$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft File: 01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft (raw, json) Hash identifier: dkE432FIDgimtbLPulRHc4HOf0kSI0mM6w+57pa7mwA= Subject key identifier: 0B:8D:DD:B3:E0:5B:F8:E4:D2:08:8D:6A:A1:C9:47:54:7D:A8:24:79 Authority key identifier: 01:F3:24:EF:5A:8F:6A:CC:92:17:4D:6A:EE:D1:12:9E:16:23:A6:16 Certificate issuer: /CN=01F324EF5A8F6ACC92174D6AEED1129E1623A616 Certificate serial: 7D87216CF66CDA763C22BDAF59FC5ADCEFB5BE4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 11:03:07 +0000 Manifest this update: Sat 20 Jun 2026 10:58:07 +0000 Manifest next update: Sun 21 Jun 2026 12:37:07 +0000 Files and hashes: 1: 01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl (hash: 0mFWCskTXPVGi074EsuFuCqsy6jRjXMAdgVEi2gN+mc=) 2: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: VsXO58FTVSxasgY1Mnu3yqI7EZkkcRqpzQFvmDd4qLs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 10:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:87:21:6c:f6:6c:da:76:3c:22:bd:af:59:fc:5a:dc:ef:b5:be:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01F324EF5A8F6ACC92174D6AEED1129E1623A616 Validity Not Before: Jun 20 10:58:07 2026 GMT Not After : Jun 21 12:37:07 2026 GMT Subject: CN=0B8DDDB3E05BF8E4D2088D6AA1C947547DA82479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d5:e3:c0:ad:19:f8:f8:4d:69:28:7d:9a:61: 9e:b5:c2:93:8e:68:b3:f9:af:3a:5f:f9:ce:94:f2: 35:2d:6e:22:84:21:1d:8e:b2:a8:0f:59:54:9d:d3: 9e:f7:38:1e:61:dc:5b:b7:75:b2:33:fe:c7:96:0e: b7:50:92:43:4f:55:6b:65:5f:e7:45:d9:97:f2:d6: c6:08:23:76:df:ff:b6:9f:16:e2:a3:b4:c3:63:68: d2:71:f6:17:76:a8:a9:5d:95:4f:ed:41:43:33:16: c6:93:cc:54:96:0c:a3:69:2a:7c:e4:7f:c0:2d:d6: f6:e4:f1:45:ad:fd:39:53:dc:54:08:48:9a:46:4c: db:87:91:a2:c4:5c:15:a7:63:58:b8:ea:0b:7c:a2: 48:e3:90:7e:3d:16:50:1e:e6:03:b4:bd:60:3f:04: 19:c7:5d:d2:76:16:d9:58:a7:d8:84:19:59:94:6b: 60:b0:ca:a0:0d:0f:f9:e8:52:2f:1f:47:0c:a5:51: c8:b1:7f:de:f6:53:a7:b8:fc:bd:ea:3d:8c:fd:a9: 05:aa:7b:d4:b8:3f:9d:4f:34:3f:c9:40:02:1e:7c: 74:50:f1:52:39:67:a3:60:50:dc:fd:ca:4b:dd:b1: 93:02:1d:f3:b2:4b:4f:a9:86:7b:2a:4e:64:75:09: aa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8D:DD:B3:E0:5B:F8:E4:D2:08:8D:6A:A1:C9:47:54:7D:A8:24:79 X509v3 Authority Key Identifier: keyid:01:F3:24:EF:5A:8F:6A:CC:92:17:4D:6A:EE:D1:12:9E:16:23:A6:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:4e:3b:34:0c:f1:e6:8e:ff:74:71:1c:5a:c5:0d:4f:04:fb: 18:7e:a5:e2:7d:8d:a0:ee:20:66:61:28:66:11:46:95:a5:1e: 39:7e:3f:59:56:45:35:75:f4:95:90:c7:f5:ac:19:45:85:66: 5b:56:5a:35:9b:d5:f0:10:ba:e0:de:d1:58:46:5c:02:40:13: 6d:8c:05:25:72:c6:52:d0:90:61:49:40:1e:97:8a:e7:e6:2b: 95:9b:f1:35:0e:83:78:68:b1:73:a0:4f:0c:48:80:09:d3:4f: 99:e9:1f:14:72:f3:6c:b2:55:21:b4:70:13:99:85:92:20:ae: f7:90:09:a2:87:8c:a1:e2:d5:8c:72:a3:8b:60:28:a9:2b:7a: 6d:c0:4e:42:04:1b:a2:47:ec:83:b3:ae:18:bf:63:1f:21:1d: ac:24:fd:c5:c5:d8:1b:cd:9e:ab:e6:09:c3:c2:bf:3d:37:53: e3:fe:fe:b7:93:cc:7a:28:c2:90:9e:d0:44:71:7b:5c:61:98: f6:b3:63:27:cd:79:28:05:d1:d8:68:eb:fd:70:08:68:18:a5: cb:14:16:b5:03:13:8e:8b:e4:4f:e1:db:39:be:6d:d3:e2:0e: 92:ec:45:60:14:4d:73:cf:03:f0:26:dd:c3:8b:f4:b4:e5:1d: eb:a0:67:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfYchbPZs2nY8Ir2vWfxa3O+1vkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGMzI0RUY1QThGNkFDQzkyMTc0RDZBRUVEMTEyOUUx NjIzQTYxNjAeFw0yNjA2MjAxMDU4MDdaFw0yNjA2MjExMjM3MDdaMDMxMTAvBgNV BAMTKDBCOEREREIzRTA1QkY4RTREMjA4OEQ2QUExQzk0NzU0N0RBODI0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc1ePArRn4+E1pKH2aYZ61wpOO aLP5rzpf+c6U8jUtbiKEIR2OsqgPWVSd0573OB5h3Fu3dbIz/seWDrdQkkNPVWtl X+dF2Zfy1sYII3bf/7afFuKjtMNjaNJx9hd2qKldlU/tQUMzFsaTzFSWDKNpKnzk f8At1vbk8UWt/TlT3FQISJpGTNuHkaLEXBWnY1i46gt8okjjkH49FlAe5gO0vWA/ BBnHXdJ2FtlYp9iEGVmUa2CwyqAND/noUi8fRwylUcixf972U6e4/L3qPYz9qQWq e9S4P51PND/JQAIefHRQ8VI5Z6NgUNz9ykvdsZMCHfOyS0+phnsqTmR1CapxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC43ds+Bb+OTSCI1qoclHVH2oJHkwHwYDVR0j BBgwFoAUAfMk71qPasySF01q7tESnhYjphYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3OTQ3YWEtY2U2OS00MDEzLWEyNTYtNTg3OTlhNTY1ODFjLzAvMDFGMzI0RUY1 QThGNkFDQzkyMTc0RDZBRUVEMTEyOUUxNjIzQTYxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUYzMjRFRjVBOEY2QUNDOTIxNzRENkFFRUQxMTI5RTE2MjNB NjE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3OTQ3YWEtY2U2OS00MDEzLWEy NTYtNTg3OTlhNTY1ODFjLzAvMDFGMzI0RUY1QThGNkFDQzkyMTc0RDZBRUVEMTEy OUUxNjIzQTYxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGROOzQM8eaO/3RxHFrFDU8E+xh+peJ9jaDu IGZhKGYRRpWlHjl+P1lWRTV19JWQx/WsGUWFZltWWjWb1fAQuuDe0VhGXAJAE22M BSVyxlLQkGFJQB6XiufmK5Wb8TUOg3hosXOgTwxIgAnTT5npHxRy82yyVSG0cBOZ hZIgrveQCaKHjKHi1Yxyo4tgKKkrem3ATkIEG6JH7IOzrhi/Yx8hHawk/cXF2BvN nqvmCcPCvz03U+P+/reTzHoowpCe0ERxe1xhmPazYyfNeSgF0dho6/1wCGgYpcsU FrUDE46L5E/h2zm+bdPiDpLsRWAUTXPPA/Am3cOL9LTlHeugZ78= -----END CERTIFICATE-----Generated at Sat Jun 20 13:13:28 2026 by rpki-client