$ rpki-client -vvf rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft File: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft (raw, json) Hash identifier: soJyBS+q38TmOi/o05XsXeR7pI7jji0gRHpDpLHAECQ= Subject key identifier: 9B:8B:F2:70:E9:80:94:5F:34:A5:83:56:76:67:C0:12:60:6B:AC:2A Authority key identifier: 04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E Certificate issuer: /CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Certificate serial: 664785030FA4CFEF752633867B4C6040FE985529 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 14:06:40 +0000 Manifest this update: Sat 13 Jun 2026 14:01:40 +0000 Manifest next update: Sun 14 Jun 2026 16:20:40 +0000 Files and hashes: 1: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: 40yX7GBS0nX6cgx29ls12Yp5h3Ba+XKjPu45g8FVQzo=) 2: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CZVghfd+RMSIYEhXYYQSwl8vEVYu7UKTsPMOPTno7kM=) 3: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl (hash: MyUXT4e6xvfkgPwWDYuKGVGmhQQxUOSXypLA422/Tzk=) 4: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: JGTo44TwhcX4ivQ52rHxAzJZareWjfxAS0kPXAmQ5EE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:47:85:03:0f:a4:cf:ef:75:26:33:86:7b:4c:60:40:fe:98:55:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Validity Not Before: Jun 13 14:01:40 2026 GMT Not After : Jun 14 16:20:40 2026 GMT Subject: CN=9B8BF270E980945F34A583567667C012606BAC2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:28:f5:d6:3b:ff:d0:c0:73:68:dd:7d:47:cc: e3:bd:b6:15:4f:3b:fb:a2:17:0c:b2:e2:42:5d:fa: e9:51:24:0e:b9:18:6b:15:64:f7:79:4d:9e:e7:8a: 70:d2:04:f9:e7:cc:ea:f4:11:47:04:af:22:60:50: 9f:fc:e5:c0:85:64:f1:e4:a5:c9:4e:f3:30:7b:b8: 90:4e:e9:e5:6a:a7:ac:c2:c3:fd:7a:b9:8f:25:43: 6c:0f:6f:68:1d:4a:4d:13:a8:05:9a:89:3b:a2:6e: 6c:ae:fb:4c:9f:5a:d5:cd:b8:c6:54:2a:32:48:79: 72:d4:e9:b0:65:3e:d4:c1:f7:98:c9:fe:a9:17:35: 1c:89:f1:fe:9f:83:31:81:2a:cb:f2:ed:b8:ea:1f: 66:69:65:b8:96:1e:1d:c1:77:12:88:0d:2e:eb:bd: 83:24:9b:f3:7a:71:15:50:11:3b:fc:f6:78:10:b8: aa:fa:74:98:4a:88:16:6f:a4:6d:af:d1:1a:56:6a: 0d:b5:75:a3:ea:46:71:0f:c4:a8:d0:20:49:1d:c1: 5a:72:8c:3e:53:57:33:39:dd:e5:0b:cf:c7:37:68: 73:6f:88:41:4a:af:97:ab:8d:53:27:ef:71:42:77: f2:41:4f:d3:eb:80:f6:44:70:a4:1f:2b:b1:93:41: 86:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8B:F2:70:E9:80:94:5F:34:A5:83:56:76:67:C0:12:60:6B:AC:2A X509v3 Authority Key Identifier: keyid:04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:7d:dc:56:76:d0:d5:13:5a:74:ff:c1:f9:23:54:ee:06:64: 8d:35:41:2b:22:5a:96:d4:d5:74:36:73:77:71:a4:ae:6e:6d: 38:0d:2a:97:cd:4b:84:27:56:43:02:14:36:01:c5:63:69:a5: fd:f8:2f:ca:c7:57:04:bf:f3:4c:91:23:b0:fb:b6:54:59:4e: 06:1d:a6:e1:44:d2:ef:e1:34:5d:8f:66:a9:4c:53:8e:29:16: a4:08:9e:6b:32:d9:f0:c0:d0:90:c7:09:57:9c:7a:7a:ac:8c: 01:17:04:95:64:ad:8f:07:63:4b:68:84:ab:8c:39:3b:2d:cf: 82:1a:d1:fb:de:1b:8d:c2:a6:a5:24:0f:b8:21:7c:eb:f6:bf: 3c:5b:02:53:f0:61:d1:1f:b0:df:55:4e:a5:07:08:95:2c:1d: 47:ec:b3:af:61:95:56:f8:53:95:97:dc:3f:f6:2c:4d:e7:3c: da:ea:ee:94:ae:19:30:93:2b:29:65:1c:b0:1b:f8:f4:19:76: 70:34:31:5c:69:05:36:0f:be:54:20:9b:d5:f4:e2:7e:5e:77: 51:57:55:ca:0e:bb:87:96:8a:5f:7c:b4:46:fd:30:64:f5:e1: c9:2e:5a:f5:6c:64:aa:f5:58:72:ad:4b:39:32:f0:af:65:13: a3:43:02:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZkeFAw+kz+91JjOGe0xgQP6YVSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FG MTFFMEU2RTAeFw0yNjA2MTMxNDAxNDBaFw0yNjA2MTQxNjIwNDBaMDMxMTAvBgNV BAMTKDlCOEJGMjcwRTk4MDk0NUYzNEE1ODM1Njc2NjdDMDEyNjA2QkFDMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUKPXWO//QwHNo3X1HzOO9thVP O/uiFwyy4kJd+ulRJA65GGsVZPd5TZ7ninDSBPnnzOr0EUcEryJgUJ/85cCFZPHk pclO8zB7uJBO6eVqp6zCw/16uY8lQ2wPb2gdSk0TqAWaiTuibmyu+0yfWtXNuMZU KjJIeXLU6bBlPtTB95jJ/qkXNRyJ8f6fgzGBKsvy7bjqH2ZpZbiWHh3BdxKIDS7r vYMkm/N6cRVQETv89ngQuKr6dJhKiBZvpG2v0RpWag21daPqRnEPxKjQIEkdwVpy jD5TVzM53eULz8c3aHNviEFKr5erjVMn73FCd/JBT9PrgPZEcKQfK7GTQYYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm4vycOmAlF80pYNWdmfAEmBrrCowHwYDVR0j BBgwFoAUBFIreDd06JaaJTt5yb2LevEeDm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODliODYwNGYtMzk1YS00MmJlLWI5OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgz Nzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FGMTFFMEU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDUyMkI3ODM3NzRFODk2OUEyNTNCNzlDOUJEOEI3QUYxMUUw RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhC N0FGMTFFMEU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJR93FZ20NUTWnT/wfkjVO4GZI01QSsiWpbU 1XQ2c3dxpK5ubTgNKpfNS4QnVkMCFDYBxWNppf34L8rHVwS/80yRI7D7tlRZTgYd puFE0u/hNF2PZqlMU44pFqQInmsy2fDA0JDHCVecenqsjAEXBJVkrY8HY0tohKuM OTstz4Ia0fveG43CpqUkD7ghfOv2vzxbAlPwYdEfsN9VTqUHCJUsHUfss69hlVb4 U5WX3D/2LE3nPNrq7pSuGTCTKyllHLAb+PQZdnA0MVxpBTYPvlQgm9X04n5ed1FX VcoOu4eWil98tEb9MGT14ckuWvVsZKr1WHKtSzky8K9lE6NDAlY= -----END CERTIFICATE-----Generated at Sat Jun 13 21:19:37 2026 by rpki-client