$ rpki-client -vvf rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft File: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft (raw, json) Hash identifier: na3qdgewbGlVvfigeILoRt5vFiPAhqjLSVKN1fJz5iI= Subject key identifier: BF:D9:6D:FF:47:5A:3D:AD:3F:94:8A:88:5A:30:3B:E7:C4:6D:6A:78 Authority key identifier: A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 Certificate issuer: /CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Certificate serial: 6FEEDD3AB5EB06B1BC0D036496D6F3FC96449D2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:53:20 +0000 Manifest this update: Tue 16 Jun 2026 19:48:20 +0000 Manifest next update: Wed 17 Jun 2026 22:56:20 +0000 Files and hashes: 1: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: eZWOfDrRyxrGj36EawOrumVWs/n0x3oAEO6+YE8bAMk=) 2: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: d3fL4T6FzL/T0DkQ+Ng+5zSK+zJSGTl7uPkkzl2dqNM=) 3: A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl (hash: fSeLe7b5GFBNFkijawpDawi65sjCnuF+Vvb13rRXers=) 4: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: NdabufunGirMkyu0ATmpWQ6Rl+f746AXGi5jkT6y7RY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ee:dd:3a:b5:eb:06:b1:bc:0d:03:64:96:d6:f3:fc:96:44:9d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1427A1F8ACA60F9AF7F88920F89EE53353FA450 Validity Not Before: Jun 16 19:48:20 2026 GMT Not After : Jun 17 22:56:20 2026 GMT Subject: CN=BFD96DFF475A3DAD3F948A885A303BE7C46D6A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:be:95:5b:9d:0f:17:e8:71:ec:5f:7b:5f:01: 8d:71:f9:12:57:70:52:cc:c1:75:f9:f4:c9:b7:75: 34:98:a9:31:91:47:52:45:04:ad:69:67:9d:8a:c7: b7:b2:44:c4:5a:39:7d:a8:71:3b:cb:2d:4a:1a:b3: f8:63:e5:f5:92:24:69:c4:e2:49:f6:62:0d:b8:4c: 26:bf:92:a9:0a:d8:33:d9:a8:a6:57:83:83:aa:8c: 2e:31:71:08:cb:4a:f1:5b:6b:22:a6:8a:d1:7b:19: 4e:42:57:91:b3:79:96:b5:d4:d9:1f:ed:e8:a0:1e: 71:34:47:df:cd:47:f6:01:fd:80:e0:e0:fa:83:18: 9f:4c:7d:9c:67:fc:f1:36:1c:ea:1e:f5:dd:32:6e: 30:4f:b7:7d:6c:ff:a0:44:a1:b1:fb:ed:4a:05:c4: 7a:b1:75:3f:92:71:ab:2d:4c:d8:2f:7f:67:60:85: 25:cd:08:f8:76:f5:75:26:ae:2d:64:34:d8:5f:d2: 23:f4:1c:a8:0e:71:43:81:9d:15:83:76:e8:e2:54: b2:e9:27:36:dd:eb:9f:8e:02:5f:eb:11:1c:dc:95: 13:1e:59:04:08:03:f7:a2:e6:f2:08:3d:03:f7:27: df:f5:6e:a4:2d:6f:4f:b8:77:a9:56:37:0a:ec:6d: ee:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D9:6D:FF:47:5A:3D:AD:3F:94:8A:88:5A:30:3B:E7:C4:6D:6A:78 X509v3 Authority Key Identifier: keyid:A1:42:7A:1F:8A:CA:60:F9:AF:7F:88:92:0F:89:EE:53:35:3F:A4:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/A1427A1F8ACA60F9AF7F88920F89EE53353FA450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c3:59:d8:b7:30:58:92:bd:ea:7b:2f:e1:c1:97:63:46:07: e6:b2:a3:f6:91:16:80:ed:36:77:19:57:4b:3c:12:c3:3a:bf: 40:ff:f8:4f:b6:43:ae:f4:79:fa:81:5b:f5:a6:d8:a2:0c:25: d0:6d:87:6d:2e:cd:54:b4:88:a8:7b:33:26:4d:01:6d:eb:57: de:07:05:6a:6f:bd:c9:42:fe:b7:45:46:82:2a:7c:a5:38:a4: 3c:6d:00:7a:8a:7a:8c:c9:9f:09:b0:07:8f:d8:a9:00:50:2e: 5e:39:90:e0:9d:00:64:42:0c:b0:fe:6d:22:ab:84:c6:8f:ec: c7:a7:0a:91:b3:62:02:81:af:f3:30:1b:95:70:b5:47:7b:0e: 1d:64:b7:14:d4:c5:fb:a2:e5:07:e7:0b:87:70:a9:9d:0c:48: 13:7e:5b:39:bc:73:e5:3f:eb:e1:20:c0:36:73:42:ba:cb:b1: 0e:ee:60:0e:49:c5:2c:94:7b:17:90:f7:e4:28:c7:f0:66:c1: 17:be:52:ce:94:cc:3d:04:05:c9:23:14:83:14:2b:9c:8a:48: 24:25:81:fe:ea:08:96:80:22:91:7b:74:df:86:fb:fc:de:46: 15:d5:97:a3:cf:30:12:52:cb:df:56:7b:7e:b3:59:ba:2b:21: b4:e1:df:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb+7dOrXrBrG8DQNkltbz/JZEnSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MjdBMUY4QUNBNjBGOUFGN0Y4ODkyMEY4OUVFNTMz NTNGQTQ1MDAeFw0yNjA2MTYxOTQ4MjBaFw0yNjA2MTcyMjU2MjBaMDMxMTAvBgNV BAMTKEJGRDk2REZGNDc1QTNEQUQzRjk0OEE4ODVBMzAzQkU3QzQ2RDZBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKvpVbnQ8X6HHsX3tfAY1x+RJX cFLMwXX59Mm3dTSYqTGRR1JFBK1pZ52Kx7eyRMRaOX2ocTvLLUoas/hj5fWSJGnE 4kn2Yg24TCa/kqkK2DPZqKZXg4OqjC4xcQjLSvFbayKmitF7GU5CV5GzeZa11Nkf 7eigHnE0R9/NR/YB/YDg4PqDGJ9MfZxn/PE2HOoe9d0ybjBPt31s/6BEobH77UoF xHqxdT+ScastTNgvf2dghSXNCPh29XUmri1kNNhf0iP0HKgOcUOBnRWDdujiVLLp Jzbd65+OAl/rERzclRMeWQQIA/ei5vIIPQP3J9/1bqQtb0+4d6lWNwrsbe7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv9lt/0daPa0/lIqIWjA758RtangwHwYDVR0j BBgwFoAUoUJ6H4rKYPmvf4iSD4nuUzU/pFAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTY4Y2MwNTktNWU2Yy00NTAxLWI4OTQtMTRhODJkMThkMjFlLzAvQTE0MjdBMUY4 QUNBNjBGOUFGN0Y4ODkyMEY4OUVFNTMzNTNGQTQ1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTQyN0ExRjhBQ0E2MEY5QUY3Rjg4OTIwRjg5RUU1MzM1M0ZB NDUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQTE0MjdBMUY4QUNBNjBGOUFGN0Y4ODkyMEY4OUVF NTMzNTNGQTQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXDWdi3MFiSvep7L+HBl2NGB+ayo/aRFoDt NncZV0s8EsM6v0D/+E+2Q670efqBW/Wm2KIMJdBth20uzVS0iKh7MyZNAW3rV94H BWpvvclC/rdFRoIqfKU4pDxtAHqKeozJnwmwB4/YqQBQLl45kOCdAGRCDLD+bSKr hMaP7MenCpGzYgKBr/MwG5VwtUd7Dh1ktxTUxfui5QfnC4dwqZ0MSBN+Wzm8c+U/ 6+EgwDZzQrrLsQ7uYA5JxSyUexeQ9+Qox/BmwRe+Us6UzD0EBckjFIMUK5yKSCQl gf7qCJaAIpF7dN+G+/zeRhXVl6PPMBJSy99We36zWborIbTh38k= -----END CERTIFICATE-----Generated at Wed Jun 17 10:43:30 2026 by rpki-client