$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft File: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft (raw, json) Hash identifier: 9I6apvT4XCCVsHufb4yhyt35iQWpBW79UHGO6rR7EmI= Subject key identifier: B8:06:0F:EE:15:1E:2A:E2:84:E5:34:C4:01:75:04:27:E9:44:3C:15 Authority key identifier: DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6 Certificate issuer: /CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6 Certificate serial: 39671FFC65CFD1FBD9101E4CF06CB1F84756E0D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 03:18:49 +0000 Manifest this update: Sat 20 Jun 2026 03:13:49 +0000 Manifest next update: Sun 21 Jun 2026 03:54:49 +0000 Files and hashes: 1: DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl (hash: h0lLJeNmpxDfoq9jr3UngZhOXDUmLLxiQxkDUM68nBY=) 2: 3130332e332e34362e302f32342d3234203d3e203536323337.roa (hash: RognJZgFxoaYfZ3q8iAEXmaMxQXncM9YyfOgmfWAQ3o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:67:1f:fc:65:cf:d1:fb:d9:10:1e:4c:f0:6c:b1:f8:47:56:e0:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6 Validity Not Before: Jun 20 03:13:49 2026 GMT Not After : Jun 21 03:54:49 2026 GMT Subject: CN=B8060FEE151E2AE284E534C401750427E9443C15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:f4:02:8b:62:e6:a6:5d:3d:f1:4e:17:cb: 3e:f9:60:48:84:e4:33:75:3c:70:49:c4:10:79:6f: 6c:c5:96:18:aa:98:f9:64:47:0f:5e:64:2a:aa:a3: 96:36:51:0b:c5:42:6f:47:d7:8c:a9:9a:06:1e:e0: 41:06:17:3d:98:0b:cd:be:1e:78:67:7b:59:64:b7: df:47:64:a5:7b:24:f5:54:1a:c6:19:06:aa:7e:2b: 07:e0:52:06:09:d2:4b:36:53:b9:42:11:6d:05:9f: f3:2e:ac:d3:36:f5:ad:d5:ab:db:ed:aa:80:02:6e: c2:a2:22:05:9f:59:45:48:48:57:12:5c:2d:58:f4: e6:7a:b9:18:6a:18:fd:a3:21:e8:41:3d:cf:41:5b: ec:17:0b:cb:71:66:64:3d:88:cf:f6:53:c8:14:23: f3:26:78:e7:f1:92:17:3b:ae:23:76:b2:73:59:2e: 1e:76:b9:99:9a:40:5c:24:69:d7:23:35:87:35:e3: ac:81:aa:a9:16:45:24:d9:27:ff:75:59:aa:25:5c: 7b:b3:06:40:d2:d2:52:60:1c:44:d1:17:0b:d5:fa: 0e:40:92:6e:98:f3:a3:6e:4a:94:d8:f4:79:5f:98: fb:90:22:64:59:60:8e:a7:25:a6:fc:0a:cf:47:26: 92:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:06:0F:EE:15:1E:2A:E2:84:E5:34:C4:01:75:04:27:E9:44:3C:15 X509v3 Authority Key Identifier: keyid:DF:62:39:B1:00:BB:5F:8B:75:72:DB:ED:CD:AA:F0:85:E9:6B:8B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/DF6239B100BB5F8B7572DBEDCDAAF085E96B8BC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:55:ff:d1:82:1f:d4:ad:85:33:24:b8:c2:b4:2e:33:15:02: 2a:76:4a:f8:21:80:2e:93:d0:be:91:bc:24:3b:59:32:aa:1f: af:fb:24:5e:6c:d3:39:75:96:a4:31:6a:b0:45:65:b1:4b:c3: 9a:3a:f2:d3:14:36:e8:63:5d:d4:fb:35:d2:2e:e5:f1:c2:5e: 41:ed:ab:65:5d:30:20:c6:fe:ea:a9:44:01:c6:5b:0e:a5:4c: 82:83:da:77:f9:5b:96:b3:ca:23:cc:c5:bf:22:a3:a7:1f:c9: f7:64:89:1c:c4:86:24:87:59:1d:a2:e5:9f:9d:4b:bd:62:6f: 96:d6:2e:ac:a7:81:e2:4e:c1:8e:a2:f3:00:0a:91:2f:42:40: 18:67:e9:e7:bf:bd:5a:c5:77:b5:47:58:b0:d0:22:ef:f1:99: 35:78:d0:10:35:78:c1:76:3a:b9:36:25:db:56:51:96:0a:b4: 09:c1:55:c0:06:10:4f:e0:65:f4:71:6f:7f:a1:3d:85:22:60: b5:86:58:6b:b5:bd:cf:40:03:3a:46:55:a1:7c:75:17:0e:4c: ec:9a:a2:8b:47:b4:68:cd:08:f6:d3:13:93:27:bc:70:85:de: 6b:66:f4:a7:d2:94:7b:56:13:50:87:02:8e:22:6c:a3:04:f1: 06:87:d1:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOWcf/GXP0fvZEB5M8Gyx+EdW4NUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2MjM5QjEwMEJCNUY4Qjc1NzJEQkVEQ0RBQUYwODVF OTZCOEJDNjAeFw0yNjA2MjAwMzEzNDlaFw0yNjA2MjEwMzU0NDlaMDMxMTAvBgNV BAMTKEI4MDYwRkVFMTUxRTJBRTI4NEU1MzRDNDAxNzUwNDI3RTk0NDNDMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLPQCi2Lmpl098U4Xyz75YEiE 5DN1PHBJxBB5b2zFlhiqmPlkRw9eZCqqo5Y2UQvFQm9H14ypmgYe4EEGFz2YC82+ Hnhne1lkt99HZKV7JPVUGsYZBqp+KwfgUgYJ0ks2U7lCEW0Fn/MurNM29a3Vq9vt qoACbsKiIgWfWUVISFcSXC1Y9OZ6uRhqGP2jIehBPc9BW+wXC8txZmQ9iM/2U8gU I/MmeOfxkhc7riN2snNZLh52uZmaQFwkadcjNYc146yBqqkWRSTZJ/91WaolXHuz BkDS0lJgHETRFwvV+g5Akm6Y86NuSpTY9HlfmPuQImRZYI6nJab8Cs9HJpLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuAYP7hUeKuKE5TTEAXUEJ+lEPBUwHwYDVR0j BBgwFoAU32I5sQC7X4t1ctvtzarwhelri8YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWZiZTEwZDEtZmU2NC00MzNmLWI1ZTgtMDllOGM3MDRlYzkxLzAvREY2MjM5QjEw MEJCNUY4Qjc1NzJEQkVEQ0RBQUYwODVFOTZCOEJDNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjYyMzlCMTAwQkI1RjhCNzU3MkRCRURDREFBRjA4NUU5NkI4 QkM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWZiZTEwZDEtZmU2NC00MzNmLWI1 ZTgtMDllOGM3MDRlYzkxLzAvREY2MjM5QjEwMEJCNUY4Qjc1NzJEQkVEQ0RBQUYw ODVFOTZCOEJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhV/9GCH9SthTMkuMK0LjMVAip2SvghgC6T 0L6RvCQ7WTKqH6/7JF5s0zl1lqQxarBFZbFLw5o68tMUNuhjXdT7NdIu5fHCXkHt q2VdMCDG/uqpRAHGWw6lTIKD2nf5W5azyiPMxb8io6cfyfdkiRzEhiSHWR2i5Z+d S71ib5bWLqyngeJOwY6i8wAKkS9CQBhn6ee/vVrFd7VHWLDQIu/xmTV40BA1eMF2 Ork2JdtWUZYKtAnBVcAGEE/gZfRxb3+hPYUiYLWGWGu1vc9AAzpGVaF8dRcOTOya ootHtGjNCPbTE5MnvHCF3mtm9KfSlHtWE1CHAo4ibKME8QaH0bU= -----END CERTIFICATE-----Generated at Sat Jun 20 09:16:19 2026 by rpki-client