$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft File: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft (raw, json) Hash identifier: V+DdTidFID5JwSmAXeYe6fTJS8Jk+Rv0UpTTyfwwaLU= Subject key identifier: A6:EA:A9:1E:96:74:07:90:D2:00:6E:47:B3:F2:C4:58:D6:AB:58:26 Authority key identifier: 00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF Certificate issuer: /CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Certificate serial: 205879E9D1E9E5BBADE8405D96D3ED0C935ABC38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft Manifest number: 41 Signing time: Thu 18 Jun 2026 16:42:07 +0000 Manifest this update: Thu 18 Jun 2026 16:37:07 +0000 Manifest next update: Fri 19 Jun 2026 17:04:07 +0000 Files and hashes: 1: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl (hash: pd/L18WQHE7AAOIOvEWhrxi2AjlfKSv33NPVfyXDokI=) 2: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: Rh9qnUB02qhjNfXj2g1O5tEu9u7bYMmnyx0Vs0JNy30=) 3: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: RevoOpF5++1wWoPWwmQB4PPK000UixnKZHWg4wTOKek=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:58:79:e9:d1:e9:e5:bb:ad:e8:40:5d:96:d3:ed:0c:93:5a:bc:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Validity Not Before: Jun 18 16:37:07 2026 GMT Not After : Jun 19 17:04:07 2026 GMT Subject: CN=A6EAA91E96740790D2006E47B3F2C458D6AB5826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a2:9f:0f:cf:f2:7c:cf:bb:bc:ef:5f:be:61: 12:45:88:0f:8e:d3:da:58:5d:be:1e:72:73:b2:b1: 5e:29:01:21:19:c6:a2:07:e3:a1:88:d3:85:05:df: ff:bf:de:0f:f4:3a:45:fa:24:b8:f2:37:43:4a:f0: e9:db:19:ac:1a:b7:9b:7f:a9:da:f4:1b:fa:80:0a: c7:77:62:85:ca:93:08:25:4d:85:53:7e:3c:4b:bd: 19:0c:e1:49:e9:ed:57:c4:9f:aa:c7:1c:be:de:35: 52:58:4c:02:4d:4e:fb:70:a6:4b:e0:11:61:6a:8a: d9:24:ca:52:cf:65:f4:e3:51:c6:74:66:e8:21:7c: 01:ba:46:68:48:a0:03:39:8d:aa:7d:7f:a8:a0:0a: 3d:e7:97:2c:39:08:14:bc:21:4f:e8:6a:5a:dd:be: c7:a5:49:a6:b1:4f:f6:52:3b:74:50:6f:b3:24:c8: fe:73:27:a6:f0:60:ca:9b:e3:44:d3:c9:b0:03:e8: c7:d0:a9:b6:dd:78:9c:81:a5:88:4c:5c:24:d3:2b: 17:f3:2d:3e:6c:a3:7e:3a:5b:2e:d9:10:1f:bd:f4: 73:89:f1:df:20:ae:ad:3c:bb:8e:05:74:48:48:f4: a5:7b:1c:3d:c6:19:56:49:df:e0:49:36:68:78:06: c6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EA:A9:1E:96:74:07:90:D2:00:6E:47:B3:F2:C4:58:D6:AB:58:26 X509v3 Authority Key Identifier: keyid:00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c3:db:d7:e5:81:10:f2:cb:00:63:5b:74:d1:4a:91:0c:de: 9e:f4:43:8b:f1:26:0c:b0:41:17:27:4b:a1:e3:25:a0:4a:95: 70:d0:7c:f0:88:c3:9a:5d:1c:74:34:e0:18:d3:55:27:3b:47: bb:a7:9f:c1:c4:f6:1d:63:ea:59:93:f2:7b:54:cb:40:60:80: b9:b5:8b:28:d4:d1:7d:2f:f4:e0:6e:ac:e3:49:b5:2d:8b:80: 44:8b:59:90:9a:67:b4:40:c4:0f:6f:e3:63:e0:cf:16:89:60: 73:54:28:ac:31:fa:cf:93:a5:b7:a3:f2:fc:4a:f3:01:53:4a: f4:42:61:0c:aa:cb:bc:ed:90:74:e5:5c:89:a6:e2:3f:f1:3f: b7:4d:3d:de:d6:1b:3c:c9:27:18:9c:6e:9a:12:5b:a4:78:a4: 9c:29:d0:dd:95:15:a6:e9:d2:f7:5e:b1:8c:7a:24:eb:12:86: 2c:fe:0c:84:83:41:b9:43:09:d4:27:aa:cf:73:47:e9:9b:12: 43:af:25:9d:3e:31:19:35:70:09:e4:99:47:89:ba:40:43:b9: 79:f6:6b:f4:6a:7c:23:27:5c:fc:62:b1:55:63:a8:7d:f6:d9: 13:46:3f:39:d1:49:6c:7b:98:16:d9:32:bd:d3:5c:30:6b:96: 05:75:b8:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFh56dHp5but6EBdltPtDJNavDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2 RTIxNTJDRjAeFw0yNjA2MTgxNjM3MDdaFw0yNjA2MTkxNzA0MDdaMDMxMTAvBgNV BAMTKEE2RUFBOTFFOTY3NDA3OTBEMjAwNkU0N0IzRjJDNDU4RDZBQjU4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMop8Pz/J8z7u871++YRJFiA+O 09pYXb4ecnOysV4pASEZxqIH46GI04UF3/+/3g/0OkX6JLjyN0NK8OnbGawat5t/ qdr0G/qACsd3YoXKkwglTYVTfjxLvRkM4Unp7VfEn6rHHL7eNVJYTAJNTvtwpkvg EWFqitkkylLPZfTjUcZ0ZughfAG6RmhIoAM5jap9f6igCj3nlyw5CBS8IU/oalrd vselSaaxT/ZSO3RQb7MkyP5zJ6bwYMqb40TTybAD6MfQqbbdeJyBpYhMXCTTKxfz LT5so346Wy7ZEB+99HOJ8d8grq08u44FdEhI9KV7HD3GGVZJ3+BJNmh4BsYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpuqpHpZ0B5DSAG5Hs/LEWNarWCYwHwYDVR0j BBgwFoAUAIQdveX2zr+MlP3uIndxlG4hUs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDI1MDIyMDUtNWM1NC00N2RiLWFlNmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRF NUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2RTIxNTJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDg0MURCREU1RjZDRUJGOEM5NEZERUUyMjc3NzE5NDZFMjE1 MkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3Nzcx OTQ2RTIxNTJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjD29flgRDyywBjW3TRSpEM3p70Q4vxJgyw QRcnS6HjJaBKlXDQfPCIw5pdHHQ04BjTVSc7R7unn8HE9h1j6lmT8ntUy0BggLm1 iyjU0X0v9OBurONJtS2LgESLWZCaZ7RAxA9v42PgzxaJYHNUKKwx+s+Tpbej8vxK 8wFTSvRCYQyqy7ztkHTlXImm4j/xP7dNPd7WGzzJJxicbpoSW6R4pJwp0N2VFabp 0vdesYx6JOsShiz+DISDQblDCdQnqs9zR+mbEkOvJZ0+MRk1cAnkmUeJukBDuXn2 a/RqfCMnXPxisVVjqH322RNGPznRSWx7mBbZMr3TXDBrlgV1uPs= -----END CERTIFICATE-----Generated at Thu Jun 18 19:09:17 2026 by rpki-client