$ rpki-client -vvf rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft File: 0987C7F8639A5EC739826F640C8E04FD53A0800E.mft (raw, json) Hash identifier: 52Ltx3aEI1GYwPjr1vTpXiGx/o0+1eJzJgnPJPLDU14= Subject key identifier: 31:62:0B:68:64:4D:07:24:DF:85:12:C0:31:40:35:9B:A9:63:59:B7 Authority key identifier: 09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E Certificate issuer: /CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Certificate serial: 48D1E8E9A52252E5DDCF97B44AC51C8097E053F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 20:10:19 +0000 Manifest this update: Fri 19 Jun 2026 20:05:19 +0000 Manifest next update: Sat 20 Jun 2026 20:41:19 +0000 Files and hashes: 1: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: rwJybuB0Xuh51eX44OUj0FA9N+xl/VzvgF/HSTs9GfM=) 2: 0987C7F8639A5EC739826F640C8E04FD53A0800E.crl (hash: RSfkNUQ81xPGB22sJb8uyCjaeJ5StJjRJN4CEJOUfaQ=) 3: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: s3V5AB5+bA2d5/svBoGY/0k9sggx8nw5uup6zerO5YY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d1:e8:e9:a5:22:52:e5:dd:cf:97:b4:4a:c5:1c:80:97:e0:53:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Validity Not Before: Jun 19 20:05:19 2026 GMT Not After : Jun 20 20:41:19 2026 GMT Subject: CN=31620B68644D0724DF8512C03140359BA96359B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:cc:57:de:ed:c1:5d:c0:fc:7d:93:81:6c: 67:d4:45:20:30:24:38:9a:8a:cd:cd:e9:de:36:32: 5a:9c:75:5c:8a:d3:67:75:43:3c:d8:88:0c:ff:a9: 7d:5e:b7:12:47:ba:aa:f1:43:9e:1d:a2:e0:f3:97: aa:ca:d5:11:ee:56:d8:eb:af:23:f3:6c:4f:1b:36: 2c:70:65:35:bc:f0:39:69:d7:21:be:f5:28:01:02: 53:e4:46:8c:31:82:b5:d8:96:2d:c5:a4:48:90:ec: 1e:83:05:18:43:f2:85:09:85:d0:56:99:12:38:16: bb:4b:8c:a8:e0:d2:03:4f:cb:b6:17:e7:a6:97:f0: aa:69:49:d3:fd:6a:2b:3d:aa:a9:71:77:f3:d9:2f: 2e:ba:af:57:45:92:d6:57:f0:02:2b:bd:6a:d4:8b: ea:6d:8a:30:b9:7c:c6:bf:58:9d:38:02:19:b3:a8: 1f:88:9c:27:c7:83:19:78:52:06:86:8c:85:9a:a6: e8:a8:d0:3b:d1:d9:00:94:e9:33:62:c6:00:c1:95: 4f:fc:2d:58:0f:aa:26:e2:0f:ed:da:d8:0e:00:84: 85:d8:78:d0:60:20:b9:c8:d8:f1:00:c3:3a:67:3f: e4:fe:ca:da:df:e6:17:0e:8f:d9:a6:a4:2e:e1:5d: 72:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:62:0B:68:64:4D:07:24:DF:85:12:C0:31:40:35:9B:A9:63:59:B7 X509v3 Authority Key Identifier: keyid:09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:95:8b:b6:9d:25:9e:94:51:73:ba:4b:58:7e:52:2d:47:4b: a2:de:07:39:ac:5c:e5:70:5d:aa:7e:bb:b7:d6:b4:55:ed:7e: 2e:0c:67:4a:06:1e:8a:39:96:e9:22:89:6f:f3:97:a6:a3:4c: d0:48:9d:54:1c:43:8d:f0:35:15:20:75:3e:ba:f6:3c:27:35: 7b:22:4f:15:23:85:d9:b8:f7:7e:72:d2:da:a1:c9:49:b7:7b: 79:7b:c7:57:98:1d:58:c6:fe:b7:0c:bb:29:95:8c:29:67:a8: a4:2c:a3:7b:fe:c0:f9:bc:e9:19:07:62:01:6a:a2:e8:b3:d9: 9e:c5:03:fd:f2:a9:94:20:56:2c:35:04:09:8f:26:8d:0a:f4: e0:06:41:d4:e0:cb:0f:3a:3a:56:10:95:af:3b:a8:f6:54:8e: cc:c7:2a:bc:7a:5a:51:14:f0:69:4b:fe:96:aa:05:50:e6:30: 42:57:35:e7:f7:04:55:80:5a:74:cf:b8:5a:bb:77:c3:31:e5: 52:ad:af:5f:a0:ed:89:0f:47:b3:01:a8:e9:b9:fb:1f:b1:23: 30:1e:f4:9b:06:05:63:74:79:2f:55:8a:ed:df:a4:6a:46:d0: 75:0a:f6:46:0a:6e:f0:07:ce:dd:31:0f:eb:6a:eb:85:72:5f: 54:c7:14:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSNHo6aUiUuXdz5e0SsUcgJfgU/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1 M0EwODAwRTAeFw0yNjA2MTkyMDA1MTlaFw0yNjA2MjAyMDQxMTlaMDMxMTAvBgNV BAMTKDMxNjIwQjY4NjQ0RDA3MjRERjg1MTJDMDMxNDAzNTlCQTk2MzU5QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5V8xX3u3BXcD8fZOBbGfURSAw JDiais3N6d42MlqcdVyK02d1QzzYiAz/qX1etxJHuqrxQ54douDzl6rK1RHuVtjr ryPzbE8bNixwZTW88Dlp1yG+9SgBAlPkRowxgrXYli3FpEiQ7B6DBRhD8oUJhdBW mRI4FrtLjKjg0gNPy7YX56aX8KppSdP9ais9qqlxd/PZLy66r1dFktZX8AIrvWrU i+ptijC5fMa/WJ04AhmzqB+InCfHgxl4UgaGjIWapuio0DvR2QCU6TNixgDBlU/8 LVgPqibiD+3a2A4AhIXYeNBgILnI2PEAwzpnP+T+ytrf5hcOj9mmpC7hXXIvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMWILaGRNByTfhRLAMUA1m6ljWbcwHwYDVR0j BBgwFoAUCYfH+GOaXsc5gm9kDI4E/VOggA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDYzOGJkMjEtYmU1Ni00MmI0LTgyNzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2 MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1M0EwODAwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTg3QzdGODYzOUE1RUM3Mzk4MjZGNjQwQzhFMDRGRDUzQTA4 MDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0 RkQ1M0EwODAwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyVi7adJZ6UUXO6S1h+Ui1HS6LeBzmsXOVw Xap+u7fWtFXtfi4MZ0oGHoo5lukiiW/zl6ajTNBInVQcQ43wNRUgdT669jwnNXsi TxUjhdm4935y0tqhyUm3e3l7x1eYHVjG/rcMuymVjClnqKQso3v+wPm86RkHYgFq ouiz2Z7FA/3yqZQgViw1BAmPJo0K9OAGQdTgyw86OlYQla87qPZUjszHKrx6WlEU 8GlL/paqBVDmMEJXNef3BFWAWnTPuFq7d8Mx5VKtr1+g7YkPR7MBqOm5+x+xIzAe 9JsGBWN0eS9Viu3fpGpG0HUK9kYKbvAHzt0xD+tq64VyX1THFLU= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:24 2026 by rpki-client