$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft File: 84122DA5B146979D5AAE13129EB677B96C49C7F6.mft (raw, json) Hash identifier: tDviOfiQDtyoKXhQ9M90wy2Ob8NnnRxKw89Q3xwU0PY= Subject key identifier: 10:60:82:22:34:4A:17:24:74:5D:44:43:3A:36:91:C4:69:45:22:3E Authority key identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6 Certificate issuer: /CN=84122DA5B146979D5AAE13129EB677B96C49C7F6 Certificate serial: 74DEB87B04322F9C5B25EFCC7EB466F1A3B51151 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 13:36:14 +0000 Manifest this update: Sat 20 Jun 2026 13:31:14 +0000 Manifest next update: Sun 21 Jun 2026 13:46:14 +0000 Files and hashes: 1: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: LXKwnzjsakvh6k668BXuaYJ1O5iQ9reQNkhpZI7YDu8=) 2: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 2a7WLuRJ0dxekwgo8okkZl2guEN5PE3JgGMBxaSTXY4=) 3: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: jhYHGOtLAWmv9OcO3/5rDKvnFPZl5OTObgAsQoi8r50=) 4: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: u+tKwHgjMKGgdgEnZPp2mwsftX+fJPIHxzdML3oWuA4=) 5: 84122DA5B146979D5AAE13129EB677B96C49C7F6.crl (hash: 3gn3lE6r2rbuBr46wCLmkzq6iJBDV+Z/1TVOLIcpijs=) 6: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: fHid8e/HPZhTBqkYcMs+Y715ZVlDl6RBBe2DwEnsBPc=) 7: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: LWJq/XJLjGCHAx0PdP5FSd33v0EqmvbG5/RZUAKgCgs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 10:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:de:b8:7b:04:32:2f:9c:5b:25:ef:cc:7e:b4:66:f1:a3:b5:11:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84122DA5B146979D5AAE13129EB677B96C49C7F6 Validity Not Before: Jun 20 13:31:14 2026 GMT Not After : Jun 21 13:46:14 2026 GMT Subject: CN=10608222344A1724745D44433A3691C46945223E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:f3:a6:be:d4:bc:73:39:3c:c0:b7:cc:4b: 2f:89:ba:17:a1:9e:39:6e:6c:57:ce:80:07:b2:63: d6:68:89:96:25:0f:a9:ff:62:ce:bf:67:f0:db:4c: 82:b6:53:e3:7a:b6:65:8e:93:d0:22:ed:58:3a:09: d7:71:9f:19:34:88:d4:58:81:48:44:85:59:0d:c7: e1:28:78:f2:e7:d1:c7:5a:72:6c:ca:f6:85:6d:ed: 13:3f:a6:ab:21:c3:64:48:c2:c0:8e:6c:93:f7:f7: f7:55:b9:d6:61:c5:41:5a:55:45:cf:14:15:8c:22: 62:7f:84:3e:25:11:a4:5b:7b:ae:92:23:94:0b:0d: 63:f0:7c:4c:bf:9e:99:b1:15:de:02:54:f1:b8:45: 9e:96:f9:99:91:70:6d:f1:ca:5d:90:a4:53:06:e7: 5b:1d:35:b2:47:9f:8d:6a:4b:10:0f:31:c4:64:5e: e7:92:6f:95:b1:d1:1d:81:15:1f:5d:8d:92:79:61: 31:d4:9f:d3:bf:ee:25:0f:50:91:a1:bb:b4:b8:83: 31:73:00:40:57:fd:08:87:1e:53:95:96:b7:cf:40: d9:a5:13:cc:50:2f:7f:1c:f3:5a:cd:b5:0e:0c:32: d8:cc:78:0a:dd:c5:e2:df:2a:99:35:4a:fc:ff:f8: 4a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:60:82:22:34:4A:17:24:74:5D:44:43:3A:36:91:C4:69:45:22:3E X509v3 Authority Key Identifier: keyid:84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c1:d4:fa:4f:12:f8:da:68:09:91:75:29:c0:42:44:40:17: 66:72:87:81:d9:c5:a7:a2:33:3d:8f:4f:cb:85:24:0e:58:82: fc:b5:6d:73:56:06:00:a8:03:8f:27:de:9c:0f:e7:30:19:c1: 6f:e4:2d:8c:f4:5a:8e:7f:c9:72:75:38:cd:28:b6:71:06:46: 14:be:bb:ed:b7:56:d1:01:ab:ea:a1:f3:70:ce:ac:3e:14:9b: 99:ec:73:f0:d7:c6:24:29:15:6b:73:a4:73:48:92:48:32:10: 0d:f7:26:40:8d:bc:fc:f7:be:5a:a3:e9:fa:88:55:b9:75:80: 78:da:06:16:67:b1:4f:11:8a:bc:6a:24:42:9a:9e:73:5c:8b: db:9c:3a:7c:b0:1b:ba:7f:09:cb:22:c7:39:10:7f:de:f5:80: 47:bd:e2:ca:42:25:b3:47:85:7a:34:98:a3:d2:29:f7:51:48: e3:0f:eb:64:03:1a:fd:cd:a6:b7:d7:19:c1:9e:f2:15:c4:da: 45:59:ed:fc:69:4d:8f:fe:a3:b6:3d:3c:59:53:cc:bf:d9:c7: 67:9f:88:2b:a1:4f:63:68:55:4d:7d:b2:41:aa:cd:bb:a5:f0: 4d:3e:9f:91:07:d3:93:ab:72:de:dc:ba:a0:0c:23:5c:c5:34: 42:8c:8b:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdN64ewQyL5xbJe/MfrRm8aO1EVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2 QzQ5QzdGNjAeFw0yNjA2MjAxMzMxMTRaFw0yNjA2MjExMzQ2MTRaMDMxMTAvBgNV BAMTKDEwNjA4MjIyMzQ0QTE3MjQ3NDVENDQ0MzNBMzY5MUM0Njk0NTIyM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JvOmvtS8czk8wLfMSy+Juheh njlubFfOgAeyY9ZoiZYlD6n/Ys6/Z/DbTIK2U+N6tmWOk9Ai7Vg6Cddxnxk0iNRY gUhEhVkNx+EoePLn0cdacmzK9oVt7RM/pqshw2RIwsCObJP39/dVudZhxUFaVUXP FBWMImJ/hD4lEaRbe66SI5QLDWPwfEy/npmxFd4CVPG4RZ6W+ZmRcG3xyl2QpFMG 51sdNbJHn41qSxAPMcRkXueSb5Wx0R2BFR9djZJ5YTHUn9O/7iUPUJGhu7S4gzFz AEBX/QiHHlOVlrfPQNmlE8xQL38c81rNtQ4MMtjMeArdxeLfKpk1Svz/+EqVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGCCIjRKFyR0XURDOjaRxGlFIj4wHwYDVR0j BBgwFoAUhBItpbFGl51arhMSnrZ3uWxJx/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWY4NmIxMmUtZTU3NC00MjZiLWFhNmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVC MTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2QzQ5QzdGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDEyMkRBNUIxNDY5NzlENUFBRTEzMTI5RUI2NzdCOTZDNDlD N0Y2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3 Qjk2QzQ5QzdGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHB1PpPEvjaaAmRdSnAQkRAF2Zyh4HZxaei Mz2PT8uFJA5Ygvy1bXNWBgCoA48n3pwP5zAZwW/kLYz0Wo5/yXJ1OM0otnEGRhS+ u+23VtEBq+qh83DOrD4Um5nsc/DXxiQpFWtzpHNIkkgyEA33JkCNvPz3vlqj6fqI Vbl1gHjaBhZnsU8RirxqJEKannNci9ucOnywG7p/CcsixzkQf971gEe94spCJbNH hXo0mKPSKfdRSOMP62QDGv3NprfXGcGe8hXE2kVZ7fxpTY/+o7Y9PFlTzL/Zx2ef iCuhT2NoVU19skGqzbul8E0+n5EH05Orct7cuqAMI1zFNEKMi+0= -----END CERTIFICATE-----Generated at Sat Jun 20 16:54:00 2026 by rpki-client