$ rpki-client -vvf rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft File: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft (raw, json) Hash identifier: adRXsa+O/IBFE//3+W6sZoDzWw3MycPEGZ2/v9zujKM= Subject key identifier: 83:2A:A8:53:BE:FA:89:C4:A7:D1:A2:A1:39:F7:B2:7F:26:99:EB:42 Authority key identifier: 1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D Certificate issuer: /CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Certificate serial: 20DC8F3B518A37F2B098874024AC2887E48E3E45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 15:05:01 +0000 Manifest this update: Thu 18 Jun 2026 15:00:01 +0000 Manifest next update: Fri 19 Jun 2026 16:13:01 +0000 Files and hashes: 1: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: HRWu5uWyYj+tP+jHdEqHR4i0tx4A8OiWh4bfexrm8jQ=) 2: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl (hash: 4ATj+1g1sJUBf/LavO+ij90zVBRIcQZcwM/a/Ongjgo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:dc:8f:3b:51:8a:37:f2:b0:98:87:40:24:ac:28:87:e4:8e:3e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Validity Not Before: Jun 18 15:00:01 2026 GMT Not After : Jun 19 16:13:01 2026 GMT Subject: CN=832AA853BEFA89C4A7D1A2A139F7B27F2699EB42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:b9:4c:45:5d:3f:ab:92:d4:b1:0d:45:ef: 1d:1b:cf:79:38:7a:86:17:b5:b6:a1:05:7d:10:81: b7:27:d4:19:cb:90:a2:08:18:a3:a3:9d:2e:48:90: ff:b0:66:a6:50:6d:f3:85:2b:8f:97:7a:9c:79:ef: 62:0c:29:45:35:2e:33:f8:5f:3d:1d:f4:bb:c9:13: 8c:3c:6b:a5:be:99:3d:15:18:a0:1b:a5:c0:7f:fe: ec:2b:31:1f:cf:49:7d:8e:3c:92:39:09:28:1b:b7: 25:23:c9:79:67:bd:06:8a:4f:56:2f:0c:29:25:12: 81:80:2f:a0:7b:10:c4:be:67:0a:79:19:cb:8a:7b: 71:fb:8a:4a:27:24:89:9d:a8:7b:36:38:24:8d:09: ba:2f:ca:34:a6:91:9f:cf:ed:4c:2b:0e:7b:98:c0: eb:47:ba:9a:97:c5:65:c9:07:a2:33:08:7d:6a:49: 4c:6d:fc:82:50:ad:e0:b2:0f:ba:d2:88:a4:7f:cb: ec:e8:f2:d1:69:e2:3a:fc:1b:27:fa:2a:6e:f0:74: fd:e7:85:4a:d8:f9:8c:19:7f:c5:b1:85:33:cc:79: e4:40:c8:eb:33:32:71:19:f6:97:1f:61:f3:e8:9d: dd:2e:35:33:3f:cd:aa:1b:7a:f0:e8:a1:0f:df:8c: 8e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2A:A8:53:BE:FA:89:C4:A7:D1:A2:A1:39:F7:B2:7F:26:99:EB:42 X509v3 Authority Key Identifier: keyid:1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ac:36:79:d2:eb:1d:ac:4a:89:d4:00:da:ec:78:75:f5:29: fd:c2:28:2f:e3:82:7c:5f:28:50:61:3a:27:da:d0:63:75:da: 00:37:6c:34:d2:77:5a:33:d3:60:68:5d:3e:8a:4a:ff:dc:d7: 8f:0b:b8:56:dc:c0:31:7e:71:f6:56:00:69:42:73:e4:c6:4f: 0e:ce:b7:40:74:a0:38:78:24:fc:99:56:ea:ae:c1:ee:d9:42: 45:fd:23:29:bf:1c:b2:eb:56:27:dc:58:9d:a5:88:ad:09:9c: eb:30:c1:e4:01:c2:67:4e:76:53:99:38:1b:40:e1:ca:ea:d9: bd:d5:93:6b:20:d0:92:05:ad:69:97:7a:ba:13:2d:c2:f8:55: 10:c4:30:68:4e:27:85:71:cd:1e:b3:27:03:1c:9a:72:bf:9f: e0:17:74:32:5d:3c:24:3a:28:b4:1d:d8:8c:fe:f2:3a:d6:20: 01:d2:0d:db:1d:c8:91:29:a3:d8:bb:73:d2:9c:7e:f8:95:0c: 4d:2a:7d:39:a7:d8:c1:d7:f4:58:02:71:6c:9d:b9:ee:3e:d0: d1:f5:64:5f:b5:0a:f1:df:11:8b:dc:50:77:80:7b:aa:cc:f5: ff:9f:03:0a:e0:9b:76:25:0f:2b:8a:a7:97:cd:ea:b8:8f:79: 65:2d:ca:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUINyPO1GKN/KwmIdAJKwoh+SOPkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVE QzQyMTIzRDAeFw0yNjA2MTgxNTAwMDFaFw0yNjA2MTkxNjEzMDFaMDMxMTAvBgNV BAMTKDgzMkFBODUzQkVGQTg5QzRBN0QxQTJBMTM5RjdCMjdGMjY5OUVCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCij7lMRV0/q5LUsQ1F7x0bz3k4 eoYXtbahBX0Qgbcn1BnLkKIIGKOjnS5IkP+wZqZQbfOFK4+Xepx572IMKUU1LjP4 Xz0d9LvJE4w8a6W+mT0VGKAbpcB//uwrMR/PSX2OPJI5CSgbtyUjyXlnvQaKT1Yv DCklEoGAL6B7EMS+Zwp5GcuKe3H7ikonJImdqHs2OCSNCbovyjSmkZ/P7UwrDnuY wOtHupqXxWXJB6IzCH1qSUxt/IJQreCyD7rSiKR/y+zo8tFp4jr8Gyf6Km7wdP3n hUrY+YwZf8WxhTPMeeRAyOszMnEZ9pcfYfPond0uNTM/zaobevDooQ/fjI6ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgyqoU776icSn0aKhOfeyfyaZ60IwHwYDVR0j BBgwFoAUHQpoIC52LEIMfziuKRXk5dxCEj0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIxMGVjMGYtMDQyMC00MDJmLTk1ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAy RTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVEQzQyMTIzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDBBNjgyMDJFNzYyQzQyMEM3RjM4QUUyOTE1RTRFNURDNDIx MjNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0 RTVEQzQyMTIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKsNnnS6x2sSonUANrseHX1Kf3CKC/jgnxf KFBhOifa0GN12gA3bDTSd1oz02BoXT6KSv/c148LuFbcwDF+cfZWAGlCc+TGTw7O t0B0oDh4JPyZVuquwe7ZQkX9Iym/HLLrVifcWJ2liK0JnOswweQBwmdOdlOZOBtA 4crq2b3Vk2sg0JIFrWmXeroTLcL4VRDEMGhOJ4VxzR6zJwMcmnK/n+AXdDJdPCQ6 KLQd2Iz+8jrWIAHSDdsdyJEpo9i7c9KcfviVDE0qfTmn2MHX9FgCcWydue4+0NH1 ZF+1CvHfEYvcUHeAe6rM9f+fAwrgm3YlDyuKp5fN6riPeWUtylo= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:51 2026 by rpki-client