$ rpki-client -vvf rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft File: A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft (raw, json) Hash identifier: spiS/AMG4hKr7bnr1MhGWSigWagH/oxt3kmAbgeTTy8= Subject key identifier: A7:FD:1D:96:D6:61:2A:05:DD:47:8D:90:E4:69:56:5F:BB:4E:F9:1F Authority key identifier: A4:E1:4E:D9:62:51:66:5F:CF:9F:C4:FA:C3:68:DC:40:95:3E:34:0D Certificate issuer: /CN=A4E14ED96251665FCF9FC4FAC368DC40953E340D Certificate serial: 75EA5F92F7B1F4B54B6B4EF10A9F8997FC24A2A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 14:23:09 +0000 Manifest this update: Fri 19 Jun 2026 14:18:09 +0000 Manifest next update: Sat 20 Jun 2026 16:22:09 +0000 Files and hashes: 1: A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl (hash: AC9wT40i9FG0DaMGiBglAFVk8iPZLdSGkCOF4L5ykMc=) 2: 3130332e3136312e3134362e302f32332d3234203d3e20313431363238.roa (hash: q0vh/quQ+eV+UyFsOiPKTjhnWvk1GZbhfwaX1pBs5t4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 16:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ea:5f:92:f7:b1:f4:b5:4b:6b:4e:f1:0a:9f:89:97:fc:24:a2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4E14ED96251665FCF9FC4FAC368DC40953E340D Validity Not Before: Jun 19 14:18:09 2026 GMT Not After : Jun 20 16:22:09 2026 GMT Subject: CN=A7FD1D96D6612A05DD478D90E469565FBB4EF91F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:40:aa:71:b7:ea:64:be:91:c3:51:82:5a:02: b0:fb:69:95:14:3d:ff:bd:7e:3b:14:d8:7b:89:15: c7:7f:ad:dc:2d:7b:75:1c:a1:2c:9a:80:aa:45:4e: 49:f5:9b:23:3d:44:76:4f:14:27:16:3c:b2:ff:02: c3:62:7e:a6:3b:68:ca:d9:49:c1:c7:95:c8:21:60: 8e:c8:73:e1:f6:1a:d0:42:7f:6d:3b:47:52:3e:d6: 66:85:74:5b:f4:fc:57:92:a0:07:bd:82:df:28:97: 62:a9:9c:6b:7b:50:58:ca:13:72:ea:a0:4c:56:76: 26:e2:2b:24:82:0c:78:2e:a0:d0:50:e4:84:61:34: c5:6f:aa:b9:a8:94:a9:7b:e8:00:96:42:52:1d:f3: ba:f1:c7:8f:f2:df:5e:52:38:44:d1:5c:d6:94:bb: 59:ed:8a:67:85:12:e6:14:07:4b:d1:a6:55:20:a7: 66:9c:c4:82:dd:62:b4:4a:51:c1:28:1c:d5:ac:98: 11:b7:c3:6f:81:f9:cd:75:33:bd:f7:94:65:6f:2f: 45:56:a3:74:e2:3f:b2:cd:bd:fb:49:f8:f6:96:1d: 8f:ff:25:2d:b2:19:d5:be:5b:a9:70:b5:f9:ae:15: 47:88:ec:23:f7:2f:c3:b6:2d:7e:92:44:dd:8b:da: c6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FD:1D:96:D6:61:2A:05:DD:47:8D:90:E4:69:56:5F:BB:4E:F9:1F X509v3 Authority Key Identifier: keyid:A4:E1:4E:D9:62:51:66:5F:CF:9F:C4:FA:C3:68:DC:40:95:3E:34:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A4E14ED96251665FCF9FC4FAC368DC40953E340D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/A4E14ED96251665FCF9FC4FAC368DC40953E340D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:d8:92:f2:c1:7a:a7:e1:5b:cb:cc:eb:35:60:3a:b6:17:1d: 58:14:aa:c5:d2:36:43:f4:85:2e:c0:37:54:71:6b:30:1b:11: 30:a8:ef:83:5f:89:99:bb:fb:67:cf:5d:fc:67:5b:2b:c8:89: b6:ca:f6:bf:67:31:97:f7:34:e3:d9:dd:7a:df:71:f1:84:01: b4:90:67:bb:44:f3:4e:c7:26:85:3c:cd:4d:68:77:03:47:ce: c7:ec:21:29:9e:ab:98:00:24:7a:52:bb:74:ee:a6:1d:9f:ef: 1f:7e:86:21:a0:14:10:35:a0:1f:5d:be:0f:26:31:27:32:2e: 88:2b:03:90:6a:48:a3:9a:48:98:79:25:3f:58:7f:68:8d:87: 26:39:b9:4c:46:7f:c7:2a:37:9e:f5:7d:0b:38:8e:30:3e:8e: 5a:88:e2:25:85:19:5b:20:43:af:be:e7:dd:ab:40:ae:27:54: 20:5b:c3:69:ef:33:84:7f:6c:10:29:12:25:6a:2d:6e:d4:90: d3:19:94:bb:7e:bc:44:fa:04:94:80:70:1c:a9:7d:9d:66:b0: 4f:61:80:e7:40:08:5c:92:e0:a6:4c:ba:47:d1:f5:a1:7a:34: bd:6f:a9:b9:ce:69:8c:46:59:fd:6d:50:e7:cc:10:92:51:9c: 66:4c:6d:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdepfkvex9LVLa07xCp+Jl/wkoqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRFMTRFRDk2MjUxNjY1RkNGOUZDNEZBQzM2OERDNDA5 NTNFMzQwRDAeFw0yNjA2MTkxNDE4MDlaFw0yNjA2MjAxNjIyMDlaMDMxMTAvBgNV BAMTKEE3RkQxRDk2RDY2MTJBMDVERDQ3OEQ5MEU0Njk1NjVGQkI0RUY5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpQKpxt+pkvpHDUYJaArD7aZUU Pf+9fjsU2HuJFcd/rdwte3UcoSyagKpFTkn1myM9RHZPFCcWPLL/AsNifqY7aMrZ ScHHlcghYI7Ic+H2GtBCf207R1I+1maFdFv0/FeSoAe9gt8ol2KpnGt7UFjKE3Lq oExWdibiKySCDHguoNBQ5IRhNMVvqrmolKl76ACWQlId87rxx4/y315SOETRXNaU u1ntimeFEuYUB0vRplUgp2acxILdYrRKUcEoHNWsmBG3w2+B+c11M733lGVvL0VW o3TiP7LNvftJ+PaWHY//JS2yGdW+W6lwtfmuFUeI7CP3L8O2LX6SRN2L2sZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp/0dltZhKgXdR42Q5GlWX7tO+R8wHwYDVR0j BBgwFoAUpOFO2WJRZl/Pn8T6w2jcQJU+NA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA0MDM2NzUtNWZhOS00ZTczLWI0YTktMjMyMDY5YjMxYWQ5LzAvQTRFMTRFRDk2 MjUxNjY1RkNGOUZDNEZBQzM2OERDNDA5NTNFMzQwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNEUxNEVEOTYyNTE2NjVGQ0Y5RkM0RkFDMzY4REM0MDk1M0Uz NDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA0MDM2NzUtNWZhOS00ZTczLWI0 YTktMjMyMDY5YjMxYWQ5LzAvQTRFMTRFRDk2MjUxNjY1RkNGOUZDNEZBQzM2OERD NDA5NTNFMzQwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTYkvLBeqfhW8vM6zVgOrYXHVgUqsXSNkP0 hS7AN1RxazAbETCo74NfiZm7+2fPXfxnWyvIibbK9r9nMZf3NOPZ3XrfcfGEAbSQ Z7tE807HJoU8zU1odwNHzsfsISmeq5gAJHpSu3Tuph2f7x9+hiGgFBA1oB9dvg8m MScyLogrA5BqSKOaSJh5JT9Yf2iNhyY5uUxGf8cqN571fQs4jjA+jlqI4iWFGVsg Q6++592rQK4nVCBbw2nvM4R/bBApEiVqLW7UkNMZlLt+vET6BJSAcBypfZ1msE9h gOdACFyS4KZMukfR9aF6NL1vqbnOaYxGWf1tUOfMEJJRnGZMbQQ= -----END CERTIFICATE-----Generated at Sat Jun 20 08:37:36 2026 by rpki-client