$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.mft File: 92E840D5BB3BBEFE824F116A51FE1040CAFAE579.mft (raw, json) Hash identifier: oUU9M2o3il9fLEj6mxvEFgmxBE0oicR11D1OFd8wclA= Subject key identifier: 28:50:AD:10:C0:33:66:9B:41:30:EC:CD:0B:71:13:CE:59:3B:E4:53 Authority key identifier: 92:E8:40:D5:BB:3B:BE:FE:82:4F:11:6A:51:FE:10:40:CA:FA:E5:79 Certificate issuer: /CN=92E840D5BB3BBEFE824F116A51FE1040CAFAE579 Certificate serial: 537DC2161B8B0D746C3357671EADAA0059CE08F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 02:19:40 +0000 Manifest this update: Thu 18 Jun 2026 02:14:40 +0000 Manifest next update: Fri 19 Jun 2026 03:59:40 +0000 Files and hashes: 1: 3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa (hash: AdKJaik96R1JVPh+LhauIKIwFMvKlCATViTuixYxhKg=) 2: 3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (hash: VEdnUCKoac/4e3F+B8uGYgqASxpfvU2DOLkdnZz4anY=) 3: 92E840D5BB3BBEFE824F116A51FE1040CAFAE579.crl (hash: z+HP81YXq7/+wbkQttsd5y7abbC/6vLwTX/c2rrxU50=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.crl rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 03:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:7d:c2:16:1b:8b:0d:74:6c:33:57:67:1e:ad:aa:00:59:ce:08:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92E840D5BB3BBEFE824F116A51FE1040CAFAE579 Validity Not Before: Jun 18 02:14:40 2026 GMT Not After : Jun 19 03:59:40 2026 GMT Subject: CN=2850AD10C033669B4130ECCD0B7113CE593BE453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:33:34:83:d9:3e:f0:c8:7e:8e:16:bb:85: 3f:19:b1:02:6d:d7:bc:8c:82:9c:43:df:83:89:bf: 53:aa:65:40:ec:71:d6:d6:db:48:84:65:f2:ff:ca: 69:d7:16:d2:3d:65:92:9c:6e:54:7b:bf:20:28:e6: 43:cd:d6:11:94:8f:79:a7:1e:15:1c:e8:87:38:42: a0:e2:e5:0b:8e:57:3c:4e:b6:3f:b1:61:d7:99:10: 26:01:41:b9:87:e5:04:7d:6d:a0:d8:92:08:f1:bb: 13:d8:7c:46:2d:3e:04:9c:d6:26:87:42:37:9f:87: 6c:52:76:dc:e4:b5:54:5b:0c:0a:25:8f:67:d1:6c: 65:95:2f:8e:43:8a:7f:85:b5:99:9b:0b:8a:d5:09: b7:6b:dd:f7:6a:88:a9:3d:5e:bf:59:74:1f:1c:ec: a5:8b:2a:52:3c:63:6e:c4:08:3a:5d:3e:c4:08:0a: 44:a8:52:aa:fe:88:f9:58:e6:fe:8d:1d:3a:f9:f2: 9a:a0:55:7e:5c:4f:9d:74:7f:5a:a6:93:de:0f:de: 2d:05:83:9a:61:c3:a6:97:6f:a1:65:52:11:cd:34: e0:70:be:8c:39:be:3d:40:64:ea:8e:fc:92:bd:06: 4b:65:8f:cc:6d:50:ae:04:53:48:eb:b2:21:88:27: 40:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:50:AD:10:C0:33:66:9B:41:30:EC:CD:0B:71:13:CE:59:3B:E4:53 X509v3 Authority Key Identifier: keyid:92:E8:40:D5:BB:3B:BE:FE:82:4F:11:6A:51:FE:10:40:CA:FA:E5:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b0:0c:5f:1b:88:18:50:14:0e:5e:64:b3:a7:62:ff:d0:4c: 93:78:25:19:e6:ef:c7:74:8d:6a:36:60:c5:ad:86:8e:fd:5f: 7f:d2:40:b8:9d:8f:1c:f2:70:22:16:b8:3c:0c:70:42:78:76: 3d:4c:79:b3:a6:19:21:25:1d:06:d8:82:46:fb:04:6c:29:72: f3:2f:1b:45:e5:cd:2c:8e:b1:b3:a0:aa:09:a1:6b:e9:79:82: 4f:d0:bb:2b:c8:11:f9:4e:d6:24:37:04:5a:2e:7c:f0:c6:da: 91:41:4e:aa:90:93:16:4e:a0:e0:cd:a1:88:e5:30:e4:d8:7e: fa:62:bb:27:c9:8b:e8:26:f5:c0:87:60:f9:18:31:0d:9c:74: 27:5e:64:ae:8e:60:6e:87:62:22:3b:45:03:cd:5c:f1:d0:7f: 11:d5:31:50:eb:11:ed:86:f8:1f:39:d0:bb:eb:2f:8f:fa:9e: be:1d:ae:2d:93:d1:51:8b:39:a5:26:c8:93:66:21:cf:0d:5c: ae:ee:97:56:cd:e6:d6:c3:0f:92:a7:46:d2:c1:c8:76:e0:30: cc:66:10:bc:7d:18:24:38:1b:79:04:6f:bb:56:5e:ab:54:fb: 5e:bf:0c:99:79:18:43:0a:86:2f:27:62:46:05:2e:e1:fe:60: 37:36:50:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU33CFhuLDXRsM1dnHq2qAFnOCPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJFODQwRDVCQjNCQkVGRTgyNEYxMTZBNTFGRTEwNDBD QUZBRTU3OTAeFw0yNjA2MTgwMjE0NDBaFw0yNjA2MTkwMzU5NDBaMDMxMTAvBgNV BAMTKDI4NTBBRDEwQzAzMzY2OUI0MTMwRUNDRDBCNzExM0NFNTkzQkU0NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5DM0g9k+8Mh+jha7hT8ZsQJt 17yMgpxD34OJv1OqZUDscdbW20iEZfL/ymnXFtI9ZZKcblR7vyAo5kPN1hGUj3mn HhUc6Ic4QqDi5QuOVzxOtj+xYdeZECYBQbmH5QR9baDYkgjxuxPYfEYtPgSc1iaH Qjefh2xSdtzktVRbDAolj2fRbGWVL45Din+FtZmbC4rVCbdr3fdqiKk9Xr9ZdB8c 7KWLKlI8Y27ECDpdPsQICkSoUqr+iPlY5v6NHTr58pqgVX5cT510f1qmk94P3i0F g5phw6aXb6FlUhHNNOBwvow5vj1AZOqO/JK9Bktlj8xtUK4EU0jrsiGIJ0CXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKFCtEMAzZptBMOzNC3ETzlk75FMwHwYDVR0j BBgwFoAUkuhA1bs7vv6CTxFqUf4QQMr65XkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmU2Mjg4MGUtZDVmMi00MDY5LTg4ZmYtMTI2N2I3Y2MwMWM1LzAvOTJFODQwRDVC QjNCQkVGRTgyNEYxMTZBNTFGRTEwNDBDQUZBRTU3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MkU4NDBENUJCM0JCRUZFODI0RjExNkE1MUZFMTA0MENBRkFF NTc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmU2Mjg4MGUtZDVmMi00MDY5LTg4 ZmYtMTI2N2I3Y2MwMWM1LzAvOTJFODQwRDVCQjNCQkVGRTgyNEYxMTZBNTFGRTEw NDBDQUZBRTU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6wDF8biBhQFA5eZLOnYv/QTJN4JRnm78d0 jWo2YMWtho79X3/SQLidjxzycCIWuDwMcEJ4dj1MebOmGSElHQbYgkb7BGwpcvMv G0XlzSyOsbOgqgmha+l5gk/QuyvIEflO1iQ3BFoufPDG2pFBTqqQkxZOoODNoYjl MOTYfvpiuyfJi+gm9cCHYPkYMQ2cdCdeZK6OYG6HYiI7RQPNXPHQfxHVMVDrEe2G +B850LvrL4/6nr4dri2T0VGLOaUmyJNmIc8NXK7ul1bN5tbDD5KnRtLByHbgMMxm ELx9GCQ4G3kEb7tWXqtU+16/DJl5GEMKhi8nYkYFLuH+YDc2UAA= -----END CERTIFICATE-----Generated at Thu Jun 18 19:11:59 2026 by rpki-client