$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft File: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft (raw, json) Hash identifier: A7j8uAWB8b+h+HKS9Ldtkjipxifa5KwpkTugQPJewu4= Subject key identifier: 45:03:95:EB:5D:65:E6:99:97:46:4A:77:EF:90:14:07:EA:76:A9:E2 Authority key identifier: D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 Certificate issuer: /CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Certificate serial: 5709BEA062B15A753A9A0DD630B548339DFA146F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 04:09:48 +0000 Manifest this update: Sat 20 Jun 2026 04:04:48 +0000 Manifest next update: Sun 21 Jun 2026 04:22:48 +0000 Files and hashes: 1: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl (hash: N4n2Fj9c32USsUzGs0QczRoWWyHMlFmvueBdChio7NQ=) 2: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: L6oL2whYFSSKY1+OlvsQBxpegvioTL+JL/PrizaKM4w=) 3: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: dz8GDvSUHBxefCxM449tm0eNclhVLJnu4XpLW3XQ1J8=) 4: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: Jbbv7LheQBY4j7uxSO+OAvKD/NoLJjSel5LCZW8mlwI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:09:be:a0:62:b1:5a:75:3a:9a:0d:d6:30:b5:48:33:9d:fa:14:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Validity Not Before: Jun 20 04:04:48 2026 GMT Not After : Jun 21 04:22:48 2026 GMT Subject: CN=450395EB5D65E69997464A77EF901407EA76A9E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b1:80:89:67:97:ff:14:ee:68:7b:61:fe:04: 04:8d:e4:a1:62:3e:6d:7e:a4:3c:d2:4a:d6:61:2c: 68:6e:89:fd:5a:e4:69:61:b0:7b:79:62:4c:1c:2e: 30:70:af:2d:ec:8d:0d:4a:c6:1c:df:51:44:5a:42: 7c:4d:d1:eb:3f:4c:2b:d1:54:9d:e8:8f:da:f9:1b: 5f:f2:da:dd:4d:ae:87:b2:18:07:11:03:c5:19:74: 50:24:e8:48:f5:81:cc:81:4c:cb:57:2f:3e:ff:c1: 71:84:8a:c7:d3:bd:65:07:8f:a7:fd:43:9b:3d:c0: e9:4b:3f:94:c3:9a:e7:57:3f:16:a8:c8:25:5c:8e: db:10:43:49:99:f8:85:4c:d9:55:44:e3:91:8f:1b: 50:5d:7c:1a:10:bc:3b:79:4c:0c:2c:4d:68:c4:94: 40:29:ed:74:96:6f:e0:71:8e:8a:fb:ad:08:4f:76: 00:5a:48:d0:9c:42:5c:47:3e:e4:70:c3:8b:7b:c8: c4:4f:bd:c6:74:5d:c8:0f:b1:cf:24:15:d3:50:fb: f0:99:45:57:8a:c5:51:1a:de:3f:9b:82:dc:5c:b0: 51:4f:ee:ca:ca:fe:d8:0b:1b:51:96:dc:54:5e:9f: 06:ca:ad:11:9f:a0:3b:9b:02:dd:a1:b2:ed:11:48: 3c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:03:95:EB:5D:65:E6:99:97:46:4A:77:EF:90:14:07:EA:76:A9:E2 X509v3 Authority Key Identifier: keyid:D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d7:65:64:89:04:a3:e4:bb:95:e4:c5:2b:01:0d:5a:e0:da: eb:eb:35:f7:53:2e:e5:92:70:41:dc:d2:f6:38:7c:cd:cb:d7: ef:17:99:6f:cf:1d:6f:8f:e4:2e:de:0d:73:bb:06:18:8a:ae: af:17:fd:f7:9a:24:2f:19:f5:dc:16:8b:0a:0b:4a:14:a3:72: 0e:b4:c9:0a:c1:dd:a6:09:c6:e3:61:e4:ae:46:0f:5d:d7:14: f3:25:e3:23:79:03:33:f4:9d:a7:a0:af:99:91:9c:9b:af:8e: d1:ed:a0:09:d8:26:0b:44:ad:91:9c:59:5b:c8:eb:e7:cb:3e: d2:42:94:cd:38:4e:3e:6e:80:e5:2f:c5:1b:e8:75:1f:24:1b: ae:d1:81:40:e1:eb:a1:75:db:9a:0a:fa:1c:73:35:02:6a:ab: 3f:42:3a:84:84:cf:09:51:ab:a8:97:49:2d:e3:b1:b3:5f:7b: cd:86:d3:31:75:41:c2:21:df:37:95:57:29:4e:0d:32:41:e3: 99:ba:d8:37:86:9c:ce:98:2a:40:84:58:df:95:0c:46:25:23: f1:c9:1b:5d:16:81:fd:4e:47:b0:47:1c:c3:14:45:c0:7f:35: dd:1a:1b:e7:2c:d7:f3:14:a3:47:c8:84:ee:76:17:9c:b9:b1: f9:01:df:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVwm+oGKxWnU6mg3WMLVIM536FG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBC REYzRkQ4OTAeFw0yNjA2MjAwNDA0NDhaFw0yNjA2MjEwNDIyNDhaMDMxMTAvBgNV BAMTKDQ1MDM5NUVCNUQ2NUU2OTk5NzQ2NEE3N0VGOTAxNDA3RUE3NkE5RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjsYCJZ5f/FO5oe2H+BASN5KFi Pm1+pDzSStZhLGhuif1a5GlhsHt5YkwcLjBwry3sjQ1KxhzfUURaQnxN0es/TCvR VJ3oj9r5G1/y2t1NroeyGAcRA8UZdFAk6Ej1gcyBTMtXLz7/wXGEisfTvWUHj6f9 Q5s9wOlLP5TDmudXPxaoyCVcjtsQQ0mZ+IVM2VVE45GPG1BdfBoQvDt5TAwsTWjE lEAp7XSWb+Bxjor7rQhPdgBaSNCcQlxHPuRww4t7yMRPvcZ0XcgPsc8kFdNQ+/CZ RVeKxVEa3j+bgtxcsFFP7srK/tgLG1GW3FRenwbKrRGfoDubAt2hsu0RSDyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURQOV611l5pmXRkp375AUB+p2qeIwHwYDVR0j BBgwFoAU0oJVBnmOSO5Pa9C3yKS5gL3z/YkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGMxZTgwZDQtNmViZS00OTJjLWEwYzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3 OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBCREYzRkQ4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjgyNTUwNjc5OEU0OEVFNEY2QkQwQjdDOEE0Qjk4MEJERjNG RDg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5 ODBCREYzRkQ4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjXZWSJBKPku5XkxSsBDVrg2uvrNfdTLuWS cEHc0vY4fM3L1+8XmW/PHW+P5C7eDXO7BhiKrq8X/feaJC8Z9dwWiwoLShSjcg60 yQrB3aYJxuNh5K5GD13XFPMl4yN5AzP0naegr5mRnJuvjtHtoAnYJgtErZGcWVvI 6+fLPtJClM04Tj5ugOUvxRvodR8kG67RgUDh66F125oK+hxzNQJqqz9COoSEzwlR q6iXSS3jsbNfe82G0zF1QcIh3zeVVylODTJB45m62DeGnM6YKkCEWN+VDEYlI/HJ G10Wgf1OR7BHHMMURcB/Nd0aG+cs1/MUo0fIhO52F5y5sfkB34I= -----END CERTIFICATE-----Generated at Sat Jun 20 11:42:33 2026 by rpki-client