$ rpki-client -vvf rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft File: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft (raw, json) Hash identifier: v3KupGBpANGIygyobuM7+72FnyJup5qnXju2ckNF+2E= Subject key identifier: BA:69:1F:73:94:AF:E0:13:80:73:A8:DA:0C:C8:8E:E5:6E:8D:AF:1B Authority key identifier: A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F Certificate issuer: /CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Certificate serial: 335FCFE89C36D73D273490225A4674C6042CBA7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 06:35:09 +0000 Manifest this update: Thu 18 Jun 2026 06:30:09 +0000 Manifest next update: Fri 19 Jun 2026 07:47:09 +0000 Files and hashes: 1: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: lknjz+xGrn74yDQTZoQhv/KjNKL2zVYWd4Swco59gWA=) 2: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: Il2995+O34HRt5QUYak7wmOSE/xt1UwsadzXH7aEOYo=) 3: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: mTSHlFZAxZWWAKZzsiMuSqeFq/VKg23JR+BpuxRfCT8=) 4: A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl (hash: h13ecJjwOvRzOU2EAbA0pX0IJzuFCOuI89O1absXkiY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 07:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:5f:cf:e8:9c:36:d7:3d:27:34:90:22:5a:46:74:c6:04:2c:ba:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F Validity Not Before: Jun 18 06:30:09 2026 GMT Not After : Jun 19 07:47:09 2026 GMT Subject: CN=BA691F7394AFE0138073A8DA0CC88EE56E8DAF1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c1:43:26:2b:18:bf:ec:90:69:c5:98:84:23: 96:6c:4e:15:25:d8:29:7e:7c:62:4b:ae:48:c4:0e: ae:67:6d:b6:03:81:8a:7f:88:0c:37:8e:e3:56:a9: 95:d5:e3:71:f1:10:e2:94:1b:1c:21:10:58:3c:7b: 2e:66:51:f7:81:5d:18:e2:1a:d6:26:2b:35:2a:58: 7e:4d:8b:2e:65:15:8d:c5:48:92:30:fb:6b:4a:25: 17:e5:91:8e:d0:25:55:58:c8:3d:95:6f:16:f8:e5: a7:99:9e:2a:2a:1f:4d:f1:7c:c1:cb:af:48:50:2f: 73:66:73:72:99:24:7b:7a:e2:24:9a:98:6d:25:f7: ad:9d:10:3a:d0:76:4e:ab:80:9e:7e:af:07:1e:8f: 9b:1b:38:f1:9d:00:8c:2a:45:03:e4:32:65:3c:2f: d8:a9:04:0f:c0:46:f9:39:b4:56:53:0c:15:87:79: c8:8c:23:cf:87:ac:f9:9f:fe:ca:5d:4e:3e:c8:53: 83:dc:0d:6d:e9:ea:ad:ce:46:c7:46:7b:43:de:2a: fd:5e:2a:c5:58:eb:a9:c2:62:13:7e:ea:64:fb:e3: 64:35:16:f5:8e:cf:e8:14:79:5d:f0:c2:7e:0c:70: 64:73:a0:93:cc:e7:4d:f6:71:a3:70:e8:77:b5:6d: 2e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:69:1F:73:94:AF:E0:13:80:73:A8:DA:0C:C8:8E:E5:6E:8D:AF:1B X509v3 Authority Key Identifier: keyid:A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:bb:5e:68:68:47:68:94:a8:27:4e:87:81:8f:dd:2a:dd:eb: 14:bf:99:25:a1:96:79:96:31:dd:9c:fa:76:28:1f:77:5b:aa: 0c:14:62:84:dd:e0:a3:be:9e:ab:7e:72:74:50:b9:8a:a7:4c: 96:ad:0a:92:a4:02:d7:72:4a:3e:db:13:49:df:70:e1:de:89: ad:c1:59:f6:24:69:5d:3b:6e:e3:49:cf:dd:05:69:d8:09:aa: 0c:21:d1:11:0a:5f:7b:86:2a:fc:43:06:1d:f7:95:9e:dd:3e: 7a:63:58:d0:cd:2f:19:2e:82:08:c4:f0:51:41:f6:ad:1f:21: b5:34:0e:ab:2c:be:65:e0:a7:16:57:28:c6:d5:66:37:ae:43: b9:12:9a:e2:f2:61:23:e3:b3:ac:36:9f:72:0b:80:ec:bc:70: d5:23:f2:ed:f1:c4:fe:35:e7:87:43:cb:6c:29:33:64:29:9f: 82:f1:51:13:ca:28:43:a2:b7:04:de:1b:db:b5:c0:a7:3c:01: 9a:46:57:e6:ab:fc:5c:a7:8c:85:56:92:d3:20:dd:e4:05:53: 81:e2:ea:3d:a0:ff:a1:7a:21:8c:12:df:68:d5:b4:eb:cd:82: 0c:fa:b3:06:ee:d2:9e:aa:d3:fb:a2:8e:e4:e9:23:61:b0:d6: 73:66:73:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM1/P6Jw21z0nNJAiWkZ0xgQsun4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5 OTJEOEIyRjAeFw0yNjA2MTgwNjMwMDlaFw0yNjA2MTkwNzQ3MDlaMDMxMTAvBgNV BAMTKEJBNjkxRjczOTRBRkUwMTM4MDczQThEQTBDQzg4RUU1NkU4REFGMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhwUMmKxi/7JBpxZiEI5ZsThUl 2Cl+fGJLrkjEDq5nbbYDgYp/iAw3juNWqZXV43HxEOKUGxwhEFg8ey5mUfeBXRji GtYmKzUqWH5Niy5lFY3FSJIw+2tKJRflkY7QJVVYyD2Vbxb45aeZnioqH03xfMHL r0hQL3Nmc3KZJHt64iSamG0l962dEDrQdk6rgJ5+rwcej5sbOPGdAIwqRQPkMmU8 L9ipBA/ARvk5tFZTDBWHeciMI8+HrPmf/spdTj7IU4PcDW3p6q3ORsdGe0PeKv1e KsVY66nCYhN+6mT742Q1FvWOz+gUeV3wwn4McGRzoJPM5032caNw6He1bS65AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUumkfc5Sv4BOAc6jaDMiO5W6NrxswHwYDVR0j BBgwFoAUqejSxF2CDB/EC88DubEGmZktiy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDgxZDU0Y2ItNTdhOS00YTE2LWE3MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1 RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5OTJEOEIyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BOUU4RDJDNDVEODIwQzFGQzQwQkNGMDNCOUIxMDY5OTk5MkQ4 QjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2 OTk5OTJEOEIyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy7XmhoR2iUqCdOh4GP3Srd6xS/mSWhlnmW Md2c+nYoH3dbqgwUYoTd4KO+nqt+cnRQuYqnTJatCpKkAtdySj7bE0nfcOHeia3B WfYkaV07buNJz90FadgJqgwh0REKX3uGKvxDBh33lZ7dPnpjWNDNLxkuggjE8FFB 9q0fIbU0DqssvmXgpxZXKMbVZjeuQ7kSmuLyYSPjs6w2n3ILgOy8cNUj8u3xxP41 54dDy2wpM2Qpn4LxURPKKEOitwTeG9u1wKc8AZpGV+ar/FynjIVWktMg3eQFU4Hi 6j2g/6F6IYwS32jVtOvNggz6swbu0p6q0/uijuTpI2Gw1nNmc6U= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:15 2026 by rpki-client