$ rpki-client -vvf rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft File: 980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft (raw, json) Hash identifier: lXH+xBcQ/sBk7bpaiBTnI9Gfd1kerNqlJTaAkHoD4eg= Subject key identifier: 19:E7:E2:D6:2A:75:09:61:AE:32:19:F6:45:2D:02:C3:04:FC:75:36 Authority key identifier: 98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA Certificate issuer: /CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA Certificate serial: 60281F446EDF066EE1324F8074383F82F67570BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 12:41:18 +0000 Manifest this update: Fri 19 Jun 2026 12:36:18 +0000 Manifest next update: Sat 20 Jun 2026 15:04:18 +0000 Files and hashes: 1: 3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (hash: w7m0P2uotwUdeBK8OhSkycahjMGtA6/23NDdSEsWGzc=) 2: 980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl (hash: tNGbmlxkJl0HZ4GOVSMy7/8wQ/wVl8JhHbUcIIZC8QM=) 3: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (hash: 9KwLkzzIMxFqs5It8qnMSZQlmMHzgn1zpWhuB6jKAEk=) 4: 3130332e38302e3231342e302f32342d3234203d3e20313533303932.roa (hash: Afb6wq/4AMY8buYuveFg/qZwFE734ewlL99hfzyDLD8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 15:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:28:1f:44:6e:df:06:6e:e1:32:4f:80:74:38:3f:82:f6:75:70:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA Validity Not Before: Jun 19 12:36:18 2026 GMT Not After : Jun 20 15:04:18 2026 GMT Subject: CN=19E7E2D62A750961AE3219F6452D02C304FC7536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:ef:56:ac:9e:c8:5c:81:cf:97:2a:d4:4a: 14:28:8e:98:00:2f:ae:1e:d4:8b:9b:7c:f7:74:d4: 06:41:7e:1f:37:0d:3a:df:d5:aa:c8:81:5d:81:1a: 3d:ed:26:8b:2c:ed:46:d3:0b:3c:07:b3:90:26:43: 1c:74:9a:23:be:75:aa:c8:3a:3f:dd:cd:ab:77:3e: 02:f2:7a:9f:a2:61:db:97:26:fd:ea:bc:9c:88:2e: 0f:b3:51:5d:db:ba:4a:0b:1e:dd:7f:21:12:39:e4: 2e:d3:0b:85:96:73:11:1b:d3:fa:cd:86:f7:9e:16: 59:02:7e:e7:d8:a0:58:77:66:ad:5a:d5:99:51:b8: 1b:5b:88:65:f0:10:35:ef:83:e1:e2:f4:97:67:a2: d0:80:49:bd:75:5d:87:b7:9f:b8:8e:d6:a3:0b:ed: af:71:79:5b:ba:27:87:38:1c:7b:7a:03:dc:a2:3d: 8c:9a:2f:a0:f3:bb:be:e2:7a:85:71:fa:02:fb:6c: ac:e5:4c:a2:20:d3:c3:e7:9f:be:6f:d8:e1:a1:b0: 4b:b0:04:0e:18:cc:f0:78:68:47:29:9e:5a:c5:b7: 3d:45:30:7f:19:df:5a:ce:72:f6:72:35:64:ef:d1: dc:32:30:16:ec:9b:44:8e:8e:42:c5:77:2f:24:c4: 72:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E7:E2:D6:2A:75:09:61:AE:32:19:F6:45:2D:02:C3:04:FC:75:36 X509v3 Authority Key Identifier: keyid:98:0D:FD:AD:58:8F:23:C0:48:5F:D8:B1:FE:6A:F9:D3:6B:55:A4:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/980DFDAD588F23C0485FD8B1FE6AF9D36B55A4EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:09:2e:ad:85:92:1c:04:bd:07:e1:90:79:cf:40:98:68:ad: 53:ff:fc:f6:0e:3a:3c:d7:f5:4a:24:6e:3c:5f:ca:3c:fb:cd: af:ac:2d:cd:e1:e4:60:d9:c9:07:8d:9c:7c:11:ac:9d:17:4b: 6f:37:a3:bc:c6:20:b6:03:60:c1:61:56:20:fb:09:5a:cc:5b: da:9e:8c:9c:b9:1c:d0:2a:78:26:cc:52:54:f2:d2:1f:43:56: eb:a9:e7:0a:04:ef:39:be:2b:33:d9:61:73:92:83:9a:db:56: a2:20:a3:46:fd:91:70:d6:ac:63:a3:16:77:f2:cb:88:be:6d: ce:e8:fd:d2:90:93:b6:d9:66:5b:e5:2c:2d:c4:ed:67:b4:f3: 73:9e:f1:f3:82:6c:bb:8d:2c:f4:01:4b:a5:28:0c:37:d4:d1: c8:6d:0b:6e:74:87:fb:96:69:1b:78:53:c6:e5:89:47:82:8c: e3:ba:04:b0:e0:75:c3:79:1c:b4:16:0c:7d:9c:d6:29:61:b3: 08:ad:2f:9b:8c:29:82:b1:d5:ea:2a:23:1c:79:60:64:b8:ea: b6:59:27:57:fa:6e:2e:5b:bb:7f:9c:14:ae:84:eb:7e:df:b8: 34:c0:18:e6:c8:bc:d8:b7:0b:69:a5:1a:e0:b0:96:87:64:42: c0:57:3d:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCgfRG7fBm7hMk+AdDg/gvZ1cLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwREZEQUQ1ODhGMjNDMDQ4NUZEOEIxRkU2QUY5RDM2 QjU1QTRFQTAeFw0yNjA2MTkxMjM2MThaFw0yNjA2MjAxNTA0MThaMDMxMTAvBgNV BAMTKDE5RTdFMkQ2MkE3NTA5NjFBRTMyMTlGNjQ1MkQwMkMzMDRGQzc1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWfe9WrJ7IXIHPlyrUShQojpgA L64e1IubfPd01AZBfh83DTrf1arIgV2BGj3tJoss7UbTCzwHs5AmQxx0miO+darI Oj/dzat3PgLyep+iYduXJv3qvJyILg+zUV3bukoLHt1/IRI55C7TC4WWcxEb0/rN hveeFlkCfufYoFh3Zq1a1ZlRuBtbiGXwEDXvg+Hi9JdnotCASb11XYe3n7iO1qML 7a9xeVu6J4c4HHt6A9yiPYyaL6Dzu77ieoVx+gL7bKzlTKIg08Pnn75v2OGhsEuw BA4YzPB4aEcpnlrFtz1FMH8Z31rOcvZyNWTv0dwyMBbsm0SOjkLFdy8kxHIVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGefi1ip1CWGuMhn2RS0CwwT8dTYwHwYDVR0j BBgwFoAUmA39rViPI8BIX9ix/mr502tVpOowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU1YTVlNmQtOTFlZS00NDk3LWI0MTctOGQzMmY2NTNlNGIwLzAvOTgwREZEQUQ1 ODhGMjNDMDQ4NUZEOEIxRkU2QUY5RDM2QjU1QTRFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODBERkRBRDU4OEYyM0MwNDg1RkQ4QjFGRTZBRjlEMzZCNTVB NEVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU1YTVlNmQtOTFlZS00NDk3LWI0 MTctOGQzMmY2NTNlNGIwLzAvOTgwREZEQUQ1ODhGMjNDMDQ4NUZEOEIxRkU2QUY5 RDM2QjU1QTRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAJLq2FkhwEvQfhkHnPQJhorVP//PYOOjzX 9Uokbjxfyjz7za+sLc3h5GDZyQeNnHwRrJ0XS283o7zGILYDYMFhViD7CVrMW9qe jJy5HNAqeCbMUlTy0h9DVuup5woE7zm+KzPZYXOSg5rbVqIgo0b9kXDWrGOjFnfy y4i+bc7o/dKQk7bZZlvlLC3E7We083Oe8fOCbLuNLPQBS6UoDDfU0chtC250h/uW aRt4U8bliUeCjOO6BLDgdcN5HLQWDH2c1ilhswitL5uMKYKx1eoqIxx5YGS46rZZ J1f6bi5bu3+cFK6E637fuDTAGObIvNi3C2mlGuCwlodkQsBXPWk= -----END CERTIFICATE-----Generated at Sat Jun 20 09:14:56 2026 by rpki-client