$ rpki-client -vvf rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft File: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft (raw, json) Hash identifier: BLWorwxHRtYiEtltGvkIVG3TrNDYhqNHlDfw3Ce5yOw= Subject key identifier: 5A:F1:68:91:F3:E0:58:4C:60:7A:27:55:F8:F2:4C:89:C8:D3:9F:35 Authority key identifier: A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB Certificate issuer: /CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Certificate serial: 24141681E5BCACDD0CA8EC94466655C68590113D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 14:38:30 +0000 Manifest this update: Fri 19 Jun 2026 14:33:30 +0000 Manifest next update: Sat 20 Jun 2026 18:05:30 +0000 Files and hashes: 1: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl (hash: dq1POyG+f+t75BGcg3XF3472kaIBxqtXz8729yLzZbM=) 2: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: Cj0SZJARZifKQYTCMZbpWyS0hulziUW0qpiTLUY0MXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:14:16:81:e5:bc:ac:dd:0c:a8:ec:94:46:66:55:c6:85:90:11:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Validity Not Before: Jun 19 14:33:30 2026 GMT Not After : Jun 20 18:05:30 2026 GMT Subject: CN=5AF16891F3E0584C607A2755F8F24C89C8D39F35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:4c:62:27:4b:4b:dc:e2:53:ef:ef:33:b1: bc:2a:73:a8:8a:16:cf:a6:79:d6:4c:19:92:de:32: ce:29:59:88:ba:47:23:e7:69:38:f5:3c:fa:66:12: 21:fe:a0:d4:bf:65:69:98:13:59:0e:1d:64:97:ae: 46:f4:8f:3f:10:0b:93:12:2d:7a:c6:f1:f9:31:ec: 74:56:fe:ca:f4:c0:6f:95:d0:10:76:4b:0a:e6:28: fc:0a:1f:3e:6b:b0:0c:52:d4:b7:b1:b1:57:a4:2e: c4:b7:36:8d:67:86:8b:ff:9c:ee:b6:51:17:4c:c2: ad:a2:b5:39:5e:00:ea:3c:c9:32:97:89:5f:7f:d4: 69:fe:dc:63:31:0a:c5:a5:0d:9d:2e:6d:06:4b:bb: 2a:38:f2:e4:33:4f:77:8e:a6:4f:17:bb:c2:6f:fb: 03:4a:44:e5:d1:73:f6:a2:6c:00:6a:1b:9b:36:d2: 0c:36:e0:cd:25:1c:f2:88:c7:71:6e:1e:1b:2b:49: 91:2e:d5:11:8f:2b:35:10:b5:2e:13:8b:a4:98:f5: 30:a2:05:9e:4f:64:5c:0a:0c:05:9a:9a:2d:e2:66: 5b:83:60:a5:8a:bc:cb:51:73:8f:cf:ba:e1:a8:2a: 67:22:a8:a7:05:ae:67:51:12:05:0a:83:23:25:33: ca:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F1:68:91:F3:E0:58:4C:60:7A:27:55:F8:F2:4C:89:C8:D3:9F:35 X509v3 Authority Key Identifier: keyid:A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9c:ef:2e:40:e3:f8:97:ab:24:ed:64:52:3b:e7:00:4e:a5: 12:a8:bf:4c:14:a1:ea:76:4c:98:83:58:ca:1f:87:ca:df:5a: 59:00:c1:82:cf:ee:f5:95:9b:31:93:c2:62:35:d2:6c:78:3d: fd:7f:f5:32:15:0d:2a:45:35:dc:2b:58:7b:df:b7:75:cd:69: 22:72:4a:c7:b2:7a:c6:53:e6:f6:c0:a5:4c:44:08:f0:2a:2d: 24:83:9e:22:0a:25:a2:46:04:85:80:b1:04:8f:86:4e:cd:e5: 62:47:32:0c:62:fc:1d:af:59:eb:78:2d:d6:50:c5:e4:2b:2b: 97:a5:c8:a3:08:74:5b:06:61:ef:d7:18:b9:a5:65:53:3a:ce: 58:6e:a9:a6:f0:f8:19:f2:7a:d4:d6:5b:d1:03:2c:61:3e:cc: 3f:4d:68:1c:df:48:35:71:46:d0:45:30:cb:06:3a:b9:43:86: 7c:80:e5:bc:c5:91:06:8c:91:92:71:4e:eb:12:22:5b:8a:9c: b4:33:e8:b5:84:bc:ca:b5:c6:d0:dc:6a:78:b6:aa:f9:84:55: a9:03:5a:77:f6:2f:48:4e:48:1a:ac:a4:8f:6e:a9:de:5c:55: 28:70:a5:24:05:5b:f1:03:57:45:94:f8:ff:7a:c1:0e:0c:7e: f1:c9:42:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJBQWgeW8rN0MqOyURmZVxoWQET0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NE MEZEMjNBQjAeFw0yNjA2MTkxNDMzMzBaFw0yNjA2MjAxODA1MzBaMDMxMTAvBgNV BAMTKDVBRjE2ODkxRjNFMDU4NEM2MDdBMjc1NUY4RjI0Qzg5QzhEMzlGMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFF0xiJ0tL3OJT7+8zsbwqc6iK Fs+medZMGZLeMs4pWYi6RyPnaTj1PPpmEiH+oNS/ZWmYE1kOHWSXrkb0jz8QC5MS LXrG8fkx7HRW/sr0wG+V0BB2SwrmKPwKHz5rsAxS1LexsVekLsS3No1nhov/nO62 URdMwq2itTleAOo8yTKXiV9/1Gn+3GMxCsWlDZ0ubQZLuyo48uQzT3eOpk8Xu8Jv +wNKROXRc/aibABqG5s20gw24M0lHPKIx3FuHhsrSZEu1RGPKzUQtS4Ti6SY9TCi BZ5PZFwKDAWami3iZluDYKWKvMtRc4/PuuGoKmciqKcFrmdREgUKgyMlM8rBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWvFokfPgWExgeidV+PJMicjTnzUwHwYDVR0j BBgwFoAUpEIzLkft+VEh+DXLnu6JzND9I6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTYwZjg0NjEtYmIyYy00ZDNlLWE1YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0 N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NEMEZEMjNBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDQyMzMyRTQ3RURGOTUxMjFGODM1Q0I5RUVFODlDQ0QwRkQy M0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5 Q0NEMEZEMjNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+c7y5A4/iXqyTtZFI75wBOpRKov0wUoep2 TJiDWMofh8rfWlkAwYLP7vWVmzGTwmI10mx4Pf1/9TIVDSpFNdwrWHvft3XNaSJy SseyesZT5vbApUxECPAqLSSDniIKJaJGBIWAsQSPhk7N5WJHMgxi/B2vWet4LdZQ xeQrK5elyKMIdFsGYe/XGLmlZVM6zlhuqabw+BnyetTWW9EDLGE+zD9NaBzfSDVx RtBFMMsGOrlDhnyA5bzFkQaMkZJxTusSIluKnLQz6LWEvMq1xtDcani2qvmEVakD Wnf2L0hOSBqspI9uqd5cVShwpSQFW/EDV0WU+P96wQ4MfvHJQs4= -----END CERTIFICATE-----Generated at Sat Jun 20 08:36:46 2026 by rpki-client