$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft File: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft (raw, json) Hash identifier: fJbhlYVgDtzIZMByGj4LWN1VWd62dVdwpgqvChk9NCE= Subject key identifier: 72:A0:C4:18:19:8E:6B:3E:42:13:7E:FA:C4:9F:7A:13:C0:5E:5C:A6 Authority key identifier: 1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 Certificate issuer: /CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Certificate serial: 30C30F76CD61CB9E9584FD4D8684AEA26A33A67F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 18:52:15 +0000 Manifest this update: Sat 13 Jun 2026 18:47:15 +0000 Manifest next update: Sun 14 Jun 2026 21:57:15 +0000 Files and hashes: 1: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: YqAlX6I3eetKbPgn7q5+SNbPjP9RfqZzOtFwmWR8tB8=) 2: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl (hash: uPMr96SqpBnMm0WpUM91P/kdMqq4rAhrj4W1GDZFQ6A=) 3: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: qUv8iwGfDUNsSHoYpr8OtHbSrHxY05J4t5ZSAS55J1w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c3:0f:76:cd:61:cb:9e:95:84:fd:4d:86:84:ae:a2:6a:33:a6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Validity Not Before: Jun 13 18:47:15 2026 GMT Not After : Jun 14 21:57:15 2026 GMT Subject: CN=72A0C418198E6B3E42137EFAC49F7A13C05E5CA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bd:d4:08:bc:aa:f3:c5:b4:b4:f8:7f:8f:37: 09:ae:d9:5f:6e:69:80:8d:be:b0:ed:5e:79:08:f6: e0:10:2e:10:1f:a3:60:ce:0e:0f:1c:8f:48:e1:f4: b5:07:ac:7c:52:8a:d9:bc:57:72:17:ac:c9:ac:f4: 3a:35:4b:67:0d:03:85:74:c1:86:a7:af:4b:07:44: ff:45:e7:9a:fe:2c:e6:81:c4:4f:d0:97:ef:d1:67: 06:53:df:30:85:64:b3:f3:3d:0e:86:e4:ae:13:4c: 1b:e6:8c:c0:35:3d:45:d7:d6:23:0b:a3:c6:b1:a2: fc:84:b7:6e:2f:41:fc:b1:4b:5f:11:1e:fc:28:3c: 38:f5:0e:21:5a:28:bc:17:7f:fc:95:c9:f4:b3:8d: c7:25:6c:e6:5b:4f:8e:0e:01:41:9f:cf:6a:4b:0b: 4e:94:00:ca:14:59:59:80:eb:6f:95:6f:66:0c:84: 2e:8d:5c:e6:02:a8:19:85:84:3a:c3:cf:10:27:a7: 18:3d:a4:2a:99:4a:ad:a7:c2:ec:a7:0a:ac:09:a2: d7:ff:f0:08:bf:d3:f7:d6:65:37:cb:e1:db:19:b4: 2d:05:57:c4:72:cd:a2:48:a9:e6:ce:64:4f:65:ef: 68:7c:82:dc:49:d6:0c:33:63:c0:6a:98:97:8d:28: 8f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A0:C4:18:19:8E:6B:3E:42:13:7E:FA:C4:9F:7A:13:C0:5E:5C:A6 X509v3 Authority Key Identifier: keyid:1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:b6:eb:69:82:7e:6a:91:20:1c:f3:4c:1a:bf:a7:3a:d7:50: 27:06:a4:ce:1e:82:53:7c:27:5a:88:b9:0a:47:35:a2:9c:9b: 2e:4f:9f:8e:6d:9f:1b:b3:6d:e2:c2:d4:10:d2:3d:92:3e:89: 2e:6f:61:ef:15:27:dc:b5:3d:29:07:ec:73:8d:ff:f3:3e:25: 2b:a7:3f:92:b2:25:34:14:f8:82:fa:67:4e:22:ff:7a:6a:ce: 32:24:74:bf:ff:83:59:d7:7d:cb:fb:9c:54:e0:18:a5:11:4c: 5d:cd:e4:64:45:9d:42:47:a8:74:b9:c6:d9:4a:0a:19:0e:02: f6:95:88:e0:cf:e3:21:02:d7:46:83:3e:c6:25:c0:5c:f7:ae: 68:16:35:51:c4:c8:ad:b3:c2:28:0f:03:03:d7:54:41:a0:17: e2:33:d2:54:07:24:f1:f4:e9:e6:61:db:4f:89:7f:3c:ed:fb: bb:2b:27:16:e2:c6:17:fc:96:41:ae:e9:51:9c:72:3a:75:a9: 06:62:bd:2d:2c:e3:bb:d8:b0:da:67:98:d5:7e:3c:f3:20:66: 4a:0b:43:43:ea:34:0d:1d:18:60:b0:90:0a:3d:06:36:d9:23: 9c:38:f3:16:35:b4:ff:43:48:42:57:00:30:cf:8f:a5:f5:f5: b0:ff:ab:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMMMPds1hy56VhP1NhoSuomozpn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU0MDRBRjZDRkYwODVFMjBCRUU0QzdCRTJBNUYyQkYy ODBGM0JBODAeFw0yNjA2MTMxODQ3MTVaFw0yNjA2MTQyMTU3MTVaMDMxMTAvBgNV BAMTKDcyQTBDNDE4MTk4RTZCM0U0MjEzN0VGQUM0OUY3QTEzQzA1RTVDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPvdQIvKrzxbS0+H+PNwmu2V9u aYCNvrDtXnkI9uAQLhAfo2DODg8cj0jh9LUHrHxSitm8V3IXrMms9Do1S2cNA4V0 wYanr0sHRP9F55r+LOaBxE/Ql+/RZwZT3zCFZLPzPQ6G5K4TTBvmjMA1PUXX1iML o8axovyEt24vQfyxS18RHvwoPDj1DiFaKLwXf/yVyfSzjcclbOZbT44OAUGfz2pL C06UAMoUWVmA62+Vb2YMhC6NXOYCqBmFhDrDzxAnpxg9pCqZSq2nwuynCqwJotf/ 8Ai/0/fWZTfL4dsZtC0FV8RyzaJIqebOZE9l72h8gtxJ1gwzY8BqmJeNKI/fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcqDEGBmOaz5CE376xJ96E8BeXKYwHwYDVR0j BBgwFoAUHkBK9s/wheIL7kx74qXyvygPO6gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwMDIyOGYtNmUyNS00Yzk2LTljZTUtMmQ1MDIyOWExZDE4LzAvMUU0MDRBRjZD RkYwODVFMjBCRUU0QzdCRTJBNUYyQkYyODBGM0JBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTQwNEFGNkNGRjA4NUUyMEJFRTRDN0JFMkE1RjJCRjI4MEYz QkE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvMUU0MDRBRjZDRkYwODVFMjBCRUU0QzdCRTJBNUYy QkYyODBGM0JBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJC262mCfmqRIBzzTBq/pzrXUCcGpM4eglN8 J1qIuQpHNaKcmy5Pn45tnxuzbeLC1BDSPZI+iS5vYe8VJ9y1PSkH7HON//M+JSun P5KyJTQU+IL6Z04i/3pqzjIkdL//g1nXfcv7nFTgGKURTF3N5GRFnUJHqHS5xtlK ChkOAvaViODP4yEC10aDPsYlwFz3rmgWNVHEyK2zwigPAwPXVEGgF+Iz0lQHJPH0 6eZh20+Jfzzt+7srJxbixhf8lkGu6VGccjp1qQZivS0s47vYsNpnmNV+PPMgZkoL Q0PqNA0dGGCwkAo9BjbZI5w48xY1tP9DSEJXADDPj6X19bD/q0k= -----END CERTIFICATE-----Generated at Sun Jun 14 05:18:22 2026 by rpki-client