$ rpki-client -vvf rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft File: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft (raw, json) Hash identifier: pGHzGSCLKNwad7brVGQOXM8onclKqJoFvN39e6EzvF0= Subject key identifier: D9:AD:14:77:15:86:01:FB:02:90:A3:4C:02:70:31:46:DA:95:9B:E8 Authority key identifier: 1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 Certificate issuer: /CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Certificate serial: 0636331ABBD65BFF4B628596DB958DBEE6B54CA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 07:01:19 +0000 Manifest this update: Wed 17 Jun 2026 06:56:19 +0000 Manifest next update: Thu 18 Jun 2026 08:01:19 +0000 Files and hashes: 1: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: qtpgdgclWZOTtoV+QMuAH0R7ZHXa3nSHqjG3rAHVlzk=) 2: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: jtaA1SPrzDUYTBX5hLaOl8wHf9I6oDuHtGJ4XR8iaqY=) 3: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: EMakdzLLxip5MgFZZxs3v2CftrvckpQUzvKJTpU8Ns0=) 4: 1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl (hash: hCgL+0eMk5z8IRh7IVNaKs7wOz5n8iklbkTeVelfkbY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:36:33:1a:bb:d6:5b:ff:4b:62:85:96:db:95:8d:be:e6:b5:4c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8443F2B1B91BF6F0278C5B3C4BC524D8581508 Validity Not Before: Jun 17 06:56:19 2026 GMT Not After : Jun 18 08:01:19 2026 GMT Subject: CN=D9AD1477158601FB0290A34C02703146DA959BE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5b:66:86:2a:78:02:e4:c6:c6:23:77:03:62: 6b:a6:6f:ac:e4:09:71:3e:5a:e6:14:a9:93:67:47: a6:1d:77:51:a2:51:f1:5d:81:6a:43:a5:dd:e9:23: d8:bf:c0:d9:06:81:33:07:2d:86:35:3c:50:60:17: e4:ac:1b:9c:b0:e5:f3:15:3e:c8:3d:25:8c:94:4b: 7b:96:4b:43:3b:bc:bc:36:56:5d:ca:dc:c3:db:db: e9:b0:0a:b9:73:1f:34:02:8f:11:49:f4:51:5b:86: 0c:78:c4:70:3a:7d:c2:37:94:91:9b:df:43:75:04: 89:bd:f2:b1:97:8a:64:36:1a:a0:c6:de:75:94:6b: be:72:00:69:05:d4:86:bf:71:95:fe:fe:51:20:8b: 80:a6:ad:fd:c7:03:96:7f:fb:75:fd:cd:9d:95:a8: 79:34:d7:56:eb:d7:95:ef:1f:0e:a6:f9:43:c0:46: 36:90:b3:b2:45:f1:ed:d5:2d:be:3d:9c:5d:e4:b7: cb:af:17:d8:da:e3:da:a4:a2:e4:bf:5c:4b:c2:9d: 07:10:15:f8:c7:4f:8f:e2:92:fa:e3:da:79:78:f5: 88:f3:ac:01:d4:07:80:a2:1b:e5:fe:7f:72:79:31: e3:b3:61:23:f7:6f:79:2c:8b:40:6a:4a:40:53:1f: 2d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AD:14:77:15:86:01:FB:02:90:A3:4C:02:70:31:46:DA:95:9B:E8 X509v3 Authority Key Identifier: keyid:1D:84:43:F2:B1:B9:1B:F6:F0:27:8C:5B:3C:4B:C5:24:D8:58:15:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/1D8443F2B1B91BF6F0278C5B3C4BC524D8581508.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e7:19:4b:4d:2e:7f:d5:d0:b4:62:00:37:28:7e:fa:7a:01: 61:a5:8b:dc:ee:40:2f:44:9c:58:13:b9:35:1c:20:02:b8:04: d2:6c:84:a1:38:72:2e:51:f4:4c:25:36:fd:c8:3e:fd:55:14: 2c:c8:fc:0a:dc:80:61:2a:23:e5:f4:16:bd:48:7c:07:90:8c: fc:a5:a9:22:6c:46:3c:ec:bc:ee:c1:4f:60:38:cd:6c:3e:11: 53:70:7a:cb:5a:58:dd:80:9a:e3:26:96:1f:31:3b:14:95:f6: 98:74:1b:d8:e0:90:bb:db:a3:8e:dd:55:31:b1:84:0a:f2:49: 2a:c8:89:0b:d2:72:b9:14:88:c3:81:a0:cc:d3:9e:31:e6:97: 71:b8:53:1a:4e:61:b7:d5:f0:8e:03:2d:b9:81:d6:a3:40:71: 91:83:69:14:9e:56:0c:1a:88:1b:c4:34:79:09:81:9d:9a:da: 1e:92:9c:7e:7f:eb:ff:e7:aa:cd:c2:6f:d5:3d:73:33:48:39: 22:00:ac:ed:b5:a3:30:4c:55:c2:c7:c5:28:ce:6f:16:cc:04: f4:f8:f2:5f:32:87:3f:32:f0:32:e0:a7:70:cc:82:fa:0d:89: 32:32:d7:65:2f:c4:d0:a2:33:59:99:5b:39:c6:b8:3b:94:6a: 8e:14:0e:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBjYzGrvWW/9LYoWW25WNvua1TKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1MjRE ODU4MTUwODAeFw0yNjA2MTcwNjU2MTlaFw0yNjA2MTgwODAxMTlaMDMxMTAvBgNV BAMTKEQ5QUQxNDc3MTU4NjAxRkIwMjkwQTM0QzAyNzAzMTQ2REE5NTlCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpW2aGKngC5MbGI3cDYmumb6zk CXE+WuYUqZNnR6Ydd1GiUfFdgWpDpd3pI9i/wNkGgTMHLYY1PFBgF+SsG5yw5fMV Psg9JYyUS3uWS0M7vLw2Vl3K3MPb2+mwCrlzHzQCjxFJ9FFbhgx4xHA6fcI3lJGb 30N1BIm98rGXimQ2GqDG3nWUa75yAGkF1Ia/cZX+/lEgi4Cmrf3HA5Z/+3X9zZ2V qHk011br15XvHw6m+UPARjaQs7JF8e3VLb49nF3kt8uvF9ja49qkouS/XEvCnQcQ FfjHT4/ikvrj2nl49YjzrAHUB4CiG+X+f3J5MeOzYSP3b3ksi0BqSkBTHy3bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2a0UdxWGAfsCkKNMAnAxRtqVm+gwHwYDVR0j BBgwFoAUHYRD8rG5G/bwJ4xbPEvFJNhYFQgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI3MTNhMzItZmFkYS00ODRlLWE2OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJC MUI5MUJGNkYwMjc4QzVCM0M0QkM1MjREODU4MTUwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDg0NDNGMkIxQjkxQkY2RjAyNzhDNUIzQzRCQzUyNEQ4NTgx NTA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvMUQ4NDQzRjJCMUI5MUJGNkYwMjc4QzVCM0M0QkM1 MjREODU4MTUwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3nGUtNLn/V0LRiADcofvp6AWGli9zuQC9E nFgTuTUcIAK4BNJshKE4ci5R9EwlNv3IPv1VFCzI/ArcgGEqI+X0Fr1IfAeQjPyl qSJsRjzsvO7BT2A4zWw+EVNwestaWN2AmuMmlh8xOxSV9ph0G9jgkLvbo47dVTGx hArySSrIiQvScrkUiMOBoMzTnjHml3G4UxpOYbfV8I4DLbmB1qNAcZGDaRSeVgwa iBvENHkJgZ2a2h6SnH5/6//nqs3Cb9U9czNIOSIArO21ozBMVcLHxSjObxbMBPT4 8l8yhz8y8DLgp3DMgvoNiTIy12UvxNCiM1mZWznGuDuUao4UDsw= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:45 2026 by rpki-client