$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft File: F04BCF29E8A4983A7C61456338904B1D12249EF1.mft (raw, json) Hash identifier: ovC6Rx/87YAG/qa/077gjNPa/0nq8vJYKDfZxYSn2G4= Subject key identifier: 94:9A:82:1F:67:AB:0B:6B:B9:BE:12:82:75:E7:5A:00:05:79:67:54 Authority key identifier: F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 Certificate issuer: /CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Certificate serial: 1B15912FFA417E0058A0B57D4891F21B595D56EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 02:45:11 +0000 Manifest this update: Thu 18 Jun 2026 02:40:11 +0000 Manifest next update: Fri 19 Jun 2026 04:33:11 +0000 Files and hashes: 1: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: dsheODTWGHgEtYMTRu3FdjV0KqJJ4H5IlLGKFzm1e00=) 2: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: 0cd+8qm0U1tfI3VsNlW2b6PTClHG9WiUWDTJUpKm65E=) 3: F04BCF29E8A4983A7C61456338904B1D12249EF1.crl (hash: hobzXqLoqOA3QkBob17dZtinuowQh61X7kb8BVQieWw=) 4: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: LMBHCsJkYSf+3QotxJzINazyD8/H6U50nZHKQJfkTg8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 04:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:15:91:2f:fa:41:7e:00:58:a0:b5:7d:48:91:f2:1b:59:5d:56:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Validity Not Before: Jun 18 02:40:11 2026 GMT Not After : Jun 19 04:33:11 2026 GMT Subject: CN=949A821F67AB0B6BB9BE128275E75A0005796754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:a8:e8:96:fc:e8:22:b9:47:ba:47:7c:2d: 99:36:bd:26:e4:e2:cf:8a:22:74:34:37:ac:c1:ef: 2a:ef:af:6b:a7:8f:a1:c1:dc:d6:ec:ae:3f:99:17: 65:d9:fa:8d:13:d8:13:81:8f:ef:b7:82:99:5d:72: 88:75:4e:18:24:64:58:48:7e:a2:9c:26:5d:ec:9b: ae:8c:2f:fa:a4:53:ef:71:c6:2f:a2:21:b2:18:36: 26:80:13:63:33:85:0a:09:78:eb:17:3e:f8:f3:da: d7:b8:38:00:43:ac:d6:81:88:8e:8e:0e:28:0e:57: d1:4e:bc:84:90:33:0d:14:d0:c0:97:c3:80:b2:5b: 34:eb:72:c2:18:c7:d6:8d:be:87:7e:da:7f:b3:d3: d7:dd:9b:ad:cd:63:fb:93:35:14:07:73:c3:50:52: 11:e9:f9:4a:a5:d4:b4:f4:bb:f8:f8:32:c9:b8:9a: 87:cc:27:c8:83:1a:ba:e5:bf:48:ca:bf:0c:b9:2b: 60:1d:71:69:bc:cd:b7:4e:40:e4:3b:59:df:47:fc: ed:bf:31:cc:df:e1:75:20:22:fb:a6:bc:9a:c7:95: 89:6a:1d:35:7c:36:b3:3e:e0:d3:5f:7f:5f:8f:49: 5c:0c:50:55:b7:0c:1e:7a:d0:51:75:09:2f:17:8b: 3d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9A:82:1F:67:AB:0B:6B:B9:BE:12:82:75:E7:5A:00:05:79:67:54 X509v3 Authority Key Identifier: keyid:F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:bf:d8:8e:25:f4:ff:e2:2a:df:9e:da:db:90:42:4e:9a:d2: 07:91:78:a2:01:56:c9:06:e1:f4:4d:79:23:e5:19:a8:b1:26: 00:c3:c7:92:aa:3e:1a:7c:8f:a8:c9:c4:f3:8a:50:a4:71:f5: 55:1e:cb:2e:59:da:fd:0b:f6:ff:43:ea:ea:22:86:7d:39:53: 4c:fe:9d:5f:64:e1:8a:3f:48:7b:b7:69:9f:7b:ab:c3:60:e9: c6:25:fa:94:30:0a:76:0f:28:23:8b:b8:7f:00:9f:67:ac:74: 7a:42:a3:87:56:b6:15:98:c1:76:fa:53:cc:0f:5e:da:42:7e: ae:85:eb:1a:d6:54:06:b4:90:b5:d8:38:d9:f0:9d:ce:a2:af: 49:ad:87:e5:06:a0:ec:dd:e6:53:2e:fc:f1:cc:28:c3:bb:7c: 20:70:0b:92:20:18:f1:37:e0:f3:33:db:93:71:9e:c4:84:e0: 76:6a:73:aa:46:6b:66:55:3b:e6:9c:a8:ed:88:96:0c:c0:b3: 6a:11:5f:23:d2:cd:81:da:eb:be:aa:cb:00:6d:51:8e:34:6e: 8e:58:5e:61:6f:6f:e0:44:16:f9:f1:94:d5:85:00:c2:e7:22: 3a:2b:97:ff:43:d8:25:19:5e:5c:5b:b7:1c:10:05:4a:4c:95: fa:4c:da:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGxWRL/pBfgBYoLV9SJHyG1ldVuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA0QkNGMjlFOEE0OTgzQTdDNjE0NTYzMzg5MDRCMUQx MjI0OUVGMTAeFw0yNjA2MTgwMjQwMTFaFw0yNjA2MTkwNDMzMTFaMDMxMTAvBgNV BAMTKDk0OUE4MjFGNjdBQjBCNkJCOUJFMTI4Mjc1RTc1QTAwMDU3OTY3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwqjolvzoIrlHukd8LZk2vSbk 4s+KInQ0N6zB7yrvr2unj6HB3Nbsrj+ZF2XZ+o0T2BOBj++3gpldcoh1ThgkZFhI fqKcJl3sm66ML/qkU+9xxi+iIbIYNiaAE2MzhQoJeOsXPvjz2te4OABDrNaBiI6O DigOV9FOvISQMw0U0MCXw4CyWzTrcsIYx9aNvod+2n+z09fdm63NY/uTNRQHc8NQ UhHp+Uql1LT0u/j4Msm4mofMJ8iDGrrlv0jKvwy5K2AdcWm8zbdOQOQ7Wd9H/O2/ Mczf4XUgIvumvJrHlYlqHTV8NrM+4NNff1+PSVwMUFW3DB560FF1CS8Xiz0HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlJqCH2erC2u5vhKCdedaAAV5Z1QwHwYDVR0j BBgwFoAU8EvPKeikmDp8YUVjOJBLHRIknvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBiZDdkNmMtZWE1YS00YzQ1LTk1NTgtNzE3OTk0YWI2ODBlLzAvRjA0QkNGMjlF OEE0OTgzQTdDNjE0NTYzMzg5MDRCMUQxMjI0OUVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GMDRCQ0YyOUU4QTQ5ODNBN0M2MTQ1NjMzODkwNEIxRDEyMjQ5 RUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvRjA0QkNGMjlFOEE0OTgzQTdDNjE0NTYzMzg5MDRC MUQxMjI0OUVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEG/2I4l9P/iKt+e2tuQQk6a0geReKIBVskG 4fRNeSPlGaixJgDDx5KqPhp8j6jJxPOKUKRx9VUeyy5Z2v0L9v9D6uoihn05U0z+ nV9k4Yo/SHu3aZ97q8Ng6cYl+pQwCnYPKCOLuH8An2esdHpCo4dWthWYwXb6U8wP XtpCfq6F6xrWVAa0kLXYONnwnc6ir0mth+UGoOzd5lMu/PHMKMO7fCBwC5IgGPE3 4PMz25NxnsSE4HZqc6pGa2ZVO+acqO2IlgzAs2oRXyPSzYHa676qywBtUY40bo5Y XmFvb+BEFvnxlNWFAMLnIjorl/9D2CUZXlxbtxwQBUpMlfpM2vw= -----END CERTIFICATE-----Generated at Thu Jun 18 17:14:09 2026 by rpki-client