$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft File: B9281144646657214FE1ADE5A3228E100E340E53.mft (raw, json) Hash identifier: 8Q8NESDNIb8Wp6mWDPuvhdC53cGPdefhPZ2t/ftFxQs= Subject key identifier: 78:08:FF:CA:9C:39:5C:E9:89:33:8D:CC:83:F3:FD:AB:1B:DC:97:42 Authority key identifier: B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 Certificate issuer: /CN=B9281144646657214FE1ADE5A3228E100E340E53 Certificate serial: 63E6264E8070F54953733A9C2210CBE83F00481C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 00:05:01 +0000 Manifest this update: Sat 20 Jun 2026 00:00:01 +0000 Manifest next update: Sun 21 Jun 2026 00:59:01 +0000 Files and hashes: 1: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: Ve4ocQOUOq8AQ9gpm5lYh6lO9aEe09tZrNXe/azearo=) 2: B9281144646657214FE1ADE5A3228E100E340E53.crl (hash: y695c4qqlSSIJsF9xdI9vVU28up71z6ZeEqC2Bit/V4=) 3: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: GkX4NBYIJf8jri1lDVBbCRWCXCtYyohsWxcf1tLEKh4=) 4: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: Tgez0mY6SPOTnuCIKB3HlrvFNAAadTv4QI32lWtN/DI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e6:26:4e:80:70:f5:49:53:73:3a:9c:22:10:cb:e8:3f:00:48:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9281144646657214FE1ADE5A3228E100E340E53 Validity Not Before: Jun 20 00:00:01 2026 GMT Not After : Jun 21 00:59:01 2026 GMT Subject: CN=7808FFCA9C395CE989338DCC83F3FDAB1BDC9742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:05:cb:04:d2:ea:50:4c:17:e8:36:43:79: e8:03:da:81:e0:8e:da:49:ab:0c:87:00:71:29:ff: be:57:56:ca:45:6d:f3:23:8c:bb:90:1a:9c:b2:52: 35:21:49:17:91:7f:da:43:6c:43:0a:60:2b:36:05: ea:b6:78:38:25:49:84:3b:1f:65:e0:db:58:6e:27: 06:60:e2:06:a0:a6:19:02:e9:ad:a0:14:99:51:c6: af:22:dd:02:c0:c7:73:f6:33:06:16:06:bf:75:10: db:36:0e:db:25:b2:27:78:84:a6:d0:9e:a3:c7:67: 01:7a:cd:ea:86:fb:8f:09:7a:09:eb:6d:32:5c:72: c3:7d:e2:c1:47:3f:4e:b8:5d:b1:9d:ee:88:c0:95: b0:60:d7:e9:a3:7b:6c:5e:2e:d9:16:f7:d0:74:ba: f5:f2:09:7a:ab:61:48:02:6d:47:42:c2:ed:f2:8e: 5f:6f:8f:a0:3d:fb:94:0c:78:65:fd:2e:fa:bb:24: eb:a0:3f:d6:b5:b0:39:d0:93:9f:86:a7:d1:01:59: 51:5b:81:e9:ae:26:fb:0b:e4:1e:8c:30:fb:01:15: e0:1a:5d:1b:6a:b8:3d:c8:d0:5e:16:4b:fb:62:e9: e3:e9:07:ce:db:2e:97:3d:89:84:7e:dc:10:42:18: b6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:08:FF:CA:9C:39:5C:E9:89:33:8D:CC:83:F3:FD:AB:1B:DC:97:42 X509v3 Authority Key Identifier: keyid:B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:08:75:63:5a:96:9d:21:25:e3:88:95:eb:2b:a2:28:18:7d: f3:d0:38:65:ec:a2:7e:e7:bf:4f:6d:74:9b:1f:54:2f:1f:ce: a2:79:34:8e:b8:c2:22:c4:20:86:61:01:6c:d6:b6:90:cc:75: 7a:99:b4:49:1f:bc:ce:58:aa:30:4a:6e:35:25:eb:bb:55:30: 9e:e4:1b:d5:fa:85:0c:d8:be:32:3c:78:28:ae:19:f5:b4:7b: 86:c2:c9:3e:b7:48:6c:11:20:9f:bd:d1:1d:77:29:60:aa:79: fa:27:7d:c9:2d:da:12:34:c3:3f:1f:ba:0e:75:bf:03:f0:ed: 08:4c:1e:a0:5a:4d:f7:43:70:c1:7c:a0:68:35:ac:cb:f3:da: a2:c1:01:60:b5:32:57:4f:9f:f2:5a:5d:8c:e3:c3:df:9b:b3: 87:b7:c9:70:31:85:25:c9:d6:87:33:dd:9b:d4:32:94:40:aa: 76:e0:ce:60:67:09:c7:69:15:e3:a4:ca:c6:e6:7c:21:cf:2d: 77:86:d0:15:4b:4d:36:82:f0:dc:dc:4c:b0:bc:8e:0f:fb:03: a0:b5:67:ed:c3:61:ed:2f:7c:96:34:f5:d0:a6:2c:b4:98:29: 98:b7:20:16:a7:eb:52:a1:f7:a7:70:d0:ad:8f:39:d2:db:2f: 93:47:9b:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY+YmToBw9UlTczqcIhDL6D8ASBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAw RTM0MEU1MzAeFw0yNjA2MjAwMDAwMDFaFw0yNjA2MjEwMDU5MDFaMDMxMTAvBgNV BAMTKDc4MDhGRkNBOUMzOTVDRTk4OTMzOERDQzgzRjNGREFCMUJEQzk3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVQXLBNLqUEwX6DZDeegD2oHg jtpJqwyHAHEp/75XVspFbfMjjLuQGpyyUjUhSReRf9pDbEMKYCs2Beq2eDglSYQ7 H2Xg21huJwZg4gagphkC6a2gFJlRxq8i3QLAx3P2MwYWBr91ENs2Dtslsid4hKbQ nqPHZwF6zeqG+48JegnrbTJccsN94sFHP064XbGd7ojAlbBg1+mje2xeLtkW99B0 uvXyCXqrYUgCbUdCwu3yjl9vj6A9+5QMeGX9Lvq7JOugP9a1sDnQk5+Gp9EBWVFb gemuJvsL5B6MMPsBFeAaXRtquD3I0F4WS/ti6ePpB87bLpc9iYR+3BBCGLZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeAj/ypw5XOmJM43Mg/P9qxvcl0IwHwYDVR0j BBgwFoAUuSgRRGRmVyFP4a3loyKOEA40DlMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E4YTlhODEtMGE1Mi00YTUwLWI3ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2 NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAwRTM0MEU1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTI4MTE0NDY0NjY1NzIxNEZFMUFERTVBMzIyOEUxMDBFMzQw RTUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhF MTAwRTM0MEU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcIdWNalp0hJeOIlesroigYffPQOGXson7n v09tdJsfVC8fzqJ5NI64wiLEIIZhAWzWtpDMdXqZtEkfvM5YqjBKbjUl67tVMJ7k G9X6hQzYvjI8eCiuGfW0e4bCyT63SGwRIJ+90R13KWCqefonfckt2hI0wz8fug51 vwPw7QhMHqBaTfdDcMF8oGg1rMvz2qLBAWC1MldPn/JaXYzjw9+bs4e3yXAxhSXJ 1ocz3ZvUMpRAqnbgzmBnCcdpFeOkysbmfCHPLXeG0BVLTTaC8NzcTLC8jg/7A6C1 Z+3DYe0vfJY09dCmLLSYKZi3IBan61Kh96dw0K2POdLbL5NHmx8= -----END CERTIFICATE-----Generated at Sat Jun 20 11:24:28 2026 by rpki-client