$ rpki-client -vvf rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft File: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft (raw, json) Hash identifier: w/5sADOrA6UI3j8BDNLXrzKuuOiQB3A/wTp6ioSgNvI= Subject key identifier: 1D:B2:4D:A8:FA:08:31:E6:E6:A7:46:8B:63:37:00:61:12:E3:62:41 Authority key identifier: D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 Certificate issuer: /CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Certificate serial: 10B400E41B9DFFA1B2EC1254DEB807A8B4651820 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 04:17:11 +0000 Manifest this update: Thu 18 Jun 2026 04:12:11 +0000 Manifest next update: Fri 19 Jun 2026 05:20:11 +0000 Files and hashes: 1: D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl (hash: GqwOZOlrtoLrOMlyxC1K01rm3iAd2U7mz3ZaoR1gOUc=) 2: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: mzkKba2j66n6wraFNQYRS+UC4ztp7C2s0dllCrbur4g=) 3: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: e4bsRLScbecV3EUW42ypNee+dC4atMUS4ULfB5R1TMs=) 4: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: UJBNMpcsHaasyvcJ4Sq3J89ZHMIFKcGiQvcCBcd8DHY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 05:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b4:00:e4:1b:9d:ff:a1:b2:ec:12:54:de:b8:07:a8:b4:65:18:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6 Validity Not Before: Jun 18 04:12:11 2026 GMT Not After : Jun 19 05:20:11 2026 GMT Subject: CN=1DB24DA8FA0831E6E6A7468B6337006112E36241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:a4:80:55:3c:af:81:b0:e1:9c:9b:11:79: af:29:e5:74:15:3e:f1:d7:c4:4b:11:38:2e:36:73: df:fe:72:bd:13:5e:79:0a:e3:02:3a:0c:54:3c:c8: 33:f3:1d:de:d3:39:2e:28:b0:2f:f2:ad:7d:fd:77: 92:26:28:9c:31:f7:dc:50:b1:37:1e:da:f4:27:61: 8d:03:7d:2f:38:23:04:24:94:ca:10:79:02:10:e4: 5e:de:1b:c9:17:c8:76:81:39:b8:7d:32:c8:36:03: 63:a3:91:ea:45:34:c1:57:0f:51:f0:ae:1d:60:07: 3c:ab:1b:b1:f5:e6:c6:88:33:70:67:40:9c:fb:12: 3d:00:cb:e1:8b:4f:9c:7a:09:f1:ea:27:40:f9:bc: 35:71:13:eb:fc:70:ca:44:62:41:50:db:54:ee:8e: 7d:3b:0d:07:f3:51:eb:89:43:ab:c0:2b:86:e9:09: 40:74:e0:85:9c:da:2b:f1:71:bb:45:98:b9:d1:e5: c7:e1:38:4b:02:9f:47:3a:96:48:bf:b7:47:58:9a: 24:ae:77:93:1c:4b:4e:d3:0f:19:fa:f9:be:fa:08: 2d:40:2b:40:f2:43:1d:ac:0f:db:f9:bb:77:ba:43: 9b:f1:13:dd:54:ad:9f:8d:37:d9:b4:7f:7e:8e:fb: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B2:4D:A8:FA:08:31:E6:E6:A7:46:8B:63:37:00:61:12:E3:62:41 X509v3 Authority Key Identifier: keyid:D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4b:0a:1f:e7:82:3b:64:5f:f6:a2:5f:4d:d2:86:6b:25:72: e4:0a:f8:5d:6a:3c:c6:86:33:29:b1:26:8c:12:36:47:78:3d: 5a:18:5f:1b:b6:18:03:a6:43:ee:27:ae:44:eb:f6:97:74:72: 7b:3b:18:08:95:39:e5:b0:64:7b:e8:02:e7:8c:4a:6e:58:08: 05:3a:50:ee:94:c7:f9:47:09:99:ad:90:bb:62:54:51:df:86: 12:e9:74:68:de:04:93:2e:f4:38:d4:ce:ea:e7:23:78:02:be: b9:36:78:90:4a:3d:43:f9:3e:79:fa:57:31:5d:e0:a3:69:d3: 39:de:8c:70:cd:a5:3f:1f:39:fd:c7:7f:3b:01:ac:16:68:c9: db:c9:76:ce:0f:07:e6:fd:06:0b:f3:0d:f8:7d:6d:56:6f:95: d2:0c:37:3a:3c:fb:55:db:7d:17:8e:f4:b1:d0:1f:2b:ae:98: 34:ee:94:ed:cd:ac:6e:2a:70:ab:b5:c4:78:d4:48:4d:90:8d: 66:0d:e5:c6:6b:f1:cd:b0:c5:69:3f:38:82:cb:28:be:ff:bb: 13:26:ab:51:82:16:29:89:91:80:08:b6:2e:da:86:ea:ac:36: 75:10:17:50:fd:d9:18:83:ca:2e:32:17:89:da:89:aa:fd:95: 67:54:e6:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELQA5Bud/6Gy7BJU3rgHqLRlGCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2 NTYyOTRGNjAeFw0yNjA2MTgwNDEyMTFaFw0yNjA2MTkwNTIwMTFaMDMxMTAvBgNV BAMTKDFEQjI0REE4RkEwODMxRTZFNkE3NDY4QjYzMzcwMDYxMTJFMzYyNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxKSAVTyvgbDhnJsRea8p5XQV PvHXxEsROC42c9/+cr0TXnkK4wI6DFQ8yDPzHd7TOS4osC/yrX39d5ImKJwx99xQ sTce2vQnYY0DfS84IwQklMoQeQIQ5F7eG8kXyHaBObh9Msg2A2OjkepFNMFXD1Hw rh1gBzyrG7H15saIM3BnQJz7Ej0Ay+GLT5x6CfHqJ0D5vDVxE+v8cMpEYkFQ21Tu jn07DQfzUeuJQ6vAK4bpCUB04IWc2ivxcbtFmLnR5cfhOEsCn0c6lki/t0dYmiSu d5McS07TDxn6+b76CC1AK0DyQx2sD9v5u3e6Q5vxE91UrZ+NN9m0f36O+9OVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHbJNqPoIMebmp0aLYzcAYRLjYkEwHwYDVR0j BBgwFoAU2cS2voTJC8QGq2ceX3WoyGVilPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE5NWI0YjQtYmM4YS00Y2U1LWI1NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4 NEM5MEJDNDA2QUI2NzFFNUY3NUE4Qzg2NTYyOTRGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOUM0QjZCRTg0QzkwQkM0MDZBQjY3MUU1Rjc1QThDODY1NjI5 NEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvRDlDNEI2QkU4NEM5MEJDNDA2QUI2NzFFNUY3NUE4 Qzg2NTYyOTRGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtLCh/ngjtkX/aiX03ShmslcuQK+F1qPMaG MymxJowSNkd4PVoYXxu2GAOmQ+4nrkTr9pd0cns7GAiVOeWwZHvoAueMSm5YCAU6 UO6Ux/lHCZmtkLtiVFHfhhLpdGjeBJMu9DjUzurnI3gCvrk2eJBKPUP5Pnn6VzFd 4KNp0znejHDNpT8fOf3HfzsBrBZoydvJds4PB+b9BgvzDfh9bVZvldIMNzo8+1Xb fReO9LHQHyuumDTulO3NrG4qcKu1xHjUSE2QjWYN5cZr8c2wxWk/OILLKL7/uxMm q1GCFimJkYAIti7ahuqsNnUQF1D92RiDyi4yF4naiar9lWdU5pU= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:33 2026 by rpki-client