$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft File: C09B0826A8950269AAA9592F3B0B65A3232333C5.mft (raw, json) Hash identifier: vX9eyLsWs4jn0jdIvE8e15TSmDZsVnsARdqVhCLbazw= Subject key identifier: 69:98:05:6B:81:FA:9C:79:8B:FF:70:E3:B0:CE:44:F1:7A:18:DA:91 Authority key identifier: C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 Certificate issuer: /CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Certificate serial: 6DF4F8BDD9C13B77BD801C5E742C7FAA909F84F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 00:11:57 +0000 Manifest this update: Thu 18 Jun 2026 00:06:57 +0000 Manifest next update: Fri 19 Jun 2026 03:27:57 +0000 Files and hashes: 1: C09B0826A8950269AAA9592F3B0B65A3232333C5.crl (hash: TRUz2Pr0P/wfZys6F+2r+X/vvuOnG/kcayyboQvSaag=) 2: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: /OlYgkp/JUv7mWTKG1jRIEEEMwF4cVrVtCICjMapFuQ=) 3: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: u7ID+/zmEfkiBk9A2DOk1aoUvKs6xhyBLUvlSwziv+4=) 4: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: qD0/6TXIm8wKpNkYb5k3M2VEq1Hkh2ZvC2u1LPq71Ck=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 03:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f4:f8:bd:d9:c1:3b:77:bd:80:1c:5e:74:2c:7f:aa:90:9f:84:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C09B0826A8950269AAA9592F3B0B65A3232333C5 Validity Not Before: Jun 18 00:06:57 2026 GMT Not After : Jun 19 03:27:57 2026 GMT Subject: CN=6998056B81FA9C798BFF70E3B0CE44F17A18DA91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d2:d2:b0:f6:96:8c:d0:73:a2:81:43:c9:46: 4f:73:19:70:ad:63:ea:40:c9:5a:67:84:3a:11:fa: f0:37:b5:07:65:bf:06:d8:4a:5e:3e:10:f1:32:8d: d8:23:f7:e0:d6:51:9d:03:c1:5c:26:df:19:a1:93: 28:29:e9:37:e5:33:ef:f8:99:28:35:dc:29:d1:c9: dc:6d:ca:33:aa:00:1e:09:ae:e3:c1:87:48:c2:d8: 03:db:e5:e6:e5:40:c2:19:67:01:86:92:96:19:63: 8a:a1:3e:dd:ab:f3:d4:1c:77:6b:2c:7f:0f:e1:b0: b3:84:d9:22:fc:32:72:e7:9a:b2:87:3d:d6:f8:e7: e4:24:b1:29:6b:31:9d:0c:28:5d:9c:63:10:c1:c7: ee:5f:97:c9:3b:06:41:5a:e1:62:85:14:17:57:37: 6d:f9:93:d0:70:30:3a:c8:45:09:c4:16:35:3e:b7: f2:74:47:0a:3f:94:99:50:52:7a:c5:63:4b:e1:f2: 81:28:01:28:4d:bd:2a:98:ce:59:d4:db:ec:8d:6f: 4e:56:bc:c5:ac:57:60:4e:5a:c2:3f:8a:c2:b2:11: 1d:8c:d3:8d:f8:e7:f5:85:09:f8:1d:72:f0:a6:06: fd:2b:27:c6:d1:a0:5e:b5:5d:c3:ec:4c:88:67:51: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:98:05:6B:81:FA:9C:79:8B:FF:70:E3:B0:CE:44:F1:7A:18:DA:91 X509v3 Authority Key Identifier: keyid:C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e0:97:fc:e9:49:53:df:c4:b5:be:39:40:ba:cc:28:36:78: c9:e2:43:f5:ac:61:32:06:af:e6:63:23:91:5b:4e:53:df:a9: ac:a2:95:28:05:c8:33:70:d1:ca:f4:91:d5:2a:d8:fc:95:4f: 3d:88:99:3b:2e:cb:1e:d7:ee:71:6e:ed:ae:d4:61:0f:69:93: 13:e4:29:cf:dc:70:25:a4:5b:d8:82:b3:b6:8a:14:d2:cd:47: b6:17:dc:ea:a0:c5:58:94:db:34:b4:92:8d:9e:4e:7c:72:6a: ef:d9:0c:72:85:58:48:a2:4e:a8:2c:3e:e6:59:8f:36:23:3f: da:77:f7:2f:80:0e:72:43:f9:6c:41:06:51:41:a1:0e:4c:2a: b6:fa:b7:39:82:95:94:f2:d1:80:61:7f:58:59:11:d7:0b:ba: a3:3c:e4:25:ac:5c:6d:a6:77:cc:fe:54:32:b6:23:08:58:0b: a9:be:04:c9:ea:a6:9b:2f:17:bf:b7:6a:ab:9e:4f:17:23:d2: 20:b3:79:0b:89:6b:9b:dc:57:12:d5:2c:4f:1f:40:ec:f1:a7: 45:6f:be:96:0d:f1:dd:60:b4:59:8a:ab:83:e8:5a:1c:53:80: 94:56:a0:ee:52:72:91:ca:2f:4f:da:2c:45:cc:6a:ef:a1:48: 71:9a:90:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbfT4vdnBO3e9gBxedCx/qpCfhPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMy MzIzMzNDNTAeFw0yNjA2MTgwMDA2NTdaFw0yNjA2MTkwMzI3NTdaMDMxMTAvBgNV BAMTKDY5OTgwNTZCODFGQTlDNzk4QkZGNzBFM0IwQ0U0NEYxN0ExOERBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn0tKw9paM0HOigUPJRk9zGXCt Y+pAyVpnhDoR+vA3tQdlvwbYSl4+EPEyjdgj9+DWUZ0DwVwm3xmhkygp6TflM+/4 mSg13CnRydxtyjOqAB4JruPBh0jC2APb5eblQMIZZwGGkpYZY4qhPt2r89Qcd2ss fw/hsLOE2SL8MnLnmrKHPdb45+QksSlrMZ0MKF2cYxDBx+5fl8k7BkFa4WKFFBdX N235k9BwMDrIRQnEFjU+t/J0Rwo/lJlQUnrFY0vh8oEoAShNvSqYzlnU2+yNb05W vMWsV2BOWsI/isKyER2M04345/WFCfgdcvCmBv0rJ8bRoF61XcPsTIhnUe59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaZgFa4H6nHmL/3DjsM5E8XoY2pEwHwYDVR0j BBgwFoAUwJsIJqiVAmmqqVkvOwtloyMjM8UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhkYzA4NDktODNmYi00Y2M4LThjMjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZB ODk1MDI2OUFBQTk1OTJGM0IwQjY1QTMyMzIzMzNDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMDlCMDgyNkE4OTUwMjY5QUFBOTU5MkYzQjBCNjVBMzIzMjMz M0M1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvQzA5QjA4MjZBODk1MDI2OUFBQTk1OTJGM0IwQjY1 QTMyMzIzMzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvgl/zpSVPfxLW+OUC6zCg2eMniQ/WsYTIG r+ZjI5FbTlPfqayilSgFyDNw0cr0kdUq2PyVTz2ImTsuyx7X7nFu7a7UYQ9pkxPk Kc/ccCWkW9iCs7aKFNLNR7YX3OqgxViU2zS0ko2eTnxyau/ZDHKFWEiiTqgsPuZZ jzYjP9p39y+ADnJD+WxBBlFBoQ5MKrb6tzmClZTy0YBhf1hZEdcLuqM85CWsXG2m d8z+VDK2IwhYC6m+BMnqppsvF7+3aqueTxcj0iCzeQuJa5vcVxLVLE8fQOzxp0Vv vpYN8d1gtFmKq4PoWhxTgJRWoO5ScpHKL0/aLEXMau+hSHGakKg= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:54 2026 by rpki-client