$ rpki-client -vvf rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft File: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft (raw, json) Hash identifier: 6uK3ko7JnLBZkz8QJu85ZHp7qmQu8fzlCkZkSylAE+4= Subject key identifier: 15:73:1C:8E:1F:B4:2E:F3:F5:3A:F1:50:A5:CA:1A:29:33:4F:70:CA Authority key identifier: DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D Certificate issuer: /CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Certificate serial: 32F7A01E5B1FF8C8FE7A7E508915FD59E8C34FC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 20:13:46 +0000 Manifest this update: Sat 13 Jun 2026 20:08:46 +0000 Manifest next update: Sun 14 Jun 2026 22:15:46 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: pUwBvJ0FIKqMG3YypxwtIACCh9fdPkCe3slROTdlAFQ=) 2: DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl (hash: 5GGr2k12RYAJjdOxtTR3kCPPH2vTLWQUxDqGGlTD17k=) 3: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: E89xRti4PVG0HV9DRFC+eJJ1GWYmvwIqGtNqlTsJLNs=) 4: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: fD3NLzLgoJ82TLwu7Dwyse03F0V8LT4TWwHSpMtUfEc=) 5: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: 97HN/1c+8Hrc2pb/g0tPOiNTWcjkEdKOrzmx5piyFis=) 6: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: TTk5uxdYgabM/1XXzBbZ8h3cHs3Ef7zAmOsq9InOKKA=) 7: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: d1/YZ4nLn+eOZOqPz/6uDnp+bGReiCL4D5xWg3VSU5w=) 8: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: TkbyXPHwp6Kb69rQYjb4QN3MOoOzWNnMDZFwGXZxRRA=) 9: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: WjZRwtvJki8cX6/hev6SY7XFmEOdsbw7GQ4iNASnaI0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f7:a0:1e:5b:1f:f8:c8:fe:7a:7e:50:89:15:fd:59:e8:c3:4f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF6A987E2F9BF104B9938911E8F83F4C51C5A74D Validity Not Before: Jun 13 20:08:46 2026 GMT Not After : Jun 14 22:15:46 2026 GMT Subject: CN=15731C8E1FB42EF3F53AF150A5CA1A29334F70CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:75:4d:c5:cc:8e:cb:ad:2f:b8:6f:86:96:3d: eb:3c:85:0b:cf:35:54:43:e2:ab:3e:c8:60:4e:5e: 93:28:68:35:15:72:42:4d:25:0a:bc:02:12:cc:ad: 87:3e:e4:0c:97:78:17:49:07:c9:14:cc:05:5b:b7: 51:98:91:fc:f0:49:cd:0d:d5:21:f4:59:32:59:b5: b0:71:29:43:23:f7:e9:73:7b:d8:95:ac:0b:60:4f: 7a:ac:db:57:a0:b7:33:72:73:3c:5e:c2:28:86:64: f7:58:d4:66:ed:f8:df:dd:be:d6:5f:d6:2b:f8:59: 1b:9f:55:84:02:c6:5c:09:1c:23:df:e4:51:81:fc: 3d:c6:fb:c4:41:57:38:27:69:57:e9:12:86:d6:c0: 04:11:cf:c0:31:3c:66:e4:e3:a6:ab:8c:27:81:54: 45:f3:c1:0a:56:cf:71:1b:8b:44:d1:80:47:57:6c: 32:9d:d3:b8:d4:f5:29:f3:27:a6:9f:68:8a:bf:6c: 65:de:ef:3c:13:ec:66:85:b0:f4:1c:b9:95:67:a5: f4:64:0e:76:b0:15:6d:58:ae:35:4b:c4:3c:1e:97: 88:ee:9d:8c:35:3b:9a:f8:82:a0:d2:84:11:e3:32: 2f:eb:1e:41:c5:5f:f9:db:aa:63:ec:e9:2c:32:eb: 0d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:73:1C:8E:1F:B4:2E:F3:F5:3A:F1:50:A5:CA:1A:29:33:4F:70:CA X509v3 Authority Key Identifier: keyid:DF:6A:98:7E:2F:9B:F1:04:B9:93:89:11:E8:F8:3F:4C:51:C5:A7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/DF6A987E2F9BF104B9938911E8F83F4C51C5A74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:60:25:89:57:e8:7b:e6:65:17:c2:45:4d:0e:d4:58:07:b2: a2:12:59:02:6e:eb:d1:7e:15:47:d1:8e:87:2c:3b:3c:ef:58: 15:e4:36:fb:69:ea:8b:f3:0b:3b:65:5d:97:e1:fb:89:fe:1c: 9d:df:87:b9:4a:d8:ba:81:eb:66:53:5a:ac:2f:c1:85:83:e1: 60:00:83:cc:db:12:94:c3:ea:8c:9f:9a:f5:1b:b0:66:98:fc: 0a:c2:d7:0c:2d:d7:ae:2f:15:dc:a6:9f:4f:a8:2e:18:26:e6: 63:3f:86:a4:9b:03:cc:f4:44:fb:c1:b5:e8:58:2a:0c:7d:88: 90:59:7a:d3:42:f6:93:7d:a9:0c:b9:6e:ec:8f:66:a2:a4:50: 4b:6f:ad:8b:e9:6c:5c:e6:2a:32:75:45:03:3b:af:37:92:5d: 47:d2:f5:d3:0b:8f:69:51:25:e4:ee:89:38:d2:fa:e4:99:66: 29:11:43:87:ec:4a:ab:d6:ca:30:ed:ce:99:ce:08:79:ad:b6: 58:ea:6a:8c:ed:f9:ef:62:3f:11:e6:e4:2b:ab:eb:89:83:28: 9d:39:d5:ff:ad:ff:5d:1a:a8:86:4c:9a:df:3a:34:b2:d8:aa: 2b:2c:01:21:e2:7a:5a:6a:88:cc:1a:f8:46:02:7a:39:72:bd: 30:cb:05:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvegHlsf+Mj+en5QiRX9WejDT8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNGNEM1 MUM1QTc0RDAeFw0yNjA2MTMyMDA4NDZaFw0yNjA2MTQyMjE1NDZaMDMxMTAvBgNV BAMTKDE1NzMxQzhFMUZCNDJFRjNGNTNBRjE1MEE1Q0ExQTI5MzM0RjcwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDddU3FzI7LrS+4b4aWPes8hQvP NVRD4qs+yGBOXpMoaDUVckJNJQq8AhLMrYc+5AyXeBdJB8kUzAVbt1GYkfzwSc0N 1SH0WTJZtbBxKUMj9+lze9iVrAtgT3qs21egtzNyczxewiiGZPdY1Gbt+N/dvtZf 1iv4WRufVYQCxlwJHCPf5FGB/D3G+8RBVzgnaVfpEobWwAQRz8AxPGbk46arjCeB VEXzwQpWz3Ebi0TRgEdXbDKd07jU9SnzJ6afaIq/bGXe7zwT7GaFsPQcuZVnpfRk DnawFW1YrjVLxDwel4junYw1O5r4gqDShBHjMi/rHkHFX/nbqmPs6Swy6w13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFXMcjh+0LvP1OvFQpcoaKTNPcMowHwYDVR0j BBgwFoAU32qYfi+b8QS5k4kR6Pg/TFHFp00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBjMmExM2ItMWY0MC00YzAzLWJjMzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0Uy RjlCRjEwNEI5OTM4OTExRThGODNGNEM1MUM1QTc0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERjZBOTg3RTJGOUJGMTA0Qjk5Mzg5MTFFOEY4M0Y0QzUxQzVB NzRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvREY2QTk4N0UyRjlCRjEwNEI5OTM4OTExRThGODNG NEM1MUM1QTc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZgJYlX6HvmZRfCRU0O1FgHsqISWQJu69F+ FUfRjocsOzzvWBXkNvtp6ovzCztlXZfh+4n+HJ3fh7lK2LqB62ZTWqwvwYWD4WAA g8zbEpTD6oyfmvUbsGaY/ArC1wwt164vFdymn0+oLhgm5mM/hqSbA8z0RPvBtehY Kgx9iJBZetNC9pN9qQy5buyPZqKkUEtvrYvpbFzmKjJ1RQM7rzeSXUfS9dMLj2lR JeTuiTjS+uSZZikRQ4fsSqvWyjDtzpnOCHmttljqaozt+e9iPxHm5Cur64mDKJ05 1f+t/10aqIZMmt86NLLYqissASHielpqiMwa+EYCejlyvTDLBdQ= -----END CERTIFICATE-----Generated at Sun Jun 14 01:47:36 2026 by rpki-client