$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft File: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft (raw, json) Hash identifier: yeWV/ndbq9eFv78Oj25ZcytTT997lONzT8zi+FBt8UE= Subject key identifier: D2:29:52:C5:4C:8A:70:BE:E8:2A:23:5C:50:19:EC:59:ED:AB:0F:18 Authority key identifier: C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A Certificate issuer: /CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A Certificate serial: 5DBA2781D438BFFEC0C95E415B8A8CE5F7B5EE77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:41:46 +0000 Manifest this update: Sat 20 Jun 2026 01:36:46 +0000 Manifest next update: Sun 21 Jun 2026 04:19:46 +0000 Files and hashes: 1: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl (hash: lJqMH5292+zjc82Zev0+ke1b7fKRFMy2fmRaDiPxCeY=) 2: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (hash: e/a2UZPUi40DIwFDiEkD+J2tqAc+iu6pnL0srTkWawk=) 3: 3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (hash: LmAAYXQDd7PTPcaMEiTttR5qd67toE25WQOCNYRTLdg=) 4: 3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (hash: /H7mHY2xJ6jF9zjh/SzqcS82iVWznIKFIdaRtKBLuXI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ba:27:81:d4:38:bf:fe:c0:c9:5e:41:5b:8a:8c:e5:f7:b5:ee:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A Validity Not Before: Jun 20 01:36:46 2026 GMT Not After : Jun 21 04:19:46 2026 GMT Subject: CN=D22952C54C8A70BEE82A235C5019EC59EDAB0F18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:16:88:f7:60:26:9a:04:fe:d8:88:42:a4:66: 07:93:f4:69:8e:87:3a:3c:f0:43:32:30:7f:d8:73: 81:6f:4e:67:e0:b0:ca:95:0d:81:28:46:b2:a0:e6: 56:d1:6b:09:5c:4f:72:f8:75:15:03:c8:cc:a9:80: 14:d5:89:13:fe:66:84:27:ca:64:72:cb:65:27:04: 09:42:64:95:99:f5:76:2b:87:f5:e3:c8:fb:72:c7: 8a:1b:e5:a6:68:ea:bc:94:59:93:14:93:36:12:19: 84:e2:f3:f3:b2:87:07:dd:f8:1d:e8:83:4b:93:35: a4:ea:11:a5:22:7c:a9:1f:c6:59:e6:f6:18:ff:aa: 0d:57:98:ad:27:a8:09:7a:16:6f:7d:6f:64:5c:86: 22:b4:b0:0d:da:81:35:b0:be:3d:7e:af:98:ed:d9: 07:bd:b5:8a:9d:b7:ac:d8:8e:76:93:78:31:71:48: fb:fb:09:2c:73:e7:e0:1e:fa:d0:d5:d0:99:a7:33: a7:c4:cb:7f:2b:e3:e0:e1:8b:55:d9:c8:f2:5c:d2: 0a:da:7a:e0:b4:d6:3f:8e:2e:da:03:f1:cf:de:27: 02:44:36:a6:56:fb:e8:88:4e:b2:23:7a:1e:70:ce: df:94:92:54:c8:c4:56:45:de:59:c5:ea:f8:c6:d1: 6f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:29:52:C5:4C:8A:70:BE:E8:2A:23:5C:50:19:EC:59:ED:AB:0F:18 X509v3 Authority Key Identifier: keyid:C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:fc:66:85:19:9e:24:b9:a5:57:0c:55:41:5b:da:99:15:a1: a5:4d:01:4b:fc:50:fa:d9:a2:49:02:d5:9f:e0:9b:b9:9e:a9: 55:5a:80:f9:ec:81:b7:7e:8a:44:20:57:1f:ce:e5:16:66:63: a7:77:18:77:0b:cb:2e:c0:dd:61:c6:54:5f:f4:c8:28:9d:e6: fa:ba:50:2e:72:af:28:d7:f7:f2:a6:a6:51:b0:d7:51:40:7f: c1:00:54:44:34:7b:92:71:c2:e4:62:8c:7f:6b:10:f0:60:f0: df:7d:01:f7:a6:5e:d8:ed:ae:f1:71:c3:1f:9d:3a:50:ef:e8: 5e:1c:28:0e:bd:47:9e:c6:78:fe:3a:44:10:27:49:a0:74:7a: 9e:53:ed:85:60:8a:90:1a:ad:b4:45:b0:80:3a:2f:7d:cc:c4: 02:74:79:a7:df:80:1a:79:90:8f:8e:e6:4f:fd:54:a5:25:76: 83:ca:15:ef:ea:c1:5b:8a:c7:43:fe:72:f2:f1:cc:c5:a6:77: 05:9c:a2:c3:94:8f:a2:4f:19:a8:2c:36:02:78:13:fe:b7:00: e6:c1:04:e1:a8:43:cd:8f:d1:6e:8b:71:00:21:d4:d5:1c:3e: bc:17:25:af:ba:c0:a7:ed:21:0f:66:30:44:e9:83:6c:d1:97: 8d:c4:69:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXbongdQ4v/7AyV5BW4qM5fe17ncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFENUNBQ0IyODY5QTQ1MDc0QUEyRUVGMEFBRjQ0MEEw NDNENTc4QTAeFw0yNjA2MjAwMTM2NDZaFw0yNjA2MjEwNDE5NDZaMDMxMTAvBgNV BAMTKEQyMjk1MkM1NEM4QTcwQkVFODJBMjM1QzUwMTlFQzU5RURBQjBGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOFoj3YCaaBP7YiEKkZgeT9GmO hzo88EMyMH/Yc4FvTmfgsMqVDYEoRrKg5lbRawlcT3L4dRUDyMypgBTViRP+ZoQn ymRyy2UnBAlCZJWZ9XYrh/XjyPtyx4ob5aZo6ryUWZMUkzYSGYTi8/Oyhwfd+B3o g0uTNaTqEaUifKkfxlnm9hj/qg1XmK0nqAl6Fm99b2RchiK0sA3agTWwvj1+r5jt 2Qe9tYqdt6zYjnaTeDFxSPv7CSxz5+Ae+tDV0JmnM6fEy38r4+Dhi1XZyPJc0gra euC01j+OLtoD8c/eJwJENqZW++iITrIjeh5wzt+UklTIxFZF3lnF6vjG0W8tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ilSxUyKcL7oKiNcUBnsWe2rDxgwHwYDVR0j BBgwFoAUwdXKyyhppFB0qi7vCq9ECgQ9V4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNzUwODgtMDg4ZS00MWMwLWJmY2UtZWRjNjliZWFmZDRhLzAvQzFENUNBQ0Iy ODY5QTQ1MDc0QUEyRUVGMEFBRjQ0MEEwNDNENTc4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUQ1Q0FDQjI4NjlBNDUwNzRBQTJFRUYwQUFGNDQwQTA0M0Q1 NzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmNzUwODgtMDg4ZS00MWMwLWJm Y2UtZWRjNjliZWFmZDRhLzAvQzFENUNBQ0IyODY5QTQ1MDc0QUEyRUVGMEFBRjQ0 MEEwNDNENTc4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJT8ZoUZniS5pVcMVUFb2pkVoaVNAUv8UPrZ okkC1Z/gm7meqVVagPnsgbd+ikQgVx/O5RZmY6d3GHcLyy7A3WHGVF/0yCid5vq6 UC5yryjX9/KmplGw11FAf8EAVEQ0e5JxwuRijH9rEPBg8N99AfemXtjtrvFxwx+d OlDv6F4cKA69R57GeP46RBAnSaB0ep5T7YVgipAarbRFsIA6L33MxAJ0eaffgBp5 kI+O5k/9VKUldoPKFe/qwVuKx0P+cvLxzMWmdwWcosOUj6JPGagsNgJ4E/63AObB BOGoQ82P0W6LcQAh1NUcPrwXJa+6wKftIQ9mMETpg2zRl43Eafc= -----END CERTIFICATE-----Generated at Sat Jun 20 11:24:59 2026 by rpki-client