$ rpki-client -vvf rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft File: DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft (raw, json) Hash identifier: Qh6AbK0WD6FUgOxglox5orj5W/hYNVWl9t65GRVZq/0= Subject key identifier: 36:DF:95:D0:0B:8B:EB:F5:D6:79:CB:C0:26:EC:B6:0C:F4:58:00:95 Authority key identifier: DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 Certificate issuer: /CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Certificate serial: 5FD71DB43BF7B26F0FFA4A38BA5A15DC162198B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft Manifest number: 36 Signing time: Thu 11 Jun 2026 18:44:00 +0000 Manifest this update: Thu 11 Jun 2026 18:39:00 +0000 Manifest next update: Fri 12 Jun 2026 21:20:00 +0000 Files and hashes: 1: 3130332e3136362e32362e302f32332d3233203d3e20313431393334.roa (hash: KOwZSGqnrtZ75etXMGQpPSN15jiljiF6C7JF8Icyb+k=) 2: DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl (hash: XnFU+D4RhA4SEyBBbFyqZ+hMGMiUaz1YlffBHajg4qY=) 3: 3130332e3136362e32362e302f32342d3234203d3e20313431393334.roa (hash: kO0czL3TN60s3A1dU0vSyh5gDjSRSVnVJULPxG64o8c=) 4: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (hash: 8pY7CX5C+z8Wdb/RykV2FDaB/r21Vc0UIOUPAUQlFnI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 21:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d7:1d:b4:3b:f7:b2:6f:0f:fa:4a:38:ba:5a:15:dc:16:21:98:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Validity Not Before: Jun 11 18:39:00 2026 GMT Not After : Jun 12 21:20:00 2026 GMT Subject: CN=36DF95D00B8BEBF5D679CBC026ECB60CF4580095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:da:be:0c:57:d5:42:b5:7b:a8:2f:dd:32:8c: 6c:80:dd:dc:fa:83:87:63:69:5a:18:28:da:46:1e: 59:5d:3d:ff:0c:74:72:17:6d:7b:d3:10:b3:e9:7b: d1:4d:d0:a7:87:71:99:c4:e0:44:c4:65:7a:2b:f0: 55:f6:dc:5e:d5:33:84:bb:cf:36:14:8d:ee:a0:c0: e7:e1:82:e3:92:03:69:d9:e6:01:26:39:63:c4:a9: 1b:e3:f1:8e:c5:7b:73:dd:b0:83:7d:90:ad:9f:aa: b7:25:98:98:75:9d:93:e0:18:9e:79:9a:ed:50:1e: e0:4a:cd:4d:07:62:62:f9:c1:99:d0:dc:36:e6:81: 23:ec:36:f3:23:a6:a3:da:d4:bd:f0:d9:75:df:37: 63:35:1f:73:2c:a0:25:13:81:23:f8:70:1c:9b:55: a3:04:59:36:0f:6e:33:fb:af:6a:63:3d:cd:51:e3: 60:7a:23:93:1f:ca:06:8d:76:a1:45:95:ab:d2:fb: ec:c0:1c:cb:f6:87:05:54:fa:da:59:c5:0a:ed:c9: df:03:0c:59:86:89:08:9f:54:db:92:f7:37:a6:19: b9:bd:05:90:a7:1b:38:f1:77:3d:5d:91:66:bb:f4: 30:12:63:2f:e5:8a:6c:db:70:16:8d:b2:d2:df:a6: 75:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DF:95:D0:0B:8B:EB:F5:D6:79:CB:C0:26:EC:B6:0C:F4:58:00:95 X509v3 Authority Key Identifier: keyid:DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:06:4e:2e:72:c5:47:7f:1c:c3:e6:03:0e:cf:bf:ef:c3:08: 34:be:e1:8b:ac:26:81:fa:cd:31:d6:05:6e:a7:6d:ec:c4:ee: 39:24:64:31:81:54:6d:16:cb:17:8b:b1:32:34:01:db:d5:c7: bb:e3:0d:2e:4e:7b:7a:29:1a:6e:6d:b2:0d:f2:f4:1e:d7:6c: 04:32:e4:93:54:c7:14:ce:a3:44:32:6c:a4:f6:4a:79:d6:a9: 3c:40:04:1c:b4:4c:a7:5d:b9:62:79:90:b3:93:bc:6f:86:77: e3:c8:c5:bd:e0:e9:c1:bf:04:c4:51:52:85:f3:12:73:f5:b2: 5e:3b:c0:6b:39:04:4c:52:43:2e:23:45:7a:ec:8d:14:60:23: 24:f3:48:42:4d:2f:e6:fc:a0:29:e2:58:a8:da:67:93:60:d2: 03:c7:62:80:fc:4e:9f:88:47:e6:7a:91:66:32:b0:31:84:f6: 74:c6:fb:ee:be:07:dd:50:19:62:06:6d:d2:f2:3d:6c:de:04: c4:99:79:d0:e9:0d:bf:12:1e:62:95:84:72:20:a7:32:bd:09: d7:74:5f:c3:5f:11:1b:54:72:0c:6c:64:68:17:d2:d4:de:b2: 83:17:27:f2:61:0e:e6:ea:23:9e:2e:51:a9:7b:93:91:13:4c: 2f:ed:d8:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9cdtDv3sm8P+ko4uloV3BYhmLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFD NUY3MjFGNDAeFw0yNjA2MTExODM5MDBaFw0yNjA2MTIyMTIwMDBaMDMxMTAvBgNV BAMTKDM2REY5NUQwMEI4QkVCRjVENjc5Q0JDMDI2RUNCNjBDRjQ1ODAwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2r4MV9VCtXuoL90yjGyA3dz6 g4djaVoYKNpGHlldPf8MdHIXbXvTELPpe9FN0KeHcZnE4ETEZXor8FX23F7VM4S7 zzYUje6gwOfhguOSA2nZ5gEmOWPEqRvj8Y7Fe3PdsIN9kK2fqrclmJh1nZPgGJ55 mu1QHuBKzU0HYmL5wZnQ3DbmgSPsNvMjpqPa1L3w2XXfN2M1H3MsoCUTgSP4cByb VaMEWTYPbjP7r2pjPc1R42B6I5MfygaNdqFFlavS++zAHMv2hwVU+tpZxQrtyd8D DFmGiQifVNuS9zemGbm9BZCnGzjxdz1dkWa79DASYy/limzbcBaNstLfpnU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNt+V0AuL6/XWecvAJuy2DPRYAJUwHwYDVR0j BBgwFoAU3MFC5LwKk9IidE12S6MbMcX3IfQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE0MTU0MzgtYWQwMS00MmRjLThjOTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRC QzBBOTNEMjIyNzQ0RDc2NEJBMzFCMzFDNUY3MjFGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0MxNDJFNEJDMEE5M0QyMjI3NDRENzY0QkEzMUIzMUM1Rjcy MUY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE0MTU0MzgtYWQwMS00MmRjLThj OTItMTUxYmM4YzI3MjFmLzAvRENDMTQyRTRCQzBBOTNEMjIyNzQ0RDc2NEJBMzFC MzFDNUY3MjFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEGTi5yxUd/HMPmAw7Pv+/DCDS+4YusJoH6 zTHWBW6nbezE7jkkZDGBVG0WyxeLsTI0AdvVx7vjDS5Oe3opGm5tsg3y9B7XbAQy 5JNUxxTOo0QybKT2SnnWqTxABBy0TKdduWJ5kLOTvG+Gd+PIxb3g6cG/BMRRUoXz EnP1sl47wGs5BExSQy4jRXrsjRRgIyTzSEJNL+b8oCniWKjaZ5Ng0gPHYoD8Tp+I R+Z6kWYysDGE9nTG++6+B91QGWIGbdLyPWzeBMSZedDpDb8SHmKVhHIgpzK9Cdd0 X8NfERtUcgxsZGgX0tTesoMXJ/JhDubqI54uUal7k5ETTC/t2OI= -----END CERTIFICATE-----Generated at Fri Jun 12 06:04:05 2026 by rpki-client