$ rpki-client -vvf rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft File: 924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft (raw, json) Hash identifier: 4/OXvnUQX7c+kv8WUhHQH7LVaqT0Vl3MfXrdHUC3xNQ= Subject key identifier: 50:32:D8:C6:A1:7F:22:D7:30:97:2E:E6:AC:01:5F:C1:FC:CC:3D:E5 Authority key identifier: 92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA Certificate issuer: /CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA Certificate serial: 4AEF26DA5CB990F329B6389A7D3916997378BC49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:06:29 +0000 Manifest this update: Wed 17 Jun 2026 03:01:29 +0000 Manifest next update: Thu 18 Jun 2026 04:47:29 +0000 Files and hashes: 1: 3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (hash: iZLgBREB8douvHYZz9gauKXSkvDFXVOW+Mvm3xgORFU=) 2: 3130332e3234332e31302e302f32342d3234203d3e203536323334.roa (hash: zufjgeZw/w05det8sEI0LnaWHbULyBgD0ra6w23cC5w=) 3: 924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl (hash: CCX4P1nVckPqH6n3rwq1XS/VB8nB/sGuWOd2hgBy/O0=) 4: 3130332e3234332e31312e302f32342d3234203d3e203536323334.roa (hash: dTKCe4paU2IY2Oh+L5IqUZGGFO4TUfQMNiigaYInGe4=) 5: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: +bPIyCGaEGWvS82VlAv2EHMMfj7mjRKwJoRxD8Cvfm0=) 6: 3131372e3130332e36392e302f32342d3234203d3e203536323334.roa (hash: wrUQ4EMVX+PJSZbONtjRtGC7+n3R84eMm7t/IYNPjw8=) 7: 3131372e3130332e37302e302f32342d3234203d3e203536323334.roa (hash: j5WFyDrMaI9n63JSzTSL6p6/2kiX350w7znF9gXn6oE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ef:26:da:5c:b9:90:f3:29:b6:38:9a:7d:39:16:99:73:78:bc:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA Validity Not Before: Jun 17 03:01:29 2026 GMT Not After : Jun 18 04:47:29 2026 GMT Subject: CN=5032D8C6A17F22D730972EE6AC015FC1FCCC3DE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:09:71:b0:cc:54:3a:86:75:0d:51:20:0a: 97:ef:ca:b4:8c:31:6d:e9:78:c3:07:77:44:81:93: 4a:8c:5c:5c:51:ee:08:71:b3:28:59:5f:03:73:3b: 30:1c:14:78:ac:18:ae:e9:06:e4:77:e3:33:22:dc: 0b:a2:00:c4:23:ea:f8:e2:80:e9:fe:50:cf:d9:0c: 3d:9c:ef:64:5a:36:c9:e4:d6:9a:ab:42:e6:0c:16: d5:14:d8:63:93:01:29:7a:65:d1:b9:dd:10:73:d5: 5c:26:5a:41:5c:87:e5:f3:7d:68:51:bd:d1:7c:cc: 6e:29:7a:4e:b0:df:29:f0:d6:55:ab:b8:87:3b:e5: 33:2e:01:3e:18:52:7f:3e:83:a2:53:9d:02:fa:ee: 38:a8:dc:08:8a:39:35:02:e7:02:b0:85:e1:55:ca: 20:b6:2e:d0:3b:14:7f:b3:5b:e0:cb:c8:12:d8:2b: 68:3c:d1:f0:2b:ae:6e:de:8a:b0:44:26:bf:e6:3b: f0:54:83:0f:9d:7b:24:b3:94:11:f7:2d:6f:ae:46: 0a:9f:af:f1:e8:2b:7a:b2:ec:f0:82:12:0c:d4:97: 09:c9:79:a4:fa:99:6b:cf:b7:a0:c8:c9:05:ac:c7: 67:b5:60:44:3d:f5:29:ef:0d:69:41:9a:4c:ea:11: 7d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:32:D8:C6:A1:7F:22:D7:30:97:2E:E6:AC:01:5F:C1:FC:CC:3D:E5 X509v3 Authority Key Identifier: keyid:92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:42:8b:b8:b5:4d:d5:b3:cc:c7:db:7c:e1:c5:92:77:de:27: ac:f5:e1:1c:fd:0f:c4:eb:3a:85:8a:15:f1:f4:04:44:00:20: 06:e9:72:ff:fe:f6:6e:88:f0:ec:c9:7f:4d:7a:64:85:33:ca: 2a:bf:d5:e8:15:58:fc:23:61:e6:22:c7:b4:8e:e4:e8:46:40: 42:e3:7c:f2:39:18:b2:4e:77:1e:69:3e:1b:30:a0:e0:fe:72: c7:b9:86:33:63:17:7b:3c:fa:af:26:0a:d2:fd:4f:bc:e2:13: 6b:45:19:12:0e:81:26:84:b2:5a:62:f5:d5:b7:f6:a3:58:71: 3c:c4:9d:20:52:c2:a9:42:35:bc:c3:16:ac:5c:45:7c:ba:8c: 64:39:06:c0:a9:8c:6d:47:cf:a0:8c:23:89:92:dc:5d:71:8e: ca:e7:35:03:38:57:76:97:df:f4:da:c8:4e:84:e2:a9:e5:b6: 21:c0:2a:61:e5:d9:50:5f:02:d3:06:fd:6b:c2:58:0c:b3:0d: 60:3a:19:49:0c:60:4c:96:c2:50:fe:4b:c1:0b:97:23:15:6b: 1e:0c:ed:43:91:7b:87:e8:dc:ee:e8:cd:b5:52:4a:5a:d9:e5: 55:05:31:46:4b:07:e1:cd:5e:c0:b8:7c:2e:f2:40:5f:d8:be: 9c:6b:df:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSu8m2ly5kPMptjiafTkWmXN4vEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI0Mjc5OTA4QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5 RDRCNkFEQTAeFw0yNjA2MTcwMzAxMjlaFw0yNjA2MTgwNDQ3MjlaMDMxMTAvBgNV BAMTKDUwMzJEOEM2QTE3RjIyRDczMDk3MkVFNkFDMDE1RkMxRkNDQzNERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CglxsMxUOoZ1DVEgCpfvyrSM MW3peMMHd0SBk0qMXFxR7ghxsyhZXwNzOzAcFHisGK7pBuR34zMi3AuiAMQj6vji gOn+UM/ZDD2c72RaNsnk1pqrQuYMFtUU2GOTASl6ZdG53RBz1VwmWkFch+XzfWhR vdF8zG4pek6w3ynw1lWruIc75TMuAT4YUn8+g6JTnQL67jio3AiKOTUC5wKwheFV yiC2LtA7FH+zW+DLyBLYK2g80fArrm7eirBEJr/mO/BUgw+deySzlBH3LW+uRgqf r/HoK3qy7PCCEgzUlwnJeaT6mWvPt6DIyQWsx2e1YEQ99SnvDWlBmkzqEX1jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUDLYxqF/Itcwly7mrAFfwfzMPeUwHwYDVR0j BBgwFoAUkkJ5kIpHwQEbS2pUqgXHvZ1LatowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJjN2RmZDQtZTUxMC00NzA3LTk4MTgtYTJiMWUyYzZiMjE2LzAvOTI0Mjc5OTA4 QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5RDRCNkFEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjQyNzk5MDhBNDdDMTAxMUI0QjZBNTRBQTA1QzdCRDlENEI2 QURBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4 MTgtYTJiMWUyYzZiMjE2LzAvOTI0Mjc5OTA4QTQ3QzEwMTFCNEI2QTU0QUEwNUM3 QkQ5RDRCNkFEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINCi7i1TdWzzMfbfOHFknfeJ6z14Rz9D8Tr OoWKFfH0BEQAIAbpcv/+9m6I8OzJf016ZIUzyiq/1egVWPwjYeYix7SO5OhGQELj fPI5GLJOdx5pPhswoOD+cse5hjNjF3s8+q8mCtL9T7ziE2tFGRIOgSaEslpi9dW3 9qNYcTzEnSBSwqlCNbzDFqxcRXy6jGQ5BsCpjG1Hz6CMI4mS3F1xjsrnNQM4V3aX 3/TayE6E4qnltiHAKmHl2VBfAtMG/WvCWAyzDWA6GUkMYEyWwlD+S8ELlyMVax4M 7UORe4fo3O7ozbVSSlrZ5VUFMUZLB+HNXsC4fC7yQF/Yvpxr3yI= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:04 2026 by rpki-client