$ rpki-client -vvf rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft File: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft (raw, json) Hash identifier: DeIYME70tap1r5l/LNSENfJRna0JwPoU6ZP4Bo7nsYk= Subject key identifier: 5A:18:32:37:BD:71:2D:E3:3B:09:66:B6:4E:1B:56:F2:A6:80:91:DE Authority key identifier: F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE Certificate issuer: /CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Certificate serial: 62A848A550C2333F4D518807D54EB3FD22E13486 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 12:16:56 +0000 Manifest this update: Thu 18 Jun 2026 12:11:56 +0000 Manifest next update: Fri 19 Jun 2026 14:43:56 +0000 Files and hashes: 1: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl (hash: upPOGaXSZpFxYOCpnNU88Aa/Rq6o0sqTNDolgyFTgjk=) 2: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: Mq8DWbeqyF5RASCP8QKF1wsfTOXfn4M5I7xbRWlSkvI=) 3: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: +8ziEowYwDOL6fJKnsKsHl4XsowErxzBKUzz7/GWBlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a8:48:a5:50:c2:33:3f:4d:51:88:07:d5:4e:b3:fd:22:e1:34:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Validity Not Before: Jun 18 12:11:56 2026 GMT Not After : Jun 19 14:43:56 2026 GMT Subject: CN=5A183237BD712DE33B0966B64E1B56F2A68091DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:12:64:2b:1c:a5:ce:ec:0f:c1:93:30:83:89: 43:f1:2a:61:e4:d5:9b:67:39:3e:09:49:f5:cf:cd: 8d:15:d7:3d:e2:6e:df:7a:1e:8e:e7:50:44:d2:d0: 00:06:7d:b8:6a:e6:f1:16:ca:e0:01:76:2c:da:0c: ce:84:5a:d5:e0:b8:5e:90:34:c8:28:bf:2d:20:de: bb:47:e7:c0:15:35:b4:9f:a7:81:f3:2d:e0:b6:64: b6:bd:61:52:b1:a1:32:7f:e0:b0:29:85:cb:6d:83: 58:2f:81:62:40:ab:98:da:c3:38:b1:02:8e:b9:35: 84:c9:b6:95:86:ca:14:a3:a5:91:af:5a:e8:73:9f: 8b:48:1c:ea:9d:0a:d9:da:f9:8d:1c:f5:38:af:ab: 88:c6:1b:93:a6:f6:fb:bd:79:e3:73:50:4f:d0:12: 68:e9:30:67:26:1b:13:95:2d:cc:13:a9:e1:16:ea: d4:05:0e:a1:3b:a0:b9:2c:7b:fb:68:fb:a6:c5:0c: 38:a1:1c:8f:7d:3f:87:a9:37:e9:e8:33:43:91:a7: e6:07:6d:53:d8:c4:f0:20:7f:50:3d:f4:a9:eb:2d: 22:c0:ba:eb:92:d4:0f:71:ee:53:6f:ac:13:81:67: 8b:bc:24:d3:da:5c:9a:eb:bf:b7:9a:81:76:ed:c4: fc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:18:32:37:BD:71:2D:E3:3B:09:66:B6:4E:1B:56:F2:A6:80:91:DE X509v3 Authority Key Identifier: keyid:F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:38:3c:c0:94:ea:7e:57:6f:3a:cf:db:33:86:a5:ca:42:93: 01:5c:b1:5a:0c:08:b4:a0:3d:cc:68:2e:ab:ce:38:64:a2:2d: 08:25:df:4c:71:39:4d:31:2f:1e:a7:46:7a:e0:91:14:01:5f: 41:bb:23:4e:82:97:96:74:85:a5:0d:06:4d:ae:1c:24:56:d9: be:e7:5d:ac:1e:e3:4b:c5:30:cc:97:d1:c1:b4:e5:2a:29:5f: ca:a0:24:7f:67:56:3c:af:ab:63:25:b2:a2:67:da:9a:03:13: 10:b7:34:60:35:2a:21:e5:98:49:d5:60:47:58:79:39:d9:c6: 7d:9e:37:f6:18:5c:0b:c0:ac:81:98:91:17:4d:d4:d7:22:de: 15:a9:ac:42:69:e8:c7:19:7b:e7:30:65:18:49:bc:5b:e3:ad: 11:fc:5a:2f:8d:08:db:d8:73:78:03:73:34:e0:24:40:a5:74: 90:55:a6:1d:05:ab:ce:5b:54:bf:98:3d:68:f6:62:79:09:81: f0:41:1f:bc:d4:fd:26:88:f4:e6:90:1c:40:77:a2:f8:14:af: 91:06:ef:63:a2:6b:92:a4:b3:c2:a3:4f:68:b9:6c:7a:d0:b6: 4b:68:f8:1e:86:b5:e6:a8:3d:ba:b4:48:bb:df:85:5c:2a:b3: 62:67:4c:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYqhIpVDCMz9NUYgH1U6z/SLhNIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMwREIx MEQyRjRERTAeFw0yNjA2MTgxMjExNTZaFw0yNjA2MTkxNDQzNTZaMDMxMTAvBgNV BAMTKDVBMTgzMjM3QkQ3MTJERTMzQjA5NjZCNjRFMUI1NkYyQTY4MDkxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0EmQrHKXO7A/BkzCDiUPxKmHk 1ZtnOT4JSfXPzY0V1z3ibt96Ho7nUETS0AAGfbhq5vEWyuABdizaDM6EWtXguF6Q NMgovy0g3rtH58AVNbSfp4HzLeC2ZLa9YVKxoTJ/4LAphcttg1gvgWJAq5jawzix Ao65NYTJtpWGyhSjpZGvWuhzn4tIHOqdCtna+Y0c9Tivq4jGG5Om9vu9eeNzUE/Q EmjpMGcmGxOVLcwTqeEW6tQFDqE7oLkse/to+6bFDDihHI99P4epN+noM0ORp+YH bVPYxPAgf1A99KnrLSLAuuuS1A9x7lNvrBOBZ4u8JNPaXJrrv7eagXbtxPyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWhgyN71xLeM7CWa2ThtW8qaAkd4wHwYDVR0j BBgwFoAU8oNgeB+i2mui+YLLnjTA2xDS9N4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY5YmY3OTctOTEzZC00OGRkLTgzMmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgx RkEyREE2QkEyRjk4MkNCOUUzNEMwREIxMEQyRjRERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjgzNjA3ODFGQTJEQTZCQTJGOTgyQ0I5RTM0QzBEQjEwRDJG NERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMw REIxMEQyRjRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGk4PMCU6n5XbzrP2zOGpcpCkwFcsVoMCLSg PcxoLqvOOGSiLQgl30xxOU0xLx6nRnrgkRQBX0G7I06Cl5Z0haUNBk2uHCRW2b7n Xawe40vFMMyX0cG05SopX8qgJH9nVjyvq2MlsqJn2poDExC3NGA1KiHlmEnVYEdY eTnZxn2eN/YYXAvArIGYkRdN1Nci3hWprEJp6McZe+cwZRhJvFvjrRH8Wi+NCNvY c3gDczTgJECldJBVph0Fq85bVL+YPWj2YnkJgfBBH7zU/SaI9OaQHEB3ovgUr5EG 72Oia5Kks8KjT2i5bHrQtkto+B6GteaoPbq0SLvfhVwqs2JnTOU= -----END CERTIFICATE-----Generated at Fri Jun 19 01:07:16 2026 by rpki-client