$ rpki-client -vvf rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft File: D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft (raw, json) Hash identifier: ANbbOWvZd5FFhAKRg0ybgucJPJv9YR4vigztSKHSonw= Subject key identifier: 44:42:FB:9B:A0:89:84:39:F8:11:E6:44:F3:74:7D:BE:64:D7:FF:2E Authority key identifier: D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 Certificate issuer: /CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Certificate serial: 0B13D38E1E8A42FBE3ECBE01015C27FDE35324FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 23:29:18 +0000 Manifest this update: Fri 19 Jun 2026 23:24:18 +0000 Manifest next update: Sun 21 Jun 2026 01:48:18 +0000 Files and hashes: 1: D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl (hash: IH/HgTjHWIzUx6M9pPrsEII7WRkZA1+owbnZTPW0jSI=) 2: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: Mz/HLsc5z0NW9is9cK/jPV/c2edacNGieAld99v6XRg=) 3: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: nih8Qs0LKBkZCWGMFeuGnh3q/46VGBkvPVPuLWWc1eE=) 4: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: tYzh/ONrnE/vB4p4w+wsr7jUrg+O1DSqJcNbYqdE1O4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:13:d3:8e:1e:8a:42:fb:e3:ec:be:01:01:5c:27:fd:e3:53:24:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D710E47438E099E6B0ED245674ED2233E1D2B2C0 Validity Not Before: Jun 19 23:24:18 2026 GMT Not After : Jun 21 01:48:18 2026 GMT Subject: CN=4442FB9BA0898439F811E644F3747DBE64D7FF2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f9:3e:ab:58:79:b3:9a:e8:f9:93:4b:ca:d5: 50:2e:1b:53:63:d9:4e:19:64:ca:02:4e:f4:a9:b4: 38:c8:cc:bb:d1:8b:83:45:cf:f7:f2:88:6c:28:36: 55:2b:24:2c:7f:d7:19:4a:be:36:8d:e7:1d:ce:de: dd:aa:19:40:ab:31:0a:97:1c:0d:1a:73:2f:53:0e: 7e:06:26:22:da:d1:5b:10:5a:74:22:e0:3d:f1:32: b6:41:57:58:60:1f:23:5c:a1:cb:35:9c:02:ee:7b: 98:00:44:c7:e1:e6:3f:89:e3:4c:8d:b3:e3:e5:21: dc:62:bb:3d:d4:0d:00:39:fe:a6:e0:fe:f3:2f:0b: af:68:82:6c:3f:9a:28:e9:45:d3:88:a1:fa:97:e3: a4:c7:f4:ae:a4:47:1e:c0:9a:d4:b9:8d:9a:61:fc: 33:bf:bc:ff:10:8a:c9:e8:4b:bb:d8:22:3f:8a:8d: 05:bc:14:92:ce:7d:27:fd:0c:79:e8:58:10:56:49: 38:8e:3f:fb:e6:d8:14:cd:67:d6:53:0f:0f:a8:c0: 98:f9:27:66:da:00:7c:b6:82:f7:e5:54:23:7e:08: a4:5f:7b:f5:bf:ae:10:57:69:f3:00:4c:e7:87:c9: b0:7f:81:9a:bd:1d:fa:9d:d7:30:f5:4e:fb:80:85: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:42:FB:9B:A0:89:84:39:F8:11:E6:44:F3:74:7D:BE:64:D7:FF:2E X509v3 Authority Key Identifier: keyid:D7:10:E4:74:38:E0:99:E6:B0:ED:24:56:74:ED:22:33:E1:D2:B2:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D710E47438E099E6B0ED245674ED2233E1D2B2C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/D710E47438E099E6B0ED245674ED2233E1D2B2C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:7b:da:14:14:f3:45:63:64:ca:3b:77:a4:5f:50:62:c3:86: 82:46:76:b0:76:6d:fa:39:ce:81:92:92:bb:f5:14:8a:ba:76: 69:81:00:50:1a:5c:90:8b:f9:f7:86:f6:15:81:fa:d8:42:b5: 74:15:9e:4b:93:8f:b0:6a:e8:e0:c7:e9:d3:7e:57:03:93:71: da:f5:87:c5:c1:a8:bc:a8:d2:bd:0b:16:47:35:65:c0:c4:a6: 3c:a1:b4:c4:0a:ae:8d:b8:2a:af:55:dc:7f:35:3d:5e:46:2c: a8:d4:8c:97:6d:6a:28:8e:7b:30:12:ce:5b:7f:fa:8e:fd:38: 69:1f:f7:77:15:39:53:58:a8:b6:e9:fd:50:86:84:ec:81:64: de:c5:f2:a6:d4:da:26:31:a5:49:25:86:24:8a:79:e8:62:4f: 28:0f:0e:c6:12:8b:25:57:ae:b8:a7:cc:f7:4e:19:15:45:64: 63:8b:ea:05:f3:b3:8a:73:1d:34:a0:54:fa:1c:b2:5f:f4:24: cb:22:46:4e:76:be:c0:cd:82:80:50:e4:f4:42:0b:69:5c:55: 11:35:3e:0d:60:d4:ad:5a:53:cc:c4:63:32:33:f4:47:2d:b0: 1a:4c:79:f5:c6:53:eb:27:e4:e4:1e:07:9c:27:61:0f:36:4e: 7d:73:05:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxPTjh6KQvvj7L4BAVwn/eNTJP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNF MUQyQjJDMDAeFw0yNjA2MTkyMzI0MThaFw0yNjA2MjEwMTQ4MThaMDMxMTAvBgNV BAMTKDQ0NDJGQjlCQTA4OTg0MzlGODExRTY0NEYzNzQ3REJFNjREN0ZGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL+T6rWHmzmuj5k0vK1VAuG1Nj 2U4ZZMoCTvSptDjIzLvRi4NFz/fyiGwoNlUrJCx/1xlKvjaN5x3O3t2qGUCrMQqX HA0acy9TDn4GJiLa0VsQWnQi4D3xMrZBV1hgHyNcocs1nALue5gARMfh5j+J40yN s+PlIdxiuz3UDQA5/qbg/vMvC69ogmw/mijpRdOIofqX46TH9K6kRx7AmtS5jZph /DO/vP8QisnoS7vYIj+KjQW8FJLOfSf9DHnoWBBWSTiOP/vm2BTNZ9ZTDw+owJj5 J2baAHy2gvflVCN+CKRfe/W/rhBXafMATOeHybB/gZq9Hfqd1zD1TvuAhYnvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUREL7m6CJhDn4EeZE83R9vmTX/y4wHwYDVR0j BBgwFoAU1xDkdDjgmeaw7SRWdO0iM+HSssAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU0ZTQ1NmQtZGJlMi00NjBjLTg2ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQz OEUwOTlFNkIwRUQyNDU2NzRFRDIyMzNFMUQyQjJDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEwRTQ3NDM4RTA5OUU2QjBFRDI0NTY3NEVEMjIzM0UxRDJC MkMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvRDcxMEU0NzQzOEUwOTlFNkIwRUQyNDU2NzRFRDIy MzNFMUQyQjJDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKp72hQU80VjZMo7d6RfUGLDhoJGdrB2bfo5 zoGSkrv1FIq6dmmBAFAaXJCL+feG9hWB+thCtXQVnkuTj7Bq6ODH6dN+VwOTcdr1 h8XBqLyo0r0LFkc1ZcDEpjyhtMQKro24Kq9V3H81PV5GLKjUjJdtaiiOezASzlt/ +o79OGkf93cVOVNYqLbp/VCGhOyBZN7F8qbU2iYxpUklhiSKeehiTygPDsYSiyVX rrinzPdOGRVFZGOL6gXzs4pzHTSgVPocsl/0JMsiRk52vsDNgoBQ5PRCC2lcVRE1 Pg1g1K1aU8zEYzIz9EctsBpMefXGU+sn5OQeB5wnYQ82Tn1zBYs= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:14 2026 by rpki-client