$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft File: D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft (raw, json) Hash identifier: GAqP0epoQkxkpAc5k1wKLZjErGvMDUDaco4sHwIY7Hs= Subject key identifier: AC:D2:F2:58:99:43:FE:22:86:02:79:7B:08:6E:2F:89:58:67:69:28 Authority key identifier: D7:61:C4:4A:BE:9A:A9:89:F7:04:8B:4D:3E:56:14:89:C4:DA:82:80 Certificate issuer: /CN=D761C44ABE9AA989F7048B4D3E561489C4DA8280 Certificate serial: 76410E6E8F36725AEF23055C4343B5653056FDC0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 11:56:30 +0000 Manifest this update: Thu 18 Jun 2026 11:51:30 +0000 Manifest next update: Fri 19 Jun 2026 12:34:30 +0000 Files and hashes: 1: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 6xlY6BkzLkqd/N9VB1huC6lhu8FPlH61fiI7wLd83Qc=) 2: D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl (hash: 6N81C2beqi+45A53jsYj6Vc6zCwARBeKSlA6Dwtz+7Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:41:0e:6e:8f:36:72:5a:ef:23:05:5c:43:43:b5:65:30:56:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D761C44ABE9AA989F7048B4D3E561489C4DA8280 Validity Not Before: Jun 18 11:51:30 2026 GMT Not After : Jun 19 12:34:30 2026 GMT Subject: CN=ACD2F2589943FE228602797B086E2F8958676928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cb:a3:b9:ee:ed:04:df:cf:82:54:78:1d:cf: 1d:08:0b:e0:e8:d3:cc:2d:26:4c:e2:2f:d8:65:04: 8c:16:43:d9:5e:d5:8d:34:bf:21:56:68:c1:1f:fd: 10:a2:b1:97:05:c9:3e:3f:f6:1d:45:d6:5c:6f:0f: 22:3c:09:e5:eb:c1:c3:e3:80:2a:12:7d:a4:ea:3b: 20:c1:74:cc:f1:8e:55:aa:8f:f8:82:a8:47:37:3e: 37:77:cd:65:92:f2:a8:10:e6:12:01:b7:03:e3:1f: b0:e7:cd:52:e7:4d:ee:59:6e:0f:6b:0c:f8:d9:b3: 54:08:ca:26:17:b7:48:c4:37:c0:02:24:9d:43:c3: e5:62:e2:25:f6:1d:61:f6:f2:a1:00:ef:6f:f4:95: c0:7e:b8:ff:fb:55:31:58:3d:fc:bb:36:b4:21:c5: 62:35:e1:1a:33:36:4c:96:d3:35:69:d5:28:9b:9a: a4:16:f5:d0:30:8e:60:e2:7c:47:d3:15:ac:fb:21: fd:3a:29:c2:2c:25:68:f2:58:8c:0d:33:66:83:84: d6:7e:3c:c5:8f:9f:38:0c:15:8a:ef:7c:66:87:e6: a7:ff:06:fd:81:e1:7d:c6:58:d0:c0:4c:fd:3b:61: 8b:9d:02:ed:8f:22:6f:d3:4f:22:f4:f4:24:71:d7: 44:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D2:F2:58:99:43:FE:22:86:02:79:7B:08:6E:2F:89:58:67:69:28 X509v3 Authority Key Identifier: keyid:D7:61:C4:4A:BE:9A:A9:89:F7:04:8B:4D:3E:56:14:89:C4:DA:82:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:94:cc:61:43:5b:01:7b:31:0f:db:e2:ba:3b:af:00:42:0f: 7a:dc:6f:5f:40:29:96:7a:df:a6:2b:f3:8b:f0:91:b3:24:40: 7e:29:0a:89:c0:ce:b0:57:f9:80:13:dd:88:32:f2:e0:1b:1b: 79:53:ab:51:bc:0f:60:3c:c5:d0:fd:96:a2:4b:e9:d7:0e:e5: 8b:59:71:6c:6b:d3:0b:de:36:01:46:46:a3:02:d8:ef:67:7b: f7:5f:a2:9e:84:2d:0f:86:aa:8a:ff:03:c3:ce:eb:e5:20:c3: 09:f3:6c:30:7b:1b:ee:40:3e:08:ae:d8:57:8b:2d:6b:0e:ee: 00:e4:b5:09:dc:9d:3e:9e:82:5c:b2:c4:ee:7d:66:98:f2:43: f5:b3:62:aa:8b:3a:33:8f:6a:55:fb:3a:c7:30:5d:d9:5c:87: 9a:4a:10:f8:0a:9e:21:d1:b3:80:29:35:b9:30:00:53:29:9e: 24:88:ca:1d:5b:60:84:64:f1:e1:e1:b4:b3:86:63:5d:fb:a7: eb:9d:2c:ad:f3:6c:f3:d5:e5:f2:d2:39:b2:a2:2a:f2:4a:13: 58:1b:fe:7f:c2:7a:29:d8:cb:13:09:a0:0a:19:0c:8e:fc:fd: 00:ae:93:57:f3:e7:d9:5a:d1:01:d6:c1:14:76:bb:f6:bd:f7: 0f:33:d0:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdkEObo82clrvIwVcQ0O1ZTBW/cAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2MUM0NEFCRTlBQTk4OUY3MDQ4QjREM0U1NjE0ODlD NERBODI4MDAeFw0yNjA2MTgxMTUxMzBaFw0yNjA2MTkxMjM0MzBaMDMxMTAvBgNV BAMTKEFDRDJGMjU4OTk0M0ZFMjI4NjAyNzk3QjA4NkUyRjg5NTg2NzY5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDny6O57u0E38+CVHgdzx0IC+Do 08wtJkziL9hlBIwWQ9le1Y00vyFWaMEf/RCisZcFyT4/9h1F1lxvDyI8CeXrwcPj gCoSfaTqOyDBdMzxjlWqj/iCqEc3Pjd3zWWS8qgQ5hIBtwPjH7DnzVLnTe5Zbg9r DPjZs1QIyiYXt0jEN8ACJJ1Dw+Vi4iX2HWH28qEA72/0lcB+uP/7VTFYPfy7NrQh xWI14RozNkyW0zVp1SibmqQW9dAwjmDifEfTFaz7If06KcIsJWjyWIwNM2aDhNZ+ PMWPnzgMFYrvfGaH5qf/Bv2B4X3GWNDATP07YYudAu2PIm/TTyL09CRx10T/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrNLyWJlD/iKGAnl7CG4viVhnaSgwHwYDVR0j BBgwFoAU12HESr6aqYn3BItNPlYUicTagoAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MzNkY2YtOWY1ZS00Nzc1LTljZTctOWRkNTI1YjQ0Yjg2LzAvRDc2MUM0NEFC RTlBQTk4OUY3MDQ4QjREM0U1NjE0ODlDNERBODI4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENzYxQzQ0QUJFOUFBOTg5RjcwNDhCNEQzRTU2MTQ4OUM0REE4 MjgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzAvRDc2MUM0NEFCRTlBQTk4OUY3MDQ4QjREM0U1NjE0 ODlDNERBODI4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqUzGFDWwF7MQ/b4ro7rwBCD3rcb19AKZZ6 36Yr84vwkbMkQH4pConAzrBX+YAT3Ygy8uAbG3lTq1G8D2A8xdD9lqJL6dcO5YtZ cWxr0wveNgFGRqMC2O9ne/dfop6ELQ+Gqor/A8PO6+UgwwnzbDB7G+5APgiu2FeL LWsO7gDktQncnT6eglyyxO59ZpjyQ/WzYqqLOjOPalX7OscwXdlch5pKEPgKniHR s4ApNbkwAFMpniSIyh1bYIRk8eHhtLOGY137p+udLK3zbPPV5fLSObKiKvJKE1gb /n/CeinYyxMJoAoZDI78/QCuk1fz59la0QHWwRR2u/a99w8z0KU= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:25 2026 by rpki-client