$ rpki-client -vvf rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft File: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft (raw, json) Hash identifier: sc/b5vvwrydxZnUtb9Or/pmqEZKJtVRQYDX//DsTp6o= Subject key identifier: 62:3A:03:7B:ED:7A:30:95:CA:05:AC:8C:35:D2:D9:AD:7C:C7:06:93 Authority key identifier: 02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E Certificate issuer: /CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E Certificate serial: 58BB40C08F479FEABAC2AFF359A625AEADDF465F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 15:15:13 +0000 Manifest this update: Thu 18 Jun 2026 15:10:13 +0000 Manifest next update: Fri 19 Jun 2026 17:17:13 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: ZP3rmLF9cy6fjQhv3gmX6ZweiIwsNbdnkePWQCdw+7I=) 2: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl (hash: 0KJg1CpEKzo6iPMckoMqJ6Qd8F39YIS61p/9yG9be7A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:bb:40:c0:8f:47:9f:ea:ba:c2:af:f3:59:a6:25:ae:ad:df:46:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E Validity Not Before: Jun 18 15:10:13 2026 GMT Not After : Jun 19 17:17:13 2026 GMT Subject: CN=623A037BED7A3095CA05AC8C35D2D9AD7CC70693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:85:54:dd:df:b0:2c:73:ba:e4:59:b9:c6:dd: c2:1b:3c:93:89:50:35:42:1a:db:08:e8:fd:4f:7a: 43:3c:90:96:b2:90:ab:e6:6d:52:58:dc:89:8e:44: fa:70:f1:78:f6:95:ff:75:12:b7:3b:87:b2:fd:e9: 19:a4:66:1a:0c:d2:01:aa:72:33:be:7a:22:f3:c0: e5:38:ef:02:df:9e:b4:b7:15:a1:c2:a7:16:9c:2a: d1:7a:4c:37:c1:08:11:dc:0a:79:9d:11:06:ff:93: 85:70:1c:7d:77:bb:f8:2d:02:84:47:5c:20:03:a8: e4:3f:32:28:94:f3:42:1c:13:b9:ad:c1:88:95:f3: a2:41:b5:45:2e:ed:03:f7:47:0c:62:2d:ea:c2:27: 1d:6b:2d:b2:e2:da:e5:9c:65:26:bc:96:29:2f:29: 20:27:5a:61:ab:c0:47:ff:10:a6:38:19:84:4e:f9: fc:b4:91:8a:53:9f:8e:9f:d2:cc:b6:b3:db:50:7f: b3:8a:60:99:bf:6d:9e:f0:17:48:b8:d2:8a:b8:f7: 4b:36:ae:6d:3a:ea:d5:2a:d5:f8:ad:6b:68:0e:43: bf:f6:4c:43:cc:1e:d0:92:f6:85:f4:cf:48:ad:6b: e3:88:2b:8e:22:7e:23:5f:9d:70:92:56:b2:49:57: ab:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3A:03:7B:ED:7A:30:95:CA:05:AC:8C:35:D2:D9:AD:7C:C7:06:93 X509v3 Authority Key Identifier: keyid:02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:24:3b:87:3c:fe:76:35:c7:1f:98:de:d5:46:9c:a7:7c:2e: e4:3b:fd:5e:8f:eb:6d:c5:59:38:5b:27:9f:85:6d:41:d6:4c: bd:ba:40:f2:be:4f:aa:2a:e9:06:82:56:22:8c:dd:ed:0c:14: e5:4d:af:16:39:49:e4:f9:ae:b0:b7:3f:25:33:48:0b:ce:ae: 32:cc:32:b6:09:f2:c5:9c:93:ac:91:09:4f:54:f1:7e:8c:f3: ae:3b:60:aa:e3:df:75:60:f3:7d:92:77:d1:14:7b:e2:85:6b: 8a:80:47:74:a8:1c:0a:bd:d8:c5:34:d6:f4:84:97:e9:7f:94: 11:2b:9a:be:2e:f9:71:fb:4f:ad:6a:3f:22:a6:2e:01:1e:49: 2f:82:ee:e5:45:22:54:54:99:1d:d6:42:56:bf:93:c3:1b:a9: 36:2e:92:b2:d7:ae:dc:29:80:8a:cf:68:c7:80:9a:48:67:b2: 70:47:24:e2:da:d8:cf:27:0e:be:a4:bd:b6:59:c4:0f:67:e4: 92:d4:e6:8c:46:25:11:5b:b1:66:58:1e:c4:9b:f3:fd:79:42: 32:07:8e:c8:42:42:a2:85:70:a5:a8:40:4b:e1:34:aa:3d:21: 1b:74:e3:c2:6c:0e:3d:b6:50:b5:2a:d1:1c:15:7f:f6:44:4b: ed:a4:7d:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWLtAwI9Hn+q6wq/zWaYlrq3fRl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNDAzRjZERDU2RjBENUM1MkM1OTM3QjUxN0E0QzFC ODFFOEIyRTAeFw0yNjA2MTgxNTEwMTNaFw0yNjA2MTkxNzE3MTNaMDMxMTAvBgNV BAMTKDYyM0EwMzdCRUQ3QTMwOTVDQTA1QUM4QzM1RDJEOUFEN0NDNzA2OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQhVTd37Asc7rkWbnG3cIbPJOJ UDVCGtsI6P1PekM8kJaykKvmbVJY3ImORPpw8Xj2lf91Erc7h7L96RmkZhoM0gGq cjO+eiLzwOU47wLfnrS3FaHCpxacKtF6TDfBCBHcCnmdEQb/k4VwHH13u/gtAoRH XCADqOQ/MiiU80IcE7mtwYiV86JBtUUu7QP3RwxiLerCJx1rLbLi2uWcZSa8likv KSAnWmGrwEf/EKY4GYRO+fy0kYpTn46f0sy2s9tQf7OKYJm/bZ7wF0i40oq490s2 rm066tUq1fita2gOQ7/2TEPMHtCS9oX0z0ita+OIK44ifiNfnXCSVrJJV6sTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYjoDe+16MJXKBayMNdLZrXzHBpMwHwYDVR0j BBgwFoAUAgQD9t1W8NXFLFk3tRekwbgeiy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU5NTRmNDItOTQ1Mi00MjQ3LTk5YTUtMzFhNTNlNTZhOWY4LzAvMDIwNDAzRjZE RDU2RjBENUM1MkM1OTM3QjUxN0E0QzFCODFFOEIyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjA0MDNGNkRENTZGMEQ1QzUyQzU5MzdCNTE3QTRDMUI4MUU4 QjJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvMDIwNDAzRjZERDU2RjBENUM1MkM1OTM3QjUxN0E0 QzFCODFFOEIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkkO4c8/nY1xx+Y3tVGnKd8LuQ7/V6P623F WThbJ5+FbUHWTL26QPK+T6oq6QaCViKM3e0MFOVNrxY5SeT5rrC3PyUzSAvOrjLM MrYJ8sWck6yRCU9U8X6M8647YKrj33Vg832Sd9EUe+KFa4qAR3SoHAq92MU01vSE l+l/lBErmr4u+XH7T61qPyKmLgEeSS+C7uVFIlRUmR3WQla/k8MbqTYukrLXrtwp gIrPaMeAmkhnsnBHJOLa2M8nDr6kvbZZxA9n5JLU5oxGJRFbsWZYHsSb8/15QjIH jshCQqKFcKWoQEvhNKo9IRt048JsDj22ULUq0RwVf/ZES+2kfdw= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:59 2026 by rpki-client