$ rpki-client -vvf rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft File: B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft (raw, json) Hash identifier: HcUEKmXDYrmy6LuSMQZryWGWmaZiIaWikzmk71/x3uY= Subject key identifier: 64:85:DC:D8:E8:FE:0A:DF:C9:80:51:74:3F:76:5A:34:5B:45:7F:47 Authority key identifier: B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A Certificate issuer: /CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Certificate serial: 1F2DED0A98029C8EFFEAA3F7C5B4C1AE06FA1E84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 12:19:33 +0000 Manifest this update: Sat 13 Jun 2026 12:14:33 +0000 Manifest next update: Sun 14 Jun 2026 12:28:33 +0000 Files and hashes: 1: 3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (hash: ahISTiCVoc+28My7h8uDRC0QvRMDpO2sYZ/b3hjHSLM=) 2: 323430373a396363303a3a2f33322d3332203d3e20313431393833.roa (hash: K9ZXJ5o5f3vYvyXmfnPwnT8NeUbIoGsEKpT0pUSErho=) 3: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (hash: 437bd6cfCi4QfkyxcuG38VNcn0yO3ZKj6CESWVC/jyw=) 4: B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl (hash: bsRPAb621xWWSuM/oYwdrlFIeO71N74DDKFuChlEJgU=) 5: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (hash: F/oy8su27rCM1WBmuMCn8wfDlNFF1ZO6cFWNdzyAW6M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:2d:ed:0a:98:02:9c:8e:ff:ea:a3:f7:c5:b4:c1:ae:06:fa:1e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Validity Not Before: Jun 13 12:14:33 2026 GMT Not After : Jun 14 12:28:33 2026 GMT Subject: CN=6485DCD8E8FE0ADFC98051743F765A345B457F47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:79:bd:c7:a8:4d:b7:13:1a:3d:81:b4:09: 76:71:38:eb:1e:e6:73:02:51:50:c9:d0:00:e1:ab: 0c:6d:c8:09:06:83:be:f7:ec:09:55:64:0c:20:61: 63:ce:0a:e9:64:4d:18:1c:37:be:13:ee:01:88:f7: 5f:ac:1e:50:3e:22:f0:c5:1a:93:5d:7c:56:bc:8a: d7:38:fb:e6:a5:50:0b:f0:c3:a4:b8:3e:8b:60:1d: cf:99:26:64:99:13:d8:48:02:dc:00:f4:37:6c:59: 92:ec:6a:de:62:3c:c9:54:c1:20:6b:d1:df:2c:ed: 3e:fc:c2:36:3c:34:60:20:27:96:19:e7:33:bc:ee: ca:cf:ea:49:91:cf:e1:f1:30:27:1c:d6:c5:83:de: c3:0f:0f:b1:80:c2:f1:7c:93:f1:52:4b:64:ab:a8: a8:de:ae:d4:e1:0f:b3:fe:3c:ae:54:ce:8d:98:5c: dd:12:7b:66:97:23:13:4a:4c:06:40:56:6e:de:ee: b7:0a:69:67:a5:6e:d6:4d:c9:30:e8:61:80:cc:9e: 87:81:de:0c:ea:6c:61:3c:e9:40:95:8a:39:e2:57: 16:16:0f:20:b4:f5:17:cf:9d:25:92:72:41:1e:e8: b3:e8:b8:ab:3a:2e:20:4a:59:26:9b:32:68:f8:fe: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:85:DC:D8:E8:FE:0A:DF:C9:80:51:74:3F:76:5A:34:5B:45:7F:47 X509v3 Authority Key Identifier: keyid:B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a8:fb:96:d9:6a:20:2e:ef:7e:3b:66:fd:40:47:3a:bb:fc: 14:52:07:bf:6d:77:f9:e3:9c:e3:fe:58:c3:e7:3a:93:5f:4a: ad:18:db:7c:68:3c:29:0a:bf:e8:1d:db:b3:31:ba:28:2f:15: f5:4d:4d:55:0b:17:48:35:4d:30:fe:b2:b7:75:a0:9c:6d:5a: e4:41:dd:b5:30:10:e8:8d:8d:84:0c:ed:86:ad:04:9d:ae:b8: bc:59:b2:d6:62:36:3b:59:da:0c:75:7a:b8:ce:12:81:a4:3d: ab:5c:7b:d3:ca:e9:bf:f5:27:dd:11:cf:d3:f7:7e:e3:89:e7: c1:a2:a5:ee:e3:97:31:4e:80:bb:02:8d:9e:e3:05:86:17:e8: a4:6b:0c:5c:a9:8a:f6:7f:45:bd:e6:d4:ef:28:12:9b:db:18: 48:68:74:37:5d:04:e5:4b:d1:d8:e8:02:dd:f4:e8:81:a8:68: 18:5a:d4:dd:1a:c8:a4:7b:29:e0:fe:da:01:19:cb:36:4d:a0: 69:80:35:34:f9:66:e1:40:35:82:23:bd:9b:89:25:7f:45:50: 8e:9c:80:09:24:ff:f5:ef:a0:04:2b:2f:c5:57:39:05:c9:19: a1:24:ff:d0:28:44:90:ce:37:34:65:de:a3:a8:6e:c7:db:f9: 6b:c1:f1:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHy3tCpgCnI7/6qP3xbTBrgb6HoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJG MTMzNzE2QTAeFw0yNjA2MTMxMjE0MzNaFw0yNjA2MTQxMjI4MzNaMDMxMTAvBgNV BAMTKDY0ODVEQ0Q4RThGRTBBREZDOTgwNTE3NDNGNzY1QTM0NUI0NTdGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyknm9x6hNtxMaPYG0CXZxOOse 5nMCUVDJ0ADhqwxtyAkGg7737AlVZAwgYWPOCulkTRgcN74T7gGI91+sHlA+IvDF GpNdfFa8itc4++alUAvww6S4PotgHc+ZJmSZE9hIAtwA9DdsWZLsat5iPMlUwSBr 0d8s7T78wjY8NGAgJ5YZ5zO87srP6kmRz+HxMCcc1sWD3sMPD7GAwvF8k/FSS2Sr qKjertThD7P+PK5Uzo2YXN0Se2aXIxNKTAZAVm7e7rcKaWelbtZNyTDoYYDMnoeB 3gzqbGE86UCVijniVxYWDyC09RfPnSWSckEe6LPouKs6LiBKWSabMmj4/lL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZIXc2Oj+Ct/JgFF0P3ZaNFtFf0cwHwYDVR0j BBgwFoAUuDWodGOEdJvzuae67DCh6/EzcWowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDZiZWRmM2EtZDdkMS00OWE2LTkzZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2 Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJGMTMzNzE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODM1QTg3NDYzODQ3NDlCRjNCOUE3QkFFQzMwQTFFQkYxMzM3 MTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDZiZWRmM2EtZDdkMS00OWE2LTkz ZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEEx RUJGMTMzNzE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEio+5bZaiAu7347Zv1ARzq7/BRSB79td/nj nOP+WMPnOpNfSq0Y23xoPCkKv+gd27MxuigvFfVNTVULF0g1TTD+srd1oJxtWuRB 3bUwEOiNjYQM7YatBJ2uuLxZstZiNjtZ2gx1erjOEoGkPatce9PK6b/1J90Rz9P3 fuOJ58Gipe7jlzFOgLsCjZ7jBYYX6KRrDFypivZ/Rb3m1O8oEpvbGEhodDddBOVL 0djoAt306IGoaBha1N0ayKR7KeD+2gEZyzZNoGmANTT5ZuFANYIjvZuJJX9FUI6c gAkk//XvoAQrL8VXOQXJGaEk/9AoRJDONzRl3qOobsfb+WvB8ck= -----END CERTIFICATE-----Generated at Sun Jun 14 02:44:04 2026 by rpki-client