$ rpki-client -vvf rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft File: F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft (raw, json) Hash identifier: Al0i08t/MCaU5lkRojQQrCbP/TMPRaWJWEjVd2gE1Cs= Subject key identifier: 74:D9:EA:55:48:E5:77:F4:48:BF:E0:13:1C:6F:A1:4E:1D:72:2B:B5 Authority key identifier: F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 Certificate issuer: /CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Certificate serial: 0D32B022CECB97496092EBB528857F78052AB177 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 08:35:08 +0000 Manifest this update: Sat 20 Jun 2026 08:30:08 +0000 Manifest next update: Sun 21 Jun 2026 09:52:08 +0000 Files and hashes: 1: F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl (hash: 2W+YsDMv1tg4RNMUy1s2IzkYt1et3kIZ16t7wD93nNw=) 2: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: /vHPttEy0S/+L0N0xJZEd760O2VDEp7iklZoHe07g/s=) 3: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: aue2+kr7HTRk/tNCSk94pVQ+a17G6VqHTtAotfDji1I=) 4: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: NyzMvcvP5P8597pti0RlOgOJdexX/ZQfgDt+YCdTIKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 09:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:32:b0:22:ce:cb:97:49:60:92:eb:b5:28:85:7f:78:05:2a:b1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Validity Not Before: Jun 20 08:30:08 2026 GMT Not After : Jun 21 09:52:08 2026 GMT Subject: CN=74D9EA5548E577F448BFE0131C6FA14E1D722BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:64:09:60:1f:c5:9c:c3:a8:05:04:ba:dd:56: ab:cd:a5:4e:d7:65:83:af:86:66:0c:00:ba:3c:d3: cd:7b:7b:26:3f:55:bf:04:ea:fc:58:4e:8e:c5:2d: 4c:ed:b7:6d:43:f6:bb:1c:58:b4:fe:24:17:3a:8b: 1e:b4:7c:fa:de:db:5c:ef:03:e0:03:03:20:42:86: 97:de:97:5b:f0:95:da:e4:64:88:d1:07:30:52:fd: c0:96:b8:3c:98:70:7f:4f:7c:4a:e2:30:d7:7a:a1: 92:ee:af:10:4f:99:16:f5:c6:4a:a6:12:7a:c7:d4: 10:29:81:07:1b:12:85:ef:81:32:26:4a:9c:72:9a: bf:75:12:ad:58:21:e9:f2:d2:8f:10:48:1c:36:de: 3b:32:56:a1:05:47:3c:ff:94:e6:7a:75:10:a3:f5: 43:e9:f2:03:ca:98:b5:f3:f2:59:c6:18:9a:86:c3: 1f:71:c8:fb:4e:f1:6b:5b:8d:f1:be:55:ff:3e:25: 1c:dc:a7:76:d7:9e:66:fb:f3:98:b9:b4:0c:7d:47: 17:71:cc:d6:44:3a:ff:32:7d:ac:2f:63:d8:48:16: 6b:93:1c:d8:14:6a:b9:d3:0c:16:21:bf:57:95:f5: 3a:51:8d:b1:85:9a:ed:1f:2f:92:43:fb:9a:a1:fa: 7e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D9:EA:55:48:E5:77:F4:48:BF:E0:13:1C:6F:A1:4E:1D:72:2B:B5 X509v3 Authority Key Identifier: keyid:F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:36:f1:35:57:01:b3:46:d2:ca:43:a8:c4:97:2b:8d:8e:f5: e2:48:bb:a1:bf:e1:66:40:19:e7:69:86:98:51:60:69:7a:b6: b4:12:85:6a:6e:32:66:b3:1b:52:44:ee:d3:eb:f4:81:89:45: 41:9a:6e:56:69:9a:c9:ed:25:a4:c7:91:ad:32:6d:95:77:31: 50:04:bb:7d:c2:7d:18:ac:65:71:92:14:89:db:0b:20:f5:db: da:c7:0b:58:13:7b:18:25:92:b3:00:ba:74:3c:19:31:10:4e: 0c:a0:ea:6c:87:94:74:ea:eb:a1:ea:37:c3:03:6a:bb:bd:45: c8:66:ae:76:ce:d0:75:b1:62:dc:fd:59:78:de:2a:33:9e:8b: 44:9e:bc:31:d2:9f:39:a2:3f:da:38:e5:cb:ce:23:96:3c:dc: 3f:f8:71:e1:29:65:ff:a7:5f:d9:99:14:1b:f2:a3:dd:74:c6: d5:56:cf:59:95:d2:c7:4d:bc:e7:b2:3c:97:98:a4:ee:7a:40: 97:5b:8c:9b:aa:9a:a3:0f:fd:47:22:09:19:6a:07:5e:a2:19: 1c:08:6d:0a:7b:35:3b:c8:e9:e8:2e:1f:76:89:e5:07:e1:ae: b9:2f:b6:92:2a:5b:2e:a3:67:34:fe:35:78:14:03:97:8a:50: cd:6e:8c:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDTKwIs7Ll0lgkuu1KIV/eAUqsXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4NTQy N0IyNDA0MDAeFw0yNjA2MjAwODMwMDhaFw0yNjA2MjEwOTUyMDhaMDMxMTAvBgNV BAMTKDc0RDlFQTU1NDhFNTc3RjQ0OEJGRTAxMzFDNkZBMTRFMUQ3MjJCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdZAlgH8Wcw6gFBLrdVqvNpU7X ZYOvhmYMALo80817eyY/Vb8E6vxYTo7FLUztt21D9rscWLT+JBc6ix60fPre21zv A+ADAyBChpfel1vwldrkZIjRBzBS/cCWuDyYcH9PfEriMNd6oZLurxBPmRb1xkqm EnrH1BApgQcbEoXvgTImSpxymr91Eq1YIeny0o8QSBw23jsyVqEFRzz/lOZ6dRCj 9UPp8gPKmLXz8lnGGJqGwx9xyPtO8WtbjfG+Vf8+JRzcp3bXnmb785i5tAx9Rxdx zNZEOv8yfawvY9hIFmuTHNgUarnTDBYhv1eV9TpRjbGFmu0fL5JD+5qh+n5DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdNnqVUjld/RIv+ATHG+hTh1yK7UwHwYDVR0j BBgwFoAU+ED4ttMy5X6j3Lhn27DYVCeyQEAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA0M2E4ODktYzg2MS00ZDI5LTlkNzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZE MzMyRTU3RUEzRENCODY3REJCMEQ4NTQyN0IyNDA0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODQwRjhCNkQzMzJFNTdFQTNEQ0I4NjdEQkIwRDg1NDI3QjI0 MDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk NzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4 NTQyN0IyNDA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFw28TVXAbNG0spDqMSXK42O9eJIu6G/4WZA GedphphRYGl6trQShWpuMmazG1JE7tPr9IGJRUGablZpmsntJaTHka0ybZV3MVAE u33CfRisZXGSFInbCyD129rHC1gTexglkrMAunQ8GTEQTgyg6myHlHTq66HqN8MD aru9RchmrnbO0HWxYtz9WXjeKjOei0SevDHSnzmiP9o45cvOI5Y83D/4ceEpZf+n X9mZFBvyo910xtVWz1mV0sdNvOeyPJeYpO56QJdbjJuqmqMP/UciCRlqB16iGRwI bQp7NTvI6eguH3aJ5QfhrrkvtpIqWy6jZzT+NXgUA5eKUM1ujPE= -----END CERTIFICATE-----Generated at Sat Jun 20 11:32:48 2026 by rpki-client