$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft File: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft (raw, json) Hash identifier: TpA+3GWAqPPZ1JX+7tfFfzfOUwQPw6A9sRIwej9u8xU= Subject key identifier: 02:20:2C:67:F5:79:E4:C4:ED:F1:21:5C:CC:81:32:2A:A7:01:A1:05 Authority key identifier: B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 Certificate issuer: /CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Certificate serial: 45B43ACC91E5F5858E84E253B5F66D3EFFB6A9D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:38:19 +0000 Manifest this update: Fri 19 Jun 2026 18:33:19 +0000 Manifest next update: Sat 20 Jun 2026 19:26:19 +0000 Files and hashes: 1: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: WrcnjDvM2bO2wuu3OCRivgLaRSs+xddaOJ50D9MbO8U=) 2: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl (hash: yKDkeQso48rqPr2SYsNtL9rlWQwE58E+jm4hs+83Tws=) 3: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: Pavi+Ibkd+bl9I6ebmoiu+/5SxrpK9sFhLxy2ZXQkGw=) 4: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: vGdo0aPhNFfXshch3eNd6YkNvIG8QzHxW2xedSDSTPc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b4:3a:cc:91:e5:f5:85:8e:84:e2:53:b5:f6:6d:3e:ff:b6:a9:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Validity Not Before: Jun 19 18:33:19 2026 GMT Not After : Jun 20 19:26:19 2026 GMT Subject: CN=02202C67F579E4C4EDF1215CCC81322AA701A105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:52:ae:4a:76:51:0d:a2:e7:9e:d0:dc:2f: 59:ef:31:1a:5c:c8:92:d9:6c:3f:04:61:d0:d8:d5: 64:23:73:74:41:32:78:f4:af:9b:ed:49:7e:c6:0b: c2:18:c7:30:63:70:00:d0:45:ca:8a:ee:f4:38:aa: 0f:a9:ab:f2:08:14:9e:fa:ba:b9:ea:5c:da:b3:8a: a9:73:30:34:a9:6e:64:f7:9d:57:7e:1a:73:64:48: 99:8f:e2:65:3d:a5:35:d0:23:0e:9b:5b:2f:39:d4: 83:71:95:d4:00:b4:8d:4b:d7:83:f5:76:48:40:a2: f5:04:df:c8:15:ea:11:58:86:19:0d:7a:6f:98:a3: f4:be:e2:e0:8d:b5:da:4f:b9:40:f4:8b:9a:ab:40: 4a:1d:c7:77:1e:03:31:1e:0f:6c:5d:56:6d:9b:c1: b4:b7:04:a3:51:ce:5d:0a:7e:04:ab:b6:04:45:0c: 4d:c2:23:45:45:68:20:a4:16:62:25:7d:d4:81:82: 0a:71:80:e2:18:9b:9f:ca:ab:eb:fb:90:8b:57:0b: 26:23:82:cb:d0:fc:60:66:ff:fd:a2:3c:6e:52:2e: 1f:47:89:c0:6e:68:73:58:cf:6b:20:bb:5e:96:f9: 05:55:4e:9f:7c:d4:74:a3:d7:32:b5:af:df:f3:38: 95:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:20:2C:67:F5:79:E4:C4:ED:F1:21:5C:CC:81:32:2A:A7:01:A1:05 X509v3 Authority Key Identifier: keyid:B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5d:31:b6:42:d1:40:10:8d:dd:e4:81:bb:b6:16:6f:a7:da: 49:63:08:ea:44:33:19:f8:94:37:f5:23:c0:d9:0c:78:0f:9b: a6:80:3b:68:22:9d:02:05:48:c4:66:fc:5d:78:76:84:35:c1: d8:70:d8:3e:77:d8:a6:8f:ec:2b:e1:3c:03:09:0c:a5:68:23: 83:8c:66:25:32:8c:0b:12:cf:74:93:c4:3a:80:a0:9a:95:40: 5b:e7:ff:21:5d:52:28:c6:fb:cc:47:c0:5a:ce:08:71:fe:5d: d0:a0:ff:74:ee:76:fd:33:44:93:2c:d3:f1:5f:a3:ca:cb:1c: c0:db:11:9d:e6:54:26:15:90:be:a4:91:ba:f6:86:a2:08:fb: f9:9c:ec:77:c7:fb:2b:56:dc:43:23:98:5a:ac:54:94:94:36: d5:cd:d6:c7:95:67:b9:0f:fc:98:63:86:30:ba:fb:d2:fa:70: 36:bc:93:4c:87:96:3d:e1:e6:f8:43:ed:1c:b4:d3:88:b6:8f: b6:e9:46:cc:2c:24:1c:b3:1b:17:31:62:3b:25:54:b5:0a:f8: 4b:fc:2f:00:06:8d:50:15:10:c7:8a:0d:c8:e7:da:99:68:ee: b0:5f:01:01:a5:76:46:bf:59:8b:0f:35:ac:c8:8c:45:aa:db: e7:ef:c1:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURbQ6zJHl9YWOhOJTtfZtPv+2qdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5QzVF Q0QyRDcwOTAeFw0yNjA2MTkxODMzMTlaFw0yNjA2MjAxOTI2MTlaMDMxMTAvBgNV BAMTKDAyMjAyQzY3RjU3OUU0QzRFREYxMjE1Q0NDODEzMjJBQTcwMUExMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0klKuSnZRDaLnntDcL1nvMRpc yJLZbD8EYdDY1WQjc3RBMnj0r5vtSX7GC8IYxzBjcADQRcqK7vQ4qg+pq/IIFJ76 urnqXNqziqlzMDSpbmT3nVd+GnNkSJmP4mU9pTXQIw6bWy851INxldQAtI1L14P1 dkhAovUE38gV6hFYhhkNem+Yo/S+4uCNtdpPuUD0i5qrQEodx3ceAzEeD2xdVm2b wbS3BKNRzl0KfgSrtgRFDE3CI0VFaCCkFmIlfdSBggpxgOIYm5/Kq+v7kItXCyYj gsvQ/GBm//2iPG5SLh9HicBuaHNYz2sgu16W+QVVTp981HSj1zK1r9/zOJWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAiAsZ/V55MTt8SFczIEyKqcBoQUwHwYDVR0j BBgwFoAUsxbGPS2hOH0ZGn6m3AtZxezS1wkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGZmMDk1ODQtOTExMC00YjBkLThmNmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0Qy REExMzg3RDE5MUE3RUE2REMwQjU5QzVFQ0QyRDcwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzE2QzYzRDJEQTEzODdEMTkxQTdFQTZEQzBCNTlDNUVDRDJE NzA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5 QzVFQ0QyRDcwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJdMbZC0UAQjd3kgbu2Fm+n2kljCOpEMxn4 lDf1I8DZDHgPm6aAO2ginQIFSMRm/F14doQ1wdhw2D532KaP7CvhPAMJDKVoI4OM ZiUyjAsSz3STxDqAoJqVQFvn/yFdUijG+8xHwFrOCHH+XdCg/3Tudv0zRJMs0/Ff o8rLHMDbEZ3mVCYVkL6kkbr2hqII+/mc7HfH+ytW3EMjmFqsVJSUNtXN1seVZ7kP /JhjhjC6+9L6cDa8k0yHlj3h5vhD7Ry004i2j7bpRswsJByzGxcxYjslVLUK+Ev8 LwAGjVAVEMeKDcjn2plo7rBfAQGldka/WYsPNazIjEWq2+fvwfE= -----END CERTIFICATE-----Generated at Sat Jun 20 09:34:19 2026 by rpki-client