$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft File: 8369683C9C4A77F4B5AB05185F01C3C810502D34.mft (raw, json) Hash identifier: s47uKWWTMOoKVhC+jAWB2ev/UCFwbkCY6rlmzv165zs= Subject key identifier: 9E:AB:FA:3D:FF:5A:07:BB:A0:51:2E:7B:ED:F2:48:9B:06:A0:67:89 Authority key identifier: 83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34 Certificate issuer: /CN=8369683C9C4A77F4B5AB05185F01C3C810502D34 Certificate serial: 66E4D92EAAF10271E5A120B357BEECD2E5E1FD52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 16:01:18 +0000 Manifest this update: Thu 18 Jun 2026 15:56:18 +0000 Manifest next update: Fri 19 Jun 2026 16:01:18 +0000 Files and hashes: 1: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: fnlL5zMOPvGAUBk55QrgutXcZXU5BAm+3sV40oQEUJw=) 2: 8369683C9C4A77F4B5AB05185F01C3C810502D34.crl (hash: 8SRsAIlT2VxwRMJJ4E8mc3swBToPNE7LbFZnJcpkCZw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e4:d9:2e:aa:f1:02:71:e5:a1:20:b3:57:be:ec:d2:e5:e1:fd:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8369683C9C4A77F4B5AB05185F01C3C810502D34 Validity Not Before: Jun 18 15:56:18 2026 GMT Not After : Jun 19 16:01:18 2026 GMT Subject: CN=9EABFA3DFF5A07BBA0512E7BEDF2489B06A06789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:79:10:b2:3f:0b:9d:78:66:7f:72:b7:26:93: 50:91:8b:54:88:7b:69:3c:50:bd:c8:5a:9b:62:c8: df:fb:32:79:2d:db:94:c9:90:08:be:0e:fb:04:fa: b4:5f:65:4a:71:09:f9:2a:5d:d8:1c:c9:d3:b5:73: 13:1b:e2:27:39:5d:7f:74:ea:4a:8e:91:28:d2:6f: 89:57:25:0e:07:60:68:45:ef:ae:cc:cb:af:e0:f2: 93:99:9a:16:60:67:ae:44:3a:22:08:5f:b9:b4:9f: dd:1c:e9:3b:b4:c8:75:81:a2:38:64:70:0f:a9:95: fd:50:43:b7:9f:3b:9c:b0:8a:e2:81:9d:26:03:0f: c0:36:57:17:6a:f2:e8:ed:54:1a:22:47:ce:7f:07: 5a:b9:86:36:03:34:45:10:5c:5f:d0:06:a7:4b:99: 66:36:eb:5e:1b:bc:4b:43:9e:74:7e:ba:3d:d0:bb: 7c:3c:be:d6:ac:73:5b:66:c2:9e:25:15:28:0e:e5: ea:c8:9f:67:f0:88:3b:e3:ce:69:9b:1e:40:d4:34: 9f:75:93:08:f8:13:f1:be:91:5c:13:07:df:6b:a6: 1a:59:8f:76:ee:80:bd:ad:a7:89:da:9c:33:23:4f: a8:eb:96:c0:69:9c:74:a9:41:50:65:94:e9:3a:17: e4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AB:FA:3D:FF:5A:07:BB:A0:51:2E:7B:ED:F2:48:9B:06:A0:67:89 X509v3 Authority Key Identifier: keyid:83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:9a:c8:f3:8e:e7:6e:cf:c8:54:5d:a5:4e:a0:20:74:dd:15: f3:fc:97:32:42:1b:c8:1f:6a:14:0e:8c:3b:81:be:1d:7c:c4: 9f:c8:cb:6c:02:f4:10:c3:b3:b6:da:73:3f:64:1f:cc:a4:4f: 9a:ba:e1:b8:e5:bf:df:d6:9e:0f:ba:45:20:9a:eb:7d:6d:d1: ce:9a:dd:22:db:bf:93:18:2b:a8:de:d5:68:58:70:1e:0e:80: 5b:2a:4d:e0:f7:96:e7:18:61:58:dd:48:c5:2a:3f:fc:ee:61: 64:7c:9e:37:b8:b8:e4:1d:97:90:25:c0:a8:4c:fa:c7:26:b9: 78:5b:6d:17:81:78:0e:e6:19:2d:04:d5:ce:2d:47:9e:3e:2a: f4:61:a1:8d:12:39:60:ab:5d:05:7c:6c:30:5f:b5:43:34:9f: 22:65:28:9e:f3:7f:e1:c7:0f:f2:9c:4c:bd:98:6d:c8:9c:37: 96:e9:8d:36:b5:21:17:39:7d:3e:8e:cd:b0:4a:67:b5:64:6e: 89:c3:0a:07:c8:87:48:c4:19:6f:46:70:f8:5c:b8:97:af:4b: 7e:e8:88:34:b7:fd:e5:4f:0a:bd:6a:13:be:08:90:ca:6a:ec: 6f:d7:d5:d2:6b:81:6b:b3:b6:d4:d9:9d:4a:07:84:56:f2:b2: c8:12:24:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZuTZLqrxAnHloSCzV77s0uXh/VIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM2OTY4M0M5QzRBNzdGNEI1QUIwNTE4NUYwMUMzQzgx MDUwMkQzNDAeFw0yNjA2MTgxNTU2MThaFw0yNjA2MTkxNjAxMThaMDMxMTAvBgNV BAMTKDlFQUJGQTNERkY1QTA3QkJBMDUxMkU3QkVERjI0ODlCMDZBMDY3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJeRCyPwudeGZ/crcmk1CRi1SI e2k8UL3IWptiyN/7Mnkt25TJkAi+DvsE+rRfZUpxCfkqXdgcydO1cxMb4ic5XX90 6kqOkSjSb4lXJQ4HYGhF767My6/g8pOZmhZgZ65EOiIIX7m0n90c6Tu0yHWBojhk cA+plf1QQ7efO5ywiuKBnSYDD8A2Vxdq8ujtVBoiR85/B1q5hjYDNEUQXF/QBqdL mWY2614bvEtDnnR+uj3Qu3w8vtasc1tmwp4lFSgO5erIn2fwiDvjzmmbHkDUNJ91 kwj4E/G+kVwTB99rphpZj3bugL2tp4nanDMjT6jrlsBpnHSpQVBllOk6F+QXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnqv6Pf9aB7ugUS577fJImwagZ4kwHwYDVR0j BBgwFoAUg2loPJxKd/S1qwUYXwHDyBBQLTQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFjYTk0MzUtNzIyNC00N2E4LTk1MWItYzFiNDJlYjBlMmY3LzAvODM2OTY4M0M5 QzRBNzdGNEI1QUIwNTE4NUYwMUMzQzgxMDUwMkQzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MzY5NjgzQzlDNEE3N0Y0QjVBQjA1MTg1RjAxQzNDODEwNTAy RDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFjYTk0MzUtNzIyNC00N2E4LTk1 MWItYzFiNDJlYjBlMmY3LzAvODM2OTY4M0M5QzRBNzdGNEI1QUIwNTE4NUYwMUMz QzgxMDUwMkQzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCayPOO527PyFRdpU6gIHTdFfP8lzJCG8gf ahQOjDuBvh18xJ/Iy2wC9BDDs7bacz9kH8ykT5q64bjlv9/Wng+6RSCa631t0c6a 3SLbv5MYK6je1WhYcB4OgFsqTeD3lucYYVjdSMUqP/zuYWR8nje4uOQdl5AlwKhM +scmuXhbbReBeA7mGS0E1c4tR54+KvRhoY0SOWCrXQV8bDBftUM0nyJlKJ7zf+HH D/KcTL2YbcicN5bpjTa1IRc5fT6OzbBKZ7VkbonDCgfIh0jEGW9GcPhcuJevS37o iDS3/eVPCr1qE74IkMpq7G/X1dJrgWuzttTZnUoHhFbyssgSJJE= -----END CERTIFICATE-----Generated at Thu Jun 18 19:21:24 2026 by rpki-client