$ rpki-client -vvf rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft File: A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft (raw, json) Hash identifier: MtBacK5iHMpuXMLB24ULzEzeaxy8kOlBlTQa11Ahd1Q= Subject key identifier: 7D:6E:38:0E:39:36:1E:AF:63:C5:F5:23:E8:FD:80:E4:40:FB:21:D4 Authority key identifier: A2:76:B0:8D:AE:7F:A2:5D:E1:A0:3F:B7:12:F5:78:21:EA:FE:F1:20 Certificate issuer: /CN=A276B08DAE7FA25DE1A03FB712F57821EAFEF120 Certificate serial: 3F8F1B8CFE7F346320AFF557B7C8DADD71205216 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft Manifest number: 40 Signing time: Wed 17 Jun 2026 05:14:14 +0000 Manifest this update: Wed 17 Jun 2026 05:09:14 +0000 Manifest next update: Thu 18 Jun 2026 05:46:14 +0000 Files and hashes: 1: A276B08DAE7FA25DE1A03FB712F57821EAFEF120.crl (hash: dvO2hIgnavvLJoBvx4u1ABuzjn3uYXA0zC2TwnDICL8=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: 3r/oL3v96CsKMiLkeLyMHXAfkZUhV+Od6ORlJoNOIZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.crl rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8f:1b:8c:fe:7f:34:63:20:af:f5:57:b7:c8:da:dd:71:20:52:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A276B08DAE7FA25DE1A03FB712F57821EAFEF120 Validity Not Before: Jun 17 05:09:14 2026 GMT Not After : Jun 18 05:46:14 2026 GMT Subject: CN=7D6E380E39361EAF63C5F523E8FD80E440FB21D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:66:a9:86:0c:e3:df:71:51:15:af:9c:48:a9: b7:07:c3:4f:fc:f3:fa:12:66:e2:53:64:39:e2:02: ff:f5:06:8f:d3:d9:55:f3:a9:07:8a:79:45:db:61: 19:f5:7a:d9:d6:87:91:f2:00:61:4b:29:b6:7e:07: 8f:77:2e:94:bc:c8:8b:c6:f5:fb:8a:34:72:18:e3: db:ce:c8:87:cf:75:e0:7f:4c:ff:1a:be:f8:43:56: 18:f7:2f:5d:94:6c:d6:68:74:3e:63:d3:24:0c:17: 51:43:47:77:b4:ae:a0:0f:d9:aa:9d:1a:dc:f3:a0: 85:4c:4e:67:e3:c3:ce:82:e0:05:a6:b2:df:dc:f2: c4:4b:a1:c9:7c:ab:38:8e:f0:8d:06:59:49:28:8b: dc:02:ca:5c:ea:bb:d1:fd:b0:3a:bd:9f:e6:cf:ec: d4:2d:fb:4c:12:95:61:87:c1:b9:d2:ca:3a:b4:8a: 20:8c:f5:ee:e2:2e:d8:79:25:d9:40:70:3d:fa:42: 66:9b:24:4e:e4:f0:4d:cd:fd:09:29:ab:cd:d2:92: b6:18:5c:4d:ca:f6:56:9d:5b:0e:22:57:30:23:22: a3:b1:46:6e:fa:cd:f8:b0:37:00:33:19:9a:88:57: e7:45:6e:4b:7f:1e:94:2e:dc:f2:c9:03:a3:33:d4: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6E:38:0E:39:36:1E:AF:63:C5:F5:23:E8:FD:80:E4:40:FB:21:D4 X509v3 Authority Key Identifier: keyid:A2:76:B0:8D:AE:7F:A2:5D:E1:A0:3F:B7:12:F5:78:21:EA:FE:F1:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/A276B08DAE7FA25DE1A03FB712F57821EAFEF120.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4e:ab:b7:3a:d3:e1:c2:1e:77:6c:89:9a:bf:eb:3d:01:1a: 46:53:d3:62:f3:ab:c2:29:af:9b:b3:ec:b2:51:fc:85:2a:3a: be:b3:2f:8f:ce:e9:54:d6:ba:a0:1e:dd:9c:38:df:9f:23:45: af:73:a4:44:a2:42:0d:0f:5d:ed:a2:40:63:46:18:02:6f:01: bd:67:88:60:f4:81:48:72:4f:41:1d:fa:7d:ea:ef:03:f4:98: 2c:c7:10:06:09:e0:3a:2f:c3:58:7f:46:98:7e:a5:b3:1a:61: ce:19:20:8d:e9:3e:90:da:3c:83:33:27:7c:44:2f:1b:df:7e: b3:c6:13:40:ef:0e:2d:c4:ec:04:c8:bd:57:5f:0e:b8:5d:c9: be:b0:5a:bc:0e:1c:82:b8:c8:bc:65:2d:05:8a:9c:9e:44:13: 40:f5:36:c7:0b:a3:73:53:a1:6e:e4:ad:07:b0:54:f7:91:c5: 79:49:97:29:5d:78:cd:b6:4a:e0:e7:06:c6:34:57:49:06:1a: 38:e7:c4:13:d5:70:4f:d9:b1:55:71:64:d6:0c:ec:1e:66:56: c7:d7:c3:8f:e5:14:51:eb:39:80:2e:d8:e8:36:19:f4:26:f8: b2:80:65:3d:c3:74:b4:3f:8f:71:26:8a:b0:47:b6:be:73:74: bc:71:d1:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP48bjP5/NGMgr/VXt8ja3XEgUhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI3NkIwOERBRTdGQTI1REUxQTAzRkI3MTJGNTc4MjFF QUZFRjEyMDAeFw0yNjA2MTcwNTA5MTRaFw0yNjA2MTgwNTQ2MTRaMDMxMTAvBgNV BAMTKDdENkUzODBFMzkzNjFFQUY2M0M1RjUyM0U4RkQ4MEU0NDBGQjIxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZqmGDOPfcVEVr5xIqbcHw0/8 8/oSZuJTZDniAv/1Bo/T2VXzqQeKeUXbYRn1etnWh5HyAGFLKbZ+B493LpS8yIvG 9fuKNHIY49vOyIfPdeB/TP8avvhDVhj3L12UbNZodD5j0yQMF1FDR3e0rqAP2aqd GtzzoIVMTmfjw86C4AWmst/c8sRLocl8qziO8I0GWUkoi9wCylzqu9H9sDq9n+bP 7NQt+0wSlWGHwbnSyjq0iiCM9e7iLth5JdlAcD36QmabJE7k8E3N/Qkpq83SkrYY XE3K9ladWw4iVzAjIqOxRm76zfiwNwAzGZqIV+dFbkt/HpQu3PLJA6Mz1LjjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfW44Djk2Hq9jxfUj6P2A5ED7IdQwHwYDVR0j BBgwFoAUonawja5/ol3hoD+3EvV4Ier+8SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZhODFlNmUtNGIxNi00YjYyLThmMTgtNTI4OTJlNTRiOTBkLzAvQTI3NkIwOERB RTdGQTI1REUxQTAzRkI3MTJGNTc4MjFFQUZFRjEyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMjc2QjA4REFFN0ZBMjVERTFBMDNGQjcxMkY1NzgyMUVBRkVG MTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZhODFlNmUtNGIxNi00YjYyLThm MTgtNTI4OTJlNTRiOTBkLzAvQTI3NkIwOERBRTdGQTI1REUxQTAzRkI3MTJGNTc4 MjFFQUZFRjEyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1Oq7c60+HCHndsiZq/6z0BGkZT02Lzq8Ip r5uz7LJR/IUqOr6zL4/O6VTWuqAe3Zw4358jRa9zpESiQg0PXe2iQGNGGAJvAb1n iGD0gUhyT0Ed+n3q7wP0mCzHEAYJ4Dovw1h/Rph+pbMaYc4ZII3pPpDaPIMzJ3xE LxvffrPGE0DvDi3E7ATIvVdfDrhdyb6wWrwOHIK4yLxlLQWKnJ5EE0D1NscLo3NT oW7krQewVPeRxXlJlyldeM22SuDnBsY0V0kGGjjnxBPVcE/ZsVVxZNYM7B5mVsfX w4/lFFHrOYAu2Og2GfQm+LKAZT3DdLQ/j3EmirBHtr5zdLxx0V8= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:13 2026 by rpki-client