$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft File: C940C2C66C795EF89DE57AA820616ED8225890BC.mft (raw, json) Hash identifier: dElGuEa7r/bvlOKzzxs0sxpYmHbOYe+K46XPIFOG0/o= Subject key identifier: FE:71:60:71:41:1D:8F:F8:9C:53:59:00:B2:FE:03:43:C1:3B:51:1B Authority key identifier: C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC Certificate issuer: /CN=C940C2C66C795EF89DE57AA820616ED8225890BC Certificate serial: 3BC0BDC2D282BE81E6BFFBC6A290D9EE4E3610EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 22:28:09 +0000 Manifest this update: Fri 19 Jun 2026 22:23:09 +0000 Manifest next update: Sun 21 Jun 2026 01:48:09 +0000 Files and hashes: 1: C940C2C66C795EF89DE57AA820616ED8225890BC.crl (hash: yDgbc8wHABjxgvEl3REB8PvZ+67AwmeYtdv6peWTMsY=) 2: 3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (hash: EIKjtb6bLXexCIbSvIG/auaO1yK9dSi+ewqDx2meiK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c0:bd:c2:d2:82:be:81:e6:bf:fb:c6:a2:90:d9:ee:4e:36:10:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C940C2C66C795EF89DE57AA820616ED8225890BC Validity Not Before: Jun 19 22:23:09 2026 GMT Not After : Jun 21 01:48:09 2026 GMT Subject: CN=FE716071411D8FF89C535900B2FE0343C13B511B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1b:5a:30:9c:f9:e6:b4:0a:ea:b8:97:da:ee: 3f:42:7a:c4:59:53:93:6c:4a:78:1f:fe:1f:51:de: 81:a1:4f:4a:f4:08:a4:d3:59:f0:d7:a0:29:7f:75: 2e:55:f3:30:7d:ea:dd:20:d3:be:7a:89:3b:ed:58: 02:5c:e7:79:b1:dd:06:0d:c5:38:09:af:dc:5e:23: 1a:74:2c:28:c7:52:f9:ed:cf:fc:8b:d7:85:e0:a8: ce:b6:43:e7:f5:e6:ea:65:95:da:a2:96:72:c4:42: 00:0c:90:26:2e:72:5b:9b:70:a1:e3:42:da:02:fb: 9d:58:61:09:c2:5f:42:2b:70:9e:4e:d3:d9:74:a3: ad:ad:31:1f:5e:ec:fb:1e:05:5e:c9:bf:ac:86:f2: 74:91:0e:5d:5f:52:cb:64:b5:f0:a3:d4:25:98:ed: ff:a8:84:1e:70:97:0d:49:bf:53:a8:85:50:d6:16: 87:21:ab:a4:ce:dd:f3:2c:26:05:b2:be:6b:f8:ca: 47:21:9c:5e:4c:92:36:71:55:0d:0c:91:11:1e:d1: f0:a0:c1:e0:0d:7b:4e:5d:ad:8a:ff:ba:ed:b8:68: 07:88:11:e4:6e:e8:12:c9:57:82:17:1b:d5:c4:f7: a9:9f:61:b8:cb:9c:3d:de:d7:97:e0:dc:3d:7f:b5: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:71:60:71:41:1D:8F:F8:9C:53:59:00:B2:FE:03:43:C1:3B:51:1B X509v3 Authority Key Identifier: keyid:C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:b2:34:77:71:e0:04:aa:70:63:1b:03:9e:86:5a:2f:00:4e: 27:14:c3:10:6b:5d:b0:9f:8c:58:76:6c:e2:4d:30:5d:1c:4a: 66:b5:19:71:d6:0c:7b:84:72:b4:e5:e7:0c:79:2a:4c:6f:f1: 07:3c:fc:c7:e9:5a:94:c9:0f:ed:5c:95:1c:13:80:fd:a8:51: c6:24:f3:52:0f:ee:de:32:97:68:94:df:81:77:d9:56:17:fa: 49:5d:0b:17:16:09:2e:b8:61:76:c4:81:ca:df:22:bf:fc:4a: 85:88:9a:93:cc:fd:31:b3:08:d7:8d:37:da:af:88:0c:ef:71: ad:3f:ab:bc:cf:7f:42:5e:2a:8c:55:27:59:af:64:ec:e1:2a: c3:ee:1e:89:5e:f4:20:21:62:21:dd:3a:9b:08:2e:ca:9b:35: cf:0d:46:3d:c1:a3:5e:ff:b9:6c:27:e2:f7:ab:c3:47:77:12: d1:38:9a:ff:45:b2:cf:11:0a:eb:4f:f8:0d:2c:65:fe:09:69: ab:1c:bb:4c:7a:0c:9c:45:a8:ed:0a:6a:52:2f:95:7a:6c:44: e9:4a:1a:3d:ab:1e:be:98:f5:be:37:3f:0c:93:b9:57:fc:9b: a4:66:14:7e:34:f5:b5:12:e7:d8:45:c5:3c:d5:c4:2f:f0:38: 3a:05:6b:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8C9wtKCvoHmv/vGopDZ7k42EO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0MEMyQzY2Qzc5NUVGODlERTU3QUE4MjA2MTZFRDgy MjU4OTBCQzAeFw0yNjA2MTkyMjIzMDlaFw0yNjA2MjEwMTQ4MDlaMDMxMTAvBgNV BAMTKEZFNzE2MDcxNDExRDhGRjg5QzUzNTkwMEIyRkUwMzQzQzEzQjUxMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWG1ownPnmtArquJfa7j9CesRZ U5NsSngf/h9R3oGhT0r0CKTTWfDXoCl/dS5V8zB96t0g0756iTvtWAJc53mx3QYN xTgJr9xeIxp0LCjHUvntz/yL14XgqM62Q+f15uplldqilnLEQgAMkCYuclubcKHj QtoC+51YYQnCX0IrcJ5O09l0o62tMR9e7PseBV7Jv6yG8nSRDl1fUstktfCj1CWY 7f+ohB5wlw1Jv1OohVDWFochq6TO3fMsJgWyvmv4ykchnF5MkjZxVQ0MkREe0fCg weANe05drYr/uu24aAeIEeRu6BLJV4IXG9XE96mfYbjLnD3e15fg3D1/tdQ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/nFgcUEdj/icU1kAsv4DQ8E7URswHwYDVR0j BBgwFoAUyUDCxmx5Xvid5XqoIGFu2CJYkLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U0ZTEwM2UtM2Q3OC00YWUwLTliYTQtZDE3OTJmZmEwNGFjLzAvQzk0MEMyQzY2 Qzc5NUVGODlERTU3QUE4MjA2MTZFRDgyMjU4OTBCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTQwQzJDNjZDNzk1RUY4OURFNTdBQTgyMDYxNkVEODIyNTg5 MEJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U0ZTEwM2UtM2Q3OC00YWUwLTli YTQtZDE3OTJmZmEwNGFjLzAvQzk0MEMyQzY2Qzc5NUVGODlERTU3QUE4MjA2MTZF RDgyMjU4OTBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMayNHdx4ASqcGMbA56GWi8ATicUwxBrXbCf jFh2bOJNMF0cSma1GXHWDHuEcrTl5wx5Kkxv8Qc8/MfpWpTJD+1clRwTgP2oUcYk 81IP7t4yl2iU34F32VYX+kldCxcWCS64YXbEgcrfIr/8SoWImpPM/TGzCNeNN9qv iAzvca0/q7zPf0JeKoxVJ1mvZOzhKsPuHole9CAhYiHdOpsILsqbNc8NRj3Bo17/ uWwn4verw0d3EtE4mv9Fss8RCutP+A0sZf4Jaascu0x6DJxFqO0KalIvlXpsROlK Gj2rHr6Y9b43PwyTuVf8m6RmFH409bUS59hFxTzVxC/wODoFa0I= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:17 2026 by rpki-client