$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft File: D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft (raw, json) Hash identifier: s1YiYMEtu0j8G6y9FWbhJcgp46mOezYPO6kraTZ5qhU= Subject key identifier: F1:40:2E:E9:2C:77:05:2F:59:87:4B:A2:DD:E6:21:9E:32:61:2C:17 Authority key identifier: D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 Certificate issuer: /CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Certificate serial: 2910C9DA718FB8C38229DE66C4D3751B8E5ED4B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 20:00:04 +0000 Manifest this update: Fri 19 Jun 2026 19:55:04 +0000 Manifest next update: Sat 20 Jun 2026 21:55:04 +0000 Files and hashes: 1: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: bR+rHQrh2BbDBIEXZD76jtCgM3z29GB3K8OSA3PHxZ8=) 2: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: GMEzbs3Ig2nQxKeMH+leqKXvdoQrLyt3lFNSHrwIV3w=) 3: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: B9uGziJoJ3vGf5NvgTMOSPQWAPSbs6/SbCQ1GHvUQS0=) 4: D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl (hash: /FQZUejM6eVvst5HbXrOYyW0DNWLRthKWbtSTRgJDhY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:10:c9:da:71:8f:b8:c3:82:29:de:66:c4:d3:75:1b:8e:5e:d4:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Validity Not Before: Jun 19 19:55:04 2026 GMT Not After : Jun 20 21:55:04 2026 GMT Subject: CN=F1402EE92C77052F59874BA2DDE6219E32612C17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:eb:38:64:64:f2:2e:36:b1:ac:23:5e:ac:c5: 8c:eb:f7:b4:89:9c:dd:ee:93:a3:ac:30:e5:df:4a: 70:d0:1d:25:c2:f5:32:d7:d1:ed:0c:29:93:d9:1c: 23:ec:e3:b7:8b:70:44:b0:3f:f8:fe:a3:4b:ca:be: 52:38:8c:5c:2d:10:c2:bb:bf:97:4b:1e:ab:d6:a8: 2b:1f:31:79:c2:ca:b6:87:23:e3:6a:71:4d:d8:5a: 23:87:3d:3d:34:05:37:88:a6:35:34:46:7b:c2:8b: 25:88:69:eb:43:0d:cb:09:5d:4b:c7:1e:cd:0d:4f: 7d:fc:61:77:7d:21:cd:e1:38:58:be:e5:0f:73:cb: 46:a1:a9:da:e7:0b:ef:58:ef:79:0e:dd:7f:bc:7e: 98:88:72:db:d6:4e:82:98:22:e0:a3:d2:bf:f5:89: 35:5c:37:73:b0:30:52:41:71:3f:2f:c8:62:2c:27: cd:be:65:3c:e7:e2:15:9b:a2:a4:b4:13:a6:4f:6a: 6e:f0:c3:11:a9:6a:ac:d4:2a:9f:e3:e5:95:24:ea: e2:97:fd:f3:b1:a6:ea:ac:c1:e9:9b:55:24:37:2a: c7:12:4c:d1:d0:d0:ff:18:07:f7:2d:81:e5:a3:7c: 30:55:93:23:75:79:84:b0:bd:19:36:a5:b5:a0:e1: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:40:2E:E9:2C:77:05:2F:59:87:4B:A2:DD:E6:21:9E:32:61:2C:17 X509v3 Authority Key Identifier: keyid:D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:40:d5:af:79:ca:be:21:12:b9:db:89:a2:51:47:df:47:b0: 93:64:05:ff:db:bd:10:9e:a2:1c:3b:ae:02:0d:34:4f:90:51: cb:80:d9:8f:4a:dc:70:50:b9:bf:8e:be:59:5f:30:66:bc:0d: 7e:22:17:fa:2e:56:97:09:d4:8e:04:1e:99:59:85:64:18:65: ff:e1:95:7f:f5:8b:83:bc:54:00:6e:f2:c7:5b:49:10:69:7a: aa:c8:32:0e:4c:bf:ce:01:74:43:3d:d4:07:a8:ca:0a:03:90: 26:f4:c4:16:89:1f:cc:34:c4:24:81:5f:21:4f:17:c6:ba:44: 87:94:9e:63:ee:bc:d2:73:7f:c3:9b:cf:3a:a9:db:b7:3f:1c: 21:13:5c:10:d7:fd:22:b3:cd:a9:0a:66:24:c3:23:f2:ce:1c: 38:70:46:f5:79:0d:38:53:8f:79:fb:6a:a0:d3:05:b0:20:d1: b7:ad:fb:14:d3:b5:02:a2:dd:1d:a6:b0:5d:63:28:72:03:09: bf:71:42:56:ba:e2:20:b7:f8:6e:60:46:8a:ac:a7:9f:98:66: d5:c0:e0:36:39:4e:26:32:03:66:f6:f3:5a:b0:0e:87:58:25: fa:91:ff:77:00:da:8a:8d:09:12:2c:1a:f7:d5:fd:65:2b:f0: 22:bc:96:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRDJ2nGPuMOCKd5mxNN1G45e1LEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCMUFBQTREMjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0 REQxRjUyNDAeFw0yNjA2MTkxOTU1MDRaFw0yNjA2MjAyMTU1MDRaMDMxMTAvBgNV BAMTKEYxNDAyRUU5MkM3NzA1MkY1OTg3NEJBMkRERTYyMTlFMzI2MTJDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU6zhkZPIuNrGsI16sxYzr97SJ nN3uk6OsMOXfSnDQHSXC9TLX0e0MKZPZHCPs47eLcESwP/j+o0vKvlI4jFwtEMK7 v5dLHqvWqCsfMXnCyraHI+NqcU3YWiOHPT00BTeIpjU0RnvCiyWIaetDDcsJXUvH Hs0NT338YXd9Ic3hOFi+5Q9zy0ahqdrnC+9Y73kO3X+8fpiIctvWToKYIuCj0r/1 iTVcN3OwMFJBcT8vyGIsJ82+ZTzn4hWboqS0E6ZPam7wwxGpaqzUKp/j5ZUk6uKX /fOxpuqswembVSQ3KscSTNHQ0P8YB/ctgeWjfDBVkyN1eYSwvRk2pbWg4XC5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8UAu6Sx3BS9Zh0ui3eYhnjJhLBcwHwYDVR0j BBgwFoAU2LGqpNIqLiJZ5V56UMsV/03R9SQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2IzZWFiYjQtNGRiMy00MzczLWEzNDgtZmIxZWQ3MDU1NjUxLzAvRDhCMUFBQTRE MjJBMkUyMjU5RTU1RTdBNTBDQjE1RkY0REQxRjUyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEIxQUFBNEQyMkEyRTIyNTlFNTVFN0E1MENCMTVGRjRERDFG NTI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvRDhCMUFBQTREMjJBMkUyMjU5RTU1RTdBNTBDQjE1 RkY0REQxRjUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5A1a95yr4hErnbiaJRR99HsJNkBf/bvRCe ohw7rgINNE+QUcuA2Y9K3HBQub+OvllfMGa8DX4iF/ouVpcJ1I4EHplZhWQYZf/h lX/1i4O8VABu8sdbSRBpeqrIMg5Mv84BdEM91AeoygoDkCb0xBaJH8w0xCSBXyFP F8a6RIeUnmPuvNJzf8Obzzqp27c/HCETXBDX/SKzzakKZiTDI/LOHDhwRvV5DThT j3n7aqDTBbAg0bet+xTTtQKi3R2msF1jKHIDCb9xQla64iC3+G5gRoqsp5+YZtXA 4DY5TiYyA2b281qwDodYJfqR/3cA2oqNCRIsGvfV/WUr8CK8lgU= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:58 2026 by rpki-client