$ rpki-client -vvf rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft File: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft (raw, json) Hash identifier: t9+LyYK8OzyhCMrINFj5ZvGhIZ2LhIbcWQSlWF4+dCs= Subject key identifier: EE:3B:B9:EF:25:4B:1F:4F:F4:0B:F2:2B:BF:D0:1A:7F:F6:0A:EB:98 Authority key identifier: B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 Certificate issuer: /CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Certificate serial: 40D358AC20F030E37A8145062640B78B330DE1E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 16:30:42 +0000 Manifest this update: Fri 19 Jun 2026 16:25:42 +0000 Manifest next update: Sat 20 Jun 2026 18:16:42 +0000 Files and hashes: 1: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: 2HdM5SxPhqs0v66pqKtYjA5YE63M2BNBs+YFxsyjHnE=) 2: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: mGXPDNteQmthJU+D3Amlv44YcQ5dcoioU4ycJmjDVeo=) 3: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl (hash: 3OhNS4UooIP997vd+cR+ynJ8rur5lWjjiOt79QjrVTY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d3:58:ac:20:f0:30:e3:7a:81:45:06:26:40:b7:8b:33:0d:e1:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Validity Not Before: Jun 19 16:25:42 2026 GMT Not After : Jun 20 18:16:42 2026 GMT Subject: CN=EE3BB9EF254B1F4FF40BF22BBFD01A7FF60AEB98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dd:61:ec:82:bd:e2:9c:54:50:b8:75:aa:a3: 82:ea:29:2a:ff:dc:de:2c:6e:d5:28:6a:b5:9e:b6: 2d:ba:5f:72:92:31:99:c3:16:2c:2a:32:4c:08:0a: b2:99:09:25:6a:67:86:54:f7:85:f3:f9:67:27:08: 69:f8:ce:2f:d9:ca:ba:47:7e:7d:0a:90:6b:96:02: 28:87:a5:27:a3:01:69:dc:56:7b:24:9d:e6:ae:da: 71:c2:ec:53:59:7b:2f:1d:ab:e0:4d:74:3d:90:11: 18:56:2d:79:a3:01:30:60:6e:8a:4b:cc:91:d8:c4: b9:07:af:e6:85:9d:b5:b8:12:e3:8a:fa:ef:fa:91: 7f:2b:a1:0f:94:ed:23:22:d5:d0:c3:44:14:7a:e1: 63:c1:81:a8:7d:01:54:98:9c:3b:b5:90:b9:4b:08: 8b:94:a8:4d:47:4b:f0:33:6d:d1:39:6f:31:08:fd: 66:09:d1:16:ba:e4:a9:63:0e:63:b5:08:5e:57:c7: c0:4e:c1:c8:ac:0e:ae:3a:22:0b:2e:1c:db:8e:1b: 8a:e3:12:5a:f3:8f:00:a0:40:4c:e8:35:92:17:a8: 97:36:2a:96:c7:97:b2:61:6b:52:ed:2b:80:09:a5: d3:a1:cd:9f:11:2a:a6:bb:f8:d1:a9:91:b4:16:94: c8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3B:B9:EF:25:4B:1F:4F:F4:0B:F2:2B:BF:D0:1A:7F:F6:0A:EB:98 X509v3 Authority Key Identifier: keyid:B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:16:dd:b4:c5:7b:54:d6:9d:51:7a:fb:0d:13:4d:93:b6:f7: 39:a6:03:44:83:55:93:dc:c1:80:ac:a5:c1:5a:75:af:07:0d: 6b:fe:5c:00:46:b3:b0:b8:eb:31:5c:b6:6b:e4:26:6d:72:2d: 85:32:b3:ac:57:3d:3c:38:5f:68:db:9c:e3:01:b4:85:79:9b: 89:0e:fe:9a:32:d2:1c:b1:37:1a:e2:84:ef:f0:a5:cf:14:de: 93:84:7a:a6:47:c8:22:d2:32:97:2c:31:47:3f:cc:ec:6a:7b: 07:b8:6b:34:a3:77:5c:a9:89:39:c9:68:47:56:01:86:5b:e4: 9f:7d:5f:55:cf:76:33:aa:cb:0b:1a:97:08:0f:d9:ab:bd:1c: 8e:ea:b8:76:6e:3a:50:92:df:7c:1e:b9:a6:b9:02:2b:d5:54: f9:55:bf:a4:eb:c6:75:5f:23:e6:84:d7:aa:13:55:4e:a9:bd: f5:4c:be:e5:1c:8e:f0:b3:26:83:13:18:57:44:6f:7f:9b:ca: f8:4c:d1:3f:aa:f1:8f:c9:36:da:12:76:fa:c7:a7:9a:20:33: 75:25:eb:5c:6b:74:44:c6:a7:f3:52:ae:cd:53:4e:94:fb:1d: 1a:d3:20:08:94:c6:db:b4:00:f7:1c:05:89:30:ca:6c:20:1b: 4a:ff:77:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNNYrCDwMON6gUUGJkC3izMN4eUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAw RERENENCMzAeFw0yNjA2MTkxNjI1NDJaFw0yNjA2MjAxODE2NDJaMDMxMTAvBgNV BAMTKEVFM0JCOUVGMjU0QjFGNEZGNDBCRjIyQkJGRDAxQTdGRjYwQUVCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93WHsgr3inFRQuHWqo4LqKSr/ 3N4sbtUoarWeti26X3KSMZnDFiwqMkwICrKZCSVqZ4ZU94Xz+WcnCGn4zi/ZyrpH fn0KkGuWAiiHpSejAWncVnskneau2nHC7FNZey8dq+BNdD2QERhWLXmjATBgbopL zJHYxLkHr+aFnbW4EuOK+u/6kX8roQ+U7SMi1dDDRBR64WPBgah9AVSYnDu1kLlL CIuUqE1HS/AzbdE5bzEI/WYJ0Ra65KljDmO1CF5Xx8BOwcisDq46IgsuHNuOG4rj ElrzjwCgQEzoNZIXqJc2KpbHl7Jha1LtK4AJpdOhzZ8RKqa7+NGpkbQWlMgzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7ju57yVLH0/0C/Irv9Aaf/YK65gwHwYDVR0j BBgwFoAUuHvFq1Zhxnw+e9cA+nnscA3dTLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njk2YTc0ZGYtZDkwNy00YWFmLWE4MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1 NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAwRERENENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODdCQzVBQjU2NjFDNjdDM0U3QkQ3MDBGQTc5RUM3MDBEREQ0 Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVD NzAwRERENENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIW3bTFe1TWnVF6+w0TTZO29zmmA0SDVZPc wYCspcFada8HDWv+XABGs7C46zFctmvkJm1yLYUys6xXPTw4X2jbnOMBtIV5m4kO /poy0hyxNxrihO/wpc8U3pOEeqZHyCLSMpcsMUc/zOxqewe4azSjd1ypiTnJaEdW AYZb5J99X1XPdjOqywsalwgP2au9HI7quHZuOlCS33weuaa5AivVVPlVv6TrxnVf I+aE16oTVU6pvfVMvuUcjvCzJoMTGFdEb3+byvhM0T+q8Y/JNtoSdvrHp5ogM3Ul 61xrdETGp/NSrs1TTpT7HRrTIAiUxtu0APccBYkwymwgG0r/d9c= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:45 2026 by rpki-client