$ rpki-client -vvf rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft File: 873409842DEE948D3DE05C618194C87A259E04BF.mft (raw, json) Hash identifier: ODSHMfTz9hfua7HL3kM8A0S4QP7hECYLKrF8fBxWjko= Subject key identifier: 47:D7:9E:49:29:11:D8:68:50:7F:FE:0B:D5:A5:00:5B:8D:C3:C2:FE Authority key identifier: 87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF Certificate issuer: /CN=873409842DEE948D3DE05C618194C87A259E04BF Certificate serial: 5893C20BA1E698904B01939252BB59B19CB3171F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 02:52:33 +0000 Manifest this update: Sat 13 Jun 2026 02:47:33 +0000 Manifest next update: Sun 14 Jun 2026 04:06:33 +0000 Files and hashes: 1: 873409842DEE948D3DE05C618194C87A259E04BF.crl (hash: kC/T1mJtsJxbcIxox68gscrzwN03WEnAvkiihZbREVs=) 2: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: OzhJdHffqoSTJ5pFjxmQ04VEvXqHaJWqkM8YRHVnaeQ=) 3: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: grkHY3zf57XsShC3GloC/Ysy8CRxkBA2HYvszXntAaM=) 4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: M8QTZuDsRpJ1yY06WkCYeFwFPm5+TLSWxZVTx0+FX3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:93:c2:0b:a1:e6:98:90:4b:01:93:92:52:bb:59:b1:9c:b3:17:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873409842DEE948D3DE05C618194C87A259E04BF Validity Not Before: Jun 13 02:47:33 2026 GMT Not After : Jun 14 04:06:33 2026 GMT Subject: CN=47D79E492911D868507FFE0BD5A5005B8DC3C2FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:20:03:11:e4:17:ec:5c:c9:75:cc:11:05: 1e:ab:7b:be:30:08:b0:4f:5f:70:0e:b8:8e:e3:4e: bd:53:32:e8:68:4a:66:b0:33:e9:45:fd:9c:2a:06: 7b:15:dc:b5:9e:c6:6d:fb:5f:20:60:61:fa:8a:93: 31:87:53:05:72:12:e4:e0:f0:6d:f4:f1:9d:5b:c8: b1:2f:c9:f9:a7:d6:92:1f:f5:b8:d8:5b:5f:47:c0: c5:f8:1e:72:15:65:05:27:23:43:36:d6:82:da:f4: ed:e4:db:a0:30:79:bc:48:8c:4f:d3:bf:e2:24:e2: 0c:e0:34:01:ae:bb:97:e6:7a:5e:ec:53:1e:23:84: 88:eb:19:fd:31:06:69:35:d7:e5:a1:77:00:6c:46: 3f:7e:55:d4:52:53:35:57:67:a6:b1:3b:52:5c:5a: 78:68:cb:6b:a8:ca:ea:ad:d4:8f:e4:0f:67:ec:7b: 36:30:2f:25:c2:db:1f:be:21:1a:c7:2a:28:38:53: 28:fb:d4:ed:0b:8e:f9:65:c5:40:bf:2f:c8:be:78: e2:49:5b:7b:58:74:9c:d1:c5:bb:ef:54:04:a3:d1: e2:41:bd:6f:cf:dc:62:d5:c1:91:16:6f:5a:d1:9c: cc:d3:40:10:2d:2f:f0:dd:3d:25:ae:6e:95:af:fa: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D7:9E:49:29:11:D8:68:50:7F:FE:0B:D5:A5:00:5B:8D:C3:C2:FE X509v3 Authority Key Identifier: keyid:87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1c:49:ce:4a:99:c7:b8:59:e9:02:49:11:e9:c6:d0:fa:ff: 04:12:8c:6a:87:0f:f3:36:e6:0d:03:ac:59:44:df:30:2c:df: bc:67:90:4e:5e:ca:0e:05:f7:a2:71:31:74:84:97:f1:36:9e: b3:46:21:b5:f0:d3:f6:16:71:1b:57:e9:aa:82:ba:31:23:6d: 72:ed:e4:1b:78:bd:7b:cc:37:65:6f:0a:e6:cb:94:f5:b4:37: 06:0d:2f:37:36:18:35:c5:f1:b2:47:1a:ce:e1:e6:b6:dd:07: c0:3f:57:51:87:9e:c1:30:78:8c:f9:77:21:2e:aa:bd:19:ab: 05:a8:c2:78:7c:30:67:46:f0:1d:99:be:b6:ac:0a:8a:33:86: 7e:fb:62:8e:cc:a0:27:19:de:70:eb:a7:f6:f3:53:bd:6a:61: a2:9c:bc:1d:ff:bf:58:f6:f9:77:3f:95:31:8a:55:75:f3:bf: 76:04:68:25:b3:05:b9:c7:60:75:c6:0e:97:ed:68:b6:3a:92: 88:bf:ea:eb:8b:c1:da:5a:8f:8c:14:53:07:9c:d0:94:c5:8d: 2c:cf:56:f5:1c:dd:99:d7:00:93:1b:5d:86:d1:90:5a:de:31: d2:24:5a:3c:83:48:ff:42:f8:02:cd:a1:78:ed:1a:dd:77:c5: 85:de:47:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWJPCC6HmmJBLAZOSUrtZsZyzFx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4N0Ey NTlFMDRCRjAeFw0yNjA2MTMwMjQ3MzNaFw0yNjA2MTQwNDA2MzNaMDMxMTAvBgNV BAMTKDQ3RDc5RTQ5MjkxMUQ4Njg1MDdGRkUwQkQ1QTUwMDVCOERDM0MyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XiADEeQX7FzJdcwRBR6re74w CLBPX3AOuI7jTr1TMuhoSmawM+lF/ZwqBnsV3LWexm37XyBgYfqKkzGHUwVyEuTg 8G308Z1byLEvyfmn1pIf9bjYW19HwMX4HnIVZQUnI0M21oLa9O3k26AwebxIjE/T v+Ik4gzgNAGuu5fmel7sUx4jhIjrGf0xBmk11+WhdwBsRj9+VdRSUzVXZ6axO1Jc Wnhoy2uoyuqt1I/kD2fsezYwLyXC2x++IRrHKig4Uyj71O0LjvllxUC/L8i+eOJJ W3tYdJzRxbvvVASj0eJBvW/P3GLVwZEWb1rRnMzTQBAtL/DdPSWubpWv+tSVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR9eeSSkR2GhQf/4L1aUAW43Dwv4wHwYDVR0j BBgwFoAUhzQJhC3ulI094FxhgZTIeiWeBL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRjZjQwNjctYTY5ZC00OTA4LWJlZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQy REVFOTQ4RDNERTA1QzYxODE5NEM4N0EyNTlFMDRCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzM0MDk4NDJERUU5NDhEM0RFMDVDNjE4MTk0Qzg3QTI1OUUw NEJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4 N0EyNTlFMDRCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8cSc5Kmce4WekCSRHpxtD6/wQSjGqHD/M2 5g0DrFlE3zAs37xnkE5eyg4F96JxMXSEl/E2nrNGIbXw0/YWcRtX6aqCujEjbXLt 5Bt4vXvMN2VvCubLlPW0NwYNLzc2GDXF8bJHGs7h5rbdB8A/V1GHnsEweIz5dyEu qr0ZqwWownh8MGdG8B2ZvrasCoozhn77Yo7MoCcZ3nDrp/bzU71qYaKcvB3/v1j2 +Xc/lTGKVXXzv3YEaCWzBbnHYHXGDpftaLY6koi/6uuLwdpaj4wUUwec0JTFjSzP VvUc3ZnXAJMbXYbRkFreMdIkWjyDSP9C+ALNoXjtGt13xYXeR6k= -----END CERTIFICATE-----Generated at Sat Jun 13 09:56:40 2026 by rpki-client