$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft File: 1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft (raw, json) Hash identifier: hmOKdRIpcYR7I+qotDeHYTPMnxA+mXpDcExUQKJFmak= Subject key identifier: B4:FA:E4:9A:14:7C:B8:F7:27:A5:7B:E1:4D:99:12:DE:EE:AE:B9:AA Authority key identifier: 1E:03:01:E0:EA:0A:06:DC:84:35:E4:3B:CC:69:77:EF:3B:D4:AF:1A Certificate issuer: /CN=1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A Certificate serial: 600BF6E8F5340FBFEF6FBC2CEFF6C0F2738D40B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 04:19:59 +0000 Manifest this update: Sat 20 Jun 2026 04:14:59 +0000 Manifest next update: Sun 21 Jun 2026 07:50:59 +0000 Files and hashes: 1: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: ilMWkREaaRUsVGA1yBY9I9uXOlfT5ODPbD+SLMsp1gg=) 2: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: +vANdbTWMrufItFa0nCpqJPgPphPTUGA/kS3/GJ4B1E=) 3: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: 10z6uPoT7+KF3jmKNjwiPYU/fWtSzXtmxjuZX3KE6+w=) 4: 1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl (hash: xtFE8Sbl3FNvnXIs6OmERDfhMq37myXYhKXCJpFy3LM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:0b:f6:e8:f5:34:0f:bf:ef:6f:bc:2c:ef:f6:c0:f2:73:8d:40:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A Validity Not Before: Jun 20 04:14:59 2026 GMT Not After : Jun 21 07:50:59 2026 GMT Subject: CN=B4FAE49A147CB8F727A57BE14D9912DEEEAEB9AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4a:4f:65:3b:a9:f4:09:6b:08:c7:8f:a7:94: 6b:46:de:30:0c:01:49:0e:8b:73:95:4f:ca:97:0b: 19:2d:9f:2f:a2:0b:64:3d:c2:a2:d8:93:41:03:0b: 88:25:df:fd:e5:d1:0c:ac:88:58:ff:af:c1:0d:a5: 74:de:d5:1a:48:72:17:ca:7e:75:1b:b1:31:44:bd: ca:a3:a2:07:09:7c:27:d9:1e:4c:af:0d:85:9d:65: ba:0a:2c:c9:e9:ff:b7:20:7f:cf:cb:9d:62:04:43: d8:f5:45:0b:88:8b:d7:3f:8c:ee:f4:51:10:a8:12: d1:d2:75:87:4c:ad:8c:45:3a:6e:05:d5:d8:e1:7c: ce:48:c0:a7:54:11:df:23:cf:98:e0:83:eb:e6:e4: 20:5d:1b:df:b5:67:d3:ce:2d:13:68:e3:b0:d2:e6: 9e:09:f0:1f:6d:61:9f:ba:c6:27:44:e3:2b:d5:bb: f7:36:65:6f:8e:d2:dc:3e:2b:ea:a4:9a:39:0b:03: 11:01:61:54:1a:54:cd:1f:e2:29:87:33:92:5e:1f: 1b:ea:08:72:b5:1c:10:a3:11:ff:fd:34:d8:0f:63: dd:28:41:5b:dc:6a:4f:21:93:47:61:db:88:9d:00: 66:a6:f0:3a:03:96:2e:3b:20:35:97:20:37:1f:f7: 1f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FA:E4:9A:14:7C:B8:F7:27:A5:7B:E1:4D:99:12:DE:EE:AE:B9:AA X509v3 Authority Key Identifier: keyid:1E:03:01:E0:EA:0A:06:DC:84:35:E4:3B:CC:69:77:EF:3B:D4:AF:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/1E0301E0EA0A06DC8435E43BCC6977EF3BD4AF1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:43:00:0a:96:de:64:ce:9c:f1:3f:1c:aa:41:73:f5:11:d5: 85:eb:f7:d6:55:f8:76:ce:2d:03:69:9d:ac:55:b1:c2:c2:1c: 9b:b0:59:9e:e8:62:c6:5b:9b:7d:48:92:20:94:c1:d6:9d:c6: 70:9c:55:90:70:e3:bf:02:52:74:b9:5e:ee:48:8c:93:d8:f7: 2d:a3:31:00:bc:04:f8:cf:77:ec:e3:7c:2d:42:a9:2e:46:a5: b1:12:d7:b2:5f:d4:dc:31:99:ee:75:0d:e5:93:00:13:ef:2c: 01:42:77:20:07:ec:8a:4c:da:ba:11:71:f8:e4:ff:5b:45:08: f2:be:5e:ce:de:b0:88:c2:6b:a7:9e:63:5c:1b:78:99:8d:91: 68:a0:47:88:fb:95:92:8f:f6:b0:2f:34:fc:3f:a6:a8:6a:6a: 54:63:bd:85:e1:b6:e0:1e:fd:fa:5d:29:78:6b:90:3f:a8:60: fe:b8:ff:6b:ef:55:5f:23:86:6c:cb:cf:58:63:c2:7b:2a:21: f6:ff:85:9a:1e:15:ea:22:64:46:db:91:cb:19:5d:9e:34:3e: 64:71:5a:78:15:f0:e8:67:d7:87:1e:9d:a5:80:da:e9:23:ea: ee:27:76:82:82:3e:c0:21:01:c8:cc:32:f5:34:04:57:7e:53: e1:8a:02:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYAv26PU0D7/vb7ws7/bA8nONQLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwMzAxRTBFQTBBMDZEQzg0MzVFNDNCQ0M2OTc3RUYz QkQ0QUYxQTAeFw0yNjA2MjAwNDE0NTlaFw0yNjA2MjEwNzUwNTlaMDMxMTAvBgNV BAMTKEI0RkFFNDlBMTQ3Q0I4RjcyN0E1N0JFMTREOTkxMkRFRUVBRUI5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgSk9lO6n0CWsIx4+nlGtG3jAM AUkOi3OVT8qXCxktny+iC2Q9wqLYk0EDC4gl3/3l0QysiFj/r8ENpXTe1RpIchfK fnUbsTFEvcqjogcJfCfZHkyvDYWdZboKLMnp/7cgf8/LnWIEQ9j1RQuIi9c/jO70 URCoEtHSdYdMrYxFOm4F1djhfM5IwKdUEd8jz5jgg+vm5CBdG9+1Z9POLRNo47DS 5p4J8B9tYZ+6xidE4yvVu/c2ZW+O0tw+K+qkmjkLAxEBYVQaVM0f4imHM5JeHxvq CHK1HBCjEf/9NNgPY90oQVvcak8hk0dh24idAGam8DoDli47IDWXIDcf9x+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtPrkmhR8uPcnpXvhTZkS3u6uuaowHwYDVR0j BBgwFoAUHgMB4OoKBtyENeQ7zGl37zvUrxowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWMzMmVlZTEtMTBmNy00NTdkLWE4YzUtNWY3Zjc0MWE2M2RhLzAvMUUwMzAxRTBF QTBBMDZEQzg0MzVFNDNCQ0M2OTc3RUYzQkQ0QUYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTAzMDFFMEVBMEEwNkRDODQzNUU0M0JDQzY5NzdFRjNCRDRB RjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWMzMmVlZTEtMTBmNy00NTdkLWE4 YzUtNWY3Zjc0MWE2M2RhLzAvMUUwMzAxRTBFQTBBMDZEQzg0MzVFNDNCQ0M2OTc3 RUYzQkQ0QUYxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5DAAqW3mTOnPE/HKpBc/UR1YXr99ZV+HbO LQNpnaxVscLCHJuwWZ7oYsZbm31IkiCUwdadxnCcVZBw478CUnS5Xu5IjJPY9y2j MQC8BPjPd+zjfC1CqS5GpbES17Jf1Nwxme51DeWTABPvLAFCdyAH7IpM2roRcfjk /1tFCPK+Xs7esIjCa6eeY1wbeJmNkWigR4j7lZKP9rAvNPw/pqhqalRjvYXhtuAe /fpdKXhrkD+oYP64/2vvVV8jhmzLz1hjwnsqIfb/hZoeFeoiZEbbkcsZXZ40PmRx WngV8Ohn14cenaWA2ukj6u4ndoKCPsAhAcjMMvU0BFd+U+GKAjw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:58 2026 by rpki-client