$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft File: 792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft (raw, json) Hash identifier: IEwmzqS17J6x6lC2quw3EtL79Z48dy19bYx16xKq6oY= Subject key identifier: D4:7E:D0:E9:09:6E:96:35:86:3C:97:90:28:68:7A:82:93:11:5A:D5 Authority key identifier: 79:2B:EA:B6:45:44:6E:1A:9A:6E:1B:AF:76:74:BC:69:04:C8:BE:1F Certificate issuer: /CN=792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F Certificate serial: 42F90E4CE0A2F7DAFF8A5003BB28CE7CBDAA6332 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 06:40:53 +0000 Manifest this update: Wed 17 Jun 2026 06:35:53 +0000 Manifest next update: Thu 18 Jun 2026 10:32:53 +0000 Files and hashes: 1: 3136302e32322e36342e302f32332d3234203d3e203435333035.roa (hash: ogtnejoe1lu/pUVl9hn0Y1Pmvr2UyFdPnQq+gSyIODw=) 2: 792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.crl (hash: 2C9jD0gVXsIQf+HPp8vB8K1tTtBbzzHFS2rZsVDM7oo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.crl rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f9:0e:4c:e0:a2:f7:da:ff:8a:50:03:bb:28:ce:7c:bd:aa:63:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F Validity Not Before: Jun 17 06:35:53 2026 GMT Not After : Jun 18 10:32:53 2026 GMT Subject: CN=D47ED0E9096E9635863C979028687A8293115AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:39:c0:ac:38:2d:6d:e9:ad:32:30:55:a3:78: cd:8b:3c:bb:df:98:73:4b:cc:f4:34:a5:77:c8:2c: 84:96:3a:ee:94:cb:44:53:f5:44:12:42:53:5d:99: 0b:13:24:52:54:9a:87:a4:7e:a6:9f:6c:89:d6:77: 9a:23:1d:21:b4:88:32:09:e8:a1:29:7c:cb:94:8b: 01:f3:d4:1e:95:41:4a:25:34:2c:b8:4b:84:ac:36: 49:4b:97:59:56:b4:5b:bd:e2:d1:c6:1c:26:64:86: 40:3f:2a:e1:b2:98:68:62:f3:cc:74:e7:35:38:d6: f7:ae:b0:80:41:92:ac:bc:53:b6:7a:1c:7a:fe:f5: 64:31:90:bc:80:12:37:a2:51:e8:56:10:1d:26:b3: 52:3a:dc:f8:01:48:36:db:c9:f5:07:1b:c3:ec:ba: 0a:5d:55:a1:ee:19:6e:03:c8:1d:bb:71:79:94:e5: ed:9d:f3:b2:04:30:c8:e7:a9:68:ac:3e:7d:89:31: 8b:8c:0c:e3:38:1c:bd:8f:ad:74:27:31:f6:af:04: cc:74:40:04:c7:44:7a:a0:b4:8e:b7:93:41:cb:4a: 50:24:69:33:c6:ae:99:2f:3b:fd:72:87:56:c4:6c: 71:35:e8:d3:09:80:ca:52:15:46:e1:c4:77:f1:89: d9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7E:D0:E9:09:6E:96:35:86:3C:97:90:28:68:7A:82:93:11:5A:D5 X509v3 Authority Key Identifier: keyid:79:2B:EA:B6:45:44:6E:1A:9A:6E:1B:AF:76:74:BC:69:04:C8:BE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:71:4a:4c:43:23:7e:9f:7c:73:62:b4:ad:82:a2:97:d4:33: 75:c4:40:2a:88:ae:27:e3:56:9e:07:a0:9e:49:32:2a:09:dc: fe:48:fe:41:c2:d2:46:25:2b:47:cd:98:41:3c:05:1f:77:78: f3:77:c7:83:8d:3c:2f:ab:7e:2b:6f:76:9a:ba:5a:b7:22:55: 9f:7e:da:84:d2:bd:22:c9:85:39:c1:90:c9:7d:a2:58:d1:c5: 76:63:71:79:94:bb:06:50:6d:28:76:96:24:34:27:6b:1e:5f: 2f:2f:4d:10:90:78:2c:01:63:86:f3:32:8a:42:7a:cd:c8:4e: d9:cb:3e:24:a9:33:14:1b:33:41:9a:3e:c4:c2:1a:0c:2f:6f: ae:1f:e8:22:6b:da:c0:9c:95:34:22:f9:bd:a7:86:ec:74:39: 0a:d9:6b:d2:89:ff:75:39:99:d9:a1:e6:5e:ec:9d:3c:e2:ea: b8:58:e9:52:d6:f2:94:69:ef:8c:b0:fd:4b:a2:45:fe:59:ce: 1b:87:4b:2d:67:55:2e:5a:08:cd:6a:5d:3f:3e:65:7c:7e:94: 0d:8e:4c:60:56:11:32:b6:b4:32:d1:c4:9e:c8:4a:a7:f0:14: 1c:6c:8f:67:4d:d5:2b:a3:a1:f2:05:16:6a:7e:0a:a6:09:1d: c7:75:b8:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvkOTOCi99r/ilADuyjOfL2qYzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkyQkVBQjY0NTQ0NkUxQTlBNkUxQkFGNzY3NEJDNjkw NEM4QkUxRjAeFw0yNjA2MTcwNjM1NTNaFw0yNjA2MTgxMDMyNTNaMDMxMTAvBgNV BAMTKEQ0N0VEMEU5MDk2RTk2MzU4NjNDOTc5MDI4Njg3QTgyOTMxMTVBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmOcCsOC1t6a0yMFWjeM2LPLvf mHNLzPQ0pXfILISWOu6Uy0RT9UQSQlNdmQsTJFJUmoekfqafbInWd5ojHSG0iDIJ 6KEpfMuUiwHz1B6VQUolNCy4S4SsNklLl1lWtFu94tHGHCZkhkA/KuGymGhi88x0 5zU41veusIBBkqy8U7Z6HHr+9WQxkLyAEjeiUehWEB0ms1I63PgBSDbbyfUHG8Ps ugpdVaHuGW4DyB27cXmU5e2d87IEMMjnqWisPn2JMYuMDOM4HL2PrXQnMfavBMx0 QATHRHqgtI63k0HLSlAkaTPGrpkvO/1yh1bEbHE16NMJgMpSFUbhxHfxidlTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1H7Q6QluljWGPJeQKGh6gpMRWtUwHwYDVR0j BBgwFoAUeSvqtkVEbhqabhuvdnS8aQTIvh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWU0YWJhMGEtMWMyYy00ZjhhLWE0YjQtZWE3MmQ5YjJhNjBhLzAvNzkyQkVBQjY0 NTQ0NkUxQTlBNkUxQkFGNzY3NEJDNjkwNEM4QkUxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83OTJCRUFCNjQ1NDQ2RTFBOUE2RTFCQUY3Njc0QkM2OTA0QzhC RTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWU0YWJhMGEtMWMyYy00ZjhhLWE0 YjQtZWE3MmQ5YjJhNjBhLzAvNzkyQkVBQjY0NTQ0NkUxQTlBNkUxQkFGNzY3NEJD NjkwNEM4QkUxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJxSkxDI36ffHNitK2CopfUM3XEQCqIrifj Vp4HoJ5JMioJ3P5I/kHC0kYlK0fNmEE8BR93ePN3x4ONPC+rfitvdpq6WrciVZ9+ 2oTSvSLJhTnBkMl9oljRxXZjcXmUuwZQbSh2liQ0J2seXy8vTRCQeCwBY4bzMopC es3ITtnLPiSpMxQbM0GaPsTCGgwvb64f6CJr2sCclTQi+b2nhux0OQrZa9KJ/3U5 mdmh5l7snTzi6rhY6VLW8pRp74yw/UuiRf5ZzhuHSy1nVS5aCM1qXT8+ZXx+lA2O TGBWETK2tDLRxJ7ISqfwFBxsj2dN1SujofIFFmp+CqYJHcd1uD8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:09:40 2026 by rpki-client