$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft File: 84122DA5B146979D5AAE13129EB677B96C49C7F6.mft (raw, json) Hash identifier: MAf4jSOuedKz+t+o0nrL2PKpvHds3O5dSbn74GGlVlk= Subject key identifier: 9C:85:F8:70:95:7B:FA:E5:3F:45:71:B4:7F:AD:6B:BD:33:BF:66:03 Authority key identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6 Certificate issuer: /CN=84122DA5B146979D5AAE13129EB677B96C49C7F6 Certificate serial: 657F19E07A6551D01BCAF2C4A28BF4C4F6826F12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 20:15:24 +0000 Manifest this update: Fri 19 Jun 2026 20:10:24 +0000 Manifest next update: Sat 20 Jun 2026 21:33:24 +0000 Files and hashes: 1: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: LWJq/XJLjGCHAx0PdP5FSd33v0EqmvbG5/RZUAKgCgs=) 2: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: fHid8e/HPZhTBqkYcMs+Y715ZVlDl6RBBe2DwEnsBPc=) 3: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: LXKwnzjsakvh6k668BXuaYJ1O5iQ9reQNkhpZI7YDu8=) 4: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: u+tKwHgjMKGgdgEnZPp2mwsftX+fJPIHxzdML3oWuA4=) 5: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 2a7WLuRJ0dxekwgo8okkZl2guEN5PE3JgGMBxaSTXY4=) 6: 84122DA5B146979D5AAE13129EB677B96C49C7F6.crl (hash: SSkl/DKYHPsd0e5DJALBaNWYBOWMhxOagNAeoEjNSUM=) 7: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: jhYHGOtLAWmv9OcO3/5rDKvnFPZl5OTObgAsQoi8r50=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:7f:19:e0:7a:65:51:d0:1b:ca:f2:c4:a2:8b:f4:c4:f6:82:6f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84122DA5B146979D5AAE13129EB677B96C49C7F6 Validity Not Before: Jun 19 20:10:24 2026 GMT Not After : Jun 20 21:33:24 2026 GMT Subject: CN=9C85F870957BFAE53F4571B47FAD6BBD33BF6603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9c:8f:51:9e:f1:8f:8f:08:a1:df:40:2a:98: e5:d2:05:7b:2e:eb:c4:28:be:f2:49:91:4f:6b:d9: 17:44:ad:e4:b6:90:b9:ca:0b:61:6b:4e:17:45:d4: 85:ac:0b:ea:09:3e:ae:14:f6:c8:8f:e7:16:fe:50: f5:fa:41:ff:10:a4:ab:b9:ad:71:e1:89:75:45:05: d7:88:72:df:1b:6b:b0:7e:2c:0a:9c:af:24:ba:c4: d0:b2:2e:64:68:e5:96:5b:db:bd:b4:65:4d:f7:fd: 06:55:13:58:b7:95:f8:26:4c:b9:4d:8e:d2:e7:00: 51:3d:2a:22:af:8a:a2:9c:9c:ec:22:8c:ca:a4:d5: d5:73:eb:88:b6:be:39:4e:95:ab:7d:81:89:3b:5b: 93:cd:5e:00:93:23:41:4e:04:db:46:44:95:df:85: d7:d5:f3:15:8a:ff:aa:bf:9f:b8:b1:5e:04:ba:b8: 5e:a2:ad:cb:81:b8:e8:04:a1:f3:75:c4:8c:29:8d: 36:e9:8e:a5:19:b2:84:c1:34:63:05:6e:53:7d:99: de:53:9c:a6:d3:bb:d3:d6:4e:88:9e:5a:60:d2:6c: fb:90:ca:85:4d:58:07:72:57:f0:73:c6:f2:f9:24: da:04:cd:3a:09:56:de:2a:26:69:ed:cb:f7:1d:ef: 8f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:85:F8:70:95:7B:FA:E5:3F:45:71:B4:7F:AD:6B:BD:33:BF:66:03 X509v3 Authority Key Identifier: keyid:84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ee:22:50:3e:d9:49:b1:82:d7:00:bf:24:42:d4:fb:d5:e1: 40:ec:19:59:8b:5b:b3:61:c3:a6:a6:79:c7:ff:53:62:cb:f5: 12:71:e9:a1:84:0f:68:32:a3:1a:48:0f:78:bb:2f:9b:90:b8: 16:60:ff:71:cc:ed:15:49:16:c4:16:70:ea:ba:46:1d:52:f2: 23:c3:d5:06:c4:b6:83:bd:2e:23:b5:dc:81:fd:c7:7c:cf:09: 83:96:a9:64:c2:bd:ea:ff:f5:64:d4:c9:fe:83:09:c0:cf:be: 84:1f:9c:21:f3:b6:80:1c:c9:1b:bb:dc:10:fd:30:c2:8f:8e: 27:04:de:ba:c2:ae:c1:8e:65:73:ba:bb:ed:6c:78:6e:9a:b1: 89:a5:32:16:13:b8:8c:e9:38:46:c8:a5:69:0d:19:4f:ee:ad: 24:a0:de:5e:38:15:bd:07:aa:d5:ec:ff:43:d6:48:3e:72:ea: fc:a2:7a:3e:fd:b1:54:19:91:bb:eb:2d:53:ab:1e:43:20:39: 66:23:88:51:7d:43:e0:98:57:ab:fc:c5:2e:8f:6d:ec:b4:80: 49:77:41:c7:33:ae:95:cf:23:0e:85:52:eb:29:22:f7:71:af: ae:e0:04:0d:e1:f6:d7:93:76:ad:84:88:4e:c6:5b:9c:39:49: e3:06:cf:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZX8Z4HplUdAbyvLEoov0xPaCbxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2 QzQ5QzdGNjAeFw0yNjA2MTkyMDEwMjRaFw0yNjA2MjAyMTMzMjRaMDMxMTAvBgNV BAMTKDlDODVGODcwOTU3QkZBRTUzRjQ1NzFCNDdGQUQ2QkJEMzNCRjY2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPnI9RnvGPjwih30AqmOXSBXsu 68QovvJJkU9r2RdEreS2kLnKC2FrThdF1IWsC+oJPq4U9siP5xb+UPX6Qf8QpKu5 rXHhiXVFBdeIct8ba7B+LAqcryS6xNCyLmRo5ZZb2720ZU33/QZVE1i3lfgmTLlN jtLnAFE9KiKviqKcnOwijMqk1dVz64i2vjlOlat9gYk7W5PNXgCTI0FOBNtGRJXf hdfV8xWK/6q/n7ixXgS6uF6ircuBuOgEofN1xIwpjTbpjqUZsoTBNGMFblN9md5T nKbTu9PWToieWmDSbPuQyoVNWAdyV/BzxvL5JNoEzToJVt4qJmnty/cd74+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnIX4cJV7+uU/RXG0f61rvTO/ZgMwHwYDVR0j BBgwFoAUhBItpbFGl51arhMSnrZ3uWxJx/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWY4NmIxMmUtZTU3NC00MjZiLWFhNmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVC MTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2QzQ5QzdGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDEyMkRBNUIxNDY5NzlENUFBRTEzMTI5RUI2NzdCOTZDNDlD N0Y2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3 Qjk2QzQ5QzdGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPuIlA+2UmxgtcAvyRC1PvV4UDsGVmLW7Nh w6amecf/U2LL9RJx6aGED2gyoxpID3i7L5uQuBZg/3HM7RVJFsQWcOq6Rh1S8iPD 1QbEtoO9LiO13IH9x3zPCYOWqWTCver/9WTUyf6DCcDPvoQfnCHztoAcyRu73BD9 MMKPjicE3rrCrsGOZXO6u+1seG6asYmlMhYTuIzpOEbIpWkNGU/urSSg3l44Fb0H qtXs/0PWSD5y6vyiej79sVQZkbvrLVOrHkMgOWYjiFF9Q+CYV6v8xS6Pbey0gEl3 QcczrpXPIw6FUuspIvdxr67gBA3h9teTdq2EiE7GW5w5SeMGz+M= -----END CERTIFICATE-----Generated at Sat Jun 20 15:43:02 2026 by rpki-client