$ rpki-client -vvf rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft File: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft (raw, json) Hash identifier: wC0k81A+a49hrapdcgw/44ih6adlOTxBn4Xaw2sYP/Y= Subject key identifier: 3C:38:34:4F:80:9B:2B:77:DC:9A:BB:8C:87:BB:EC:4D:55:FE:50:00 Authority key identifier: 72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 Certificate issuer: /CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Certificate serial: 4E0232FC9966F678BE7566C410F2A51EE299A2D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 21:21:41 +0000 Manifest this update: Fri 19 Jun 2026 21:16:41 +0000 Manifest next update: Sat 20 Jun 2026 22:54:41 +0000 Files and hashes: 1: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl (hash: cIaYOwEXW14dg1Ew7o5lqKChuAwzWOlf3F6GEgcUhJk=) 2: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: oUpYjCZBUJLtFkQG6ecMP2UxGQxIQOGY4XCQZ/Ln3C8=) 3: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: jvWEOsR7PfzKTUwNJSaNZgDIPP0tbvEXbSdlcBqgCio=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:02:32:fc:99:66:f6:78:be:75:66:c4:10:f2:a5:1e:e2:99:a2:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Validity Not Before: Jun 19 21:16:41 2026 GMT Not After : Jun 20 22:54:41 2026 GMT Subject: CN=3C38344F809B2B77DC9ABB8C87BBEC4D55FE5000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:d8:09:b6:78:db:1d:98:3e:e4:88:96:3a: 42:7f:2c:d0:9a:b1:95:a5:db:b3:5d:59:0a:6e:f3: ee:bf:8e:76:b0:cb:72:f2:d1:6e:87:d7:aa:07:a2: 8e:eb:4f:21:2b:28:c9:41:26:4c:f1:26:84:dc:ab: 65:7b:57:a7:bb:0c:64:22:bb:a5:ac:64:c8:5a:dd: bd:59:d1:b2:b8:34:c1:31:e7:27:d1:d3:60:67:86: 82:ff:b7:e4:3c:42:68:cc:92:63:aa:a0:22:91:25: 0c:41:35:09:4d:be:6f:e5:24:d6:3c:5d:97:b5:01: 79:36:f6:b2:65:57:fe:98:d5:35:b2:86:46:76:95: 1c:97:dd:67:66:5d:91:c6:9d:09:c5:87:1f:30:9a: 80:60:47:a8:45:66:4b:c4:96:02:c5:44:aa:53:be: dd:ec:87:3d:f1:6a:a2:2f:d6:d7:52:d5:6c:64:87: c8:e7:b2:f3:9f:43:1b:d3:5e:47:52:ce:9a:ed:0f: a3:c3:f3:9e:4c:f6:8f:23:1d:25:23:05:82:c6:f1: 53:b4:a4:fc:00:be:de:4f:b3:19:49:0b:c7:23:47: 43:48:7d:42:62:a5:17:86:67:79:83:2f:a8:56:0d: 05:d4:5d:cc:43:76:ca:0c:8a:d0:e8:e4:bd:da:aa: cf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:38:34:4F:80:9B:2B:77:DC:9A:BB:8C:87:BB:EC:4D:55:FE:50:00 X509v3 Authority Key Identifier: keyid:72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:58:2a:3e:7c:1d:2b:e4:f4:e3:ba:a6:dd:fd:fb:ea:dc:ea: c0:f3:2e:13:7b:d9:fb:42:c0:2a:12:a0:f1:1e:0c:73:2a:d2: e4:6c:7b:4c:4b:06:0d:a5:cb:79:fe:99:76:93:d8:af:df:19: 9e:9a:61:43:79:b4:c7:9e:2f:01:f7:db:bd:8e:95:2b:ed:7b: 0c:6f:e7:cd:6d:62:4e:2e:f6:9f:b1:4c:ad:e5:8b:cc:d3:0f: 2b:5c:54:ea:c1:06:f4:ae:33:92:ba:17:bf:b6:8d:a7:8c:ea: f5:d3:06:82:cc:49:a5:d0:5d:c2:1c:61:8e:71:b2:b2:05:ce: f5:d0:41:8e:ee:e0:2d:9a:91:3a:67:29:84:9f:fc:af:31:38: 85:05:d9:60:0d:27:1c:f3:e6:ae:ec:52:31:a3:53:a1:26:c7: f3:0c:e2:cf:7e:2e:2e:cc:b9:c2:4c:9f:02:12:5e:91:04:51: 5e:ee:05:32:3c:f1:a8:fa:4f:5e:ce:b0:cc:86:4c:a5:82:46: c2:07:6c:aa:3b:a6:13:e3:d5:53:e8:51:0f:ca:d5:af:52:3c: 2a:e8:2b:90:80:d4:d3:d0:1e:39:d4:03:f5:16:ee:e9:0a:41: ea:b1:04:36:87:43:3f:25:0b:cc:c4:3c:92:43:e7:ec:54:5d: 87:ab:8b:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgIy/Jlm9ni+dWbEEPKlHuKZotMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0Mx MzMzQjEyODAeFw0yNjA2MTkyMTE2NDFaFw0yNjA2MjAyMjU0NDFaMDMxMTAvBgNV BAMTKDNDMzgzNDRGODA5QjJCNzdEQzlBQkI4Qzg3QkJFQzRENTVGRTUwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWCNgJtnjbHZg+5IiWOkJ/LNCa sZWl27NdWQpu8+6/jnawy3Ly0W6H16oHoo7rTyErKMlBJkzxJoTcq2V7V6e7DGQi u6WsZMha3b1Z0bK4NMEx5yfR02BnhoL/t+Q8QmjMkmOqoCKRJQxBNQlNvm/lJNY8 XZe1AXk29rJlV/6Y1TWyhkZ2lRyX3WdmXZHGnQnFhx8wmoBgR6hFZkvElgLFRKpT vt3shz3xaqIv1tdS1Wxkh8jnsvOfQxvTXkdSzprtD6PD855M9o8jHSUjBYLG8VO0 pPwAvt5PsxlJC8cjR0NIfUJipReGZ3mDL6hWDQXUXcxDdsoMitDo5L3aqs/hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPDg0T4CbK3fcmruMh7vsTVX+UAAwHwYDVR0j BBgwFoAUclBmpEzN+u5Ep8lY1A+6PBMzsSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVmODM3YjMtZGZkMi00MmNjLTliNzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0 Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0MxMzMzQjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUwNjZBNDRDQ0RGQUVFNDRBN0M5NThENDBGQkEzQzEzMzNC MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJB M0MxMzMzQjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANFYKj58HSvk9OO6pt39++rc6sDzLhN72ftC wCoSoPEeDHMq0uRse0xLBg2ly3n+mXaT2K/fGZ6aYUN5tMeeLwH3272OlSvtewxv 581tYk4u9p+xTK3li8zTDytcVOrBBvSuM5K6F7+2jaeM6vXTBoLMSaXQXcIcYY5x srIFzvXQQY7u4C2akTpnKYSf/K8xOIUF2WANJxzz5q7sUjGjU6Emx/MM4s9+Li7M ucJMnwISXpEEUV7uBTI88aj6T17OsMyGTKWCRsIHbKo7phPj1VPoUQ/K1a9SPCro K5CA1NPQHjnUA/UW7ukKQeqxBDaHQz8lC8zEPJJD5+xUXYeri40= -----END CERTIFICATE-----Generated at Sat Jun 20 09:13:56 2026 by rpki-client