$ rpki-client -vvf rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft File: B486D413919D8F20144DB8254040D1237E34B8AA.mft (raw, json) Hash identifier: 69ikJLY1XfkPk1lMoUkr1Is7cBkc3CyG9z/V3F5oWE8= Subject key identifier: 20:77:11:8B:6B:A7:65:3E:BF:D4:D2:17:44:38:71:E4:AD:1B:DC:75 Authority key identifier: B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA Certificate issuer: /CN=B486D413919D8F20144DB8254040D1237E34B8AA Certificate serial: 4A4E57ECB72912F4D428BA14B6E3E30DB8F94240 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft Manifest number: 3B Signing time: Sun 14 Jun 2026 23:15:22 +0000 Manifest this update: Sun 14 Jun 2026 23:10:22 +0000 Manifest next update: Tue 16 Jun 2026 03:03:22 +0000 Files and hashes: 1: B486D413919D8F20144DB8254040D1237E34B8AA.crl (hash: q9lUEWVuz0TfAK9vOTU2v+tdDNkgj30l283rSHIsxgw=) 2: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: eldG4bxXfHfHBZuQpQd9deqvI4oVqZUOKXxgD57litE=) 3: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: I7JOfc7cIihje61qrOhB8mNIVUiXPbuVCLb1xIG81r0=) 4: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: 7QTUY2NQvJrxF3QQX7LUC6hqv5ttn70Xh40WXHVfruk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4e:57:ec:b7:29:12:f4:d4:28:ba:14:b6:e3:e3:0d:b8:f9:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B486D413919D8F20144DB8254040D1237E34B8AA Validity Not Before: Jun 14 23:10:22 2026 GMT Not After : Jun 16 03:03:22 2026 GMT Subject: CN=2077118B6BA7653EBFD4D217443871E4AD1BDC75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e7:41:c5:db:86:ed:e4:fa:6b:e3:2e:87:fb: 5e:c6:06:7b:ad:25:02:9a:51:17:b0:4c:14:8e:a3: a8:ad:30:95:b3:ec:48:b2:cb:f2:2b:35:d3:f3:d0: 9a:e9:a9:0b:3e:ce:3d:a1:38:c4:a2:08:d0:b3:57: a7:d8:19:88:b9:bb:bf:f4:b3:2e:fa:66:b9:ba:2f: f5:b9:60:b1:71:00:a8:b6:80:49:68:65:8b:2c:db: f2:51:6d:0b:27:28:de:84:b0:61:85:a8:f3:53:71: 59:17:5a:c9:45:87:0b:bc:56:35:b5:50:49:80:56: 21:17:76:d8:c0:16:85:c3:1b:27:58:b0:3c:f3:07: 3a:8c:a3:00:e2:be:62:10:2b:9e:79:2b:5a:df:b7: e1:c8:1b:f4:a5:d7:11:54:1c:c0:da:42:90:85:7e: 84:79:44:40:b1:ba:53:ca:4f:f8:27:38:75:dc:e5: 01:8f:c0:05:03:fd:41:62:c9:8d:c9:2c:88:bb:25: 5a:e0:51:26:79:3f:af:33:4b:64:87:ea:a1:a2:1c: ee:8b:1e:ff:a8:5b:c8:bb:6a:46:e1:da:e6:63:2c: c8:e5:fd:8f:81:86:7f:c3:62:8b:a9:c0:af:d8:ba: 38:5c:49:87:ff:3d:1f:b3:7b:45:ca:da:55:d4:d8: 64:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:77:11:8B:6B:A7:65:3E:BF:D4:D2:17:44:38:71:E4:AD:1B:DC:75 X509v3 Authority Key Identifier: keyid:B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2b:d0:55:43:33:60:85:ad:e6:37:5b:9b:53:52:68:73:bf: a6:27:00:fd:3a:aa:33:35:91:55:5e:3c:f9:06:c3:9d:fe:79: 8e:a9:f5:b4:81:b0:d7:03:84:a4:45:56:9a:ca:cc:e3:58:10: bb:34:11:2d:29:18:17:35:04:0a:64:e3:70:0c:a7:2c:17:da: f5:f1:3c:10:b9:04:d2:10:7d:64:a5:4a:45:fa:5c:34:cf:32: b1:03:14:80:5f:d3:a9:8d:e5:93:2f:a2:5b:50:93:64:03:4f: 93:16:5e:0e:29:a8:9d:cc:af:d5:ff:3f:86:59:42:e6:4c:5a: 2b:8c:1a:23:09:a3:84:0c:50:54:2a:45:15:11:e3:dc:49:f4: 55:87:ab:bd:f6:a6:5d:25:f4:e3:65:15:86:46:cb:98:61:9d: f8:26:b9:b7:6f:0d:f4:d2:94:02:4c:13:71:db:37:29:f0:ba: 91:c6:64:98:15:5c:20:2e:67:93:0f:b7:42:80:2d:24:7f:d2: fe:a8:c8:80:f1:03:39:e8:30:39:7c:45:bd:ab:23:cb:a0:ee: 2b:7f:fe:24:ab:74:d9:4f:dd:97:3e:0e:d9:10:96:a5:b7:eb: a4:13:0f:ee:30:1d:fd:11:23:ff:d8:8d:92:6e:4a:16:71:69: 84:de:5f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSk5X7LcpEvTUKLoUtuPjDbj5QkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3 RTM0QjhBQTAeFw0yNjA2MTQyMzEwMjJaFw0yNjA2MTYwMzAzMjJaMDMxMTAvBgNV BAMTKDIwNzcxMThCNkJBNzY1M0VCRkQ0RDIxNzQ0Mzg3MUU0QUQxQkRDNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR50HF24bt5Ppr4y6H+17GBnut JQKaURewTBSOo6itMJWz7Eiyy/IrNdPz0JrpqQs+zj2hOMSiCNCzV6fYGYi5u7/0 sy76Zrm6L/W5YLFxAKi2gEloZYss2/JRbQsnKN6EsGGFqPNTcVkXWslFhwu8VjW1 UEmAViEXdtjAFoXDGydYsDzzBzqMowDivmIQK555K1rft+HIG/Sl1xFUHMDaQpCF foR5RECxulPKT/gnOHXc5QGPwAUD/UFiyY3JLIi7JVrgUSZ5P68zS2SH6qGiHO6L Hv+oW8i7akbh2uZjLMjl/Y+Bhn/DYoupwK/YujhcSYf/PR+ze0XK2lXU2GS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIHcRi2unZT6/1NIXRDhx5K0b3HUwHwYDVR0j BBgwFoAUtIbUE5GdjyAUTbglQEDRI340uKowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBjMTcxZjQtYmQxMS00OGVkLTg3ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5 MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3RTM0QjhBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDg2RDQxMzkxOUQ4RjIwMTQ0REI4MjU0MDQwRDEyMzdFMzRC OEFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQx MjM3RTM0QjhBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4r0FVDM2CFreY3W5tTUmhzv6YnAP06qjM1 kVVePPkGw53+eY6p9bSBsNcDhKRFVprKzONYELs0ES0pGBc1BApk43AMpywX2vXx PBC5BNIQfWSlSkX6XDTPMrEDFIBf06mN5ZMvoltQk2QDT5MWXg4pqJ3Mr9X/P4ZZ QuZMWiuMGiMJo4QMUFQqRRUR49xJ9FWHq732pl0l9ONlFYZGy5hhnfgmubdvDfTS lAJME3HbNynwupHGZJgVXCAuZ5MPt0KALSR/0v6oyIDxAznoMDl8Rb2rI8ug7it/ /iSrdNlP3Zc+DtkQlqW366QTD+4wHf0RI//YjZJuShZxaYTeX7k= -----END CERTIFICATE-----Generated at Mon Jun 15 13:58:43 2026 by rpki-client