$ rpki-client -vvf rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft File: 1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft (raw, json) Hash identifier: l8yp21kYc6JMFGAqdHOz9lZYcgudSUD+E3AcsB+yxVs= Subject key identifier: C8:20:15:44:1C:92:30:35:88:E5:18:E7:FD:63:68:FF:D8:C3:10:88 Authority key identifier: 1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9 Certificate issuer: /CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9 Certificate serial: 2460D5342D6F1C8AAEB06E4047306B74FD312AB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 04:50:48 +0000 Manifest this update: Sat 20 Jun 2026 04:45:48 +0000 Manifest next update: Sun 21 Jun 2026 07:05:48 +0000 Files and hashes: 1: 1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl (hash: /oZk0VKoIi9xZX78LxFjgZlVlOL4BdeiAfRYQ95y2So=) 2: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: KV+jDI5u7NDFg1jUUu5ndk8c7SwXpZDQJflp05ARGsU=) 3: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: zhUAsPQU+LACnP7Ok3rWyU2O9s5oA5N+R3I26q0xz80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:60:d5:34:2d:6f:1c:8a:ae:b0:6e:40:47:30:6b:74:fd:31:2a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9 Validity Not Before: Jun 20 04:45:48 2026 GMT Not After : Jun 21 07:05:48 2026 GMT Subject: CN=C82015441C92303588E518E7FD6368FFD8C31088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:03:ad:de:ee:c3:4f:d0:d4:56:f4:a2:9c:3d: 1d:16:e0:c7:c1:52:89:7f:eb:3f:93:dd:f1:bc:5c: e1:2a:36:ef:0d:5e:5a:81:6e:fd:26:9b:93:b1:c5: 57:b0:fd:90:d8:48:29:f4:d9:e4:8d:ec:dc:21:0e: eb:b3:7b:35:63:ac:db:aa:e4:a4:79:a3:12:b0:59: 89:0b:4c:7c:ed:ab:45:30:46:5f:a1:69:f6:6d:c4: cc:69:f8:00:a9:0f:34:d3:22:50:6d:66:6a:56:a0: f0:a3:67:65:eb:18:39:5c:1c:e8:e8:9b:6f:5b:83: 2b:64:8e:b5:93:4d:19:c8:70:7d:d7:06:ff:d1:51: fc:22:10:07:4b:42:82:5b:f8:d8:d6:17:36:b7:af: 82:1b:32:0a:ac:d4:ca:e7:0d:00:1f:24:69:7f:e6: f7:37:35:b4:67:f0:1b:fa:fc:2d:76:12:93:6c:22: a0:43:f9:f4:89:06:71:61:3a:d5:f4:87:d3:d7:f4: ea:01:4c:4b:1d:c0:09:85:5f:b2:76:51:78:c1:51: cd:37:49:6d:89:7e:69:85:b0:8f:d8:a7:03:3e:59: bb:b7:09:fb:67:11:ac:91:07:71:cd:05:31:de:cd: c5:64:07:5b:33:b8:9b:b7:ad:14:18:0e:8f:02:ed: 4a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:20:15:44:1C:92:30:35:88:E5:18:E7:FD:63:68:FF:D8:C3:10:88 X509v3 Authority Key Identifier: keyid:1D:6D:FD:04:F8:DB:22:8D:A7:83:87:46:BB:66:5B:B2:CD:6F:B9:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/1D6DFD04F8DB228DA7838746BB665BB2CD6FB9B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:61:aa:29:44:29:38:68:69:8a:0f:6e:d1:8d:0f:1a:3e:90: 6d:1b:e6:85:88:b6:0e:f1:cc:a8:3d:54:c0:78:83:a9:09:5f: 63:57:16:81:e7:80:5d:ac:28:b7:22:13:eb:26:2c:20:b2:af: a7:81:eb:ae:67:00:7b:d0:1a:5c:2e:bb:44:4c:0c:5c:4e:33: ab:7e:01:7f:60:37:3a:e5:ca:48:a1:82:3a:6a:fe:fa:82:df: a9:48:dd:cd:96:a7:ca:aa:e4:ba:67:9e:9e:59:7f:fe:16:1b: ff:40:eb:81:79:c7:7e:cc:4a:97:ff:df:01:32:2e:99:fb:c1: 94:0e:eb:52:d1:87:ea:eb:a0:81:92:77:69:3d:86:ec:b6:35: 8c:03:b5:45:29:87:6b:fd:32:da:e9:33:7b:25:06:95:32:92: da:16:ee:23:d4:1c:20:d6:3f:61:ef:63:de:ef:7d:80:1d:3b: 46:dc:55:d7:f3:a6:89:01:3a:bd:72:74:e8:c0:ca:d9:48:ea: 02:6b:11:5b:17:f7:81:0f:8f:6f:56:f8:ca:e2:fc:e0:4a:3b: c6:33:76:1d:1d:38:7b:f3:9f:45:51:59:f6:f6:c4:17:09:1a: 75:b8:ad:80:b2:cb:d1:a7:d5:e6:bf:97:b5:69:1d:8e:6f:24: 78:c1:73:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJGDVNC1vHIqusG5ARzBrdP0xKrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2REZEMDRGOERCMjI4REE3ODM4NzQ2QkI2NjVCQjJD RDZGQjlCOTAeFw0yNjA2MjAwNDQ1NDhaFw0yNjA2MjEwNzA1NDhaMDMxMTAvBgNV BAMTKEM4MjAxNTQ0MUM5MjMwMzU4OEU1MThFN0ZENjM2OEZGRDhDMzEwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgA63e7sNP0NRW9KKcPR0W4MfB Uol/6z+T3fG8XOEqNu8NXlqBbv0mm5OxxVew/ZDYSCn02eSN7NwhDuuzezVjrNuq 5KR5oxKwWYkLTHztq0UwRl+hafZtxMxp+ACpDzTTIlBtZmpWoPCjZ2XrGDlcHOjo m29bgytkjrWTTRnIcH3XBv/RUfwiEAdLQoJb+NjWFza3r4IbMgqs1MrnDQAfJGl/ 5vc3NbRn8Bv6/C12EpNsIqBD+fSJBnFhOtX0h9PX9OoBTEsdwAmFX7J2UXjBUc03 SW2JfmmFsI/YpwM+Wbu3CftnEayRB3HNBTHezcVkB1szuJu3rRQYDo8C7Ur5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyCAVRBySMDWI5Rjn/WNo/9jDEIgwHwYDVR0j BBgwFoAUHW39BPjbIo2ng4dGu2Zbss1vubkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzk4ZWViMzgtNzc0Ni00ODk5LTlhMTAtNzk4MGY4YjkwNTMyLzAvMUQ2REZEMDRG OERCMjI4REE3ODM4NzQ2QkI2NjVCQjJDRDZGQjlCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDZERkQwNEY4REIyMjhEQTc4Mzg3NDZCQjY2NUJCMkNENkZC OUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMUQ2REZEMDRGOERCMjI4REE3ODM4NzQ2QkI2NjVC QjJDRDZGQjlCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARhqilEKThoaYoPbtGNDxo+kG0b5oWItg7x zKg9VMB4g6kJX2NXFoHngF2sKLciE+smLCCyr6eB665nAHvQGlwuu0RMDFxOM6t+ AX9gNzrlykihgjpq/vqC36lI3c2Wp8qq5Lpnnp5Zf/4WG/9A64F5x37MSpf/3wEy Lpn7wZQO61LRh+rroIGSd2k9huy2NYwDtUUph2v9MtrpM3slBpUyktoW7iPUHCDW P2HvY97vfYAdO0bcVdfzpokBOr1ydOjAytlI6gJrEVsX94EPj29W+Mri/OBKO8Yz dh0dOHvzn0VRWfb2xBcJGnW4rYCyy9Gn1ea/l7VpHY5vJHjBcx8= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:08 2026 by rpki-client