$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft File: C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft (raw, json) Hash identifier: R9E74h9IYy3TLdzQUdoOYDfF7G/VGBbrCQD+l4WmDvo= Subject key identifier: AA:66:BD:29:8A:CB:0E:86:32:DF:33:B1:DF:B8:B7:57:85:0A:6F:95 Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F Certificate issuer: /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Certificate serial: 04F7FE3B1CC847C74D4E06FCDEABB9FB017DAA0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 14:58:51 +0000 Manifest this update: Fri 19 Jun 2026 14:53:51 +0000 Manifest next update: Sat 20 Jun 2026 18:46:51 +0000 Files and hashes: 1: 3230322e39332e32342e302f32342d3234203d3e203233393532.roa (hash: 13PIyETCXWDo1Gv/U6Oaqwz2KRpjJgPdWNVs0uRPBXw=) 2: 3230322e39332e33312e302f32342d3234203d3e203233393532.roa (hash: d+9UVCD8niS1faGA61UPoVHLJY0k2w63v+pVMpLKKfc=) 3: 3230322e39332e32372e302f32342d3234203d3e203233393532.roa (hash: XriecMPCY4alQrxwYsfldyREke/eGKRNr/vElamRFhc=) 4: 3230322e39332e32362e302f32342d3234203d3e203233393532.roa (hash: wkOR/tKRFg1S67lRSPwTcy9/cVjDL9uk2HigWHRxfeU=) 5: 3230322e39332e33302e302f32342d3234203d3e203233393532.roa (hash: bpztS81zV/NNGiXHgumEn+WH+G0wv++4rGgXBHGkvA4=) 6: 3230322e39332e32342e302f32312d3231203d3e203233393532.roa (hash: 3DKoXwBAcS+jAgG56so/w0LfTxjXkoMotMqExXI7Hkk=) 7: 3230322e39332e32392e302f32342d3234203d3e203233393532.roa (hash: Omke75z/uNaQobGnfXKQ3d9K7J2R9/Q2eOXtQtif9WU=) 8: C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl (hash: RrYH7+w8T8Xeu7K+niPU2TWt+0c1muw8y6dSwwX3Wmc=) 9: 3230322e39332e32382e302f32342d3234203d3e203233393532.roa (hash: 9SwaYqrzPZ+NZyn3VVdmOLoMhtVvVQwxxV4EtTxtGy4=) 10: 3230322e39332e32352e302f32342d3234203d3e203233393532.roa (hash: XDcl778T4rloVqTTjGoVuGMqfUdN427riMbFlonBX50=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f7:fe:3b:1c:c8:47:c7:4d:4e:06:fc:de:ab:b9:fb:01:7d:aa:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Validity Not Before: Jun 19 14:53:51 2026 GMT Not After : Jun 20 18:46:51 2026 GMT Subject: CN=AA66BD298ACB0E8632DF33B1DFB8B757850A6F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:7f:68:d7:16:ee:d0:51:b0:e9:10:51:bf: fa:6c:31:f9:cb:00:4e:3f:d2:fb:14:64:6d:aa:9a: 53:74:19:22:2b:0e:02:92:aa:64:34:e1:76:4b:73: 49:ee:c7:74:7e:5d:ee:a1:51:6e:77:fc:45:44:98: 5e:a8:ae:23:c9:18:99:97:12:e1:35:a2:46:7c:3c: 5f:d3:14:24:9d:67:e3:1e:4f:2c:82:1b:9e:7b:90: 27:c9:cc:2b:3d:3c:8d:77:c0:b7:b5:25:71:9f:dd: a8:95:99:e9:81:55:dc:15:d1:00:24:bd:ca:f6:58: 7a:e7:b3:1f:77:ad:27:6e:c8:b3:fd:63:3b:92:a7: 15:8a:9d:2c:4b:fc:a9:df:86:66:ab:0a:94:5b:22: ce:8f:df:3f:06:8d:07:f6:0c:e0:9d:f9:19:54:c8: 2c:0e:6f:b5:ab:60:c7:fe:13:3a:90:9e:10:d7:e7: 75:fb:68:f5:b7:7b:0e:e5:04:0a:93:0d:4a:15:99: da:b3:42:0a:b5:4a:a2:f0:de:a2:08:fe:da:c9:96: c8:ba:31:c8:36:3b:38:b2:e9:e3:ab:19:2b:58:81: 5d:f5:40:20:ee:09:49:83:f1:a9:cc:e1:c8:4e:d6: 0b:c6:c9:04:57:ea:85:a0:0a:bf:bb:0d:35:69:9f: 4d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:66:BD:29:8A:CB:0E:86:32:DF:33:B1:DF:B8:B7:57:85:0A:6F:95 X509v3 Authority Key Identifier: keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:45:82:8a:8b:c8:4a:1a:30:b5:68:8c:35:60:79:c5:8b:4c: e8:d0:05:fb:90:f9:c8:76:d8:f2:63:bf:a1:e2:40:a7:13:dc: b5:a5:69:21:0e:0d:45:e1:45:aa:c3:f8:28:af:a2:35:9f:74: 08:ad:31:79:45:63:9d:90:22:f9:e7:1d:6b:cc:7f:67:93:01: e7:c3:dd:98:7d:93:cc:e8:bf:bf:f4:34:78:56:24:1c:bd:de: b9:0e:ab:a0:1e:92:86:a4:f7:32:21:e0:5c:cb:10:6e:af:da: e9:d2:bf:5f:52:f4:ea:0b:d2:a2:f2:61:f0:ff:73:90:eb:0a: ee:7d:1a:ce:d7:0f:1e:4b:96:f0:29:7a:f7:a9:b5:42:ee:60: 67:b7:30:61:48:98:82:c3:65:ee:38:4a:b5:99:97:02:d9:95: 57:bc:72:78:31:18:85:89:12:1f:e7:20:d8:27:6b:bb:81:72: ab:56:63:9b:91:1a:64:ba:2a:b2:c1:2d:17:cd:3b:96:c2:23: 68:09:ab:77:45:11:84:c4:71:06:69:69:98:ed:33:76:24:c2: 91:0d:65:03:ce:e1:6d:e6:dd:00:01:49:c3:0f:7f:1c:0e:0d: cf:4e:4a:b7:e7:d3:41:8e:68:4b:da:b9:54:1a:4b:ee:0c:25: 19:a9:61:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBPf+OxzIR8dNTgb83qu5+wF9qgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQx RTU3MEExRjAeFw0yNjA2MTkxNDUzNTFaFw0yNjA2MjAxODQ2NTFaMDMxMTAvBgNV BAMTKEFBNjZCRDI5OEFDQjBFODYzMkRGMzNCMURGQjhCNzU3ODUwQTZGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStn9o1xbu0FGw6RBRv/psMfnL AE4/0vsUZG2qmlN0GSIrDgKSqmQ04XZLc0nux3R+Xe6hUW53/EVEmF6oriPJGJmX EuE1okZ8PF/TFCSdZ+MeTyyCG557kCfJzCs9PI13wLe1JXGf3aiVmemBVdwV0QAk vcr2WHrnsx93rSduyLP9YzuSpxWKnSxL/KnfhmarCpRbIs6P3z8GjQf2DOCd+RlU yCwOb7WrYMf+EzqQnhDX53X7aPW3ew7lBAqTDUoVmdqzQgq1SqLw3qII/trJlsi6 Mcg2Oziy6eOrGStYgV31QCDuCUmD8anM4chO1gvGyQRX6oWgCr+7DTVpn02NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqma9KYrLDoYy3zOx37i3V4UKb5UwHwYDVR0j BBgwFoAUwqkKw2SBoZ7kFLtayqgAJB5XCh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4YWIzZTAtY2E2OC00MmY2LTk4ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2 NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQxRTU3MEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkE5MEFDMzY0ODFBMTlFRTQxNEJCNUFDQUE4MDAyNDFFNTcw QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4 ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAw MjQxRTU3MEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1FgoqLyEoaMLVojDVgecWLTOjQBfuQ+ch2 2PJjv6HiQKcT3LWlaSEODUXhRarD+CivojWfdAitMXlFY52QIvnnHWvMf2eTAefD 3Zh9k8zov7/0NHhWJBy93rkOq6Aekoak9zIh4FzLEG6v2unSv19S9OoL0qLyYfD/ c5DrCu59Gs7XDx5LlvApeveptULuYGe3MGFImILDZe44SrWZlwLZlVe8cngxGIWJ Eh/nINgna7uBcqtWY5uRGmS6KrLBLRfNO5bCI2gJq3dFEYTEcQZpaZjtM3YkwpEN ZQPO4W3m3QABScMPfxwODc9OSrfn00GOaEvauVQaS+4MJRmpYdo= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:36 2026 by rpki-client