$ rpki-client -vvf rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft File: 988BEA205B597B525439E1C7DF548E148BDF5DE3.mft (raw, json) Hash identifier: dMaWngVwCFa0y2EQWaTjDCg0yPS6P/a8/DKR83Vny/Y= Subject key identifier: 71:9A:D9:E3:44:A5:B1:61:FE:A1:CB:C4:CF:2B:9A:53:CA:E0:B8:C8 Authority key identifier: 98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 Certificate issuer: /CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Certificate serial: 289F7BAD2639C2F81704BDE268A0B41F78C35456 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:44:51 +0000 Manifest this update: Wed 17 Jun 2026 05:39:51 +0000 Manifest next update: Thu 18 Jun 2026 07:45:51 +0000 Files and hashes: 1: 988BEA205B597B525439E1C7DF548E148BDF5DE3.crl (hash: AggBf7jVRiXQm/KrlDcD+gkT/9lqA06FqWozDp1LI+c=) 2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: KyMbOLP8QXcvGQ9MezBY9LjyWg2SLWeZUDh4Qo5TXWQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.crl rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:9f:7b:ad:26:39:c2:f8:17:04:bd:e2:68:a0:b4:1f:78:c3:54:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Validity Not Before: Jun 17 05:39:51 2026 GMT Not After : Jun 18 07:45:51 2026 GMT Subject: CN=719AD9E344A5B161FEA1CBC4CF2B9A53CAE0B8C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8e:a0:e6:83:7e:97:5f:16:52:f7:d3:c4:29: 29:79:40:df:96:d3:02:5b:a1:54:b4:00:df:a6:4b: da:1f:73:93:8d:08:69:23:ab:d1:07:ce:c4:0a:fc: 45:de:ce:91:29:c6:1c:40:4d:1c:ca:5e:9a:9c:9d: cb:3a:16:75:58:31:e3:32:02:70:6d:29:21:b9:1a: 1c:1c:19:bb:cd:7b:18:93:56:04:9e:43:5f:2c:ce: a3:54:42:1b:a0:17:f0:ad:90:00:13:b0:ff:87:77: c0:91:2d:c2:0b:0d:32:41:74:76:7c:5a:5c:d7:f0: 40:38:69:38:ef:c4:3c:33:0c:a6:ef:6a:86:23:32: f1:64:e2:c9:ae:4a:93:b7:6e:64:f4:08:20:37:78: 23:96:94:e7:69:d3:bc:64:64:c9:c0:55:b4:4b:51: f0:52:95:63:2b:88:a3:0b:06:1f:14:53:55:78:01: a3:d2:f4:a0:82:d2:72:07:9a:aa:7a:5a:8f:26:fb: b4:14:b1:b4:90:4d:a6:3b:9e:96:98:27:38:60:9b: 77:79:3f:29:21:40:49:c8:d5:d0:9f:16:bf:e0:6f: 18:e7:e9:00:b4:b6:3e:56:7c:dc:f4:95:d6:a1:99: 2c:c2:7f:9a:43:d4:ba:7a:2e:02:fa:d0:61:9a:17: ba:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9A:D9:E3:44:A5:B1:61:FE:A1:CB:C4:CF:2B:9A:53:CA:E0:B8:C8 X509v3 Authority Key Identifier: keyid:98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:41:16:0c:ca:ac:24:6e:5a:c5:ad:e8:5d:f2:32:dc:98:42: cf:bf:6f:fb:19:34:44:70:71:5f:c1:21:a9:66:f3:4a:1f:a8: 55:aa:92:9f:95:ed:f7:5c:bd:88:c3:9d:64:04:0b:70:bc:1a: 94:b6:ee:de:6e:c2:3d:0d:c6:8c:ad:c3:00:0b:4f:ca:f9:6e: d7:48:ad:2d:b2:d9:70:6b:34:65:0d:72:00:88:04:81:51:88: 97:ef:b0:64:ff:a7:75:d4:ba:83:0d:13:a6:0f:c9:a7:40:0a: 62:1f:1a:28:37:7c:9f:28:ea:6a:69:37:33:8f:f0:31:cf:ed: 9f:2a:1d:59:9c:bc:be:ce:97:0b:6b:55:0a:f1:7d:79:d7:b2: 34:f7:91:84:09:37:cd:23:3f:ee:87:d1:bd:3d:cb:05:11:18: 6c:28:de:bd:77:00:4d:59:fa:d7:15:dd:ac:69:84:43:e8:71: 81:54:5e:98:56:75:ab:4b:54:c8:de:65:3f:d7:dd:41:24:2e: 43:fa:e1:fb:57:2e:28:26:ee:5a:25:99:55:a0:12:8c:2e:85: 22:33:c8:d4:77:51:50:0c:c1:57:23:4a:8a:ae:69:ec:e5:18: 8b:cf:21:9a:dc:93:7e:19:ba:fe:b5:69:58:39:f5:3c:76:e7: 3d:f0:79:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJ97rSY5wvgXBL3iaKC0H3jDVFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4QkVBMjA1QjU5N0I1MjU0MzlFMUM3REY1NDhFMTQ4 QkRGNURFMzAeFw0yNjA2MTcwNTM5NTFaFw0yNjA2MTgwNzQ1NTFaMDMxMTAvBgNV BAMTKDcxOUFEOUUzNDRBNUIxNjFGRUExQ0JDNENGMkI5QTUzQ0FFMEI4QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDajqDmg36XXxZS99PEKSl5QN+W 0wJboVS0AN+mS9ofc5ONCGkjq9EHzsQK/EXezpEpxhxATRzKXpqcncs6FnVYMeMy AnBtKSG5GhwcGbvNexiTVgSeQ18szqNUQhugF/CtkAATsP+Hd8CRLcILDTJBdHZ8 WlzX8EA4aTjvxDwzDKbvaoYjMvFk4smuSpO3bmT0CCA3eCOWlOdp07xkZMnAVbRL UfBSlWMriKMLBh8UU1V4AaPS9KCC0nIHmqp6Wo8m+7QUsbSQTaY7npaYJzhgm3d5 PykhQEnI1dCfFr/gbxjn6QC0tj5WfNz0ldahmSzCf5pD1Lp6LgL60GGaF7q5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcZrZ40SlsWH+ocvEzyuaU8rguMgwHwYDVR0j BBgwFoAUmIvqIFtZe1JUOeHH31SOFIvfXeMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBhNzhjMDYtMWQ2ZS00M2I2LWJmMzAtODYwY2ViZGRmYjMyLzAvOTg4QkVBMjA1 QjU5N0I1MjU0MzlFMUM3REY1NDhFMTQ4QkRGNURFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODhCRUEyMDVCNTk3QjUyNTQzOUUxQzdERjU0OEUxNDhCREY1 REUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTg4QkVBMjA1QjU5N0I1MjU0MzlFMUM3REY1NDhF MTQ4QkRGNURFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJBFgzKrCRuWsWt6F3yMtyYQs+/b/sZNERw cV/BIalm80ofqFWqkp+V7fdcvYjDnWQEC3C8GpS27t5uwj0NxoytwwALT8r5btdI rS2y2XBrNGUNcgCIBIFRiJfvsGT/p3XUuoMNE6YPyadACmIfGig3fJ8o6mppNzOP 8DHP7Z8qHVmcvL7OlwtrVQrxfXnXsjT3kYQJN80jP+6H0b09ywURGGwo3r13AE1Z +tcV3axphEPocYFUXphWdatLVMjeZT/X3UEkLkP64ftXLigm7lolmVWgEowuhSIz yNR3UVAMwVcjSoquaezlGIvPIZrck34Zuv61aVg59Tx25z3weRw= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:52 2026 by rpki-client