$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft File: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft (raw, json) Hash identifier: emeti28fPIqqVsYsafPBp0VCmkZRExdAxwrtuYRYjZo= Subject key identifier: 0C:8D:B3:77:2B:AE:9E:0B:C9:6C:FE:E8:54:49:9C:EE:3B:6B:0C:43 Authority key identifier: B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09 Certificate issuer: /CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09 Certificate serial: 4534C71206A64BB5198FA07A4F824563929D3C8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 12:04:16 +0000 Manifest this update: Sat 13 Jun 2026 11:59:16 +0000 Manifest next update: Sun 14 Jun 2026 13:48:16 +0000 Files and hashes: 1: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: 3thO/9yyE41CicpFLtHQ75Nw909jV+2QY8QpbmSrjas=) 2: 3130332e34322e3131362e302f32322d3232203d3e203234353139.roa (hash: iaB2BU40NYYT5gzoU2/HVHmJ1OLrV8vuDA/NUX6fKHM=) 3: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: UiQg2uhClOmxDzilityVFDsUTcFwNoOe65yL07fwsrE=) 4: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl (hash: Op28hllTI8RI66J0bWAc7ZWkGegMEAJyHkhx6e0B9L0=) 5: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: LFwbkJ+ntBwxqtVdCPUurrC+Hhb3oO3C1dGEk8iDIYc=) 6: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: LUmG2PnUdmtlekMQPkmF2jVlBr5BwiDl1Q3zaubpydY=) 7: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: D+vBT8RjuXQRENNs+sRNnv0u+qOPPua7Ci6xauViEhY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:34:c7:12:06:a6:4b:b5:19:8f:a0:7a:4f:82:45:63:92:9d:3c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09 Validity Not Before: Jun 13 11:59:16 2026 GMT Not After : Jun 14 13:48:16 2026 GMT Subject: CN=0C8DB3772BAE9E0BC96CFEE854499CEE3B6B0C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:35:dc:79:96:25:00:27:77:6b:5f:fe:46: c7:e4:75:e1:4f:5c:39:d4:d7:d1:bd:06:a6:e9:76: b3:28:df:ea:50:c1:d7:b8:52:a2:1c:58:f0:29:f7: 34:19:6c:0f:b1:df:c7:83:54:50:44:6a:5e:5a:f5: ec:a3:ee:92:be:97:5d:7d:b7:e2:6e:69:c0:4e:75: ea:91:6a:c7:fe:f5:82:a8:ae:2d:a8:36:a1:f7:d9: 22:63:4a:46:52:a7:d3:86:37:76:28:27:87:d4:9e: 6c:9e:38:aa:3b:d8:0a:3e:4b:56:c9:4e:f8:67:20: c4:77:31:50:f9:3f:53:a9:0b:18:e2:70:60:1f:b4: e6:4b:36:a4:8a:65:ec:06:26:1d:00:2a:e0:7e:76: 00:23:49:50:53:13:3f:4b:a1:b0:ea:cc:25:37:67: b8:77:5e:c5:ef:91:46:00:96:49:db:0a:01:b2:70: f6:c9:a9:3d:54:ec:83:cd:c8:62:0b:63:5f:bd:87: 03:30:ae:01:f2:57:9c:44:9f:69:01:89:73:12:da: 64:a2:24:01:17:19:18:32:82:1c:a2:e3:9c:71:2f: db:4a:e7:99:f6:bc:bc:56:1c:06:6d:30:6c:c6:a4: 06:2c:fa:70:ab:ce:98:35:9b:b6:c5:95:18:74:85: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8D:B3:77:2B:AE:9E:0B:C9:6C:FE:E8:54:49:9C:EE:3B:6B:0C:43 X509v3 Authority Key Identifier: keyid:B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:48:37:b7:a7:cc:22:b6:96:8c:e7:40:28:ce:64:71:30:6f: 17:49:64:8c:bc:c9:3e:55:e2:82:9b:58:10:d3:56:bf:15:a8: f2:81:da:df:97:c6:c5:0f:bf:40:3f:56:a6:db:b9:4f:6a:73: 71:5c:32:e3:ae:30:88:39:99:a9:59:f4:c0:e6:02:58:5d:1e: c5:bb:a2:67:6f:c3:cd:fa:c7:17:ac:3f:85:d1:c9:19:74:51: 6c:6c:0a:d5:6d:53:af:75:84:43:b2:7a:be:4a:76:fa:17:a9: d3:49:d9:21:f8:6e:e1:8e:29:ff:6d:f5:46:d6:c6:96:37:8a: b3:33:6d:4b:e2:04:1c:9d:8f:3b:1b:31:dd:59:1f:0f:e3:c4: 02:bf:e0:62:d2:24:38:de:1d:55:8d:f8:77:21:51:99:86:ff: 9c:43:c7:43:51:71:b4:5a:5c:47:f1:ea:03:47:79:32:36:b9: 03:6d:29:2a:68:5b:1b:d8:bb:15:12:da:8d:84:db:60:9a:8a: 98:d7:9d:d7:ad:bd:80:be:b8:2b:49:ae:04:2e:1d:c9:6d:da: 8d:6d:3d:74:2e:ba:e5:65:6d:51:29:8a:2f:d4:6a:b8:da:6a: 17:67:bf:53:13:f1:81:d5:b5:4c:e9:c1:17:96:3e:0d:fa:dc: 3a:f5:f8:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURTTHEgamS7UZj6B6T4JFY5KdPIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBQ0FDOEMxQTZENTY3QzcwMjE2N0MzQkY1RDU1RENB ODA2MUQwOTAeFw0yNjA2MTMxMTU5MTZaFw0yNjA2MTQxMzQ4MTZaMDMxMTAvBgNV BAMTKDBDOERCMzc3MkJBRTlFMEJDOTZDRkVFODU0NDk5Q0VFM0I2QjBDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWTXceZYlACd3a1/+RsfkdeFP XDnU19G9BqbpdrMo3+pQwde4UqIcWPAp9zQZbA+x38eDVFBEal5a9eyj7pK+l119 t+JuacBOdeqRasf+9YKori2oNqH32SJjSkZSp9OGN3YoJ4fUnmyeOKo72Ao+S1bJ TvhnIMR3MVD5P1OpCxjicGAftOZLNqSKZewGJh0AKuB+dgAjSVBTEz9LobDqzCU3 Z7h3XsXvkUYAlknbCgGycPbJqT1U7IPNyGILY1+9hwMwrgHyV5xEn2kBiXMS2mSi JAEXGRgyghyi45xxL9tK55n2vLxWHAZtMGzGpAYs+nCrzpg1m7bFlRh0hXm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDI2zdyuungvJbP7oVEmc7jtrDEMwHwYDVR0j BBgwFoAUt6ysjBptVnxwIWfDv11V3KgGHQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY1ODkzNGQtMWIwMC00NDg5LTkyZWQtMWNhNmRjNGIyOTBmLzAvQjdBQ0FDOEMx QTZENTY3QzcwMjE2N0MzQkY1RDU1RENBODA2MUQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0FDQUM4QzFBNkQ1NjdDNzAyMTY3QzNCRjVENTVEQ0E4MDYx RDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY1ODkzNGQtMWIwMC00NDg5LTky ZWQtMWNhNmRjNGIyOTBmLzAvQjdBQ0FDOEMxQTZENTY3QzcwMjE2N0MzQkY1RDU1 RENBODA2MUQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFIN7enzCK2loznQCjOZHEwbxdJZIy8yT5V 4oKbWBDTVr8VqPKB2t+XxsUPv0A/VqbbuU9qc3FcMuOuMIg5malZ9MDmAlhdHsW7 omdvw836xxesP4XRyRl0UWxsCtVtU691hEOyer5KdvoXqdNJ2SH4buGOKf9t9UbW xpY3irMzbUviBBydjzsbMd1ZHw/jxAK/4GLSJDjeHVWN+HchUZmG/5xDx0NRcbRa XEfx6gNHeTI2uQNtKSpoWxvYuxUS2o2E22CaipjXndetvYC+uCtJrgQuHclt2o1t PXQuuuVlbVEpii/Uarjaahdnv1MT8YHVtUzpwReWPg363Dr1+L8= -----END CERTIFICATE-----Generated at Sat Jun 13 21:19:35 2026 by rpki-client