$ rpki-client -vvf rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft File: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft (raw, json) Hash identifier: NOMpIhy0/rl9CfyPFT8peXj3M3rTAT6GR4OjUVun0QA= Subject key identifier: 77:23:BC:9A:27:D7:85:80:78:32:AB:07:06:CE:6A:BF:D1:23:21:01 Authority key identifier: 1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D Certificate issuer: /CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Certificate serial: 37ED1CB52A328F149DEEAC5E4A88172B0210019A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 10:37:17 +0000 Manifest this update: Sat 13 Jun 2026 10:32:17 +0000 Manifest next update: Sun 14 Jun 2026 11:18:17 +0000 Files and hashes: 1: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: HRWu5uWyYj+tP+jHdEqHR4i0tx4A8OiWh4bfexrm8jQ=) 2: 1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl (hash: +j/cGKTX9NmAudgux5rUceKPFuubPJEhO3FOsgOrVgc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ed:1c:b5:2a:32:8f:14:9d:ee:ac:5e:4a:88:17:2b:02:10:01:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Validity Not Before: Jun 13 10:32:17 2026 GMT Not After : Jun 14 11:18:17 2026 GMT Subject: CN=7723BC9A27D785807832AB0706CE6ABFD1232101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e5:ff:64:80:80:96:de:69:ee:d5:c5:69:7f: d4:80:92:aa:ca:1d:92:b2:aa:a1:46:db:d4:f0:f8: cd:fe:d2:bb:89:f1:e1:a9:69:54:fb:70:52:6d:2c: ba:91:1f:11:a6:39:63:90:24:67:16:b7:b8:c9:cb: 1b:6c:9c:1b:b5:e0:a4:cc:96:ed:48:e3:c8:37:86: 67:64:ba:b5:6a:ed:75:f6:67:b4:02:09:8b:09:10: 2c:ba:fe:67:45:b9:35:9b:e5:a6:81:75:cf:24:f0: a6:f7:89:a1:a1:2e:d7:af:b0:2b:60:52:58:bd:6d: 22:c0:10:bc:56:53:96:59:9e:5c:3d:b3:52:0c:cb: 9f:a0:41:d1:49:df:b1:18:4b:04:a4:6b:28:9b:fc: 38:fe:56:c6:0a:35:20:1a:87:e9:1d:18:91:52:01: 46:35:3b:97:01:1a:61:0a:0a:86:1d:56:db:d5:32: 0b:90:6a:73:b0:6b:e0:e4:63:bf:67:ef:4b:ba:b7: 9b:20:7d:f6:21:00:e9:11:d8:66:25:4f:4d:1b:6e: b5:99:c6:f6:95:ba:53:04:32:bb:83:bc:45:d3:52: e0:18:99:5f:5d:28:b7:5f:1c:b7:33:0a:be:b7:9f: c0:c6:68:33:5d:ee:a8:86:95:fa:52:fb:32:d5:4f: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:23:BC:9A:27:D7:85:80:78:32:AB:07:06:CE:6A:BF:D1:23:21:01 X509v3 Authority Key Identifier: keyid:1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7b:ec:92:4d:ad:84:23:ce:f1:55:3d:bb:eb:bc:a1:7d:b8: 35:34:f0:b2:eb:92:a3:9c:c2:57:d6:ff:3c:04:de:20:ef:11: 1d:8a:b7:72:b6:1e:af:a1:22:6e:52:c8:5a:11:bc:07:bd:39: 3b:d7:87:15:5a:74:52:8e:74:92:23:25:ac:7c:c2:24:e4:49: e0:da:79:43:74:85:3d:92:b4:77:72:48:87:ea:35:25:e8:ee: 5a:48:fd:f7:39:6b:9a:67:b3:cf:fc:a3:7e:16:27:0b:cc:14: 8a:ac:f0:2f:ac:72:f5:92:1f:8f:55:e3:ae:41:07:d1:d2:4a: 9b:39:7d:60:80:44:ad:52:e6:fe:c6:e7:99:f0:54:a9:b1:ef: fb:ba:8e:cf:20:b5:73:4f:41:8e:7a:dd:c9:4b:bd:c3:b4:85: d6:e7:41:32:8b:e9:eb:5a:f3:fe:0f:d0:6c:70:aa:5b:1a:c0: f3:ed:84:20:ab:00:ce:6e:1e:ea:7c:d6:c0:85:7f:27:59:ed: 08:0c:56:d3:d9:e7:5e:7a:a6:50:1f:4c:64:de:6c:cc:d2:6c: b7:01:3b:74:20:80:80:7e:6c:5e:d9:9f:f4:85:52:43:71:6a: bb:17:9c:d1:33:47:ce:4e:02:45:fa:83:c3:34:a1:c3:b1:28: d1:c7:e3:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+0ctSoyjxSd7qxeSogXKwIQAZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVE QzQyMTIzRDAeFw0yNjA2MTMxMDMyMTdaFw0yNjA2MTQxMTE4MTdaMDMxMTAvBgNV BAMTKDc3MjNCQzlBMjdENzg1ODA3ODMyQUIwNzA2Q0U2QUJGRDEyMzIxMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5f9kgICW3mnu1cVpf9SAkqrK HZKyqqFG29Tw+M3+0ruJ8eGpaVT7cFJtLLqRHxGmOWOQJGcWt7jJyxtsnBu14KTM lu1I48g3hmdkurVq7XX2Z7QCCYsJECy6/mdFuTWb5aaBdc8k8Kb3iaGhLtevsCtg Uli9bSLAELxWU5ZZnlw9s1IMy5+gQdFJ37EYSwSkayib/Dj+VsYKNSAah+kdGJFS AUY1O5cBGmEKCoYdVtvVMguQanOwa+DkY79n70u6t5sgffYhAOkR2GYlT00bbrWZ xvaVulMEMruDvEXTUuAYmV9dKLdfHLczCr63n8DGaDNd7qiGlfpS+zLVTy0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdyO8mifXhYB4MqsHBs5qv9EjIQEwHwYDVR0j BBgwFoAUHQpoIC52LEIMfziuKRXk5dxCEj0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIxMGVjMGYtMDQyMC00MDJmLTk1ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAy RTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVEQzQyMTIzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDBBNjgyMDJFNzYyQzQyMEM3RjM4QUUyOTE1RTRFNURDNDIx MjNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0 RTVEQzQyMTIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD577JJNrYQjzvFVPbvrvKF9uDU08LLrkqOc wlfW/zwE3iDvER2Kt3K2Hq+hIm5SyFoRvAe9OTvXhxVadFKOdJIjJax8wiTkSeDa eUN0hT2StHdySIfqNSXo7lpI/fc5a5pns8/8o34WJwvMFIqs8C+scvWSH49V465B B9HSSps5fWCARK1S5v7G55nwVKmx7/u6js8gtXNPQY563clLvcO0hdbnQTKL6eta 8/4P0GxwqlsawPPthCCrAM5uHup81sCFfydZ7QgMVtPZ5156plAfTGTebMzSbLcB O3QggIB+bF7Zn/SFUkNxarsXnNEzR85OAkX6g8M0ocOxKNHH4zs= -----END CERTIFICATE-----Generated at Sat Jun 13 16:36:33 2026 by rpki-client