$ rpki-client -vvf rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft File: D697630349B220DF8CC6B12F2E1478386BFA976D.mft (raw, json) Hash identifier: 9zjZHXArOcLdHsFk/akUU2K1KKqQvhueF3eQFlSWO7M= Subject key identifier: 20:38:50:34:63:87:75:46:2F:56:15:EE:2C:F2:D5:1C:AA:66:23:0C Authority key identifier: D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D Certificate issuer: /CN=D697630349B220DF8CC6B12F2E1478386BFA976D Certificate serial: 4BBC8881276504674DD3BF6F4370BE2014839A34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 11:20:50 +0000 Manifest this update: Thu 18 Jun 2026 11:15:50 +0000 Manifest next update: Fri 19 Jun 2026 14:49:50 +0000 Files and hashes: 1: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: 6s/DgpFrpCjXe3mW18eXcfiVavJdVfhHeAPZDvP88Kg=) 2: D697630349B220DF8CC6B12F2E1478386BFA976D.crl (hash: vwFGIQx3xSB7HMnsaodA7F6BRsS4JT531WRZn2x7lV0=) 3: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: 1CtwSZrdYmNAUlXmKjVFOdbMEpxyH9OiC6UXCxpqUZc=) 4: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: CWiHRINpO5Qg8fxSyLkjZNquyJPum3NXHas+YJralQU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bc:88:81:27:65:04:67:4d:d3:bf:6f:43:70:be:20:14:83:9a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D697630349B220DF8CC6B12F2E1478386BFA976D Validity Not Before: Jun 18 11:15:50 2026 GMT Not After : Jun 19 14:49:50 2026 GMT Subject: CN=20385034638775462F5615EE2CF2D51CAA66230C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:87:a3:ac:40:ea:f0:a3:f3:b6:0a:7a:45:c1: 13:71:c0:48:d5:db:b6:fe:8e:e6:f5:d1:07:8f:c3: 3a:06:8e:d7:44:64:37:6f:ca:a2:91:b1:35:6e:fc: c2:66:0d:11:19:7c:2d:b6:23:38:31:99:cd:2c:d0: b7:06:33:48:95:b4:4c:3b:c4:ea:0c:7a:f1:0b:1c: b7:b3:e7:20:32:b3:ea:5f:c6:98:55:d0:c3:c2:3e: a3:f5:f6:f1:c4:8d:a8:25:ea:bf:c5:33:4b:d9:34: 72:b7:56:aa:2a:ae:34:22:c5:67:fb:74:b1:7b:b3: 0f:06:a3:dc:aa:a0:c6:67:ca:c7:7c:4d:66:b1:92: 88:3e:d3:1e:2e:6c:55:87:e9:1c:9d:24:ec:7d:3b: 29:69:42:86:5d:31:dc:a1:c1:e0:2a:01:81:1b:d9: 6c:6c:23:4c:00:cf:11:0a:48:36:b5:fb:3e:b1:09: 81:46:ec:d2:c0:6a:4d:8a:16:7c:17:e2:e6:77:85: 05:8a:95:b8:21:84:60:63:7b:ed:d5:6d:ef:6b:b6: 6f:8b:a6:c0:65:67:0c:33:e7:59:49:72:73:38:23: 89:70:23:1a:15:c7:e0:51:b8:e2:de:2e:90:c2:06: b0:01:2b:17:e2:cb:e7:bf:04:75:7a:78:a1:96:ba: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:38:50:34:63:87:75:46:2F:56:15:EE:2C:F2:D5:1C:AA:66:23:0C X509v3 Authority Key Identifier: keyid:D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:71:b1:1f:29:38:76:c0:c2:3d:e9:f0:11:04:08:34:e6:0f: b3:13:e5:d9:1e:4d:95:fd:89:5a:19:09:97:43:22:6f:b2:2b: 53:45:6c:db:9e:1a:ca:da:bd:50:52:8c:e5:50:54:db:c3:91: ee:f4:39:5d:f7:8c:0c:e7:ff:54:23:57:a8:7c:eb:86:9a:26: ea:48:2d:24:e3:85:47:6c:35:0e:cd:df:d3:2e:3a:35:bd:86: 61:01:c9:6f:a6:3f:43:87:2f:76:73:06:43:cb:83:36:7f:68: 0e:48:f0:25:d7:b9:46:e2:7b:92:f5:f5:0d:ad:0b:03:e8:1a: 10:d4:b7:b9:7c:dc:30:08:d4:25:d7:68:8a:f4:5b:c9:56:95: 37:b4:c9:1c:3f:79:cf:2c:76:54:2d:a9:37:e4:26:d0:a6:a8: cf:c1:e3:f5:f0:cb:72:fc:1a:ef:64:a7:20:e2:70:ff:c2:13: 76:51:d4:2b:16:d3:20:6e:1e:98:81:20:dc:24:e8:0f:ac:2c: 5a:6d:91:a7:a4:7b:1c:e3:50:81:9c:f4:dd:34:8b:ac:35:29: 7b:d6:8d:ed:03:5d:09:a1:9c:51:d5:e6:72:9a:20:ba:75:d4: 00:26:3f:78:26:3c:6c:d3:7f:36:54:c3:95:a5:aa:b0:62:5c: 03:32:51:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7yIgSdlBGdN079vQ3C+IBSDmjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2 QkZBOTc2RDAeFw0yNjA2MTgxMTE1NTBaFw0yNjA2MTkxNDQ5NTBaMDMxMTAvBgNV BAMTKDIwMzg1MDM0NjM4Nzc1NDYyRjU2MTVFRTJDRjJENTFDQUE2NjIzMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOh6OsQOrwo/O2CnpFwRNxwEjV 27b+jub10QePwzoGjtdEZDdvyqKRsTVu/MJmDREZfC22Izgxmc0s0LcGM0iVtEw7 xOoMevELHLez5yAys+pfxphV0MPCPqP19vHEjagl6r/FM0vZNHK3VqoqrjQixWf7 dLF7sw8Go9yqoMZnysd8TWaxkog+0x4ubFWH6RydJOx9OylpQoZdMdyhweAqAYEb 2WxsI0wAzxEKSDa1+z6xCYFG7NLAak2KFnwX4uZ3hQWKlbghhGBje+3Vbe9rtm+L psBlZwwz51lJcnM4I4lwIxoVx+BRuOLeLpDCBrABKxfiy+e/BHV6eKGWun3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIDhQNGOHdUYvVhXuLPLVHKpmIwwwHwYDVR0j BBgwFoAU1pdjA0myIN+MxrEvLhR4OGv6l20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE5OGY3ZjgtZTcxNS00Yjc5LWFmMzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0 OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2QkZBOTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk3NjMwMzQ5QjIyMERGOENDNkIxMkYyRTE0NzgzODZCRkE5 NzZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4 Mzg2QkZBOTc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVxsR8pOHbAwj3p8BEECDTmD7MT5dkeTZX9 iVoZCZdDIm+yK1NFbNueGsravVBSjOVQVNvDke70OV33jAzn/1QjV6h864aaJupI LSTjhUdsNQ7N39MuOjW9hmEByW+mP0OHL3ZzBkPLgzZ/aA5I8CXXuUbie5L19Q2t CwPoGhDUt7l83DAI1CXXaIr0W8lWlTe0yRw/ec8sdlQtqTfkJtCmqM/B4/Xwy3L8 Gu9kpyDicP/CE3ZR1CsW0yBuHpiBINwk6A+sLFptkaekexzjUIGc9N00i6w1KXvW je0DXQmhnFHV5nKaILp11AAmP3gmPGzTfzZUw5WlqrBiXAMyUUU= -----END CERTIFICATE-----Generated at Thu Jun 18 20:57:04 2026 by rpki-client