$ rpki-client -vvf rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft File: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft (raw, json) Hash identifier: 8Zs4hJCrU1CKqT6fvYkKgXGi32IkCnmmHw4n0bGcgHM= Subject key identifier: 1E:83:1D:D6:FE:AE:41:C1:02:53:E2:7A:92:F8:62:6D:3D:BA:B7:A0 Authority key identifier: 1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D Certificate issuer: /CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Certificate serial: 0BD3D6D0B6FA8571E0511CEE103BAA8B28F97F70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 11:13:05 +0000 Manifest this update: Sat 13 Jun 2026 11:08:05 +0000 Manifest next update: Sun 14 Jun 2026 12:03:05 +0000 Files and hashes: 1: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: BX3zo4jm394L+4A0hATz0MD3kr1dhrVpAj21QCDfQYI=) 2: 1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl (hash: OkwSD7Dzlu6ABk1Z3ueROgK2G4KryQ2ORj2vW0ryFe8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d3:d6:d0:b6:fa:85:71:e0:51:1c:ee:10:3b:aa:8b:28:f9:7f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Validity Not Before: Jun 13 11:08:05 2026 GMT Not After : Jun 14 12:03:05 2026 GMT Subject: CN=1E831DD6FEAE41C10253E27A92F8626D3DBAB7A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7d:d7:ad:41:78:3c:ff:c6:86:40:00:c9:b8: 05:5e:bf:e4:46:1f:02:a9:b2:49:5e:71:e9:77:52: 95:25:8b:32:59:34:21:89:01:51:9c:b4:3d:0e:25: f5:bf:ed:d7:93:02:9f:41:0e:46:41:c7:92:f6:aa: da:e9:e5:62:15:48:94:63:e8:b9:4d:3c:2d:66:1b: 69:3f:a9:2f:a7:94:89:9f:1f:3a:3a:ea:c1:cd:30: 9a:6a:9a:b9:87:3b:2b:be:1d:50:b8:9a:98:6e:07: 0f:83:db:4f:6c:2b:16:38:b6:46:53:0d:3e:a2:c2: 9c:28:a5:bd:e0:3f:79:36:ca:f6:b1:c1:d4:d9:fe: ba:f8:25:fb:ea:5a:7e:6e:ac:0e:75:d4:e7:ba:9c: 46:ef:1a:f4:5d:bd:57:12:98:10:fb:a3:12:1e:d3: 5f:39:8f:4b:d0:a6:79:d2:28:61:bd:ad:53:19:b7: d7:db:e1:40:92:48:f0:89:78:ed:fc:dd:a5:31:bb: e2:4b:c0:c5:32:dc:20:fc:e1:91:c8:06:bd:e2:e9: 84:19:12:ce:38:8e:b3:55:3f:a2:16:53:3d:1c:bb: ba:c1:a7:6c:00:b9:82:b2:60:09:30:0e:6a:76:75: 8f:b4:10:84:e0:79:d5:78:87:b1:6e:c2:9f:51:e8: 4d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:83:1D:D6:FE:AE:41:C1:02:53:E2:7A:92:F8:62:6D:3D:BA:B7:A0 X509v3 Authority Key Identifier: keyid:1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:94:6a:f6:a7:98:3e:a4:a5:4d:cb:59:28:f9:c3:86:f6:7d: 7a:d7:23:6b:dd:b2:e7:d6:e1:61:0a:c4:81:52:16:45:e7:b7: b1:ed:2b:0b:79:8f:0c:0f:16:b2:d2:ce:4a:7b:18:a9:95:84: d0:18:4c:bf:a9:c2:b0:dc:eb:65:b8:f9:89:03:58:44:5a:67: fd:0c:98:c0:14:ba:11:aa:f6:7d:12:c0:03:2a:3d:6c:73:e6: 81:0a:da:34:40:07:b7:67:d1:27:f8:d6:61:3c:62:e5:0d:d3: dd:1b:da:bf:4a:09:3d:c2:25:b1:9f:dd:db:0f:03:5b:8c:b9: 9b:7b:3b:bd:89:1f:e7:e5:d2:23:cb:d5:9b:dc:15:0d:c8:b7: e2:98:75:1c:f3:68:de:73:e8:f6:05:01:e5:a7:f4:42:93:fa: 59:f8:61:e3:b5:ee:c8:ae:38:b4:98:d0:f5:53:f5:bc:8b:35: 90:1b:f8:0d:c0:6f:00:56:14:5b:5b:cc:fe:c4:aa:aa:95:e3: 13:87:ec:5d:9b:9c:3a:0b:ff:7e:a3:e0:f0:55:cd:8c:90:a4: 54:ab:1c:13:e2:f7:17:10:f3:ca:31:96:22:67:2c:57:db:2c: a7:99:be:23:5b:6a:19:66:eb:eb:98:63:4a:39:e7:81:81:4d: c3:6a:a5:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9PW0Lb6hXHgURzuEDuqiyj5f3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4 M0EyNEU3RDAeFw0yNjA2MTMxMTA4MDVaFw0yNjA2MTQxMjAzMDVaMDMxMTAvBgNV BAMTKDFFODMxREQ2RkVBRTQxQzEwMjUzRTI3QTkyRjg2MjZEM0RCQUI3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcfdetQXg8/8aGQADJuAVev+RG HwKpsklecel3UpUlizJZNCGJAVGctD0OJfW/7deTAp9BDkZBx5L2qtrp5WIVSJRj 6LlNPC1mG2k/qS+nlImfHzo66sHNMJpqmrmHOyu+HVC4mphuBw+D209sKxY4tkZT DT6iwpwopb3gP3k2yvaxwdTZ/rr4JfvqWn5urA511Oe6nEbvGvRdvVcSmBD7oxIe 0185j0vQpnnSKGG9rVMZt9fb4UCSSPCJeO383aUxu+JLwMUy3CD84ZHIBr3i6YQZ Es44jrNVP6IWUz0cu7rBp2wAuYKyYAkwDmp2dY+0EITgedV4h7Fuwp9R6E0nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHoMd1v6uQcECU+J6kvhibT26t6AwHwYDVR0j BBgwFoAUHSyeROTl4i6IzQMTUULRdoOiTn0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ODBkZGItM2Q5NC00ZTM0LTkyZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRF NEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4M0EyNEU3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDJDOUU0NEU0RTVFMjJFODhDRDAzMTM1MTQyRDE3NjgzQTI0 RTdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI4ODBkZGItM2Q5NC00ZTM0LTky ZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQx NzY4M0EyNEU3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+UavanmD6kpU3LWSj5w4b2fXrXI2vdsufW 4WEKxIFSFkXnt7HtKwt5jwwPFrLSzkp7GKmVhNAYTL+pwrDc62W4+YkDWERaZ/0M mMAUuhGq9n0SwAMqPWxz5oEK2jRAB7dn0Sf41mE8YuUN090b2r9KCT3CJbGf3dsP A1uMuZt7O72JH+fl0iPL1ZvcFQ3It+KYdRzzaN5z6PYFAeWn9EKT+ln4YeO17siu OLSY0PVT9byLNZAb+A3AbwBWFFtbzP7EqqqV4xOH7F2bnDoL/36j4PBVzYyQpFSr HBPi9xcQ88oxliJnLFfbLKeZviNbahlm6+uYY0o554GBTcNqpRs= -----END CERTIFICATE-----Generated at Sat Jun 13 16:36:54 2026 by rpki-client