$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft File: 4202428F6F3C953C642F298719C5C35E169724A2.mft (raw, json) Hash identifier: 2MoDtCEljOPv5oD072iPyFkSTQ3g/NaCanH/kezzKV0= Subject key identifier: A4:39:31:3D:38:43:0B:8F:42:63:0E:B2:A0:BA:C2:90:58:BB:5C:82 Authority key identifier: 42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2 Certificate issuer: /CN=4202428F6F3C953C642F298719C5C35E169724A2 Certificate serial: 0DAC7E8EA4980994143A3BE4AC3D630A62758593 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 03:20:54 +0000 Manifest this update: Thu 18 Jun 2026 03:15:54 +0000 Manifest next update: Fri 19 Jun 2026 03:57:54 +0000 Files and hashes: 1: 4202428F6F3C953C642F298719C5C35E169724A2.crl (hash: KI8ksPMHy+WoSfY/v/pV22CaWMgiE/cFVCA4wxfLPOQ=) 2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: p7JO88fvmBW+Y+ZP8rFGldK5BvqAlDmHyGZVg3MhVAY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 03:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ac:7e:8e:a4:98:09:94:14:3a:3b:e4:ac:3d:63:0a:62:75:85:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4202428F6F3C953C642F298719C5C35E169724A2 Validity Not Before: Jun 18 03:15:54 2026 GMT Not After : Jun 19 03:57:54 2026 GMT Subject: CN=A439313D38430B8F42630EB2A0BAC29058BB5C82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d8:b9:aa:54:27:25:ba:34:2c:e0:ee:44:1e: 4e:eb:af:05:6e:29:44:43:08:f8:e3:8c:1e:ce:38: 8a:d8:79:9d:53:11:4a:94:ed:70:ac:aa:c1:04:05: 4e:2b:cb:a2:65:27:8d:02:34:69:1c:56:cd:db:83: 91:6a:1d:11:7e:4d:c6:30:bb:a2:63:cf:66:e3:1b: 1b:5f:f3:05:79:b4:dd:25:8a:0a:7f:2e:4e:d5:89: 6e:81:84:e1:7a:b9:24:29:0f:aa:6c:ac:95:ba:0e: 37:6a:25:e5:82:e8:0f:39:08:1f:d7:91:f2:d9:d9: 8c:5c:0f:7b:4c:18:69:f4:5a:76:74:65:d6:20:0e: 5d:5e:ae:09:a3:68:4e:88:33:69:eb:9f:ec:df:e9: c1:d2:44:be:5d:e3:9a:7a:da:ca:71:2d:76:be:23: ae:a5:53:d3:50:71:50:a6:60:c5:5d:cf:6e:54:8b: 7b:1d:e4:ae:05:c3:47:b1:a5:41:99:5d:52:4b:cd: d1:5c:fd:18:3e:62:73:7d:39:10:a7:e9:16:a6:75: cb:07:96:cf:ea:69:8f:02:ba:69:44:c4:a1:43:d1: b4:8c:79:dd:bf:5b:39:ba:e9:5c:d1:d4:74:30:d1: f8:b7:1e:8b:a6:ed:15:61:02:7e:03:14:91:8d:14: 98:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:39:31:3D:38:43:0B:8F:42:63:0E:B2:A0:BA:C2:90:58:BB:5C:82 X509v3 Authority Key Identifier: keyid:42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f4:ef:d5:4b:ec:a6:f6:b7:bd:67:95:05:21:9e:d4:f1:10: cf:99:10:b7:aa:98:53:19:c0:f2:60:2d:e3:a6:e9:90:99:f0: 5a:53:c2:05:36:97:ab:b3:cf:d5:f6:59:a0:4e:33:b1:0b:fc: b8:a3:4a:75:f9:64:b8:bd:f9:f0:13:59:09:8d:9a:ee:90:58: c8:95:39:07:c5:93:12:76:03:f7:12:8c:de:f0:e9:4e:05:80: 30:1d:67:08:16:ec:02:88:d4:5f:69:6f:2b:2f:f1:ca:80:d3: ec:53:97:2b:9a:2a:86:96:16:68:2e:9d:be:bc:ca:9c:ce:67: 53:51:a3:cc:78:57:bc:0f:8b:bb:0a:c7:c6:15:9d:09:b1:4e: 0e:75:e5:fd:e6:31:83:19:a9:5e:df:36:c6:40:2d:ea:e1:a5: b0:31:90:24:70:98:6d:32:34:ad:4c:8b:82:6c:65:16:32:6a: bb:5d:c3:4c:85:85:1c:14:7c:0a:83:af:8d:cc:ac:11:13:c1: 0f:61:0f:9c:3e:c7:a8:d6:5f:5a:3d:95:2d:80:48:05:fd:5a: a6:7c:57:f7:62:b8:05:1d:db:36:41:b3:f6:fd:53:cf:22:f6: 79:de:14:70:f0:84:16:ef:bf:1b:35:60:01:4d:7a:5c:28:59: 36:3b:01:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDax+jqSYCZQUOjvkrD1jCmJ1hZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwMjQyOEY2RjNDOTUzQzY0MkYyOTg3MTlDNUMzNUUx Njk3MjRBMjAeFw0yNjA2MTgwMzE1NTRaFw0yNjA2MTkwMzU3NTRaMDMxMTAvBgNV BAMTKEE0MzkzMTNEMzg0MzBCOEY0MjYzMEVCMkEwQkFDMjkwNThCQjVDODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2LmqVCclujQs4O5EHk7rrwVu KURDCPjjjB7OOIrYeZ1TEUqU7XCsqsEEBU4ry6JlJ40CNGkcVs3bg5FqHRF+TcYw u6Jjz2bjGxtf8wV5tN0ligp/Lk7ViW6BhOF6uSQpD6psrJW6DjdqJeWC6A85CB/X kfLZ2YxcD3tMGGn0WnZ0ZdYgDl1ergmjaE6IM2nrn+zf6cHSRL5d45p62spxLXa+ I66lU9NQcVCmYMVdz25Ui3sd5K4Fw0expUGZXVJLzdFc/Rg+YnN9ORCn6RamdcsH ls/qaY8CumlExKFD0bSMed2/Wzm66VzR1HQw0fi3Houm7RVhAn4DFJGNFJhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpDkxPThDC49CYw6yoLrCkFi7XIIwHwYDVR0j BBgwFoAUQgJCj288lTxkLymHGcXDXhaXJKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiODA4ZWItYzk4ZS00MDM2LWJlOWEtMTkzYmJjYzY0ODkyLzAvNDIwMjQyOEY2 RjNDOTUzQzY0MkYyOTg3MTlDNUMzNUUxNjk3MjRBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MjAyNDI4RjZGM0M5NTNDNjQyRjI5ODcxOUM1QzM1RTE2OTcy NEEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvNDIwMjQyOEY2RjNDOTUzQzY0MkYyOTg3MTlDNUMz NUUxNjk3MjRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHj079VL7Kb2t71nlQUhntTxEM+ZELeqmFMZ wPJgLeOm6ZCZ8FpTwgU2l6uzz9X2WaBOM7EL/LijSnX5ZLi9+fATWQmNmu6QWMiV OQfFkxJ2A/cSjN7w6U4FgDAdZwgW7AKI1F9pbysv8cqA0+xTlyuaKoaWFmgunb68 ypzOZ1NRo8x4V7wPi7sKx8YVnQmxTg515f3mMYMZqV7fNsZALerhpbAxkCRwmG0y NK1Mi4JsZRYyartdw0yFhRwUfAqDr43MrBETwQ9hD5w+x6jWX1o9lS2ASAX9WqZ8 V/diuAUd2zZBs/b9U88i9nneFHDwhBbvvxs1YAFNelwoWTY7AU4= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:42 2026 by rpki-client