$ rpki-client -vvf rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft File: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft (raw, json) Hash identifier: m7Sa3rPteyVMMbcu8vibSlJICKdzw8a4UICT9eq+/9g= Subject key identifier: 6C:C4:11:29:D8:D2:E3:55:7E:27:C0:93:51:85:10:CB:60:74:90:AB Authority key identifier: A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE Certificate issuer: /CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Certificate serial: 78F0E71234F030F3C63E4399126879F6C438F99E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 20:15:23 +0000 Manifest this update: Fri 19 Jun 2026 20:10:23 +0000 Manifest next update: Sat 20 Jun 2026 21:34:23 +0000 Files and hashes: 1: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: aovpUXhtG7nLDYyGx/GHHZuHleB68UHdZ+Sr7i30ntQ=) 2: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: K3OLubUlACzscrRuEaqGQ8Mg86bkVIp+TswVbW3m0Us=) 3: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl (hash: zCVEj8ZLDfYI0Z+eVrgLqREWfLuxTCbzIPnGp3YvOqk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f0:e7:12:34:f0:30:f3:c6:3e:43:99:12:68:79:f6:c4:38:f9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Validity Not Before: Jun 19 20:10:23 2026 GMT Not After : Jun 20 21:34:23 2026 GMT Subject: CN=6CC41129D8D2E3557E27C093518510CB607490AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:e3:d6:47:08:e0:37:61:7d:63:e5:bf:4b: 32:e1:a4:5c:5b:cc:07:2d:72:b2:1c:57:3e:dd:9a: d7:e4:d7:73:76:38:34:a7:8b:25:2e:75:24:89:c6: 94:57:fc:4e:d4:11:38:d4:2e:23:c2:d4:25:69:d8: de:59:1f:98:45:38:de:ad:4f:72:e5:11:d0:1f:15: 0b:45:d6:6f:a0:a0:e3:c7:0d:4e:0f:ac:23:de:c8: 5b:c0:af:4e:f6:79:56:e0:c2:47:de:0b:b9:fb:83: 6c:84:69:11:63:a0:ce:a7:cb:97:65:99:24:3b:3a: 4a:e5:c1:a5:30:bb:17:94:2d:e7:a3:a5:5c:f4:fb: 3c:4a:c8:60:ae:e1:96:a9:05:e2:1f:67:cf:12:ab: 60:9a:12:7e:3d:ba:02:d5:e6:08:35:99:9c:56:cf: e7:a5:5c:f6:86:94:d8:94:41:2b:ea:69:91:2b:34: 05:2f:95:fe:bf:9c:55:1c:70:c1:43:36:14:53:3b: 86:1e:e4:f5:a1:5e:12:27:c1:2c:f4:86:43:42:c8: 48:ab:4d:04:be:8c:e1:0e:e8:e5:66:d1:d6:ff:dd: 99:3d:45:f2:24:5d:5f:26:fd:95:d2:dc:b7:45:12: 44:00:ca:ff:87:fa:fa:49:28:ed:f0:35:2c:c8:d6: bd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C4:11:29:D8:D2:E3:55:7E:27:C0:93:51:85:10:CB:60:74:90:AB X509v3 Authority Key Identifier: keyid:A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c1:74:d7:36:f3:91:1c:8c:74:9f:51:87:b6:22:b2:8c:0d: 7b:f7:e1:cf:18:fc:06:b5:00:ec:1b:46:87:86:b7:a6:f2:b8: b0:39:bc:59:7e:e4:ca:52:57:74:dd:a3:de:c1:f0:00:04:3f: bd:89:13:e9:21:d1:8b:dc:49:ca:9b:7a:58:17:c5:e4:db:48: 3a:22:3c:91:9d:7c:43:8c:b9:9c:eb:eb:68:5b:26:e5:0d:a5: 85:cb:d7:7f:32:4e:f4:b1:7f:4f:4e:58:39:90:35:1c:7e:d6: 2a:74:84:a2:a0:53:39:d7:37:8d:54:87:7d:b8:aa:f5:4e:0f: 32:26:a0:5c:8a:28:85:77:37:78:53:1a:90:4b:f1:a5:fb:55: e3:7e:92:ca:c9:9b:66:43:dd:87:19:2a:40:57:3b:b3:b9:9d: 2f:76:7e:39:89:22:fe:7e:fe:1c:bd:37:e6:d3:7f:a1:76:71: d4:75:bd:34:a6:58:9c:50:19:ad:1e:b3:97:d9:3d:52:38:7a: 00:de:e2:97:ae:37:bc:b2:ae:96:f8:50:8b:2a:08:7f:88:d5: a6:f8:bf:ab:25:33:dd:94:0b:09:78:42:a1:8a:ae:c9:f0:35: ee:d0:18:45:39:6c:21:d3:38:48:f1:5c:02:d8:8c:8d:f7:e7: 41:57:b5:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePDnEjTwMPPGPkOZEmh59sQ4+Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4 QzNDNzlDRTAeFw0yNjA2MTkyMDEwMjNaFw0yNjA2MjAyMTM0MjNaMDMxMTAvBgNV BAMTKDZDQzQxMTI5RDhEMkUzNTU3RTI3QzA5MzUxODUxMENCNjA3NDkwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg1ePWRwjgN2F9Y+W/SzLhpFxb zActcrIcVz7dmtfk13N2ODSniyUudSSJxpRX/E7UETjULiPC1CVp2N5ZH5hFON6t T3LlEdAfFQtF1m+goOPHDU4PrCPeyFvAr072eVbgwkfeC7n7g2yEaRFjoM6ny5dl mSQ7OkrlwaUwuxeULeejpVz0+zxKyGCu4ZapBeIfZ88Sq2CaEn49ugLV5gg1mZxW z+elXPaGlNiUQSvqaZErNAUvlf6/nFUccMFDNhRTO4Ye5PWhXhInwSz0hkNCyEir TQS+jOEO6OVm0db/3Zk9RfIkXV8m/ZXS3LdFEkQAyv+H+vpJKO3wNSzI1r1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbMQRKdjS41V+J8CTUYUQy2B0kKswHwYDVR0j BBgwFoAUo4/fYd/UXo+hySVtvTWmeow8ec4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDdkZjJhZDAtNmU5OS00NGE3LWEwNjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFE RkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4QzNDNzlDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzhGREY2MURGRDQ1RThGQTFDOTI1NkRCRDM1QTY3QThDM0M3 OUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2 N0E4QzNDNzlDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErBdNc285EcjHSfUYe2IrKMDXv34c8Y/Aa1 AOwbRoeGt6byuLA5vFl+5MpSV3Tdo97B8AAEP72JE+kh0YvcScqbelgXxeTbSDoi PJGdfEOMuZzr62hbJuUNpYXL138yTvSxf09OWDmQNRx+1ip0hKKgUznXN41Uh324 qvVODzImoFyKKIV3N3hTGpBL8aX7VeN+ksrJm2ZD3YcZKkBXO7O5nS92fjmJIv5+ /hy9N+bTf6F2cdR1vTSmWJxQGa0es5fZPVI4egDe4peuN7yyrpb4UIsqCH+I1ab4 v6slM92UCwl4QqGKrsnwNe7QGEU5bCHTOEjxXALYjI3350FXtdw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:41 2026 by rpki-client