$ rpki-client -vvf rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft File: 01572889DF1075E65143A4EF4BC1D8C749046C13.mft (raw, json) Hash identifier: h8PxcYUYFABrSH8C0GZlystAD9EO6VJ++74x9JaRU1w= Subject key identifier: 18:DB:C6:07:0B:FA:25:04:6E:6B:37:30:92:DD:84:0D:E0:8A:5F:6F Authority key identifier: 01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13 Certificate issuer: /CN=01572889DF1075E65143A4EF4BC1D8C749046C13 Certificate serial: 305F3CE145A84B7A75D113F9774B99BE8E412C41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 20:51:04 +0000 Manifest this update: Fri 19 Jun 2026 20:46:04 +0000 Manifest next update: Sat 20 Jun 2026 21:49:04 +0000 Files and hashes: 1: 01572889DF1075E65143A4EF4BC1D8C749046C13.crl (hash: /VXKUBsSNjL1DkAGLyVhOfrVYnM2ghMzzwyQV7X2f9U=) 2: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: fXIslrIHsJvjLRQnP9cWAs1QTJuR4Stfwh7a8LYxHm8=) 3: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: oMj1Nm7h+Y4mu9LBu3K/xKLS+Wp19Y5meMISqDSZ+JY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5f:3c:e1:45:a8:4b:7a:75:d1:13:f9:77:4b:99:be:8e:41:2c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01572889DF1075E65143A4EF4BC1D8C749046C13 Validity Not Before: Jun 19 20:46:04 2026 GMT Not After : Jun 20 21:49:04 2026 GMT Subject: CN=18DBC6070BFA25046E6B373092DD840DE08A5F6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:d8:5e:59:eb:98:a6:09:2e:f2:25:db:0f: 15:89:13:d1:fe:03:c5:6f:f4:72:8b:3f:2e:bf:c9: 17:8f:45:eb:dd:46:ef:5c:48:11:99:7c:66:b9:e5: c6:06:23:36:c9:78:7f:02:6f:4c:4d:58:33:b1:3c: 93:b7:14:09:7f:17:5f:02:a9:f2:02:92:1b:41:7f: b1:b5:50:fb:4c:58:92:fc:77:b0:f7:90:b5:8a:05: 99:de:81:99:27:4d:54:95:de:6b:4f:dd:bf:a5:69: 9f:57:67:05:23:3e:0f:7f:e0:14:66:c1:25:b4:c2: 92:60:27:c1:f2:02:3e:1c:9d:4c:2f:b8:74:97:dd: fd:fc:86:3d:0a:f0:76:81:59:8e:0b:1f:da:e4:66: 99:4b:49:1e:b7:9a:e4:f7:ad:d6:5a:64:a7:39:2f: 2a:c1:12:23:b5:14:36:26:e3:5f:03:98:7a:15:37: 0f:21:5b:8b:95:8d:55:ba:03:6c:e0:60:ec:53:e0: a2:e5:3e:ad:5f:96:02:63:90:87:d4:0c:ad:49:e7: 0d:85:d4:14:fc:27:95:37:22:ff:ea:04:d2:8a:d5: a0:83:93:56:c6:9d:bf:73:37:a3:de:55:c7:22:12: ec:f7:64:ef:bb:8f:57:e4:39:29:0b:57:59:75:ca: 4f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DB:C6:07:0B:FA:25:04:6E:6B:37:30:92:DD:84:0D:E0:8A:5F:6F X509v3 Authority Key Identifier: keyid:01:57:28:89:DF:10:75:E6:51:43:A4:EF:4B:C1:D8:C7:49:04:6C:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01572889DF1075E65143A4EF4BC1D8C749046C13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/01572889DF1075E65143A4EF4BC1D8C749046C13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:2d:e9:fd:47:95:78:1a:2f:5e:83:bb:be:f8:ad:7b:48:94: 5a:c7:41:1a:54:ee:0a:f1:28:94:1a:d4:b2:3d:b0:21:f9:eb: a5:44:aa:c8:0e:95:fa:a3:2b:a8:8b:d6:23:78:64:d2:bb:97: 72:b9:89:66:37:af:aa:40:d6:c3:9e:e1:ad:3e:95:b5:85:6a: fb:2c:18:3c:a2:61:e9:a3:65:d3:10:32:9c:b2:cf:b4:68:96: fd:2e:1d:7e:fd:25:ff:b5:1a:47:11:30:d2:07:8a:d0:12:9a: e3:73:70:0b:00:ee:33:10:a1:d5:43:49:5e:14:c7:3e:31:17: 4e:f6:41:60:32:b9:1e:25:59:71:3d:cc:74:6f:39:4d:bb:a1: 89:d6:33:ae:d9:99:67:d3:9b:41:3e:89:48:a1:87:59:76:76: 5f:dd:7a:47:77:21:f9:ee:ec:fe:4b:5f:94:d5:b3:c2:00:42: 85:b9:4b:ad:83:2c:0e:12:c6:1f:f2:b8:bc:19:f8:1f:61:f3: b3:15:61:09:c3:f5:15:54:2e:46:fd:04:1a:03:07:5e:70:e2: 84:c8:a2:a3:10:de:60:78:5c:b9:a2:36:ef:eb:d0:a1:5d:8f: 51:81:7c:5d:29:32:be:d6:fe:a9:e2:f7:d4:40:f8:53:c5:12: 25:14:bc:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMF884UWoS3p10RP5d0uZvo5BLEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1NzI4ODlERjEwNzVFNjUxNDNBNEVGNEJDMUQ4Qzc0 OTA0NkMxMzAeFw0yNjA2MTkyMDQ2MDRaFw0yNjA2MjAyMTQ5MDRaMDMxMTAvBgNV BAMTKDE4REJDNjA3MEJGQTI1MDQ2RTZCMzczMDkyREQ4NDBERTA4QTVGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/NheWeuYpgku8iXbDxWJE9H+ A8Vv9HKLPy6/yRePRevdRu9cSBGZfGa55cYGIzbJeH8Cb0xNWDOxPJO3FAl/F18C qfICkhtBf7G1UPtMWJL8d7D3kLWKBZnegZknTVSV3mtP3b+laZ9XZwUjPg9/4BRm wSW0wpJgJ8HyAj4cnUwvuHSX3f38hj0K8HaBWY4LH9rkZplLSR63muT3rdZaZKc5 LyrBEiO1FDYm418DmHoVNw8hW4uVjVW6A2zgYOxT4KLlPq1flgJjkIfUDK1J5w2F 1BT8J5U3Iv/qBNKK1aCDk1bGnb9zN6PeVcciEuz3ZO+7j1fkOSkLV1l1yk/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGNvGBwv6JQRuazcwkt2EDeCKX28wHwYDVR0j BBgwFoAUAVcoid8QdeZRQ6TvS8HYx0kEbBMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVhNzkzNDAtNGRiMi00NThkLTk1ZGQtYWYyMGI0ZmNkYjNkLzAvMDE1NzI4ODlE RjEwNzVFNjUxNDNBNEVGNEJDMUQ4Qzc0OTA0NkMxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTU3Mjg4OURGMTA3NUU2NTE0M0E0RUY0QkMxRDhDNzQ5MDQ2 QzEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvMDE1NzI4ODlERjEwNzVFNjUxNDNBNEVGNEJDMUQ4 Qzc0OTA0NkMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUt6f1HlXgaL16Du774rXtIlFrHQRpU7grx KJQa1LI9sCH566VEqsgOlfqjK6iL1iN4ZNK7l3K5iWY3r6pA1sOe4a0+lbWFavss GDyiYemjZdMQMpyyz7Rolv0uHX79Jf+1GkcRMNIHitASmuNzcAsA7jMQodVDSV4U xz4xF072QWAyuR4lWXE9zHRvOU27oYnWM67ZmWfTm0E+iUihh1l2dl/dekd3Ifnu 7P5LX5TVs8IAQoW5S62DLA4Sxh/yuLwZ+B9h87MVYQnD9RVULkb9BBoDB15w4oTI oqMQ3mB4XLmiNu/r0KFdj1GBfF0pMr7W/qni99RA+FPFEiUUvFQ= -----END CERTIFICATE-----Generated at Sat Jun 20 08:57:14 2026 by rpki-client