$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft File: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft (raw, json) Hash identifier: Rhg4vTWuxPM6PAUYtFt4HCsElavvR69Es6c4EQawVRM= Subject key identifier: 20:F4:FE:EB:D3:AB:6E:24:E2:ED:75:57:8F:D1:A9:1E:8D:E9:D7:61 Authority key identifier: D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C Certificate issuer: /CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Certificate serial: 4F64F5FAC7D6F385495D6E953E835DAD80CA5ECC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 20:05:08 +0000 Manifest this update: Fri 19 Jun 2026 20:00:08 +0000 Manifest next update: Sat 20 Jun 2026 22:02:08 +0000 Files and hashes: 1: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: mtrDV4mqgTGdX3FIVkCoXVE0ERKQErVYoLX9nuzS4rw=) 2: D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl (hash: kqEs6ipfYp9rZRoZAAYce/MBGprNwyP/kMNrmIViNeY=) 3: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: ecWkSgSwkV2u+u82kb3iMyEyHidsVg9ktP1OUEc0RVY=) 4: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: n33ojlZr3PPZOfsVvz1esHOzCxGjqSWfrz4yQc92lmw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:64:f5:fa:c7:d6:f3:85:49:5d:6e:95:3e:83:5d:ad:80:ca:5e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3982143FCBA4420C07AA5CEEB50EDB28487CF2C Validity Not Before: Jun 19 20:00:08 2026 GMT Not After : Jun 20 22:02:08 2026 GMT Subject: CN=20F4FEEBD3AB6E24E2ED75578FD1A91E8DE9D761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bd:76:5a:b9:27:09:b7:6d:83:ff:dc:b7:5c: e5:92:d7:6c:60:8f:43:7c:e5:01:97:a1:c0:09:c4: c5:cc:d9:72:68:55:5f:18:08:be:79:74:03:4d:5a: fe:61:06:8f:20:b7:80:68:e4:a4:32:7d:ca:62:1f: 9f:f6:c0:6b:22:47:d3:58:71:38:0d:a7:18:4d:27: 61:df:86:70:79:8b:f7:6e:a5:e3:7c:a8:4f:84:5e: c7:ee:c1:49:ad:b9:3d:cc:72:73:6b:de:47:b0:be: c0:28:77:82:e0:40:d2:8b:dd:2e:70:27:98:e8:18: 4a:3f:70:7b:2a:38:f8:8d:21:34:88:da:b7:67:64: f0:1f:85:e2:4c:50:35:1f:af:51:a2:be:7d:65:69: bc:99:59:8c:f6:ad:96:fc:07:c8:ad:87:81:f3:4c: 94:d4:3a:4a:0e:f8:4e:ab:ba:10:cf:1c:76:a1:3f: e1:df:d7:f9:47:8f:76:52:d8:9e:de:e6:cd:31:d3: 7a:51:a5:4e:ff:e6:aa:cb:07:f1:35:55:28:6f:5d: 81:b6:74:be:53:f9:3a:c5:03:b3:08:cb:54:ed:3a: 7a:a8:9e:91:27:86:68:6e:15:e8:b3:01:75:39:cf: 27:66:4b:68:97:88:6c:f4:ab:eb:3b:83:1d:fa:c8: b6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F4:FE:EB:D3:AB:6E:24:E2:ED:75:57:8F:D1:A9:1E:8D:E9:D7:61 X509v3 Authority Key Identifier: keyid:D3:98:21:43:FC:BA:44:20:C0:7A:A5:CE:EB:50:ED:B2:84:87:CF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/D3982143FCBA4420C07AA5CEEB50EDB28487CF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:84:19:d2:12:68:75:8b:8b:3a:7d:67:30:9c:a0:6a:a5:d0: ff:b8:c5:06:c6:43:4a:b2:67:3c:6c:e3:b9:4a:fa:4f:4d:40: bf:fb:9e:a4:3b:77:d0:26:18:2b:a2:7d:20:5c:ee:11:07:18: 5d:5c:ea:49:8c:5d:84:4e:d6:0b:cf:d8:71:80:b5:a5:1d:a7: 9a:a2:65:5a:b9:c5:8e:6a:b7:dd:3c:0b:df:a5:6d:7f:d0:62: 64:75:76:ca:2e:cb:8a:57:6e:80:c1:20:27:7d:7a:96:ee:7e: df:60:a0:c9:c1:50:35:bb:a6:5d:d1:a9:38:bc:ab:2f:54:ef: 20:72:c4:1a:3d:a0:a9:b3:1f:bc:6a:e9:95:e1:ea:08:62:71: b5:d6:7d:5d:50:04:a3:c2:a5:a8:83:a4:e2:55:fb:ef:01:e8: f6:ad:3d:57:47:8b:67:db:f1:27:ba:e0:eb:25:0a:af:47:70: 97:83:43:53:51:57:60:ec:ab:46:e4:35:d6:13:54:65:11:59: ab:46:8a:89:e5:e4:60:b8:28:91:b0:53:57:b9:2a:5f:ae:58: 5d:67:b3:f1:0f:c9:c6:95:79:cc:d7:b6:9d:5f:1b:3e:c2:63: 37:c0:80:1c:a4:c0:11:7a:50:b4:2f:98:b6:fb:da:04:25:fd: 76:d4:21:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT2T1+sfW84VJXW6VPoNdrYDKXswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4 NDg3Q0YyQzAeFw0yNjA2MTkyMDAwMDhaFw0yNjA2MjAyMjAyMDhaMDMxMTAvBgNV BAMTKDIwRjRGRUVCRDNBQjZFMjRFMkVENzU1NzhGRDFBOTFFOERFOUQ3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbvXZauScJt22D/9y3XOWS12xg j0N85QGXocAJxMXM2XJoVV8YCL55dANNWv5hBo8gt4Bo5KQyfcpiH5/2wGsiR9NY cTgNpxhNJ2HfhnB5i/dupeN8qE+EXsfuwUmtuT3McnNr3kewvsAod4LgQNKL3S5w J5joGEo/cHsqOPiNITSI2rdnZPAfheJMUDUfr1Givn1labyZWYz2rZb8B8ith4Hz TJTUOkoO+E6ruhDPHHahP+Hf1/lHj3ZS2J7e5s0x03pRpU7/5qrLB/E1VShvXYG2 dL5T+TrFA7MIy1TtOnqonpEnhmhuFeizAXU5zydmS2iXiGz0q+s7gx36yLa7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIPT+69OrbiTi7XVXj9GpHo3p12EwHwYDVR0j BBgwFoAU05ghQ/y6RCDAeqXO61DtsoSHzywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZlZTgyYjctYzE4Mi00ZTgzLTg5N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNG Q0JBNDQyMEMwN0FBNUNFRUI1MEVEQjI4NDg3Q0YyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzk4MjE0M0ZDQkE0NDIwQzA3QUE1Q0VFQjUwRURCMjg0ODdD RjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvRDM5ODIxNDNGQ0JBNDQyMEMwN0FBNUNFRUI1MEVE QjI4NDg3Q0YyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+EGdISaHWLizp9ZzCcoGql0P+4xQbGQ0qy Zzxs47lK+k9NQL/7nqQ7d9AmGCuifSBc7hEHGF1c6kmMXYRO1gvP2HGAtaUdp5qi ZVq5xY5qt908C9+lbX/QYmR1dsouy4pXboDBICd9epbuft9goMnBUDW7pl3RqTi8 qy9U7yByxBo9oKmzH7xq6ZXh6ghicbXWfV1QBKPCpaiDpOJV++8B6PatPVdHi2fb 8Se64OslCq9HcJeDQ1NRV2Dsq0bkNdYTVGURWatGionl5GC4KJGwU1e5Kl+uWF1n s/EPycaVeczXtp1fGz7CYzfAgBykwBF6ULQvmLb72gQl/XbUIdQ= -----END CERTIFICATE-----Generated at Sat Jun 20 11:23:40 2026 by rpki-client