$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft File: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft (raw, json) Hash identifier: 3qwo0lLm6z6UWhKJW0Vpn+WKn/HGGUHh1OaiowggxLY= Subject key identifier: 8A:46:0B:4F:14:08:CF:30:90:91:37:A8:63:92:11:58:C7:EE:33:EA Authority key identifier: 1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 Certificate issuer: /CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Certificate serial: 0A96D10C5FB90DF3FE783676C3AB0688E830DA80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 05:08:13 +0000 Manifest this update: Thu 18 Jun 2026 05:03:13 +0000 Manifest next update: Fri 19 Jun 2026 06:50:13 +0000 Files and hashes: 1: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: OPVfnJ03eBGt5CLhKjsxkf52B3mqtPQw9HLHzg+ODMw=) 2: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl (hash: EZypecHzBNkrORLlNBf72mUGR5dq/VVy5jGJlmPcqnY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 06:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:96:d1:0c:5f:b9:0d:f3:fe:78:36:76:c3:ab:06:88:e8:30:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Validity Not Before: Jun 18 05:03:13 2026 GMT Not After : Jun 19 06:50:13 2026 GMT Subject: CN=8A460B4F1408CF30909137A863921158C7EE33EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fb:f6:c1:53:d5:a1:77:c1:be:b6:e6:2f:39: 59:14:e7:58:21:08:f1:12:67:45:f7:95:8b:dd:db: e7:0c:dc:d0:1a:90:eb:7a:48:af:20:5f:34:e0:4c: 4f:ba:b7:2e:a3:8d:e7:0f:25:60:be:d6:39:f3:c8: a2:d4:b7:6e:ba:8d:fa:3b:1e:f7:29:7f:e8:37:60: 0e:15:e6:9d:ac:4d:9c:54:b9:42:7f:00:ec:cc:dc: d1:68:f0:6f:60:cb:c4:35:73:49:80:c0:a9:ed:f0: 05:9f:3d:2f:bf:1c:4d:3f:c1:42:4e:06:fe:36:2e: 57:27:01:27:a9:44:78:3f:d7:c4:96:49:d6:2c:c8: 1f:40:33:72:26:eb:66:82:e5:ef:04:37:c7:ed:75: da:a7:2c:37:c9:54:3f:2a:31:08:75:8a:b5:aa:c0: 56:ee:83:b2:ce:95:24:41:a0:be:62:ba:0d:88:be: c2:47:1b:45:9a:38:e7:63:34:2f:ac:46:5f:fc:83: 61:b2:da:ee:ca:81:76:c0:50:85:c0:62:a4:3a:24: f5:57:ba:d4:be:5e:e4:07:f8:d4:54:24:1a:4a:4e: 61:47:03:8d:c9:74:93:0c:f3:c7:90:9f:83:2c:d1: c3:f1:f6:69:7f:b5:43:55:36:74:96:60:c7:51:8a: b2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:46:0B:4F:14:08:CF:30:90:91:37:A8:63:92:11:58:C7:EE:33:EA X509v3 Authority Key Identifier: keyid:1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:d2:1c:85:9b:36:22:ca:7d:d1:fd:17:80:47:34:06:00:18: 1b:78:cb:a8:db:12:5d:55:1e:4f:96:1b:9a:88:1c:ba:9d:ed: 94:c5:1b:9e:22:c6:35:8c:4f:a6:80:34:cf:0b:2a:1d:f4:16: 9b:eb:ce:3b:42:30:a8:99:31:58:ee:89:89:5a:e9:e5:f5:d1: 3e:72:00:1e:66:05:fe:76:6e:69:31:b6:33:21:44:9c:cc:0c: a8:ab:5c:7c:de:23:14:92:15:b8:51:41:19:d6:50:8e:93:e7: 4a:9b:90:71:61:39:6d:08:5c:94:f9:f5:6f:76:d9:18:4a:26: 04:d0:e3:4c:1d:cd:64:f1:98:1e:3d:a1:04:1d:66:5c:97:e3: 54:f5:5f:c0:23:7b:04:f8:2a:71:9f:5f:cd:6c:84:ac:3a:42: 2c:bc:18:ef:c9:10:da:d4:19:8a:39:da:97:f5:2d:e9:10:a1: 21:ea:12:e3:21:48:4a:36:2f:96:3f:31:69:cb:38:0b:de:d0: 9e:e8:f3:41:6a:d3:92:34:27:79:13:6d:69:f2:0a:1c:a8:88: 9e:80:27:bb:06:17:42:57:1a:ff:42:01:46:95:f0:f3:a4:ce: 87:b3:a6:a2:24:1b:e6:b5:6a:db:8f:08:31:cb:2d:24:98:24: ac:63:22:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCpbRDF+5DfP+eDZ2w6sGiOgw2oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhE OEZDRTI3NDAeFw0yNjA2MTgwNTAzMTNaFw0yNjA2MTkwNjUwMTNaMDMxMTAvBgNV BAMTKDhBNDYwQjRGMTQwOENGMzA5MDkxMzdBODYzOTIxMTU4QzdFRTMzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX+/bBU9Whd8G+tuYvOVkU51gh CPESZ0X3lYvd2+cM3NAakOt6SK8gXzTgTE+6ty6jjecPJWC+1jnzyKLUt266jfo7 Hvcpf+g3YA4V5p2sTZxUuUJ/AOzM3NFo8G9gy8Q1c0mAwKnt8AWfPS+/HE0/wUJO Bv42LlcnASepRHg/18SWSdYsyB9AM3Im62aC5e8EN8ftddqnLDfJVD8qMQh1irWq wFbug7LOlSRBoL5iug2IvsJHG0WaOOdjNC+sRl/8g2Gy2u7KgXbAUIXAYqQ6JPVX utS+XuQH+NRUJBpKTmFHA43JdJMM88eQn4Ms0cPx9ml/tUNVNnSWYMdRirKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUikYLTxQIzzCQkTeoY5IRWMfuM+owHwYDVR0j BBgwFoAUG2prf5t7rM74oihU96SXiNj84nQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5 QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhEOEZDRTI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjZBNkI3RjlCN0JBQ0NFRjhBMjI4NTRGN0E0OTc4OEQ4RkNF Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3 ODhEOEZDRTI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTSHIWbNiLKfdH9F4BHNAYAGBt4y6jbEl1V Hk+WG5qIHLqd7ZTFG54ixjWMT6aANM8LKh30FpvrzjtCMKiZMVjuiYla6eX10T5y AB5mBf52bmkxtjMhRJzMDKirXHzeIxSSFbhRQRnWUI6T50qbkHFhOW0IXJT59W92 2RhKJgTQ40wdzWTxmB49oQQdZlyX41T1X8AjewT4KnGfX81shKw6Qiy8GO/JENrU GYo52pf1LekQoSHqEuMhSEo2L5Y/MWnLOAve0J7o80Fq05I0J3kTbWnyChyoiJ6A J7sGF0JXGv9CAUaV8POkzoezpqIkG+a1atuPCDHLLSSYJKxjIqs= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:34 2026 by rpki-client