$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft File: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft (raw, json) Hash identifier: 8GFJcrn4bik6C+Wye/LRwILdjltQGEUu/ZamkNshiRg= Subject key identifier: C1:30:75:31:3E:DC:23:51:C4:41:35:BD:07:70:63:61:68:83:5F:9E Authority key identifier: 25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 Certificate issuer: /CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Certificate serial: 7FB94A7E262F74902FF45B9A87097E6F426C8BDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:33:15 +0000 Manifest this update: Fri 19 Jun 2026 18:28:15 +0000 Manifest next update: Sat 20 Jun 2026 19:52:15 +0000 Files and hashes: 1: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: gPZAQ+bxPkBJwcTxVnEcsmMlAofGkUTs2Mpi2Ou9ROM=) 2: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: RZQJpTRRgue7IYV2PEsoGXrZll3cpomqzvFUOIs6rno=) 3: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl (hash: T6rH8j66KjkuzuN3NCkJwvNBCj+AZHmqLq0W9ztHJQE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b9:4a:7e:26:2f:74:90:2f:f4:5b:9a:87:09:7e:6f:42:6c:8b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Validity Not Before: Jun 19 18:28:15 2026 GMT Not After : Jun 20 19:52:15 2026 GMT Subject: CN=C13075313EDC2351C44135BD0770636168835F9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9c:82:3a:e8:22:ae:1a:88:32:2f:d2:84:94: 70:27:bd:c2:c8:5f:7e:4c:b4:d6:6d:cf:56:c1:66: af:65:83:15:e8:e8:17:3c:9e:15:76:9c:11:a2:d1: 19:c3:de:48:80:50:5c:51:ae:db:4f:a8:90:0c:9a: 6b:6f:08:30:64:9c:ed:34:9f:f2:a9:41:0a:18:72: 09:64:8b:05:7f:a8:48:ec:28:60:59:21:65:b2:b6: 8b:16:cb:26:3c:27:92:ef:da:a1:ea:b2:1c:b6:46: 39:46:72:66:7d:28:7a:f9:9c:66:f1:1e:e6:00:0c: 5d:7e:71:16:63:74:30:9f:a6:72:5a:8e:c6:4a:2c: e3:f8:f2:ba:ec:c5:ac:96:b5:aa:a5:21:24:e0:e0: 4f:e2:d6:87:bc:80:52:0d:69:c5:eb:07:7c:61:09: 7b:20:8e:55:0e:96:5b:33:bc:44:62:08:30:3b:79: 26:a9:48:64:e7:15:5e:13:6e:2c:2f:93:d7:28:9b: ab:58:8f:2c:df:a3:18:d1:9e:96:5e:69:62:37:48: 3e:9c:22:61:ca:7a:ee:3c:84:51:8e:0b:76:10:dc: 9b:94:c9:b7:f2:bd:6d:3f:2b:8b:6b:a4:e4:21:4b: 95:ef:83:79:33:4d:4a:ec:b1:b7:33:7b:d4:70:68: 82:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:30:75:31:3E:DC:23:51:C4:41:35:BD:07:70:63:61:68:83:5F:9E X509v3 Authority Key Identifier: keyid:25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:23:26:28:eb:be:7c:01:ad:4c:ea:43:69:ed:f6:f5:cc:b4: 0e:89:91:0c:51:c9:a9:50:a5:73:48:98:d7:4e:71:e4:02:1c: 97:ce:c3:ee:8c:d9:c1:30:55:18:31:8a:8a:67:5c:2d:cc:6e: 10:c1:33:24:78:71:23:25:53:f3:31:5c:c1:8d:56:ef:28:2a: 8c:fd:4d:03:24:3e:d1:e1:9f:81:91:05:45:63:66:79:d9:94: 97:f7:25:0e:e0:94:88:72:4d:fa:21:00:e1:f9:66:d8:c3:4d: 15:b2:e4:5c:9d:f7:6a:3b:2e:83:7f:22:f9:e0:85:a5:bf:28: ed:ea:85:94:58:d9:36:dc:d1:a0:63:42:bb:e1:2b:f5:9b:95: 3f:75:cf:aa:6b:97:79:cd:4c:9e:cd:d8:4d:03:3a:05:5d:0a: 75:72:41:bf:ba:1c:e2:e4:de:be:3d:41:85:3f:df:6c:8c:fd: 65:00:9e:d0:b3:0d:d2:54:42:65:2b:6c:18:35:3d:88:ae:59: 99:7e:d3:ff:30:f5:58:94:61:df:30:db:7f:de:d2:29:de:cf: 1d:f1:ae:9a:d0:65:20:ec:29:f7:d5:6c:3c:03:5f:ea:59:2a: 40:72:be:4b:b6:ad:07:ab:ef:4d:2c:e9:20:8f:de:7d:e9:9c: e2:70:f1:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7lKfiYvdJAv9Fuahwl+b0Jsi9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdG QzFFNkY5MzAeFw0yNjA2MTkxODI4MTVaFw0yNjA2MjAxOTUyMTVaMDMxMTAvBgNV BAMTKEMxMzA3NTMxM0VEQzIzNTFDNDQxMzVCRDA3NzA2MzYxNjg4MzVGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnII66CKuGogyL9KElHAnvcLI X35MtNZtz1bBZq9lgxXo6Bc8nhV2nBGi0RnD3kiAUFxRrttPqJAMmmtvCDBknO00 n/KpQQoYcglkiwV/qEjsKGBZIWWytosWyyY8J5Lv2qHqshy2RjlGcmZ9KHr5nGbx HuYADF1+cRZjdDCfpnJajsZKLOP48rrsxayWtaqlISTg4E/i1oe8gFINacXrB3xh CXsgjlUOllszvERiCDA7eSapSGTnFV4Tbiwvk9com6tYjyzfoxjRnpZeaWI3SD6c ImHKeu48hFGOC3YQ3JuUybfyvW0/K4trpOQhS5Xvg3kzTUrssbcze9RwaIL9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwTB1MT7cI1HEQTW9B3BjYWiDX54wHwYDVR0j BBgwFoAUJXr97p+h7WxVq/DAzPFz5/web5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTZmNzUwMjEtODM2OC00NDgxLTkyNjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5 RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdGQzFFNkY5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTdBRkRFRTlGQTFFRDZDNTVBQkYwQzBDQ0YxNzNFN0ZDMUU2 RjkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTcz RTdGQzFFNkY5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcjJijrvnwBrUzqQ2nt9vXMtA6JkQxRyalQ pXNImNdOceQCHJfOw+6M2cEwVRgxiopnXC3MbhDBMyR4cSMlU/MxXMGNVu8oKoz9 TQMkPtHhn4GRBUVjZnnZlJf3JQ7glIhyTfohAOH5ZtjDTRWy5Fyd92o7LoN/Ivng haW/KO3qhZRY2Tbc0aBjQrvhK/WblT91z6prl3nNTJ7N2E0DOgVdCnVyQb+6HOLk 3r49QYU/32yM/WUAntCzDdJUQmUrbBg1PYiuWZl+0/8w9ViUYd8w23/e0inezx3x rprQZSDsKffVbDwDX+pZKkByvku2rQer700s6SCP3n3pnOJw8Uo= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:59 2026 by rpki-client