$ rpki-client -vvf rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft File: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft (raw, json) Hash identifier: 3yNSNBx5hu76vdmqmLnATsKQpS0+ZYdBHRrQZOH5wEQ= Subject key identifier: DF:2E:0F:4E:AA:C9:9D:65:31:03:02:FB:B9:A8:DF:79:12:E1:87:52 Authority key identifier: 1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 Certificate issuer: /CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Certificate serial: 03704CF820789AA78252062CBF71B4C3512862B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft Manifest number: 43 Signing time: Sat 20 Jun 2026 05:56:54 +0000 Manifest this update: Sat 20 Jun 2026 05:51:54 +0000 Manifest next update: Sun 21 Jun 2026 06:37:54 +0000 Files and hashes: 1: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl (hash: KYQpkBNFT0oRTp12YENBC8QrRuszLUdDnB4GzBr+lus=) 2: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: EMakdzLLxip5MgFZZxs3v2CftrvckpQUzvKJTpU8Ns0=) 3: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: qtpgdgclWZOTtoV+QMuAH0R7ZHXa3nSHqjG3rAHVlzk=) 4: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: jtaA1SPrzDUYTBX5hLaOl8wHf9I6oDuHtGJ4XR8iaqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:70:4c:f8:20:78:9a:a7:82:52:06:2c:bf:71:b4:c3:51:28:62:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Validity Not Before: Jun 20 05:51:54 2026 GMT Not After : Jun 21 06:37:54 2026 GMT Subject: CN=DF2E0F4EAAC99D65310302FBB9A8DF7912E18752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:bc:82:33:5e:f0:75:4b:f6:1c:18:77:6c: b0:4a:63:f8:d3:74:7d:00:ac:38:9f:a6:06:ed:31: 1c:b3:38:83:82:84:4c:f5:f9:cd:1d:a8:5a:48:4b: 81:4d:d3:a8:a2:ca:ef:da:35:b8:22:ff:cd:7c:f0: c5:1e:8c:e5:a1:8f:e8:3f:cd:83:0c:63:df:e7:a4: fd:b5:17:70:81:9d:44:10:59:84:2e:73:31:c7:2e: 94:ec:ce:4c:98:d5:12:2b:46:d3:48:f9:f5:6b:39: 06:51:b5:98:c1:3b:df:e1:b9:38:c5:ad:2a:3a:f4: 03:83:f3:52:13:aa:f0:f9:11:c2:d7:ab:37:aa:80: 20:f2:e2:29:6a:af:22:0c:65:20:f8:47:89:c3:39: 05:2e:7b:4d:fa:7d:24:94:d3:87:f2:e3:53:3e:85: 5f:d1:d2:3c:3d:99:4a:df:46:3b:59:8c:b0:06:49: 09:ef:59:5d:90:62:bf:35:80:7f:47:bb:9a:58:4d: e8:99:10:46:39:5e:fb:ae:29:ca:3d:9b:d2:98:70: 22:62:87:30:0e:0b:6a:4d:99:76:a7:6f:91:57:7e: 38:f0:4e:90:1b:6a:7c:b3:af:e9:d6:46:f9:40:82: 84:ae:38:de:f7:23:4c:a6:36:0a:78:11:31:9d:68: ef:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2E:0F:4E:AA:C9:9D:65:31:03:02:FB:B9:A8:DF:79:12:E1:87:52 X509v3 Authority Key Identifier: keyid:1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:2d:9a:af:de:1c:c4:4f:6e:15:9c:e9:ba:ba:64:e3:25:42: 4a:05:02:8a:81:08:4d:94:1a:66:34:8b:57:1a:c2:de:b3:76: e0:08:48:09:76:b6:c2:61:36:04:da:af:9a:35:a0:52:7d:b1: 27:cf:b0:cf:7a:92:c9:ac:d2:ca:70:51:f5:d5:bc:8f:38:f0: a0:39:1b:d5:b8:14:08:e4:41:9e:cc:d0:d8:5e:53:d2:af:75: 24:8b:19:f7:cf:c0:d1:38:52:e7:cf:6d:12:80:96:cc:45:e9: 70:76:1f:ad:e1:ad:61:ec:6a:e4:6d:33:61:0a:17:65:eb:54: b8:c1:ba:85:58:42:32:b5:f6:e8:de:c9:ca:c3:b8:1e:01:9f: 25:8c:c9:43:18:6b:7a:18:53:22:9b:2f:0c:12:ce:24:c7:1b: 50:88:e4:70:16:df:29:77:a0:5e:8f:de:c0:0f:1d:ed:97:c1: 7b:0a:1f:11:9b:26:48:43:af:42:02:ff:b0:96:1d:94:fd:bd: ab:9f:36:3f:27:5b:02:95:a4:6e:f9:dc:69:41:3d:ec:52:39: 90:8a:07:6a:ce:a7:b6:88:17:f2:8b:d4:f4:47:c9:9a:40:20: 81:46:d4:b6:db:2a:b8:ed:5a:82:1c:7a:d8:47:4f:da:3d:33: 8d:34:a4:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3BM+CB4mqeCUgYsv3G0w1EoYrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1MjRE ODU4MTUwODAeFw0yNjA2MjAwNTUxNTRaFw0yNjA2MjEwNjM3NTRaMDMxMTAvBgNV BAMTKERGMkUwRjRFQUFDOTlENjUzMTAzMDJGQkI5QThERjc5MTJFMTg3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+7yCM17wdUv2HBh3bLBKY/jT dH0ArDifpgbtMRyzOIOChEz1+c0dqFpIS4FN06iiyu/aNbgi/8188MUejOWhj+g/ zYMMY9/npP21F3CBnUQQWYQuczHHLpTszkyY1RIrRtNI+fVrOQZRtZjBO9/huTjF rSo69AOD81ITqvD5EcLXqzeqgCDy4ilqryIMZSD4R4nDOQUue036fSSU04fy41M+ hV/R0jw9mUrfRjtZjLAGSQnvWV2QYr81gH9Hu5pYTeiZEEY5XvuuKco9m9KYcCJi hzAOC2pNmXanb5FXfjjwTpAbanyzr+nWRvlAgoSuON73I0ymNgp4ETGdaO+lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3y4PTqrJnWUxAwL7uajfeRLhh1IwHwYDVR0j BBgwFoAUHYRD8rG5G/bwJ4xbPEvFJNhYFQgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI3MTNhMzItZmFkYS00ODRlLWE2OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJC MUI5MUJGNkYwMjc4QzVCM0M0QkM1MjREODU4MTUwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDg0NDNGMkIxQjkxQkY2RjAyNzhDNUIzQzRCQzUyNEQ4NTgx NTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1 MjREODU4MTUwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEctmq/eHMRPbhWc6bq6ZOMlQkoFAoqBCE2U GmY0i1cawt6zduAISAl2tsJhNgTar5o1oFJ9sSfPsM96ksms0spwUfXVvI848KA5 G9W4FAjkQZ7M0NheU9KvdSSLGffPwNE4UufPbRKAlsxF6XB2H63hrWHsauRtM2EK F2XrVLjBuoVYQjK19ujeycrDuB4BnyWMyUMYa3oYUyKbLwwSziTHG1CI5HAW3yl3 oF6P3sAPHe2XwXsKHxGbJkhDr0IC/7CWHZT9vaufNj8nWwKVpG753GlBPexSOZCK B2rOp7aIF/KL1PRHyZpAIIFG1LbbKrjtWoIcethHT9o9M400pNA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:35 2026 by rpki-client