e:3b:e0:06:84:cc:0f:94:15:a1:ea:c5:0e: 2d:d6:30:18:8c:87:73:c7:17:5f:c0:76:f5:2f:e3: 9a:7d:0d:9f:ac:43:45:82:a7:8f:04:a1:3e:62:74: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:23:30:AB:66:5A:28:00:4F:A1:51:5A:DE:3D:00:11:BA:10:6E:1F X509v3 Authority Key Identifier: keyid:D1:4C:74:B0:6D:9A:4D:3A:47:66:2D:A7:66:25:CD:35:37:D0:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D14C74B06D9A4D3A47662DA76625CD3537D00471.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/D14C74B06D9A4D3A47662DA76625CD3537D00471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:4b:35:23:19:a6:a6:c6:2c:53:8d:5c:60:fc:42:f3:04:e9: 9a:0a:09:03:c4:95:04:a1:d3:17:8c:26:fc:b9:9e:72:fc:ae: a8:ea:1a:97:51:32:27:19:38:b8:fa:8a:0e:1a:68:b5:56:1a: d7:22:09:c9:20:0f:52:03:92:04:69:af:4a:99:0f:be:be:df: 94:09:44:2a:f0:06:ea:07:fc:28:c5:f4:cd:da:83:7d:fd:6d: fc:4a:af:9a:0f:6c:46:01:ac:3f:ed:41:51:58:c0:d0:59:7f: 37:d0:eb:8f:35:b8:bc:51:33:2a:39:ca:75:7e:5f:f3:aa:60: 25:26:a3:23:e1:6e:7f:4b:f5:ee:38:57:78:0d:a7:74:cc:cb: 1d:0d:e8:0d:1e:2c:2c:04:85:31:45:00:8b:10:5f:ab:ab:b8: d3:03:2d:2b:9c:bf:ae:fb:06:9e:3d:0c:53:4a:fd:cf:0e:2a: 0d:a2:67:98:68:6e:39:8a:cb:cb:45:79:d0:3f:40:07:72:88: d4:cc:05:b4:3e:1a:64:b4:76:5a:82:5a:01:35:48:b8:32:49: 49:3f:3a:8a:63:08:6b:35:ff:3d:97:4e:bd:f6:d4:24:0f:cb: b0:64:5d:96:26:9c:0e:e4:33:de:4a:24:30:55:00:5f:12:1a: ee:ec:2a:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcRpA9Y12fn+HjhVUxQQ0ndUvJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE0Qzc0QjA2RDlBNEQzQTQ3NjYyREE3NjYyNUNEMzUz N0QwMDQ3MTAeFw0yNjA2MTkxOTM5NTFaFw0yNjA2MjAyMTI4NTFaMDMxMTAvBgNV BAMTKDc0MjMzMEFCNjY1QTI4MDA0RkExNTE1QURFM0QwMDExQkExMDZFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbMSKi4s3DB3CFl3UD5dFUImK IPcXTSd+gzGw58SnpA5jQVW9Gl47kQmwWKc8F2vkfFcluNZaOBdMGDbEgdOXtHEY tbT9eafm0hfIuEaOOIUEkzDMpGDP2A64wFGB+cxbCF+CsLHEY4hAfPcwKiHwCejm D9Sjt6M/wQ/KQkfSHuTJy5f+6HNtbUUUqkbiP6y5EzTenOtJUZi8YEyv4C3YNlV0 JV6bpAhHL54NPLobcXtP1E4E1X5ikxT+U5OOMZz+jZ5ITciAxEgfnOICx4tknbMS HjvgBoTMD5QVoerFDi3WMBiMh3PHF1/AdvUv45p9DZ+sQ0WCp48EoT5idDd/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdCMwq2ZaKABPoVFa3j0AEboQbh8wHwYDVR0j BBgwFoAU0Ux0sG2aTTpHZi2nZiXNNTfQBHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzYyYmFjYzktZDI1ZC00NjEwLWFlZTQtNjU1YTE0ZWEyZmQ2LzAvRDE0Qzc0QjA2 RDlBNEQzQTQ3NjYyREE3NjYyNUNEMzUzN0QwMDQ3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMTRDNzRCMDZEOUE0RDNBNDc2NjJEQTc2NjI1Q0QzNTM3RDAw NDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvRDE0Qzc0QjA2RDlBNEQzQTQ3NjYyREE3NjYyNUNE MzUzN0QwMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRLNSMZpqbGLFONXGD8QvME6ZoKCQPElQSh 0xeMJvy5nnL8rqjqGpdRMicZOLj6ig4aaLVWGtciCckgD1IDkgRpr0qZD76+35QJ RCrwBuoH/CjF9M3ag339bfxKr5oPbEYBrD/tQVFYwNBZfzfQ6481uLxRMyo5ynV+ X/OqYCUmoyPhbn9L9e44V3gNp3TMyx0N6A0eLCwEhTFFAIsQX6uruNMDLSucv677 Bp49DFNK/c8OKg2iZ5hobjmKy8tFedA/QAdyiNTMBbQ+GmS0dlqCWgE1SLgySUk/ OopjCGs1/z2XTr321CQPy7BkXZYmnA7kM95KJDBVAF8SGu7sKm0= -----END CERTIFICATE-----Generated at Sat Jun 20 11:16:29 2026 by rpki-client