$ rpki-client -vvf rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft File: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft (raw, json) Hash identifier: dECGpI6uu0hm8beCZ1s5ZJa5YL68ODV2dupxmiGfGKY= Subject key identifier: 29:32:2A:46:14:FA:40:4F:A5:88:90:60:79:38:57:A7:9B:6E:1D:35 Authority key identifier: 18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC Certificate issuer: /CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC Certificate serial: 3F0A1E4B970B44DA1B951E40169AD0A427C84F6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 21:16:35 +0000 Manifest this update: Fri 19 Jun 2026 21:11:35 +0000 Manifest next update: Sat 20 Jun 2026 22:09:35 +0000 Files and hashes: 1: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: XT0qu0X/ewJ1G8Ps14eM7XvkOXUBLJSpuICPqH+2rFs=) 2: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: vrdxMLho5nkxNsVzaZL33riDh9yKFKVbCWaknvqb6JM=) 3: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl (hash: XqwMctDQBT7bF4Cocm8EBjRub5fj58jzOMsky4og9uE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:0a:1e:4b:97:0b:44:da:1b:95:1e:40:16:9a:d0:a4:27:c8:4f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC Validity Not Before: Jun 19 21:11:35 2026 GMT Not After : Jun 20 22:09:35 2026 GMT Subject: CN=29322A4614FA404FA5889060793857A79B6E1D35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b9:0e:a1:52:77:1d:a8:02:e5:ce:79:53:40: 76:a3:18:6c:b3:8a:ba:70:d1:2b:f8:b8:7f:f3:60: dd:7b:f1:99:b6:26:fa:91:7a:96:37:7b:ca:9a:91: f5:31:de:1f:da:63:76:fe:4d:14:41:11:c6:3c:8d: a9:c6:f1:c9:b2:09:9e:34:68:db:0d:2f:66:db:57: 72:1e:8b:98:73:fc:24:45:15:74:80:f9:b2:c6:42: 8f:0b:76:92:dc:ad:c6:a7:fc:e8:1b:ac:5b:c2:97: aa:c6:24:4e:36:6c:8a:3d:c9:49:94:56:02:02:a3: d2:15:ff:f8:20:b8:b2:94:e0:a3:2d:d8:6a:9d:47: 79:19:41:02:02:ac:67:a8:d5:eb:5b:49:00:27:c9: 4e:97:87:26:45:ad:c8:09:48:c9:46:d0:77:c8:75: 11:c4:75:26:52:99:7e:b8:94:9c:1b:bb:3a:ad:96: 23:03:06:4b:50:3a:e9:f0:98:2f:41:4c:97:8e:17: e3:e2:81:4f:b9:14:6d:8a:87:cb:c0:e8:cc:c8:bf: 30:d8:a1:ec:00:53:ad:35:3d:39:10:4e:10:a5:ac: d8:e4:d7:db:2a:a1:05:de:3a:f4:f5:02:3a:82:70: 9c:e6:55:2d:05:1e:49:86:e2:a2:42:be:35:57:0b: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:32:2A:46:14:FA:40:4F:A5:88:90:60:79:38:57:A7:9B:6E:1D:35 X509v3 Authority Key Identifier: keyid:18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:e5:2f:87:36:58:1d:3d:10:f3:13:2f:e9:dc:21:c7:1a:1c: 1f:22:aa:11:e5:1d:4a:81:b0:5b:43:3e:f9:48:04:24:c1:ed: 6a:5f:94:f8:b0:54:75:94:a7:75:48:6d:c0:3a:18:a3:61:70: 99:e2:83:9f:c4:02:1d:ad:8f:60:fb:4b:5f:48:92:82:4a:f7: aa:a3:3c:c0:44:0c:f2:e2:68:f5:53:e1:6e:12:e4:b0:c9:73: c4:ac:aa:03:00:23:d0:b2:9e:22:43:a3:60:83:41:1a:06:4f: 2d:e1:12:c4:13:a2:21:62:29:62:41:04:ad:42:50:43:3d:51: ac:f2:99:8f:ae:d9:95:b9:91:07:d7:7d:24:bb:99:87:36:6f: 1b:f8:37:b1:03:21:42:b4:2b:b0:5f:64:f5:c4:01:8c:2e:e9: b7:37:a7:b4:d5:cc:03:0e:cb:ea:66:91:ac:7a:d9:e4:b4:04: c5:d8:87:16:12:47:f0:81:12:0b:21:59:b4:40:19:16:73:41: c6:9e:06:e8:be:56:33:ae:9e:8a:9f:bf:ea:50:f8:15:75:89: 24:f2:c0:76:87:33:07:c5:46:d4:df:a3:26:03:59:da:e6:fb: fd:54:1c:9f:1f:1e:00:cd:a1:95:63:b1:1f:75:52:a3:80:0c: d7:57:3b:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPwoeS5cLRNoblR5AFprQpCfIT28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5MDIyNEJBQ0NFOEM1NTFDMTI3QTdGNDA1MkVDRTBB NjhCQzZBQzAeFw0yNjA2MTkyMTExMzVaFw0yNjA2MjAyMjA5MzVaMDMxMTAvBgNV BAMTKDI5MzIyQTQ2MTRGQTQwNEZBNTg4OTA2MDc5Mzg1N0E3OUI2RTFEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeuQ6hUncdqALlznlTQHajGGyz irpw0Sv4uH/zYN178Zm2JvqRepY3e8qakfUx3h/aY3b+TRRBEcY8janG8cmyCZ40 aNsNL2bbV3Iei5hz/CRFFXSA+bLGQo8LdpLcrcan/OgbrFvCl6rGJE42bIo9yUmU VgICo9IV//gguLKU4KMt2GqdR3kZQQICrGeo1etbSQAnyU6XhyZFrcgJSMlG0HfI dRHEdSZSmX64lJwbuzqtliMDBktQOunwmC9BTJeOF+PigU+5FG2Kh8vA6MzIvzDY oewAU601PTkQThClrNjk19sqoQXeOvT1AjqCcJzmVS0FHkmG4qJCvjVXC7k1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKTIqRhT6QE+liJBgeThXp5tuHTUwHwYDVR0j BBgwFoAUGJAiS6zOjFUcEnp/QFLs4KaLxqwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg1M2FmZGQtMmUwOS00NzczLThiZTQtNmZkMGVlOTBiMDQwLzAvMTg5MDIyNEJB Q0NFOEM1NTFDMTI3QTdGNDA1MkVDRTBBNjhCQzZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODkwMjI0QkFDQ0U4QzU1MUMxMjdBN0Y0MDUyRUNFMEE2OEJD NkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvMTg5MDIyNEJBQ0NFOEM1NTFDMTI3QTdGNDA1MkVD RTBBNjhCQzZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDlL4c2WB09EPMTL+ncIccaHB8iqhHlHUqB sFtDPvlIBCTB7WpflPiwVHWUp3VIbcA6GKNhcJnig5/EAh2tj2D7S19IkoJK96qj PMBEDPLiaPVT4W4S5LDJc8SsqgMAI9CyniJDo2CDQRoGTy3hEsQToiFiKWJBBK1C UEM9UazymY+u2ZW5kQfXfSS7mYc2bxv4N7EDIUK0K7BfZPXEAYwu6bc3p7TVzAMO y+pmkax62eS0BMXYhxYSR/CBEgshWbRAGRZzQcaeBui+VjOunoqfv+pQ+BV1iSTy wHaHMwfFRtTfoyYDWdrm+/1UHJ8fHgDNoZVjsR91UqOADNdXO50= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:05 2026 by rpki-client