$ rpki-client -vvf rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft File: D341D8EA81805778BAF0FC25804627AB205A595B.mft (raw, json) Hash identifier: KspEUueL+AIyqg1kSRxwLqYymnBkQninV5ZHsctg7EY= Subject key identifier: 0F:BE:C1:52:B7:A5:D9:83:63:C4:B8:7B:49:93:AA:33:EB:2F:54:01 Authority key identifier: D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B Certificate issuer: /CN=D341D8EA81805778BAF0FC25804627AB205A595B Certificate serial: 495DD8A514DF3A09854B082D4F929C518F7E94E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 12:09:19 +0000 Manifest this update: Sat 13 Jun 2026 12:04:19 +0000 Manifest next update: Sun 14 Jun 2026 12:28:19 +0000 Files and hashes: 1: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: xc3Q1ltrywVJe3y21qqPN5TWdfqkKkKR0OL3qOrG5oc=) 2: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 9bLzC5cJz/hB1T6TsZaVOeXIoTd9norVTABcvOz2X24=) 3: D341D8EA81805778BAF0FC25804627AB205A595B.crl (hash: 4dIsINsS1E2wN/U4Ju4vuvJrl5oFOiAb+H8dugUOXbU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:5d:d8:a5:14:df:3a:09:85:4b:08:2d:4f:92:9c:51:8f:7e:94:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D341D8EA81805778BAF0FC25804627AB205A595B Validity Not Before: Jun 13 12:04:19 2026 GMT Not After : Jun 14 12:28:19 2026 GMT Subject: CN=0FBEC152B7A5D98363C4B87B4993AA33EB2F5401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:a3:51:21:80:ad:d3:6d:14:b9:bf:8e:9f: 82:70:0b:27:4d:9f:d6:9d:01:f3:de:74:ac:68:8d: 68:67:ea:1c:2e:26:21:1b:99:59:77:6b:06:a5:76: ff:4d:ca:47:1e:5e:ba:d9:a9:ae:1b:4c:00:bd:5a: ee:97:fe:e4:85:dd:b5:3b:8c:31:64:73:2c:da:14: ba:69:3d:b3:24:0c:90:ef:0d:33:fe:d4:aa:62:41: 25:c4:a6:35:45:9e:b2:65:f8:e2:9d:c8:c4:79:9a: 7d:18:c1:fa:4b:5a:c8:92:72:55:2b:fa:63:61:26: e7:23:68:ea:13:38:e3:6a:4c:39:72:95:cd:8c:1c: f5:c8:07:25:6a:45:f6:5e:ea:bd:2f:27:be:c7:e1: c1:a6:7a:65:2c:7b:2b:54:48:29:87:0a:61:52:85: d4:88:cd:4d:73:95:a8:f5:c5:85:9c:48:d9:81:77: 9e:77:78:44:65:77:62:ba:06:66:13:ff:35:ae:46: dc:b8:c4:a1:31:50:aa:ff:dc:33:70:76:f7:d9:71: 50:e6:7b:7d:80:45:05:be:50:ff:19:73:1d:d3:7f: cf:35:15:1f:88:bc:d1:e9:62:5a:5b:47:a3:43:a0: e8:48:3e:30:59:da:e0:fd:47:60:29:d2:3f:c2:4d: 18:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BE:C1:52:B7:A5:D9:83:63:C4:B8:7B:49:93:AA:33:EB:2F:54:01 X509v3 Authority Key Identifier: keyid:D3:41:D8:EA:81:80:57:78:BA:F0:FC:25:80:46:27:AB:20:5A:59:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D341D8EA81805778BAF0FC25804627AB205A595B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/D341D8EA81805778BAF0FC25804627AB205A595B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:7b:09:b4:ee:f7:21:a2:77:92:2c:1d:81:9e:24:b7:33:55: 90:d7:3f:db:28:da:6a:95:6c:21:f5:72:b7:0e:e6:aa:5e:eb: c2:73:8c:b1:68:05:22:e6:4f:6c:aa:eb:fa:ce:d0:5d:40:69: ae:59:46:74:3f:46:9a:19:29:83:f4:c6:90:2a:b8:9d:3f:cd: ed:a5:78:3c:44:47:5a:31:02:2d:1c:ae:55:3f:20:a1:92:00: 0f:7c:0b:4b:9c:c0:8c:bc:28:62:f8:9f:49:59:42:cb:49:bf: 9b:0b:23:74:4d:dc:de:f8:8f:c3:ea:6d:8f:0f:e4:66:41:86: 06:fe:ec:77:7d:1c:2c:4f:67:3d:b8:a5:aa:0b:9a:7b:b0:62: d3:43:c7:f6:25:3a:57:a5:82:25:4b:9d:da:50:e9:5b:1b:c5: 51:45:74:75:76:55:c8:13:5a:47:a6:47:3b:ed:3e:d8:12:bc: 49:15:d8:29:36:9c:67:d0:f0:1c:7c:aa:d9:83:95:fa:7c:2f: d1:74:a8:36:6f:b0:23:d6:80:19:3b:30:ee:4e:2b:88:06:83: 07:78:8c:55:e9:ac:3a:84:55:52:eb:96:71:0f:29:ef:52:8f: bf:c4:b4:48:c4:62:74:05:b8:5e:14:96:51:15:60:73:d6:41: 2a:99:9d:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSV3YpRTfOgmFSwgtT5KcUY9+lOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIy MDVBNTk1QjAeFw0yNjA2MTMxMjA0MTlaFw0yNjA2MTQxMjI4MTlaMDMxMTAvBgNV BAMTKDBGQkVDMTUyQjdBNUQ5ODM2M0M0Qjg3QjQ5OTNBQTMzRUIyRjU0MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIyKNRIYCt020Uub+On4JwCydN n9adAfPedKxojWhn6hwuJiEbmVl3awaldv9NykceXrrZqa4bTAC9Wu6X/uSF3bU7 jDFkcyzaFLppPbMkDJDvDTP+1KpiQSXEpjVFnrJl+OKdyMR5mn0YwfpLWsiSclUr +mNhJucjaOoTOONqTDlylc2MHPXIByVqRfZe6r0vJ77H4cGmemUseytUSCmHCmFS hdSIzU1zlaj1xYWcSNmBd553eERld2K6BmYT/zWuRty4xKExUKr/3DNwdvfZcVDm e32ARQW+UP8Zcx3Tf881FR+IvNHpYlpbR6NDoOhIPjBZ2uD9R2Ap0j/CTRjfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD77BUrel2YNjxLh7SZOqM+svVAEwHwYDVR0j BBgwFoAU00HY6oGAV3i68PwlgEYnqyBaWVswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDlhOWU4MzUtZjNhMS00YzM2LWI0N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4 MTgwNTc3OEJBRjBGQzI1ODA0NjI3QUIyMDVBNTk1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzQxRDhFQTgxODA1Nzc4QkFGMEZDMjU4MDQ2MjdBQjIwNUE1 OTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRDM0MUQ4RUE4MTgwNTc3OEJBRjBGQzI1ODA0NjI3 QUIyMDVBNTk1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGB7CbTu9yGid5IsHYGeJLczVZDXP9so2mqV bCH1crcO5qpe68JzjLFoBSLmT2yq6/rO0F1Aaa5ZRnQ/RpoZKYP0xpAquJ0/ze2l eDxER1oxAi0crlU/IKGSAA98C0ucwIy8KGL4n0lZQstJv5sLI3RN3N74j8PqbY8P 5GZBhgb+7Hd9HCxPZz24paoLmnuwYtNDx/YlOlelgiVLndpQ6VsbxVFFdHV2VcgT WkemRzvtPtgSvEkV2Ck2nGfQ8Bx8qtmDlfp8L9F0qDZvsCPWgBk7MO5OK4gGgwd4 jFXprDqEVVLrlnEPKe9Sj7/EtEjEYnQFuF4UllEVYHPWQSqZndg= -----END CERTIFICATE-----Generated at Sat Jun 13 23:25:48 2026 by rpki-client