$ rpki-client -vvf rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft File: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft (raw, json) Hash identifier: a7Z4dGdxICGJzkXI1BKA3ljR5fadvlKlCoXyKezHo+c= Subject key identifier: 5E:4C:88:B2:E2:AC:49:32:5F:23:1F:A2:76:75:F0:29:37:5A:24:4D Authority key identifier: D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A Certificate issuer: /CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Certificate serial: 101326D1EFEEA19191154F0FF586E4C1852B02D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 21:42:11 +0000 Manifest this update: Fri 19 Jun 2026 21:37:11 +0000 Manifest next update: Sat 20 Jun 2026 21:55:11 +0000 Files and hashes: 1: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: 6VIXf9PufTTIF0jlFfBvIGu6EFZnq37iO9mrrQ1/lbk=) 2: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: B7a7PzCNzeD/tq1cXAKoZlfFY/BQzoD5xWVoqKq0SF0=) 3: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl (hash: XQSWIvwLetjRQAGUiyaV9+4pOK0gbsXABfnf1zm0KuU=) 4: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: Jx05B7mkwgYoEihHJr1Mblw6Kt55kFXhZ9MUCvCt+Go=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:13:26:d1:ef:ee:a1:91:91:15:4f:0f:f5:86:e4:c1:85:2b:02:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Validity Not Before: Jun 19 21:37:11 2026 GMT Not After : Jun 20 21:55:11 2026 GMT Subject: CN=5E4C88B2E2AC49325F231FA27675F029375A244D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:97:c7:d1:3f:30:6a:34:df:fa:ca:b6:1d: b1:8c:10:e4:96:42:f6:76:0f:27:31:05:9c:42:14: 69:d8:08:72:c8:1d:25:32:75:46:f2:84:61:80:4e: 8a:26:d2:ca:01:ef:37:fb:e3:a2:dc:83:1e:a6:5d: 70:72:dc:54:c0:20:26:ae:35:0d:a6:9c:84:8d:32: e0:d7:b2:8f:bc:84:da:ab:36:33:67:ea:d2:94:08: a7:7a:23:b1:84:bb:d8:74:20:fa:da:b3:37:84:30: f1:32:38:3a:3c:89:ee:f7:b3:17:c7:8e:e2:05:ef: 0f:c8:32:1e:82:55:3d:1c:0e:b0:da:ae:27:bc:dc: 38:cd:9a:89:7b:9a:9e:75:68:01:e1:cd:f1:7e:35: b4:a3:15:47:98:3a:a3:8f:37:85:52:80:92:63:b1: 38:a8:bf:7f:71:45:d7:3e:50:d1:f6:3a:88:cb:1c: 10:10:8d:55:b5:51:eb:90:88:21:d1:56:6e:d0:de: 2b:fa:07:66:96:9e:99:3f:24:0a:81:b3:0b:3d:17: ea:75:d4:ad:cf:ff:af:6f:8a:4e:34:ef:d4:df:f6: 77:79:63:8e:9a:58:f4:2d:59:1e:c2:c2:f7:f4:5f: 53:61:f9:6a:3a:3d:29:55:89:3c:1f:14:9d:bf:9e: a7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4C:88:B2:E2:AC:49:32:5F:23:1F:A2:76:75:F0:29:37:5A:24:4D X509v3 Authority Key Identifier: keyid:D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:9e:8a:32:d2:2c:09:31:be:62:23:e7:e0:d6:b3:a4:ec:5f: 5e:71:ac:1d:fc:ee:8c:c0:25:c3:d0:ad:e8:79:50:2d:cb:21: a8:66:25:7f:6a:81:48:ae:98:02:57:7d:b5:92:1f:a6:11:13: c1:22:02:45:9f:f7:27:68:a9:c2:ba:40:45:40:52:84:21:f3: e1:2a:75:e9:86:c8:eb:d8:f5:cd:fc:bd:f6:de:cc:8a:96:b7: 1e:1c:1d:dc:ab:f0:d5:0b:81:c9:e7:88:6e:2f:41:dd:d0:ed: be:57:3a:ce:74:0d:7d:d9:01:3a:50:5d:25:5a:a6:8d:5e:2a: 95:7c:c5:fa:ed:10:72:5d:d7:1b:31:81:d3:59:56:2e:30:d9: c9:9c:11:37:48:fb:04:ab:b2:4d:f9:49:b9:0b:2a:89:15:b4: 6d:48:ee:7b:da:8d:92:1c:34:16:b3:60:6d:d0:40:98:84:b8: 2c:91:0d:b4:3a:b0:d8:53:62:3c:c1:a1:ac:13:f2:c5:1a:51: e6:29:9b:7c:86:f9:fc:ae:61:79:a5:82:28:45:54:10:44:15: 2e:fc:58:65:b4:ec:bc:6e:34:71:b5:b0:59:d6:2f:cf:0c:15: 51:ef:34:85:35:6e:47:8c:a6:8e:67:97:a2:d1:c0:71:52:88: a0:f5:19:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEBMm0e/uoZGRFU8P9YbkwYUrAtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2 OEJCMDEyQTAeFw0yNjA2MTkyMTM3MTFaFw0yNjA2MjAyMTU1MTFaMDMxMTAvBgNV BAMTKDVFNEM4OEIyRTJBQzQ5MzI1RjIzMUZBMjc2NzVGMDI5Mzc1QTI0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE85fH0T8wajTf+sq2HbGMEOSW QvZ2DycxBZxCFGnYCHLIHSUydUbyhGGAToom0soB7zf746Lcgx6mXXBy3FTAICau NQ2mnISNMuDXso+8hNqrNjNn6tKUCKd6I7GEu9h0IPraszeEMPEyODo8ie73sxfH juIF7w/IMh6CVT0cDrDarie83DjNmol7mp51aAHhzfF+NbSjFUeYOqOPN4VSgJJj sTiov39xRdc+UNH2OojLHBAQjVW1UeuQiCHRVm7Q3iv6B2aWnpk/JAqBsws9F+p1 1K3P/69vik4079Tf9nd5Y46aWPQtWR7Cwvf0X1Nh+Wo6PSlViTwfFJ2/nqd5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXkyIsuKsSTJfIx+idnXwKTdaJE0wHwYDVR0j BBgwFoAU2Kljzlfpmxq+FiqEUtnk02i7ASowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjExY2E2MjAtZGFjZS00YTlmLWI4ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1 N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2OEJCMDEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEE5NjNDRTU3RTk5QjFBQkUxNjJBODQ1MkQ5RTREMzY4QkIw MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjExY2E2MjAtZGFjZS00YTlmLWI4 ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0 RDM2OEJCMDEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM+eijLSLAkxvmIj5+DWs6TsX15xrB387ozA JcPQreh5UC3LIahmJX9qgUiumAJXfbWSH6YRE8EiAkWf9ydoqcK6QEVAUoQh8+Eq demGyOvY9c38vfbezIqWtx4cHdyr8NULgcnniG4vQd3Q7b5XOs50DX3ZATpQXSVa po1eKpV8xfrtEHJd1xsxgdNZVi4w2cmcETdI+wSrsk35SbkLKokVtG1I7nvajZIc NBazYG3QQJiEuCyRDbQ6sNhTYjzBoawT8sUaUeYpm3yG+fyuYXmlgihFVBBEFS78 WGW07LxuNHG1sFnWL88MFVHvNIU1bkeMpo5nl6LRwHFSiKD1GQM= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:15 2026 by rpki-client