$ rpki-client -vvf rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft File: F24C627AA0685F68F1420C7F28860265CA26D303.mft (raw, json) Hash identifier: 4BJNz/xskjRgiOinfJWU6rrLc2cQtq4k8ZHakjCHFBA= Subject key identifier: 21:28:75:B8:EB:A4:CC:91:7C:73:77:E2:FB:CB:B7:5F:57:C7:DC:81 Authority key identifier: F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03 Certificate issuer: /CN=F24C627AA0685F68F1420C7F28860265CA26D303 Certificate serial: 709F609B9B8E7048B66257A5915C0F326264EB1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:21:19 +0000 Manifest this update: Sat 20 Jun 2026 01:16:19 +0000 Manifest next update: Sun 21 Jun 2026 04:13:19 +0000 Files and hashes: 1: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: wLSLqNMEk1+oAWfvj1SZ4wZH+IOgpP8sHsJQIvQCHuE=) 2: F24C627AA0685F68F1420C7F28860265CA26D303.crl (hash: 64w3RdaoBCLqOrjQ7PIxnsTBmZZSXZK9FS1Nvxx33z4=) 3: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: lmv+Kyq7Ss/MkyIqM6l/zx8khXHo4uyu4TTfeaMD1h4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:9f:60:9b:9b:8e:70:48:b6:62:57:a5:91:5c:0f:32:62:64:eb:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24C627AA0685F68F1420C7F28860265CA26D303 Validity Not Before: Jun 20 01:16:19 2026 GMT Not After : Jun 21 04:13:19 2026 GMT Subject: CN=212875B8EBA4CC917C7377E2FBCBB75F57C7DC81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c2:e1:be:ff:21:81:e5:62:27:c8:b7:08:28: 96:47:4e:a3:78:db:71:d3:32:01:84:2d:68:8b:7c: b3:60:42:8c:60:a9:ce:cd:d5:47:c3:c8:e2:cf:89: 29:e2:14:eb:3c:2b:6b:c4:5e:c6:f5:56:e4:5c:f0: 6a:9b:5e:ee:2d:e0:86:12:e2:68:f7:09:c4:a0:66: ad:0b:da:aa:1c:b2:e8:ef:9d:07:ab:12:69:d5:bc: 60:f5:6d:70:e8:6c:fb:e8:aa:43:31:26:a9:54:c7: 9a:3f:04:23:3b:3a:04:d9:93:49:d1:54:da:49:44: 6f:6b:c5:e0:7a:bf:85:c2:22:6c:57:16:72:79:26: c5:a6:c4:eb:a6:66:dd:18:9d:92:d5:24:2e:b4:63: b0:40:38:02:bc:d0:08:e9:28:17:b3:5b:c7:b7:fb: 47:b4:a3:ce:e6:e2:19:75:97:6d:c3:83:8a:d2:05: 95:75:80:09:d8:09:84:79:0e:38:a8:2f:67:78:56: a5:62:b8:28:82:28:5e:8c:10:bf:f3:ca:f3:11:dd: d7:9a:ab:ff:4a:f0:80:44:47:04:6b:37:67:15:43: 76:61:01:a5:89:a7:19:bc:2f:be:ef:79:84:66:60: c2:ea:e7:ba:e9:7e:97:eb:7d:0e:ff:e6:d4:84:0b: f5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:28:75:B8:EB:A4:CC:91:7C:73:77:E2:FB:CB:B7:5F:57:C7:DC:81 X509v3 Authority Key Identifier: keyid:F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:a9:70:23:c9:bb:8b:87:8d:c8:97:55:3f:01:b4:bd:ae:74: da:7f:48:99:74:d2:1b:f9:ed:a9:06:9c:4d:0b:50:dc:87:57: 6b:6c:6d:2d:cb:1d:2a:3c:37:8b:e5:47:0e:08:84:86:7b:20: 3f:bf:bb:f4:07:72:67:7f:fa:97:93:42:08:c5:39:74:fb:e1: 7b:9c:6d:fa:0e:31:1e:e7:22:2c:47:de:1d:1c:c0:f7:d1:8a: e4:6a:fa:70:59:3d:ff:64:bf:a9:ee:e1:cd:c5:9c:bf:7d:2c: 1f:7d:a9:3d:01:9f:4d:66:a7:4a:f5:16:b1:2d:33:bf:10:99: b9:3c:73:cb:b5:90:62:6e:21:21:6c:59:91:88:1b:49:95:ad: 67:bc:69:1d:26:d0:22:90:c9:60:02:33:73:a5:89:5a:26:4f: 30:5a:29:46:b8:3a:c5:32:89:17:f3:3a:27:1a:d4:80:9b:c1: ab:5e:0a:aa:a9:30:e3:43:99:50:33:a6:a1:53:02:d5:bc:cb: 7c:45:38:1c:23:d6:88:08:79:22:1c:12:6e:d6:68:de:e0:9e: 53:9f:7d:70:dc:e6:a8:fa:26:7a:09:af:35:39:6e:2c:50:dd: 94:36:0b:fa:e6:b2:7f:33:b9:52:38:78:13:c2:d9:32:db:a3: 31:e7:37:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJ9gm5uOcEi2YlelkVwPMmJk6x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0QzYyN0FBMDY4NUY2OEYxNDIwQzdGMjg4NjAyNjVD QTI2RDMwMzAeFw0yNjA2MjAwMTE2MTlaFw0yNjA2MjEwNDEzMTlaMDMxMTAvBgNV BAMTKDIxMjg3NUI4RUJBNENDOTE3QzczNzdFMkZCQ0JCNzVGNTdDN0RDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3wuG+/yGB5WInyLcIKJZHTqN4 23HTMgGELWiLfLNgQoxgqc7N1UfDyOLPiSniFOs8K2vEXsb1VuRc8GqbXu4t4IYS 4mj3CcSgZq0L2qocsujvnQerEmnVvGD1bXDobPvoqkMxJqlUx5o/BCM7OgTZk0nR VNpJRG9rxeB6v4XCImxXFnJ5JsWmxOumZt0YnZLVJC60Y7BAOAK80AjpKBezW8e3 +0e0o87m4hl1l23Dg4rSBZV1gAnYCYR5DjioL2d4VqViuCiCKF6MEL/zyvMR3dea q/9K8IBERwRrN2cVQ3ZhAaWJpxm8L77veYRmYMLq57rpfpfrfQ7/5tSEC/UzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUISh1uOukzJF8c3fi+8u3X1fH3IEwHwYDVR0j BBgwFoAU8kxieqBoX2jxQgx/KIYCZcom0wMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjRhYWUzZjAtOWM3MC00MmZjLWFlM2UtYmI1OTAwNDZiMGZlLzAvRjI0QzYyN0FB MDY4NUY2OEYxNDIwQzdGMjg4NjAyNjVDQTI2RDMwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjRDNjI3QUEwNjg1RjY4RjE0MjBDN0YyODg2MDI2NUNBMjZE MzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjRhYWUzZjAtOWM3MC00MmZjLWFl M2UtYmI1OTAwNDZiMGZlLzAvRjI0QzYyN0FBMDY4NUY2OEYxNDIwQzdGMjg4NjAy NjVDQTI2RDMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMupcCPJu4uHjciXVT8BtL2udNp/SJl00hv5 7akGnE0LUNyHV2tsbS3LHSo8N4vlRw4IhIZ7ID+/u/QHcmd/+peTQgjFOXT74Xuc bfoOMR7nIixH3h0cwPfRiuRq+nBZPf9kv6nu4c3FnL99LB99qT0Bn01mp0r1FrEt M78Qmbk8c8u1kGJuISFsWZGIG0mVrWe8aR0m0CKQyWACM3OliVomTzBaKUa4OsUy iRfzOica1ICbwateCqqpMONDmVAzpqFTAtW8y3xFOBwj1ogIeSIcEm7WaN7gnlOf fXDc5qj6JnoJrzU5bixQ3ZQ2C/rmsn8zuVI4eBPC2TLbozHnNwY= -----END CERTIFICATE-----Generated at Sat Jun 20 08:58:54 2026 by rpki-client