$ rpki-client -vvf rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft File: A20182F9E8910D783A73A086F2AE72D89BE78C37.mft (raw, json) Hash identifier: 7AvbkUY2LW6r1sqVCdFc38AQBnOOcbDIYGIM+mncE4s= Subject key identifier: 5A:0D:4D:CD:F9:3B:AF:DB:1E:2B:F7:AA:00:D0:BB:73:61:AE:3E:FE Authority key identifier: A2:01:82:F9:E8:91:0D:78:3A:73:A0:86:F2:AE:72:D8:9B:E7:8C:37 Certificate issuer: /CN=A20182F9E8910D783A73A086F2AE72D89BE78C37 Certificate serial: 3ADC64829A73AB5A9DCA43D1EDE20424596938CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A20182F9E8910D783A73A086F2AE72D89BE78C37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 00:40:44 +0000 Manifest this update: Sat 20 Jun 2026 00:35:44 +0000 Manifest next update: Sun 21 Jun 2026 02:38:44 +0000 Files and hashes: 1: A20182F9E8910D783A73A086F2AE72D89BE78C37.crl (hash: Rd56UAdHMd9wx89CF6PogE7e7XLwblCWX42Mwwxuyfc=) 2: 3130332e3132302e3233332e302f32342d3234203d3e20313338303435.roa (hash: LhYIbVJJA5dJnxEypyUmNgz7cp+p/g+/mtBrk7YH2hI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.crl rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A20182F9E8910D783A73A086F2AE72D89BE78C37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:dc:64:82:9a:73:ab:5a:9d:ca:43:d1:ed:e2:04:24:59:69:38:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A20182F9E8910D783A73A086F2AE72D89BE78C37 Validity Not Before: Jun 20 00:35:44 2026 GMT Not After : Jun 21 02:38:44 2026 GMT Subject: CN=5A0D4DCDF93BAFDB1E2BF7AA00D0BB7361AE3EFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:78:46:89:c9:d9:e9:bb:2c:2e:3b:9b:b4:47: c5:d2:07:52:2d:33:a1:f5:0b:5d:13:29:4f:99:aa: ad:89:bb:dd:06:9e:af:09:01:82:31:64:e4:99:8a: 99:ee:22:ef:31:7c:91:d1:64:6c:22:6a:5a:81:d7: 55:09:18:da:91:84:23:44:9f:b1:35:db:70:33:de: 41:25:d4:45:87:0b:96:0d:84:1e:01:dd:5d:e3:a3: c6:a3:4b:84:bb:16:80:36:43:ed:46:db:29:18:14: 5c:05:d8:0c:45:d6:f9:f4:fb:11:f5:bf:76:51:17: c2:c5:3c:4e:16:f8:99:c6:a3:a3:3a:9a:c4:6a:11: ad:b0:34:0f:90:45:50:b4:88:e2:46:f7:27:a2:ef: 0d:68:c5:f6:ee:23:93:5c:1b:3c:67:78:5e:e2:ec: df:14:2f:14:cf:78:c2:99:54:b2:9f:0a:8a:1d:65: 1b:ae:17:a9:a1:f3:89:1d:35:b2:65:cf:1a:26:6a: 5d:bd:ee:c3:13:8f:b0:b6:c4:eb:ae:66:82:e6:f2: 83:8d:66:d8:d0:0b:86:5b:9f:6c:d6:a9:18:85:d4: f5:9a:ae:bd:87:1b:4a:31:0b:78:61:f1:44:a0:78: 9d:8c:bd:ee:db:fb:c3:32:69:2c:36:d1:20:7b:63: aa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0D:4D:CD:F9:3B:AF:DB:1E:2B:F7:AA:00:D0:BB:73:61:AE:3E:FE X509v3 Authority Key Identifier: keyid:A2:01:82:F9:E8:91:0D:78:3A:73:A0:86:F2:AE:72:D8:9B:E7:8C:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A20182F9E8910D783A73A086F2AE72D89BE78C37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a3a26bfb-675f-444f-90c9-5d3a9b18c34c/0/A20182F9E8910D783A73A086F2AE72D89BE78C37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:18:81:4f:ed:2b:cb:85:fb:4f:d4:73:e9:55:c1:3f:cf:e3: 94:ed:fb:8c:69:76:a3:d9:43:1d:d9:be:ca:47:22:59:d2:72: 74:9e:f8:9f:d9:ce:c1:5a:4c:da:95:57:4b:a6:a5:3b:34:f3: 9c:c5:98:fa:2d:5f:e7:2e:bb:b6:cd:8e:10:f3:30:40:4b:21: 88:cc:b2:b4:d6:25:70:a8:d3:26:d7:87:cb:3f:4a:c6:da:d9: f1:a8:fb:30:d5:51:bc:9f:03:70:b7:6a:26:b4:ad:c0:49:65: fb:0f:a3:0f:46:3f:eb:0e:26:30:18:cd:fb:ff:7f:0c:c6:dc: a2:a3:e2:70:c0:67:4e:bc:ee:56:ad:d0:2b:6e:12:d1:61:8e: ee:ee:2f:d4:3f:f9:33:45:1f:30:2b:8c:78:a0:2f:d9:8a:a8: e1:35:a6:ce:4d:0c:0b:64:b8:51:5a:1f:5b:3b:73:8a:31:57: f0:cc:db:f4:09:13:32:15:04:ae:e1:8c:30:37:1f:b3:1e:2f: a2:a5:43:2b:a6:3b:34:02:10:0a:e2:09:b6:3f:8f:cb:09:cb: ed:84:7a:c1:23:ba:d5:f4:46:f9:15:23:92:5c:2e:a5:eb:9b: 48:d7:ad:8d:72:e9:0d:16:34:95:05:2b:61:55:bc:6f:ef:c4: e6:0e:7d:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtxkgppzq1qdykPR7eIEJFlpOMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIwMTgyRjlFODkxMEQ3ODNBNzNBMDg2RjJBRTcyRDg5 QkU3OEMzNzAeFw0yNjA2MjAwMDM1NDRaFw0yNjA2MjEwMjM4NDRaMDMxMTAvBgNV BAMTKDVBMEQ0RENERjkzQkFGREIxRTJCRjdBQTAwRDBCQjczNjFBRTNFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXeEaJydnpuywuO5u0R8XSB1It M6H1C10TKU+Zqq2Ju90Gnq8JAYIxZOSZipnuIu8xfJHRZGwialqB11UJGNqRhCNE n7E123Az3kEl1EWHC5YNhB4B3V3jo8ajS4S7FoA2Q+1G2ykYFFwF2AxF1vn0+xH1 v3ZRF8LFPE4W+JnGo6M6msRqEa2wNA+QRVC0iOJG9yei7w1oxfbuI5NcGzxneF7i 7N8ULxTPeMKZVLKfCoodZRuuF6mh84kdNbJlzxomal297sMTj7C2xOuuZoLm8oON ZtjQC4Zbn2zWqRiF1PWarr2HG0oxC3hh8USgeJ2Mve7b+8MyaSw20SB7Y6qVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWg1Nzfk7r9seK/eqANC7c2GuPv4wHwYDVR0j BBgwFoAUogGC+eiRDXg6c6CG8q5y2JvnjDcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTNhMjZiZmItNjc1Zi00NDRmLTkwYzktNWQzYTliMThjMzRjLzAvQTIwMTgyRjlF ODkxMEQ3ODNBNzNBMDg2RjJBRTcyRDg5QkU3OEMzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjAxODJGOUU4OTEwRDc4M0E3M0EwODZGMkFFNzJEODlCRTc4 QzM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTNhMjZiZmItNjc1Zi00NDRmLTkw YzktNWQzYTliMThjMzRjLzAvQTIwMTgyRjlFODkxMEQ3ODNBNzNBMDg2RjJBRTcy RDg5QkU3OEMzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkYgU/tK8uF+0/Uc+lVwT/P45Tt+4xpdqPZ Qx3ZvspHIlnScnSe+J/ZzsFaTNqVV0umpTs085zFmPotX+cuu7bNjhDzMEBLIYjM srTWJXCo0ybXh8s/Ssba2fGo+zDVUbyfA3C3aia0rcBJZfsPow9GP+sOJjAYzfv/ fwzG3KKj4nDAZ0687lat0CtuEtFhju7uL9Q/+TNFHzArjHigL9mKqOE1ps5NDAtk uFFaH1s7c4oxV/DM2/QJEzIVBK7hjDA3H7MeL6KlQyumOzQCEAriCbY/j8sJy+2E esEjutX0RvkVI5JcLqXrm0jXrY1y6Q0WNJUFK2FVvG/vxOYOfTw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:14 2026 by rpki-client