$ rpki-client -vvf rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft File: C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft (raw, json) Hash identifier: K//2Po2FOWgPVKCGJpHOw4dr5j7heMcd6l54SD6pHHc= Subject key identifier: 0F:B4:63:90:C3:16:2D:4F:D1:60:07:F6:A1:28:DE:15:3B:1E:57:31 Authority key identifier: C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0 Certificate issuer: /CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0 Certificate serial: 0A294D53E7E43438C0041378265DC32E431F0F89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:01:16 +0000 Manifest this update: Fri 19 Jun 2026 16:56:16 +0000 Manifest next update: Sat 20 Jun 2026 18:50:16 +0000 Files and hashes: 1: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: mQKueKTh7A3uQ/utWkeUKce0jX8tikpIauTi7aYCX5o=) 2: C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl (hash: WuCMBxDfFR49uZok9IkF+hr9ax3KezHdiHuACJBQ4q8=) 3: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: YUSL8MaAWMcSEFSDLAAA9feKMtSwIZRFYTLiujhrL28=) 4: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: IZSn7ER9gKZENb7Yh0xyvq6Sz0bKmm3RwSLw7ctssto=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:29:4d:53:e7:e4:34:38:c0:04:13:78:26:5d:c3:2e:43:1f:0f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0 Validity Not Before: Jun 19 16:56:16 2026 GMT Not After : Jun 20 18:50:16 2026 GMT Subject: CN=0FB46390C3162D4FD16007F6A128DE153B1E5731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:84:e9:8b:ac:47:d8:3d:69:42:3d:a9:16:8a: c7:ed:55:19:d0:bd:50:33:74:76:47:04:7b:c9:e8: b0:d8:06:85:81:ae:a6:c7:8f:71:11:b3:ca:76:78: 28:b8:57:a4:35:8d:4a:9e:eb:36:87:fb:05:66:9b: 2f:de:fc:a6:82:6a:22:59:5e:83:2b:67:ba:1b:03: 69:ab:a8:53:c3:0a:44:0c:72:dc:6c:26:ab:6e:a2: 23:94:77:45:37:52:55:bb:9e:d2:ed:ca:25:05:26: 60:7a:d7:a4:fe:af:0a:17:bd:fd:08:c3:41:83:e8: bd:6f:ed:d1:9e:80:78:52:7c:5c:63:d8:15:8c:9a: 59:7d:ed:31:f2:b7:77:57:2d:a0:b7:cc:84:f7:fa: dc:f3:f1:e6:53:5d:8d:3e:f9:97:16:18:57:99:aa: cc:a5:a2:70:c4:a1:f1:a8:9a:77:32:99:14:16:64: 9a:85:09:55:dd:13:80:b1:ab:d3:2e:c0:14:45:5d: 47:f1:b2:59:fc:92:29:5f:6b:b2:fb:14:d0:6d:db: f2:da:ab:cc:ad:21:ed:5d:74:77:a3:96:46:95:c3: f4:f7:78:b8:4c:ec:54:32:a4:0c:e6:7e:ef:f3:b2: 95:33:62:22:33:9d:1b:d0:69:09:c8:56:5f:ac:84: a8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B4:63:90:C3:16:2D:4F:D1:60:07:F6:A1:28:DE:15:3B:1E:57:31 X509v3 Authority Key Identifier: keyid:C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:d9:c7:f1:2d:a6:72:05:2a:26:37:7c:da:b4:27:81:ca:46: 56:93:51:5a:07:7d:cd:9e:15:02:5c:70:29:5a:84:fb:6a:36: f7:69:2f:58:c5:29:eb:bd:e0:25:eb:4c:a5:16:15:2d:e1:40: a5:d1:aa:9e:8d:ff:e8:e0:da:c5:14:4d:f6:dc:a2:5e:49:f0: bd:20:7c:ae:3e:b1:a6:45:fc:47:9f:48:ca:08:21:fc:08:db: 97:2b:10:24:fb:a4:d8:fd:37:b0:99:54:03:19:e1:8a:fe:c1: 84:90:d2:30:93:f4:0f:c2:b6:e9:ce:8b:a5:af:42:45:3d:74: 4d:11:f0:c8:a8:1f:f3:7c:14:b2:53:4a:2e:e9:9d:7a:37:86: 3a:de:06:c5:da:7c:11:71:ba:be:36:4e:df:cf:bb:f2:2b:8a: 01:3d:8b:0b:c5:68:38:22:63:b8:ed:cf:88:fc:42:e1:ce:a9: 20:1b:86:08:24:6d:9b:d0:ef:49:ca:ad:33:ef:e3:e3:58:b5: 78:bb:d3:4c:ff:22:26:05:90:ac:43:af:99:d5:4a:1d:ab:73: cd:28:a6:85:34:b9:8f:ee:be:2a:6c:59:c9:6c:26:c7:75:19: 1c:22:63:e4:8e:2d:c0:97:06:3e:eb:76:7f:83:2f:50:c3:30: d6:bf:c1:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCilNU+fkNDjABBN4Jl3DLkMfD4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwNkY5MDAwOEQ2MjkzRTVFMzVDN0IxN0REM0I0MTRF RUI5QTBBMDAeFw0yNjA2MTkxNjU2MTZaFw0yNjA2MjAxODUwMTZaMDMxMTAvBgNV BAMTKDBGQjQ2MzkwQzMxNjJENEZEMTYwMDdGNkExMjhERTE1M0IxRTU3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDphOmLrEfYPWlCPakWisftVRnQ vVAzdHZHBHvJ6LDYBoWBrqbHj3ERs8p2eCi4V6Q1jUqe6zaH+wVmmy/e/KaCaiJZ XoMrZ7obA2mrqFPDCkQMctxsJqtuoiOUd0U3UlW7ntLtyiUFJmB616T+rwoXvf0I w0GD6L1v7dGegHhSfFxj2BWMmll97THyt3dXLaC3zIT3+tzz8eZTXY0++ZcWGFeZ qsylonDEofGomncymRQWZJqFCVXdE4Cxq9MuwBRFXUfxsln8kilfa7L7FNBt2/La q8ytIe1ddHejlkaVw/T3eLhM7FQypAzmfu/zspUzYiIznRvQaQnIVl+shKixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD7RjkMMWLU/RYAf2oSjeFTseVzEwHwYDVR0j BBgwFoAUxwb5AAjWKT5eNcexfdO0FO65oKAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzVkNmVmZmYtODViMi00YWY0LTg5YWItNmQ5OGM5NTI3ZGE0LzAvQzcwNkY5MDAw OEQ2MjkzRTVFMzVDN0IxN0REM0I0MTRFRUI5QTBBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzA2RjkwMDA4RDYyOTNFNUUzNUM3QjE3REQzQjQxNEVFQjlB MEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzVkNmVmZmYtODViMi00YWY0LTg5 YWItNmQ5OGM5NTI3ZGE0LzAvQzcwNkY5MDAwOEQ2MjkzRTVFMzVDN0IxN0REM0I0 MTRFRUI5QTBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTZx/EtpnIFKiY3fNq0J4HKRlaTUVoHfc2e FQJccClahPtqNvdpL1jFKeu94CXrTKUWFS3hQKXRqp6N/+jg2sUUTfbcol5J8L0g fK4+saZF/EefSMoIIfwI25crECT7pNj9N7CZVAMZ4Yr+wYSQ0jCT9A/CtunOi6Wv QkU9dE0R8MioH/N8FLJTSi7pnXo3hjreBsXafBFxur42Tt/Pu/IrigE9iwvFaDgi Y7jtz4j8QuHOqSAbhggkbZvQ70nKrTPv4+NYtXi700z/IiYFkKxDr5nVSh2rc80o poU0uY/uvipsWclsJsd1GRwiY+SOLcCXBj7rdn+DL1DDMNa/wZ0= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:26 2026 by rpki-client