$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft File: D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft (raw, json) Hash identifier: IGrtbUFfPSSYQLoooUiH6Ja0lCiPih+BzwOfuDRuU2Q= Subject key identifier: 3A:A6:60:5B:60:F3:4F:29:8A:92:35:6C:79:4A:8F:E8:CD:1C:13:2C Authority key identifier: D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A Certificate issuer: /CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A Certificate serial: 379F8BAB43E5648DF8DFDB69E8B05FA788C1526B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 06:47:55 +0000 Manifest this update: Sat 20 Jun 2026 06:42:55 +0000 Manifest next update: Sun 21 Jun 2026 09:22:55 +0000 Files and hashes: 1: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: osJeCPZtE9R9btD8iw5N1b2W8PoHsZHfReclzn2JK+k=) 2: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: XXYg212KqJilVz4UQhoA9JNZDN5djYbD/oi5ScwKYIs=) 3: 3130332e3233342e33342e302f32332d3233203d3e20313531353231.roa (hash: v4OcOT72Y+Fw3xPxNhOv5K2oe1NqroMaIJLaKP7M7LE=) 4: D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl (hash: cDrBzQCeqfwB1iuq5g8ylVLN5gWCS+fSVb6gvUOXaWU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 08:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9f:8b:ab:43:e5:64:8d:f8:df:db:69:e8:b0:5f:a7:88:c1:52:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A Validity Not Before: Jun 20 06:42:55 2026 GMT Not After : Jun 21 09:22:55 2026 GMT Subject: CN=3AA6605B60F34F298A92356C794A8FE8CD1C132C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:8d:38:ee:f5:00:a9:92:9d:18:55:ea:31: 42:0d:2b:07:b6:8f:33:64:52:47:da:41:31:e1:11: 26:bf:47:f4:50:19:8b:5b:70:01:e5:3e:a2:dd:45: 38:c2:e1:37:c0:fc:9a:27:db:b8:15:2f:71:d2:21: 90:bb:2a:aa:f1:14:00:95:33:7e:9c:28:2f:e0:09: 4c:12:b8:80:d5:75:e8:f2:3e:b4:c0:fe:9c:fd:dc: e0:83:cb:52:0e:15:93:21:aa:25:ab:67:e7:3c:17: 16:1f:af:10:e9:ed:fb:9d:a7:d5:a2:26:53:d5:44: 4f:03:57:6c:23:2e:41:a9:9a:2d:98:37:5b:bf:dc: 53:3e:56:ce:79:7e:b3:f8:eb:02:2e:b5:dd:a1:33: de:c4:6b:7c:9d:0c:14:9f:80:64:3c:ce:b0:9f:f9: dc:25:08:c6:cc:b7:a3:77:18:43:2f:97:77:46:43: 77:66:4a:25:ed:96:39:ad:9a:89:ab:dc:d9:b7:bb: 9c:c4:90:19:9b:5b:1b:66:22:50:e4:9c:c1:79:80: 19:b7:58:01:a9:f2:c5:67:79:d1:8a:b6:d4:58:82: 2e:20:af:3c:01:0c:31:07:62:ba:a4:86:e7:ae:25: f4:dc:9c:a8:1d:e0:c9:7c:71:c0:51:6a:62:8d:9e: 36:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A6:60:5B:60:F3:4F:29:8A:92:35:6C:79:4A:8F:E8:CD:1C:13:2C X509v3 Authority Key Identifier: keyid:D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:0a:e4:12:b4:20:58:80:60:35:eb:5c:a0:b8:94:cd:84:85: 00:b2:3a:89:0e:59:44:1f:4d:db:c3:1d:13:20:b4:5e:65:65: 0e:1f:62:c2:36:19:3c:59:5d:dd:ef:f2:c2:8b:5a:fd:59:5e: 06:c6:3d:60:19:25:14:23:57:da:2f:bd:b9:79:e9:85:88:e7: 3f:47:50:98:16:ae:0c:43:c2:62:7a:5b:a2:a5:7f:a6:cc:85: a3:16:7e:d1:3b:e5:12:19:18:9f:21:2e:fe:eb:f3:90:bb:88: 36:07:38:bb:96:bb:4f:48:68:f1:a2:73:60:35:1e:a9:3b:42: f0:a4:d7:fc:74:38:ed:88:27:42:67:06:6a:8f:c7:44:c0:da: a1:50:f8:43:99:03:89:9b:db:93:af:98:29:55:65:01:06:51: 46:9e:5e:76:ec:79:6b:27:8b:40:7a:47:64:b9:de:71:38:a7: 31:f5:25:3d:b9:42:e2:cb:3c:a2:36:ee:3b:6d:aa:77:a1:3d: 94:71:19:a3:92:c8:d6:fc:2a:89:dc:2c:e0:88:3c:a0:37:eb: 6e:bc:7f:79:fe:1e:50:8b:d3:7a:76:96:7b:df:8f:64:44:fc: 76:8f:43:2e:1f:1f:6b:dd:0e:e5:5c:74:d8:79:11:99:98:97: aa:81:af:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5+Lq0PlZI3439tp6LBfp4jBUmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwN0I3NjhGNjc2Qjc4NjUwQUE4MjhGQTNENEIxQkJF MjhFRUQzQTAeFw0yNjA2MjAwNjQyNTVaFw0yNjA2MjEwOTIyNTVaMDMxMTAvBgNV BAMTKDNBQTY2MDVCNjBGMzRGMjk4QTkyMzU2Qzc5NEE4RkU4Q0QxQzEzMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCts4047vUAqZKdGFXqMUINKwe2 jzNkUkfaQTHhESa/R/RQGYtbcAHlPqLdRTjC4TfA/Jon27gVL3HSIZC7KqrxFACV M36cKC/gCUwSuIDVdejyPrTA/pz93OCDy1IOFZMhqiWrZ+c8FxYfrxDp7fudp9Wi JlPVRE8DV2wjLkGpmi2YN1u/3FM+Vs55frP46wIutd2hM97Ea3ydDBSfgGQ8zrCf +dwlCMbMt6N3GEMvl3dGQ3dmSiXtljmtmomr3Nm3u5zEkBmbWxtmIlDknMF5gBm3 WAGp8sVnedGKttRYgi4grzwBDDEHYrqkhueuJfTcnKgd4Ml8ccBRamKNnjZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOqZgW2DzTymKkjVseUqP6M0cEywwHwYDVR0j BBgwFoAU0Ae3aPZ2t4ZQqoKPo9Sxu+KO7TowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdhNmIyM2ItYzQxZS00NDQ5LWExNDktYmMwYzZjOGIwMTFiLzAvRDAwN0I3NjhG Njc2Qjc4NjUwQUE4MjhGQTNENEIxQkJFMjhFRUQzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDA3Qjc2OEY2NzZCNzg2NTBBQTgyOEZBM0Q0QjFCQkUyOEVF RDNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDAwN0I3NjhGNjc2Qjc4NjUwQUE4MjhGQTNENEIx QkJFMjhFRUQzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgK5BK0IFiAYDXrXKC4lM2EhQCyOokOWUQf TdvDHRMgtF5lZQ4fYsI2GTxZXd3v8sKLWv1ZXgbGPWAZJRQjV9ovvbl56YWI5z9H UJgWrgxDwmJ6W6Klf6bMhaMWftE75RIZGJ8hLv7r85C7iDYHOLuWu09IaPGic2A1 Hqk7QvCk1/x0OO2IJ0JnBmqPx0TA2qFQ+EOZA4mb25OvmClVZQEGUUaeXnbseWsn i0B6R2S53nE4pzH1JT25QuLLPKI27jttqnehPZRxGaOSyNb8KoncLOCIPKA36268 f3n+HlCL03p2lnvfj2RE/HaPQy4fH2vdDuVcdNh5EZmYl6qBr28= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:21 2026 by rpki-client