$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft File: CD845730E45E4D531071D97C1EDC23DA378D662F.mft (raw, json) Hash identifier: f7WDZuV/Eh7dGvc0BkivAEEYqA93Rq1hU9sGxBBaCLk= Subject key identifier: 5B:96:18:3D:34:4D:E7:AF:DB:E5:71:0E:63:E7:E7:88:4F:99:50:3C Authority key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F Certificate issuer: /CN=CD845730E45E4D531071D97C1EDC23DA378D662F Certificate serial: 552E33BDCE31A158870850843D06AE868F68763B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 02:24:46 +0000 Manifest this update: Thu 18 Jun 2026 02:19:46 +0000 Manifest next update: Fri 19 Jun 2026 05:52:46 +0000 Files and hashes: 1: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: ZyTKIgLUxCGhcIet/CFJoBSXRoiA7e9G+Kr6S5o0mEQ=) 2: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: lb4d9lrnmMWGai0ItqfgLnvKFt7iEuEC2HCE9pUg2nE=) 3: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: BgiKJc54U9vx0Bz6VAlgbJ7Gti2eL3QTE9xees67wzA=) 4: CD845730E45E4D531071D97C1EDC23DA378D662F.crl (hash: QmrFlWXdsqq18U3upwaGYwGQYEgx8rU/HUdk3s31PTM=) 5: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: qBRAe7C40tWA04dsJPNXkwqtoGUaunwx7S+rfFhu9ho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 05:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2e:33:bd:ce:31:a1:58:87:08:50:84:3d:06:ae:86:8f:68:76:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD845730E45E4D531071D97C1EDC23DA378D662F Validity Not Before: Jun 18 02:19:46 2026 GMT Not After : Jun 19 05:52:46 2026 GMT Subject: CN=5B96183D344DE7AFDBE5710E63E7E7884F99503C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c4:bd:33:ef:80:f1:bd:68:8c:89:96:dc:18: 23:31:cb:66:56:89:0c:c2:16:79:a8:54:bb:42:26: 51:9d:a0:8d:a1:d8:c9:22:62:96:76:ec:7b:4b:33: 42:8b:0d:6d:70:19:7e:e3:cf:ba:e0:5a:32:05:2e: f9:7c:9f:75:30:4d:39:20:e2:da:95:73:cd:c3:1b: d3:2f:62:02:f1:cc:6f:07:21:d4:2c:12:82:7e:3f: 35:7b:31:20:03:79:05:7d:9d:75:4d:56:c4:07:6c: 92:98:81:7a:07:3c:12:dc:2d:2b:76:7f:f7:8e:37: 66:c9:5f:63:2d:d6:2d:b2:15:39:be:9b:d5:ee:0e: 99:cd:57:49:f8:e8:9b:b5:25:ac:10:96:b1:55:b1: 8a:fb:68:04:ad:b1:41:06:4d:c9:d0:44:0e:6d:00: 84:b6:5c:da:14:7b:13:a2:fd:4c:8c:93:15:79:79: 96:27:4f:9e:27:d5:71:77:ed:ae:d3:41:fd:9b:5a: 59:71:e8:c0:93:8c:f4:7d:03:56:b5:a6:98:3d:41: ac:89:bf:99:b6:ca:c6:5f:d7:69:dd:e1:bd:5c:9c: 2d:84:71:60:a5:bd:91:70:fe:85:06:91:70:0f:df: a3:ca:82:c2:71:98:be:4f:73:5a:54:26:6b:11:35: 2b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:96:18:3D:34:4D:E7:AF:DB:E5:71:0E:63:E7:E7:88:4F:99:50:3C X509v3 Authority Key Identifier: keyid:CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:37:c8:cb:9d:54:db:af:0b:84:8f:89:13:b8:ec:4d:9c:d1: b9:b0:06:74:81:20:7f:7a:64:7e:53:0c:10:a8:6c:42:68:55: 23:02:48:dd:d2:ab:9e:03:78:30:5b:a1:af:9a:a0:3a:0d:13: d7:b6:66:2e:f3:f7:2c:e1:bd:a1:50:25:62:dc:6a:6e:c3:e1: ce:cc:e3:25:7f:a9:25:81:72:03:e6:52:0d:3e:77:a7:7c:cf: ff:9d:f0:a5:e3:bf:40:de:c6:17:e8:92:00:7b:fc:7a:bf:74: f3:d5:30:01:36:7b:a1:96:d7:2c:a4:da:06:6c:8e:68:19:b3: 0a:1b:3a:37:9a:d0:17:bd:81:9d:10:39:db:db:52:68:4e:84: 47:b6:d0:eb:cc:18:f9:cd:98:10:70:5a:e8:1f:11:1f:2a:d8: 4b:84:7c:dd:47:d8:34:f0:40:22:1f:61:51:18:6f:28:62:37: a6:8f:fb:90:b8:9b:58:ad:46:38:26:43:6a:a5:d8:b2:bf:2a: a6:48:d5:c8:ff:a8:1a:a4:26:59:48:cb:9c:73:6e:a9:01:6a: fc:10:8b:6c:c0:8e:7c:ec:ae:e2:00:63:82:95:38:ea:d2:c5: 56:80:0c:5f:65:37:38:03:87:f2:5c:39:03:eb:7a:07:94:92: 89:a3:fb:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVS4zvc4xoViHCFCEPQauho9odjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEz NzhENjYyRjAeFw0yNjA2MTgwMjE5NDZaFw0yNjA2MTkwNTUyNDZaMDMxMTAvBgNV BAMTKDVCOTYxODNEMzQ0REU3QUZEQkU1NzEwRTYzRTdFNzg4NEY5OTUwM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbxL0z74DxvWiMiZbcGCMxy2ZW iQzCFnmoVLtCJlGdoI2h2MkiYpZ27HtLM0KLDW1wGX7jz7rgWjIFLvl8n3UwTTkg 4tqVc83DG9MvYgLxzG8HIdQsEoJ+PzV7MSADeQV9nXVNVsQHbJKYgXoHPBLcLSt2 f/eON2bJX2Mt1i2yFTm+m9XuDpnNV0n46Ju1JawQlrFVsYr7aAStsUEGTcnQRA5t AIS2XNoUexOi/UyMkxV5eZYnT54n1XF37a7TQf2bWllx6MCTjPR9A1a1ppg9QayJ v5m2ysZf12nd4b1cnC2EcWClvZFw/oUGkXAP36PKgsJxmL5Pc1pUJmsRNSunAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW5YYPTRN56/b5XEOY+fniE+ZUDwwHwYDVR0j BBgwFoAUzYRXMOReTVMQcdl8Htwj2jeNZi8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA5NjJjNmUtNTk1YS00N2M0LWFhN2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBF NDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEzNzhENjYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDg0NTczMEU0NUU0RDUzMTA3MUQ5N0MxRURDMjNEQTM3OEQ2 NjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIz REEzNzhENjYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIE3yMudVNuvC4SPiRO47E2c0bmwBnSBIH96 ZH5TDBCobEJoVSMCSN3Sq54DeDBboa+aoDoNE9e2Zi7z9yzhvaFQJWLcam7D4c7M 4yV/qSWBcgPmUg0+d6d8z/+d8KXjv0DexhfokgB7/Hq/dPPVMAE2e6GW1yyk2gZs jmgZswobOjea0Be9gZ0QOdvbUmhOhEe20OvMGPnNmBBwWugfER8q2EuEfN1H2DTw QCIfYVEYbyhiN6aP+5C4m1itRjgmQ2ql2LK/KqZI1cj/qBqkJllIy5xzbqkBavwQ i2zAjnzsruIAY4KVOOrSxVaADF9lNzgDh/JcOQPregeUkomj+yA= -----END CERTIFICATE-----Generated at Thu Jun 18 19:03:16 2026 by rpki-client