$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.mft File: 76349EBC1654E6903E60A473DF6E8CE5B84C2592.mft (raw, json) Hash identifier: ZxvzXU0sXYCRA14yhzRAO/XqbrrefCx1oJK6IEa8Dbo= Subject key identifier: 4E:D0:25:2D:0F:F3:9E:B1:09:A2:ED:49:64:8B:AE:7C:F1:39:29:43 Authority key identifier: 76:34:9E:BC:16:54:E6:90:3E:60:A4:73:DF:6E:8C:E5:B8:4C:25:92 Certificate issuer: /CN=76349EBC1654E6903E60A473DF6E8CE5B84C2592 Certificate serial: 2AC2C247A45118A361D1FE32D398DEB80EBBF29A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/76349EBC1654E6903E60A473DF6E8CE5B84C2592.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:33:12 +0000 Manifest this update: Fri 19 Jun 2026 18:28:12 +0000 Manifest next update: Sat 20 Jun 2026 20:44:12 +0000 Files and hashes: 1: 76349EBC1654E6903E60A473DF6E8CE5B84C2592.crl (hash: jNmQrkXMAOtCQgUUOiyP9FmrGnyt41lwPlKFRRxJL+k=) 2: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: kYskQI7kJiExNtqigB92qVuCM3FXsEKU5mkGUUiDOj0=) 3: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: P/nt1L//IhgyeaORzkAIxhjNcIWMOJwXfCUtgtI0mH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.crl rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/76349EBC1654E6903E60A473DF6E8CE5B84C2592.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c2:c2:47:a4:51:18:a3:61:d1:fe:32:d3:98:de:b8:0e:bb:f2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76349EBC1654E6903E60A473DF6E8CE5B84C2592 Validity Not Before: Jun 19 18:28:12 2026 GMT Not After : Jun 20 20:44:12 2026 GMT Subject: CN=4ED0252D0FF39EB109A2ED49648BAE7CF1392943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:b5:93:86:19:bf:2a:ce:52:de:40:ad:9d: 4a:a7:ef:2d:04:d7:74:6b:96:fb:32:a1:0e:7a:b4: 8a:4c:bb:b7:5e:06:ec:e6:a4:78:c4:21:98:93:37: 72:41:d5:6d:82:98:7c:01:3e:62:0d:96:e9:29:f5: 7a:83:cf:f6:87:39:62:5a:32:a4:99:ea:96:d5:44: 40:a3:75:c8:fd:e2:0f:41:9b:6b:74:34:6c:c1:e8: a9:62:e4:bd:2f:bf:b5:77:26:e3:ba:d1:8b:62:40: 81:7d:5c:ee:b1:00:13:4a:d5:bd:22:d4:ba:f2:3f: 81:7b:ae:a5:bf:ed:01:f8:af:ea:94:f6:72:c4:16: 9b:02:b2:2c:d2:38:3f:87:22:d3:53:7a:39:e8:0d: a9:e2:04:a6:1c:09:1e:5a:c5:4d:43:12:d5:a9:3e: 27:08:e2:72:11:9a:73:2c:8a:0f:78:ed:a3:47:a2: bb:0b:da:ea:35:47:45:0e:6f:a3:83:41:0a:7f:7c: 3b:64:3f:0c:5a:8a:2b:15:8d:b8:b1:27:26:b7:bc: e3:56:6c:bf:03:96:44:c7:39:09:00:eb:85:73:91: 2b:75:f1:37:44:bc:d3:8a:3d:4f:e8:f0:9c:3a:9b: 51:92:fa:9c:7b:37:53:53:54:e2:1f:7d:b1:44:9d: 33:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D0:25:2D:0F:F3:9E:B1:09:A2:ED:49:64:8B:AE:7C:F1:39:29:43 X509v3 Authority Key Identifier: keyid:76:34:9E:BC:16:54:E6:90:3E:60:A4:73:DF:6E:8C:E5:B8:4C:25:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/76349EBC1654E6903E60A473DF6E8CE5B84C2592.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b2:6b:01:ec:bb:bf:fb:55:a3:d1:ec:dc:b3:d4:c6:10:f3: 29:2e:7d:92:b6:2e:96:46:0d:d4:7f:f0:32:55:a4:e4:0d:63: c2:fa:34:a8:b8:a2:ff:2f:9c:22:91:c3:56:d8:ba:4d:08:a7: 72:c1:e0:5b:74:c5:fc:c3:d5:53:6b:04:32:9a:13:83:55:02: 9a:13:56:56:ee:fd:b0:31:19:07:5d:da:0c:fb:4f:7a:48:48: 5e:1f:48:83:6b:c2:a6:ab:97:79:1d:d0:63:0c:d7:d3:e1:2d: 27:18:f6:fe:df:06:08:09:cc:99:85:27:46:fc:59:34:10:65: ed:1b:58:ac:3d:f6:f2:06:3f:b2:1a:54:22:42:c4:e2:03:fd: 8f:88:0e:4d:f5:30:f7:e8:80:d7:8e:a5:04:ec:a1:9e:94:d6: 8c:73:21:40:85:25:c3:a0:35:a0:37:31:03:c9:c8:d1:79:28: c0:a2:99:08:cd:1b:58:bb:38:6d:9c:e0:64:21:76:10:46:d3: 7a:ed:53:d9:5b:e4:05:8b:76:f0:25:79:78:fa:86:f1:f9:a0: d7:e5:5a:7b:4d:7a:17:92:bc:1e:ff:49:08:38:1d:23:9b:98: 53:c4:2d:b5:26:cb:bb:65:46:ce:c7:87:df:5e:7e:a8:0e:9a: 6c:d1:0b:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsLCR6RRGKNh0f4y05jeuA678powDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzYzNDlFQkMxNjU0RTY5MDNFNjBBNDczREY2RThDRTVC ODRDMjU5MjAeFw0yNjA2MTkxODI4MTJaFw0yNjA2MjAyMDQ0MTJaMDMxMTAvBgNV BAMTKDRFRDAyNTJEMEZGMzlFQjEwOUEyRUQ0OTY0OEJBRTdDRjEzOTI5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63LWThhm/Ks5S3kCtnUqn7y0E 13RrlvsyoQ56tIpMu7deBuzmpHjEIZiTN3JB1W2CmHwBPmINlukp9XqDz/aHOWJa MqSZ6pbVRECjdcj94g9Bm2t0NGzB6Kli5L0vv7V3JuO60YtiQIF9XO6xABNK1b0i 1LryP4F7rqW/7QH4r+qU9nLEFpsCsizSOD+HItNTejnoDaniBKYcCR5axU1DEtWp PicI4nIRmnMsig947aNHorsL2uo1R0UOb6ODQQp/fDtkPwxaiisVjbixJya3vONW bL8DlkTHOQkA64VzkSt18TdEvNOKPU/o8Jw6m1GS+px7N1NTVOIffbFEnTNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTtAlLQ/znrEJou1JZIuufPE5KUMwHwYDVR0j BBgwFoAUdjSevBZU5pA+YKRz326M5bhMJZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U2YmZmOWQtZmIxMy00N2I5LTljYzAtZGQ2YTA3MzBhMWM2LzAvNzYzNDlFQkMx NjU0RTY5MDNFNjBBNDczREY2RThDRTVCODRDMjU5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NjM0OUVCQzE2NTRFNjkwM0U2MEE0NzNERjZFOENFNUI4NEMy NTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvNzYzNDlFQkMxNjU0RTY5MDNFNjBBNDczREY2RThD RTVCODRDMjU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKyawHsu7/7VaPR7Nyz1MYQ8ykufZK2LpZG DdR/8DJVpOQNY8L6NKi4ov8vnCKRw1bYuk0Ip3LB4Ft0xfzD1VNrBDKaE4NVApoT Vlbu/bAxGQdd2gz7T3pISF4fSINrwqarl3kd0GMM19PhLScY9v7fBggJzJmFJ0b8 WTQQZe0bWKw99vIGP7IaVCJCxOID/Y+IDk31MPfogNeOpQTsoZ6U1oxzIUCFJcOg NaA3MQPJyNF5KMCimQjNG1i7OG2c4GQhdhBG03rtU9lb5AWLdvAleXj6hvH5oNfl WntNeheSvB7/SQg4HSObmFPELbUmy7tlRs7Hh99efqgOmmzRCzI= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:13 2026 by rpki-client