$ rpki-client -vvf rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft File: 0987C7F8639A5EC739826F640C8E04FD53A0800E.mft (raw, json) Hash identifier: rMROVtYU+lWk4UekhdDA+MphMxT/Rz7kh2lLs2Ygojg= Subject key identifier: 45:83:8F:9F:A4:30:0C:64:3C:47:74:57:46:26:FD:7D:03:A1:D0:4E Authority key identifier: 09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E Certificate issuer: /CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Certificate serial: 77E0A94C254EB097B94448C94FC354469C6EDE6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft Manifest number: 3C Signing time: Mon 15 Jun 2026 09:48:01 +0000 Manifest this update: Mon 15 Jun 2026 09:43:01 +0000 Manifest next update: Tue 16 Jun 2026 11:21:01 +0000 Files and hashes: 1: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: s3V5AB5+bA2d5/svBoGY/0k9sggx8nw5uup6zerO5YY=) 2: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: rwJybuB0Xuh51eX44OUj0FA9N+xl/VzvgF/HSTs9GfM=) 3: 0987C7F8639A5EC739826F640C8E04FD53A0800E.crl (hash: iz0OrKgJ3+TciXGR4kKLuxVNtwSu4Zc+6aNjCdp+wK0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e0:a9:4c:25:4e:b0:97:b9:44:48:c9:4f:c3:54:46:9c:6e:de:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Validity Not Before: Jun 15 09:43:01 2026 GMT Not After : Jun 16 11:21:01 2026 GMT Subject: CN=45838F9FA4300C643C4774574626FD7D03A1D04E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:5e:fc:6f:a0:ca:7f:5a:a4:98:81:b5:61: c0:2a:f3:5e:f4:e3:74:9f:d0:92:8f:17:66:89:8f: f9:b9:03:43:fc:a7:3e:94:3c:5c:3d:b8:b2:8f:d8: 8f:ca:74:73:a0:4a:5e:1d:52:4a:d6:da:79:9d:ae: f1:b4:14:06:80:7d:57:e7:62:1b:c8:29:e4:b5:10: dc:f4:43:9a:df:45:50:af:69:ee:86:90:a9:c6:b6: 81:2e:5c:3f:20:28:c1:c9:88:29:fe:70:8d:68:43: 56:62:b1:17:5e:60:43:d1:64:6b:d1:9c:41:51:95: dc:4c:15:a0:b4:1c:ea:92:68:eb:af:9f:d1:12:ac: 10:91:bd:a6:fd:b1:ee:3f:d3:06:10:20:49:00:80: 7e:af:53:64:92:51:f6:a2:ff:66:4a:4d:6c:f8:7d: b8:40:63:82:9e:36:d4:03:e6:b2:66:9c:9b:e4:aa: ab:80:19:7a:bc:2b:76:f6:97:5b:8e:c3:4b:2a:e2: 8a:e8:19:3d:37:98:cc:fe:6b:5d:15:fa:bd:33:85: bf:f8:f3:db:3f:67:1d:92:07:31:1c:78:8c:35:0a: e7:ba:4f:9e:fa:7f:93:3f:8a:1d:b5:62:09:77:3b: a8:50:d0:ad:5b:7a:f2:fd:99:36:b8:80:91:d6:0c: f9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:83:8F:9F:A4:30:0C:64:3C:47:74:57:46:26:FD:7D:03:A1:D0:4E X509v3 Authority Key Identifier: keyid:09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:72:bf:db:ce:5e:90:cb:90:6d:7e:1d:69:5f:20:91:9a:44: f4:55:d3:71:bd:8e:f3:7f:66:28:cf:bd:7e:a0:de:6c:9b:7b: 6f:f7:70:5d:92:e5:52:f9:cb:9c:24:98:30:78:64:58:84:bf: 50:a0:ec:d5:5a:49:77:bc:cc:c0:b2:d7:15:90:45:00:04:2f: b5:4f:7b:64:12:10:36:58:59:91:e9:05:f8:84:ee:11:6e:f8: fd:6e:35:3d:f9:f8:fa:cd:54:e8:e0:9e:c7:f7:a1:38:ce:5a: e8:b1:43:58:58:eb:6d:67:92:8e:22:63:b3:a9:8b:d5:35:aa: 11:36:48:7a:7a:f1:83:25:28:2e:a0:82:69:1b:c6:d9:19:48: d6:30:d2:42:db:59:ce:f8:15:0d:71:7a:a9:23:91:d7:72:b6: 96:f1:ee:2d:5d:4a:07:a7:8e:23:00:e4:30:f9:27:8d:b7:70: 68:c4:e4:2f:79:84:56:95:95:fd:43:2d:2c:da:e0:21:5a:79: 9e:95:f2:57:a4:68:ad:7c:cd:5f:e4:97:be:29:0b:9c:59:6d: 95:c5:3c:a4:56:81:71:f5:e5:3c:70:98:9b:16:b5:9a:6a:36: 9b:07:02:d5:64:16:26:db:29:b7:12:9a:04:41:11:e1:d1:f7: de:21:ad:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+CpTCVOsJe5REjJT8NURpxu3mwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1 M0EwODAwRTAeFw0yNjA2MTUwOTQzMDFaFw0yNjA2MTYxMTIxMDFaMDMxMTAvBgNV BAMTKDQ1ODM4RjlGQTQzMDBDNjQzQzQ3NzQ1NzQ2MjZGRDdEMDNBMUQwNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Sl78b6DKf1qkmIG1YcAq8170 43Sf0JKPF2aJj/m5A0P8pz6UPFw9uLKP2I/KdHOgSl4dUkrW2nmdrvG0FAaAfVfn YhvIKeS1ENz0Q5rfRVCvae6GkKnGtoEuXD8gKMHJiCn+cI1oQ1ZisRdeYEPRZGvR nEFRldxMFaC0HOqSaOuvn9ESrBCRvab9se4/0wYQIEkAgH6vU2SSUfai/2ZKTWz4 fbhAY4KeNtQD5rJmnJvkqquAGXq8K3b2l1uOw0sq4oroGT03mMz+a10V+r0zhb/4 89s/Zx2SBzEceIw1Cue6T576f5M/ih21Ygl3O6hQ0K1bevL9mTa4gJHWDPkrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURYOPn6QwDGQ8R3RXRib9fQOh0E4wHwYDVR0j BBgwFoAUCYfH+GOaXsc5gm9kDI4E/VOggA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDYzOGJkMjEtYmU1Ni00MmI0LTgyNzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2 MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1M0EwODAwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTg3QzdGODYzOUE1RUM3Mzk4MjZGNjQwQzhFMDRGRDUzQTA4 MDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0 RkQ1M0EwODAwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9yv9vOXpDLkG1+HWlfIJGaRPRV03G9jvN/ ZijPvX6g3mybe2/3cF2S5VL5y5wkmDB4ZFiEv1Cg7NVaSXe8zMCy1xWQRQAEL7VP e2QSEDZYWZHpBfiE7hFu+P1uNT35+PrNVOjgnsf3oTjOWuixQ1hY621nko4iY7Op i9U1qhE2SHp68YMlKC6ggmkbxtkZSNYw0kLbWc74FQ1xeqkjkddytpbx7i1dSgen jiMA5DD5J423cGjE5C95hFaVlf1DLSza4CFaeZ6V8lekaK18zV/kl74pC5xZbZXF PKRWgXH15TxwmJsWtZpqNpsHAtVkFibbKbcSmgRBEeHR994hrQ4= -----END CERTIFICATE-----Generated at Mon Jun 15 14:22:23 2026 by rpki-client