$ rpki-client -vvf rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.mft File: 187F162EF573D82408D04DFBF5DDAA285BE8BB65.mft (raw, json) Hash identifier: Gs01YsdDpz3S3knoXeYBLIYulr8iRCsB5Dg6vD1rjdI= Subject key identifier: 7A:64:C2:9A:3A:D7:24:2A:31:60:5F:2F:5B:F9:3C:53:0A:13:54:9F Authority key identifier: 18:7F:16:2E:F5:73:D8:24:08:D0:4D:FB:F5:DD:AA:28:5B:E8:BB:65 Certificate issuer: /CN=187F162EF573D82408D04DFBF5DDAA285BE8BB65 Certificate serial: 423ED809D357B0594DE319C72C0FCD757E911B57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/187F162EF573D82408D04DFBF5DDAA285BE8BB65.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 14:03:53 +0000 Manifest this update: Thu 18 Jun 2026 13:58:53 +0000 Manifest next update: Fri 19 Jun 2026 16:25:53 +0000 Files and hashes: 1: 3130332e3136332e3133382e302f32332d3234203d3e203535363838.roa (hash: 8xo0Jl7LzjqAxX44IJumhtA9p3VYF5J5mSQKHYl3YIw=) 2: 187F162EF573D82408D04DFBF5DDAA285BE8BB65.crl (hash: CpiK2zo36obMnX6P//mG6UimqbhMmejQIqC2yOPlVDA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.crl rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/187F162EF573D82408D04DFBF5DDAA285BE8BB65.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3e:d8:09:d3:57:b0:59:4d:e3:19:c7:2c:0f:cd:75:7e:91:1b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=187F162EF573D82408D04DFBF5DDAA285BE8BB65 Validity Not Before: Jun 18 13:58:53 2026 GMT Not After : Jun 19 16:25:53 2026 GMT Subject: CN=7A64C29A3AD7242A31605F2F5BF93C530A13549F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:36:6c:79:84:70:04:1f:fc:3c:7c:5b:5b: 8a:94:92:eb:5e:ef:40:4c:b6:d2:55:26:3e:c0:12: de:8b:7a:f2:d4:50:1c:bb:19:eb:82:0f:e5:44:27: 91:b2:81:d0:79:5b:8b:97:1a:d4:c4:99:e7:3e:ce: 53:cf:93:6b:31:5d:38:9a:89:c9:ac:e2:71:ea:d8: 20:4d:99:2b:c8:f9:08:af:ac:b9:f6:d4:6b:ee:a1: 3e:65:61:6b:10:b0:e3:2c:0b:8c:b5:d9:c8:15:cf: e2:cd:09:3c:56:65:31:2c:d5:39:4f:bd:22:56:db: bb:5e:7d:10:84:eb:9a:5e:47:7a:64:83:a2:71:a8: cd:b1:dc:42:18:29:55:ef:57:82:0b:0c:98:5c:0a: 6d:7c:7e:26:27:54:4f:43:63:bd:1f:e6:3e:74:e1: cb:6f:11:44:06:8b:95:cb:7b:54:4a:5a:e5:4d:df: 2f:24:bc:d4:61:86:cb:34:86:eb:b9:b6:9c:7f:61: 98:ca:92:69:5e:ea:aa:b6:04:12:fe:d3:ee:e0:0f: e8:85:44:f6:fd:61:bd:e7:54:ed:05:1c:09:f5:f4: 02:dc:68:04:e4:93:85:5e:a6:c0:77:1b:bf:47:38: 76:8f:72:42:a4:0b:8d:b3:38:86:41:60:7d:08:0d: af:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:64:C2:9A:3A:D7:24:2A:31:60:5F:2F:5B:F9:3C:53:0A:13:54:9F X509v3 Authority Key Identifier: keyid:18:7F:16:2E:F5:73:D8:24:08:D0:4D:FB:F5:DD:AA:28:5B:E8:BB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/187F162EF573D82408D04DFBF5DDAA285BE8BB65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:68:6c:99:ee:8e:94:b3:14:ec:ab:41:f2:bd:b0:81:b5:8b: 9b:be:7e:b0:e6:3d:4a:e3:55:f5:2b:f8:c9:0f:80:16:a3:3a: f0:c5:ec:70:7f:cc:d9:d8:9a:50:7c:95:73:e7:c6:4d:5a:08: ad:32:eb:04:04:c8:4a:b3:b7:e7:24:51:c5:93:d4:7b:83:94: 4e:e7:78:11:1d:11:5c:35:1f:d0:91:15:89:d5:e4:ce:ec:b5: 74:e9:83:02:ad:73:ca:e4:6a:8e:18:a1:f2:eb:2f:7b:24:b8: ff:ef:cc:b7:e8:80:ff:09:95:43:fb:c1:88:fc:3f:da:51:fe: 96:04:97:47:07:e6:26:7f:b8:01:f8:25:cf:47:92:23:12:d7: e2:34:a1:d9:e9:bc:36:d7:3d:8e:d0:8c:85:aa:48:a5:d5:5b: 7a:f7:9a:86:42:a9:f8:91:ed:b7:24:eb:0e:02:e3:a3:85:55: f8:cf:d9:1c:3e:38:5d:cd:82:38:1d:08:b4:24:cc:2a:e0:56: 16:53:e3:cc:d9:cf:c7:f8:47:9c:42:29:b6:03:37:5b:0b:0f: 4d:28:59:83:63:87:ed:e6:75:90:76:bd:ae:09:88:9c:17:03: 21:02:a9:7e:b4:de:60:04:f5:36:4b:a7:99:77:c5:d2:43:28: 9c:d0:a7:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQj7YCdNXsFlN4xnHLA/NdX6RG1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg3RjE2MkVGNTczRDgyNDA4RDA0REZCRjVEREFBMjg1 QkU4QkI2NTAeFw0yNjA2MTgxMzU4NTNaFw0yNjA2MTkxNjI1NTNaMDMxMTAvBgNV BAMTKDdBNjRDMjlBM0FENzI0MkEzMTYwNUYyRjVCRjkzQzUzMEExMzU0OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+TZseYRwBB/8PHxbW4qUkute 70BMttJVJj7AEt6LevLUUBy7GeuCD+VEJ5GygdB5W4uXGtTEmec+zlPPk2sxXTia icms4nHq2CBNmSvI+QivrLn21GvuoT5lYWsQsOMsC4y12cgVz+LNCTxWZTEs1TlP vSJW27tefRCE65peR3pkg6JxqM2x3EIYKVXvV4ILDJhcCm18fiYnVE9DY70f5j50 4ctvEUQGi5XLe1RKWuVN3y8kvNRhhss0huu5tpx/YZjKkmle6qq2BBL+0+7gD+iF RPb9Yb3nVO0FHAn19ALcaATkk4VepsB3G79HOHaPckKkC42zOIZBYH0IDa8TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUemTCmjrXJCoxYF8vW/k8UwoTVJ8wHwYDVR0j BBgwFoAUGH8WLvVz2CQI0E379d2qKFvou2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWZlMjFjNjktN2I3Ny00M2EwLTkyYTYtZjU1NWI2ZWQxZmZjLzAvMTg3RjE2MkVG NTczRDgyNDA4RDA0REZCRjVEREFBMjg1QkU4QkI2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODdGMTYyRUY1NzNEODI0MDhEMDRERkJGNUREQUEyODVCRThC QjY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWZlMjFjNjktN2I3Ny00M2EwLTky YTYtZjU1NWI2ZWQxZmZjLzAvMTg3RjE2MkVGNTczRDgyNDA4RDA0REZCRjVEREFB Mjg1QkU4QkI2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFobJnujpSzFOyrQfK9sIG1i5u+frDmPUrj VfUr+MkPgBajOvDF7HB/zNnYmlB8lXPnxk1aCK0y6wQEyEqzt+ckUcWT1HuDlE7n eBEdEVw1H9CRFYnV5M7stXTpgwKtc8rkao4YofLrL3skuP/vzLfogP8JlUP7wYj8 P9pR/pYEl0cH5iZ/uAH4Jc9HkiMS1+I0odnpvDbXPY7QjIWqSKXVW3r3moZCqfiR 7bck6w4C46OFVfjP2Rw+OF3NgjgdCLQkzCrgVhZT48zZz8f4R5xCKbYDN1sLD00o WYNjh+3mdZB2va4JiJwXAyECqX603mAE9TZLp5l3xdJDKJzQp+w= -----END CERTIFICATE-----Generated at Thu Jun 18 19:21:40 2026 by rpki-client