$ rpki-client -vvf rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft File: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft (raw, json) Hash identifier: rGhkLzdLiwGGShGe+D1wtRLFzrPmpk46sVb163npKKY= Subject key identifier: B5:DF:75:FD:9A:67:6B:57:46:5A:E4:EC:FA:57:13:48:EC:06:9A:A8 Authority key identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 Certificate issuer: /CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Certificate serial: 6ADA2DC0676A3E76FAB4FBC34F193E9854BDD1F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 03:13:43 +0000 Manifest this update: Sat 20 Jun 2026 03:08:43 +0000 Manifest next update: Sun 21 Jun 2026 05:58:43 +0000 Files and hashes: 1: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl (hash: pKzfq03VUUlrijFsvRew46bLpodSlJSH1fOFSurAy+s=) 2: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: P0CKv28xTKde1GyGqA+PJu1GXD9kH++KhnXlGfNoMqo=) 3: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: qjiY24pQYGnpcIAUBz/9B2SI7lYJZJWbcLgxcQ8Bo/w=) 4: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: OiF+lqNfnntYlUTcLuL6XkD0ILHuGuhCZq5QG/i1DxA=) 5: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: LreF4U4QqN4qHzhmyfVVXaY/bnu6odrNWttsS80jRSQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 05:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:da:2d:c0:67:6a:3e:76:fa:b4:fb:c3:4f:19:3e:98:54:bd:d1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Validity Not Before: Jun 20 03:08:43 2026 GMT Not After : Jun 21 05:58:43 2026 GMT Subject: CN=B5DF75FD9A676B57465AE4ECFA571348EC069AA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:04:74:9b:19:0d:6d:78:62:6f:b4:28:da:66: 78:5d:7c:d6:f2:0f:a4:13:d6:84:48:3d:ff:19:b5: 85:0e:2e:ed:ce:cb:98:b3:47:71:cf:8a:e1:52:4c: 07:c8:13:4e:be:03:ee:92:64:fa:14:91:a5:8b:59: 09:ab:5c:e6:81:1b:98:2d:df:0c:92:ce:92:26:3e: ea:ff:50:22:2b:c0:a7:1f:a1:84:19:cd:13:6b:cd: fc:d3:c9:42:72:46:c5:22:13:20:cf:9d:7f:9f:cc: a1:63:27:bb:49:81:ac:ac:7c:98:52:fa:5f:3d:36: 7d:8a:fb:82:a2:7e:64:b6:a5:f6:67:e1:d3:ec:df: 49:fe:04:01:82:fe:2c:9d:9f:dd:de:da:d3:8d:6e: af:8e:1b:c7:a9:b7:09:82:6f:3c:d8:90:4b:75:22: d7:6a:20:1a:60:5f:2f:c8:d1:8f:8c:86:99:5a:d8: 52:96:64:06:e7:5a:51:b6:7c:6f:74:41:be:f3:be: 74:d3:d6:df:61:2a:44:d7:46:1d:f2:89:ee:3d:a3: 7a:4a:f7:c7:05:df:72:dd:ab:4a:8b:79:2d:e7:3e: 3d:63:4b:09:df:49:5b:0f:09:20:2a:ac:ce:2f:b6: a3:5a:85:64:c8:9b:dc:ef:eb:30:4f:94:03:f2:57: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DF:75:FD:9A:67:6B:57:46:5A:E4:EC:FA:57:13:48:EC:06:9A:A8 X509v3 Authority Key Identifier: keyid:F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:39:1c:7e:3b:b8:f5:d8:ee:5a:c6:18:e8:42:b4:46:5d:94: 3b:14:3e:67:2f:75:58:15:2e:6f:1f:79:a4:ed:fb:76:b9:dd: 2c:b9:0d:94:01:1d:66:3e:81:c8:73:d7:1a:de:01:7a:8a:5a: fb:67:f2:63:f9:0a:37:b3:20:b3:c2:a0:0d:f1:f8:7e:20:d7: 3c:62:61:c2:b8:cd:1f:78:aa:39:ed:93:4e:cb:c0:d2:4e:83: 31:37:8c:f2:90:50:bb:bc:99:27:4e:cd:7b:a2:7f:cc:f2:08: e5:3a:e7:b7:e1:6a:02:bf:b6:24:60:03:65:40:bf:f5:54:d8: a2:3c:3d:e3:08:13:df:ed:18:71:8e:0a:3a:65:20:ce:3b:57: d4:5c:f7:15:cd:54:71:58:f7:fd:88:31:e0:dd:f9:dd:7f:96: 11:34:8e:63:80:c9:e5:fb:cf:6a:21:fd:05:e9:79:97:7d:30: 85:6e:63:b3:d0:d3:08:23:4d:40:e1:0c:39:86:c2:b1:b0:bb: 3b:be:cb:ee:ac:d4:ba:39:18:22:ca:cf:bc:5b:e9:99:08:02: bc:a3:a4:f3:b0:dd:ef:63:e2:76:f0:0a:3f:01:cb:89:dd:94: d3:d1:70:bb:4e:1b:52:47:f2:e0:0c:48:91:33:8a:28:6d:7e: b2:26:81:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUatotwGdqPnb6tPvDTxk+mFS90fgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0 NUNGQTlFMDAeFw0yNjA2MjAwMzA4NDNaFw0yNjA2MjEwNTU4NDNaMDMxMTAvBgNV BAMTKEI1REY3NUZEOUE2NzZCNTc0NjVBRTRFQ0ZBNTcxMzQ4RUMwNjlBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3BHSbGQ1teGJvtCjaZnhdfNby D6QT1oRIPf8ZtYUOLu3Oy5izR3HPiuFSTAfIE06+A+6SZPoUkaWLWQmrXOaBG5gt 3wySzpImPur/UCIrwKcfoYQZzRNrzfzTyUJyRsUiEyDPnX+fzKFjJ7tJgaysfJhS +l89Nn2K+4KifmS2pfZn4dPs30n+BAGC/iydn93e2tONbq+OG8eptwmCbzzYkEt1 ItdqIBpgXy/I0Y+Mhpla2FKWZAbnWlG2fG90Qb7zvnTT1t9hKkTXRh3yie49o3pK 98cF33Ldq0qLeS3nPj1jSwnfSVsPCSAqrM4vtqNahWTIm9zv6zBPlAPyVwKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtd91/Zpna1dGWuTs+lcTSOwGmqgwHwYDVR0j BBgwFoAU8GOVVs1NS61p/uDX8imz90XPqeAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQ4MWFjMDEtZjMwMi00NmVkLTllMWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZD RDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0NUNGQTlFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDYzOTU1NkNENEQ0QkFENjlGRUUwRDdGMjI5QjNGNzQ1Q0ZB OUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIz Rjc0NUNGQTlFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH05HH47uPXY7lrGGOhCtEZdlDsUPmcvdVgV Lm8feaTt+3a53Sy5DZQBHWY+gchz1xreAXqKWvtn8mP5CjezILPCoA3x+H4g1zxi YcK4zR94qjntk07LwNJOgzE3jPKQULu8mSdOzXuif8zyCOU657fhagK/tiRgA2VA v/VU2KI8PeMIE9/tGHGOCjplIM47V9Rc9xXNVHFY9/2IMeDd+d1/lhE0jmOAyeX7 z2oh/QXpeZd9MIVuY7PQ0wgjTUDhDDmGwrGwuzu+y+6s1Lo5GCLKz7xb6ZkIAryj pPOw3e9j4nbwCj8By4ndlNPRcLtOG1JH8uAMSJEziihtfrImgas= -----END CERTIFICATE-----Generated at Sat Jun 20 15:47:25 2026 by rpki-client