$ rpki-client -vvf rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft File: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft (raw, json) Hash identifier: xOhdjD4o8Tkhr4GahSjrYv8lzpNFrnRhhGLPWq79jMI= Subject key identifier: DB:86:9C:57:F0:8A:C4:06:DB:30:E3:A2:35:7B:FF:49:C6:EC:0E:ED Authority key identifier: 80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24 Certificate issuer: /CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724 Certificate serial: 52BF85A34709E41DBFFEB1C43F590EEB219672C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 06:17:24 +0000 Manifest this update: Sat 20 Jun 2026 06:12:24 +0000 Manifest next update: Sun 21 Jun 2026 09:38:24 +0000 Files and hashes: 1: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: 5qu3egPdBZlEVTvgirw7pWXgCRudPnC+xEwHD5lFYU8=) 2: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 4a9og07u0srQecoyb+IpBZCUaRdvfCWkjUR0wkeGFvU=) 3: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: PF2pFQ8Y4MjWEElnBJwyA+RuYK7yYkD7ChXjYqS9lpw=) 4: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl (hash: 2HRsESmxgGDeKe4Eb755nnmONNT8g+9sl1YTF2n3WW4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:bf:85:a3:47:09:e4:1d:bf:fe:b1:c4:3f:59:0e:eb:21:96:72:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724 Validity Not Before: Jun 20 06:12:24 2026 GMT Not After : Jun 21 09:38:24 2026 GMT Subject: CN=DB869C57F08AC406DB30E3A2357BFF49C6EC0EED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:26:57:13:aa:2d:d3:f0:7c:b9:1d:e2:0c: 16:45:2d:27:2b:26:41:29:45:b4:3c:4b:08:b9:b9: 4e:a3:70:29:cb:96:ce:50:5a:b2:96:e3:5a:1f:61: 5e:5e:ce:68:98:b4:be:d4:36:d5:af:ef:86:12:40: 56:e5:90:9f:ae:ee:3f:d4:44:41:f3:7f:8e:a7:37: a3:a1:cc:eb:b0:0a:82:c4:21:c6:27:6d:db:dd:f5: fc:d4:fa:f6:bf:ca:60:c5:40:87:1f:37:77:ec:52: a2:85:7e:7b:bc:4e:c6:62:fa:64:5a:28:4e:c7:17: 5c:54:dd:91:c3:ac:a6:93:0b:4c:58:df:5e:24:e2: 7f:e4:e4:bb:84:e5:38:a3:e5:91:6d:2d:9a:d0:c6: 03:91:79:20:91:e0:8e:c8:c5:43:d4:58:fe:b6:05: 22:c2:c6:55:f2:10:31:80:62:f5:ea:7c:cb:34:41: 55:a5:2a:6e:de:c5:1e:73:1d:9f:ab:0a:f4:cc:09: 70:f2:f1:54:af:57:45:cf:7f:36:a1:6d:3d:22:72: f7:06:99:cb:67:09:84:c1:e8:cb:42:36:d3:05:60: 1a:0c:b6:ea:1a:b4:15:1b:a6:e7:d1:f4:82:a1:d5: d8:58:25:07:39:9f:cf:c7:ef:de:15:cf:ed:9c:c3: 19:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:86:9C:57:F0:8A:C4:06:DB:30:E3:A2:35:7B:FF:49:C6:EC:0E:ED X509v3 Authority Key Identifier: keyid:80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a3:b7:c9:b1:98:b9:cd:42:98:cc:4a:d4:c8:45:f1:96:2d: 86:77:77:4f:46:8e:34:4d:b8:e7:a3:43:90:0e:7c:f6:2b:28: 31:a0:52:99:4d:86:7d:dc:5c:de:be:0d:7b:fd:e8:fa:d3:1f: 4d:8d:9d:4f:15:b4:ad:76:24:79:ad:aa:7a:55:b8:d0:47:37: e0:6a:81:df:67:69:b7:75:57:9e:fd:8e:6e:4f:9a:7e:f0:3c: c3:95:0f:e6:22:2c:e5:61:b3:67:e2:0b:04:ae:a5:6d:d0:0e: bc:5b:6c:ab:29:ac:b9:a9:4a:a7:a4:00:51:56:8c:1a:50:52: 8d:b4:9b:43:ed:61:f1:9c:90:fa:9a:87:3f:6d:23:ee:4c:67: 7b:62:77:20:79:4f:ad:e8:fe:58:c9:3f:5f:bc:f3:f9:d8:2a: 23:c5:55:1f:9e:9c:a8:13:84:23:d9:0c:99:49:8f:2d:19:a9: 86:17:0c:a4:c4:ed:1f:62:4f:09:af:05:03:88:99:21:58:54: 68:f5:31:2d:c1:ce:2f:e1:25:bd:24:5d:a0:4f:7c:a3:69:70: fc:5b:f9:88:f0:b5:da:03:7e:bd:df:11:ac:75:6c:29:fe:4c: 11:e4:7c:e8:e1:f7:13:77:f6:ca:f1:c4:14:1d:2f:f9:b7:3c: 17:9e:c7:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUr+Fo0cJ5B2//rHEP1kO6yGWcsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAxRDFCNEVFNkJCNjlEM0Y3REEyREE5REZCREFFRkIy OTc4MzcyNDAeFw0yNjA2MjAwNjEyMjRaFw0yNjA2MjEwOTM4MjRaMDMxMTAvBgNV BAMTKERCODY5QzU3RjA4QUM0MDZEQjMwRTNBMjM1N0JGRjQ5QzZFQzBFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujCZXE6ot0/B8uR3iDBZFLScr JkEpRbQ8Swi5uU6jcCnLls5QWrKW41ofYV5ezmiYtL7UNtWv74YSQFblkJ+u7j/U REHzf46nN6OhzOuwCoLEIcYnbdvd9fzU+va/ymDFQIcfN3fsUqKFfnu8TsZi+mRa KE7HF1xU3ZHDrKaTC0xY314k4n/k5LuE5Tij5ZFtLZrQxgOReSCR4I7IxUPUWP62 BSLCxlXyEDGAYvXqfMs0QVWlKm7exR5zHZ+rCvTMCXDy8VSvV0XPfzahbT0icvcG mctnCYTB6MtCNtMFYBoMtuoatBUbpufR9IKh1dhYJQc5n8/H794Vz+2cwxlLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU24acV/CKxAbbMOOiNXv/ScbsDu0wHwYDVR0j BBgwFoAUgB0bTua7adP32i2p372u+yl4NyQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjODAxYTAtNzkxMi00YjAxLWEyODEtODgwMjQ2MjRhMmQ0LzAvODAxRDFCNEVF NkJCNjlEM0Y3REEyREE5REZCREFFRkIyOTc4MzcyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDFEMUI0RUU2QkI2OUQzRjdEQTJEQTlERkJEQUVGQjI5Nzgz NzI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvODAxRDFCNEVFNkJCNjlEM0Y3REEyREE5REZCREFF RkIyOTc4MzcyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCjt8mxmLnNQpjMStTIRfGWLYZ3d09GjjRN uOejQ5AOfPYrKDGgUplNhn3cXN6+DXv96PrTH02NnU8VtK12JHmtqnpVuNBHN+Bq gd9nabd1V579jm5Pmn7wPMOVD+YiLOVhs2fiCwSupW3QDrxbbKsprLmpSqekAFFW jBpQUo20m0PtYfGckPqahz9tI+5MZ3tidyB5T63o/ljJP1+88/nYKiPFVR+enKgT hCPZDJlJjy0ZqYYXDKTE7R9iTwmvBQOImSFYVGj1MS3Bzi/hJb0kXaBPfKNpcPxb +YjwtdoDfr3fEax1bCn+TBHkfOjh9xN39srxxBQdL/m3PBeex0U= -----END CERTIFICATE-----Generated at Sat Jun 20 08:38:05 2026 by rpki-client