$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft File: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft (raw, json) Hash identifier: 64AJVBiGsB2Njfl6yed1iiQhx3976E0PyOQNmg0Lgro= Subject key identifier: 52:6B:C0:41:9E:36:FE:C6:AE:BC:79:E3:10:EF:74:8E:58:CF:A1:04 Authority key identifier: 26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0 Certificate issuer: /CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0 Certificate serial: D41437CFE3439CE077DF6F34013FA3C2C2E3E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:31:32 +0000 Manifest this update: Sat 20 Jun 2026 01:26:32 +0000 Manifest next update: Sun 21 Jun 2026 02:49:32 +0000 Files and hashes: 1: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl (hash: RGllSZXge51HcVR/ILv8g5sG2OUGGKK6w/4JzldwJGw=) 2: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: ZyYg2y6us1LQrG7diwKFALUA9hvUN3acAbNTmnkm8fU=) 3: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: OOL38iHSy0/NkkysB63GXJ99F6I1QYegNu69it5kV/Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d4:14:37:cf:e3:43:9c:e0:77:df:6f:34:01:3f:a3:c2:c2:e3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0 Validity Not Before: Jun 20 01:26:32 2026 GMT Not After : Jun 21 02:49:32 2026 GMT Subject: CN=526BC0419E36FEC6AEBC79E310EF748E58CFA104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:98:e0:63:85:2b:6d:c2:8a:2c:32:76:bc: d1:94:ce:4b:1d:36:e4:29:b1:8a:57:df:ec:05:44: 5e:73:bd:ce:01:de:49:66:60:bf:e3:58:f7:b0:0c: f2:64:ab:1c:37:03:15:78:27:86:fc:df:5a:be:a5: 67:2a:2a:1e:d7:08:f7:69:98:f8:71:94:46:44:80: 9f:51:ae:81:ff:47:45:b1:9c:01:fb:b3:f5:fd:ac: 5e:86:7d:c8:22:81:dd:5f:c7:a3:91:a8:81:96:d2: 82:15:e5:c8:4c:83:a2:e4:05:cb:fc:b8:06:9a:43: 07:92:4a:26:92:2c:95:3e:1d:95:63:02:ea:33:c8: c0:3e:28:04:85:b8:90:9b:01:8a:b9:e8:2c:3f:67: d5:54:8c:b0:3b:86:8b:15:f6:09:c1:02:16:ba:c4: 71:df:ab:26:d3:25:cf:36:69:0a:8b:8a:d3:57:f1: d0:b9:72:01:c0:1e:a7:68:1f:b0:f5:01:f6:2d:d6: 46:60:12:6e:a9:8e:69:e4:37:52:5f:f4:18:46:fb: 41:46:2e:eb:32:35:48:14:f5:59:e4:5a:55:98:9c: 60:07:23:bc:b3:c3:52:4b:1f:d1:ae:d0:82:4b:6b: 97:78:3f:b6:17:f2:da:95:28:9f:b3:b8:01:84:dd: 32:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6B:C0:41:9E:36:FE:C6:AE:BC:79:E3:10:EF:74:8E:58:CF:A1:04 X509v3 Authority Key Identifier: keyid:26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bb:3f:48:bd:65:30:fa:79:98:bb:a5:ed:04:db:3d:85:cd: 91:6d:98:cb:45:ee:60:2d:ca:f2:0d:17:91:84:bc:5b:05:c6: ae:de:2e:b8:5e:26:08:5c:4d:c6:ac:b4:2c:4f:2e:70:8f:7d: e6:e6:a2:fd:66:0b:e5:6f:a0:f1:08:19:05:62:e2:8b:ff:fd: 51:39:90:69:eb:d4:12:95:9e:83:d1:09:5c:ee:29:4a:f6:4a: c0:e1:34:b5:83:60:dd:f1:09:a3:11:77:ea:04:3e:8b:61:d3: 67:aa:a6:d0:40:4c:bd:9f:f9:35:63:ef:8b:ca:15:4c:73:12: 06:51:6f:fa:2a:35:12:28:1d:41:59:15:e9:19:71:4d:5a:43: f6:be:02:7b:20:52:11:a6:7a:fc:55:25:c0:6c:04:b2:e2:f6: 0c:b6:fd:82:8c:a8:ca:98:78:09:55:5d:50:c8:85:0c:7c:65: 2d:8b:12:3e:ea:af:ed:95:49:df:75:3a:70:29:4a:9e:9f:22: 39:73:2f:ff:7a:62:e4:72:16:f0:04:43:30:d7:dd:a0:e1:3f: 60:b5:c0:95:6d:1a:80:aa:3c:84:45:0a:0a:ff:16:a5:43:5a: d6:49:5e:e5:ee:15:09:bd:ce:e1:92:c6:83:d3:0a:d1:25:d6: 08:cd:42:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUANQUN8/jQ5zgd99vNAE/o8LC4+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY3MzgxMjM0REU2N0NEOEU3RkNDNTMyNTQwQzBCMUE2 OThGRDhCMDAeFw0yNjA2MjAwMTI2MzJaFw0yNjA2MjEwMjQ5MzJaMDMxMTAvBgNV BAMTKDUyNkJDMDQxOUUzNkZFQzZBRUJDNzlFMzEwRUY3NDhFNThDRkExMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+b5jgY4UrbcKKLDJ2vNGUzksd NuQpsYpX3+wFRF5zvc4B3klmYL/jWPewDPJkqxw3AxV4J4b831q+pWcqKh7XCPdp mPhxlEZEgJ9RroH/R0WxnAH7s/X9rF6Gfcgigd1fx6ORqIGW0oIV5chMg6LkBcv8 uAaaQweSSiaSLJU+HZVjAuozyMA+KASFuJCbAYq56Cw/Z9VUjLA7hosV9gnBAha6 xHHfqybTJc82aQqLitNX8dC5cgHAHqdoH7D1AfYt1kZgEm6pjmnkN1Jf9BhG+0FG LusyNUgU9VnkWlWYnGAHI7yzw1JLH9Gu0IJLa5d4P7YX8tqVKJ+zuAGE3TJbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUmvAQZ42/sauvHnjEO90jljPoQQwHwYDVR0j BBgwFoAUJnOBI03mfNjn/MUyVAwLGmmP2LAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZmNDc2N2QtZTg0Zi00MjEwLTg0MjMtNDA2OTY2MThmMzc3LzAvMjY3MzgxMjM0 REU2N0NEOEU3RkNDNTMyNTQwQzBCMUE2OThGRDhCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNjczODEyMzRERTY3Q0Q4RTdGQ0M1MzI1NDBDMEIxQTY5OEZE OEIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvMjY3MzgxMjM0REU2N0NEOEU3RkNDNTMyNTQwQzBC MUE2OThGRDhCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy7P0i9ZTD6eZi7pe0E2z2FzZFtmMtF7mAt yvINF5GEvFsFxq7eLrheJghcTcastCxPLnCPfebmov1mC+VvoPEIGQVi4ov//VE5 kGnr1BKVnoPRCVzuKUr2SsDhNLWDYN3xCaMRd+oEPoth02eqptBATL2f+TVj74vK FUxzEgZRb/oqNRIoHUFZFekZcU1aQ/a+AnsgUhGmevxVJcBsBLLi9gy2/YKMqMqY eAlVXVDIhQx8ZS2LEj7qr+2VSd91OnApSp6fIjlzL/96YuRyFvAEQzDX3aDhP2C1 wJVtGoCqPIRFCgr/FqVDWtZJXuXuFQm9zuGSxoPTCtEl1gjNQso= -----END CERTIFICATE-----Generated at Sat Jun 20 11:16:29 2026 by rpki-client