$ rpki-client -vvf rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft File: D8435659F33EE1F7005A21C1387F49D353431808.mft (raw, json) Hash identifier: c5EaSMSGkU74RJ8e8/+VSdK4CnYNNoEddTTVY6EeRf4= Subject key identifier: 03:3B:DC:1C:E3:AF:FF:05:E6:58:4C:D6:45:D5:48:A6:8E:24:80:76 Authority key identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 Certificate issuer: /CN=D8435659F33EE1F7005A21C1387F49D353431808 Certificate serial: 6934C3F48AB1B8E4A2B483CF9E91BEAC87C3F651 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 11:33:36 +0000 Manifest this update: Sat 13 Jun 2026 11:28:36 +0000 Manifest next update: Sun 14 Jun 2026 13:41:36 +0000 Files and hashes: 1: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: DR008bVSYXJm82RMo+BhRQvkIWKNDedVtmRpjzWrQic=) 2: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: nwbiSYQUIY7u5484W08oCWpHX2RPW6F76Z3A6cL7rsY=) 3: 3130332e3234372e31322e302f32342d3234203d3e203535363935.roa (hash: ATVTOuHtUSrfebW1xU18JBrcd7qLtJdgSsLLVk33uGM=) 4: 3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa (hash: z4cKVwkKHopCzCusKw3/HTDbOMxbEcb0WxL0/PEi5qo=) 5: 3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa (hash: blqaAQUh+/Ci23PSpz6kWjhOXoOQ7V7lhdmAJgQyDKE=) 6: D8435659F33EE1F7005A21C1387F49D353431808.crl (hash: bHZqh7u4tnE+hygXKgK4uS+SPEtqabh7fpjNqlJO178=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:34:c3:f4:8a:b1:b8:e4:a2:b4:83:cf:9e:91:be:ac:87:c3:f6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8435659F33EE1F7005A21C1387F49D353431808 Validity Not Before: Jun 13 11:28:36 2026 GMT Not After : Jun 14 13:41:36 2026 GMT Subject: CN=033BDC1CE3AFFF05E6584CD645D548A68E248076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8c:e9:bc:b6:12:3c:31:8a:a6:f2:74:49:d1: e7:0c:ce:c6:ac:67:07:63:aa:7c:21:e5:f7:23:bc: 11:2b:12:06:c9:e8:2b:a9:8d:01:12:20:c9:85:62: b3:75:57:e3:4b:2b:f8:cb:e1:49:67:76:fa:0f:64: 3c:fd:95:eb:d7:a1:3b:5a:af:3b:29:15:d2:90:ba: 31:d2:3a:46:80:50:9d:3d:b6:64:a7:12:78:2b:d9: cf:c5:76:ba:af:e6:9c:b6:a8:a5:f3:3e:95:4a:2f: cc:12:2b:d3:6a:29:ee:c3:18:81:f5:f0:31:cc:70: 76:45:54:89:5f:7f:0c:ef:7c:5b:a3:c8:7d:3b:b9: 63:a4:68:79:cf:9e:83:c6:63:63:24:26:22:69:9c: 8f:15:03:4c:a6:d1:e5:ba:cf:60:55:0b:52:82:e0: c5:3e:01:6a:c4:27:52:99:90:78:55:85:65:03:92: 3a:d1:3f:0b:fa:2e:94:2c:8b:2b:60:05:94:51:f5: 46:39:6a:82:6a:3d:5e:28:01:cd:83:a2:21:50:d5: f3:de:db:13:87:f9:19:1d:55:71:c2:96:d9:9c:aa: 85:63:66:9e:89:85:4f:6f:91:a0:68:44:c2:22:75: 4b:e3:17:6c:87:43:d4:45:c4:3f:e5:75:7f:fa:7f: 56:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3B:DC:1C:E3:AF:FF:05:E6:58:4C:D6:45:D5:48:A6:8E:24:80:76 X509v3 Authority Key Identifier: keyid:D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:23:bc:52:75:6c:a9:b8:10:cf:b7:a8:c9:a5:62:4b:ed:2c: a8:3f:61:e0:3e:b4:4d:19:b0:5e:1d:09:bb:cf:c9:ef:c5:8f: 6b:5f:08:62:81:8d:03:4b:60:88:05:a4:e7:a2:d9:6f:4a:28: dd:dd:de:53:6e:75:08:34:66:1e:0a:63:92:d5:02:21:04:46: fe:7f:72:c2:89:1c:12:a3:f7:50:6a:49:65:52:6d:28:3a:49: 05:94:c4:4f:28:57:a6:ea:f4:cf:dd:4c:fc:97:0d:d1:00:35: ad:a8:aa:49:dd:b9:66:36:a6:d7:3b:71:05:02:80:da:ea:be: 0e:43:ca:42:29:b1:57:55:97:57:7e:c1:01:fa:bc:19:47:1f: 6b:51:de:7b:d7:70:62:bf:11:59:77:89:ab:70:ca:9b:1c:fb: e2:f3:a4:f4:dc:55:6d:70:bb:a6:84:42:d7:dc:05:40:1b:14: d5:b6:9f:f1:f1:a5:55:03:14:cf:14:b6:b0:25:30:31:3c:aa: 67:f2:15:dc:fc:0a:41:68:33:b5:c4:a2:0e:ff:ea:68:14:0d: ce:2e:d1:4d:f3:43:7f:4b:db:13:66:5a:29:3c:6b:08:e5:51: 41:16:32:99:e2:97:b0:8b:74:a4:cf:42:98:63:7c:a9:44:ea: bc:f1:9a:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaTTD9IqxuOSitIPPnpG+rIfD9lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1 MzQzMTgwODAeFw0yNjA2MTMxMTI4MzZaFw0yNjA2MTQxMzQxMzZaMDMxMTAvBgNV BAMTKDAzM0JEQzFDRTNBRkZGMDVFNjU4NENENjQ1RDU0OEE2OEUyNDgwNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjOm8thI8MYqm8nRJ0ecMzsas Zwdjqnwh5fcjvBErEgbJ6CupjQESIMmFYrN1V+NLK/jL4UlndvoPZDz9levXoTta rzspFdKQujHSOkaAUJ09tmSnEngr2c/Fdrqv5py2qKXzPpVKL8wSK9NqKe7DGIH1 8DHMcHZFVIlffwzvfFujyH07uWOkaHnPnoPGY2MkJiJpnI8VA0ym0eW6z2BVC1KC 4MU+AWrEJ1KZkHhVhWUDkjrRPwv6LpQsiytgBZRR9UY5aoJqPV4oAc2DoiFQ1fPe 2xOH+RkdVXHCltmcqoVjZp6JhU9vkaBoRMIidUvjF2yHQ9RFxD/ldX/6f1Y3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAzvcHOOv/wXmWEzWRdVIpo4kgHYwHwYDVR0j BBgwFoAU2ENWWfM+4fcAWiHBOH9J01NDGAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI3YTZmMzQtMWI2ZS00ZTkyLWIyZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlG MzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1MzQzMTgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODQzNTY1OUYzM0VFMUY3MDA1QTIxQzEzODdGNDlEMzUzNDMx ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5 RDM1MzQzMTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIjvFJ1bKm4EM+3qMmlYkvtLKg/YeA+tE0Z sF4dCbvPye/Fj2tfCGKBjQNLYIgFpOei2W9KKN3d3lNudQg0Zh4KY5LVAiEERv5/ csKJHBKj91BqSWVSbSg6SQWUxE8oV6bq9M/dTPyXDdEANa2oqknduWY2ptc7cQUC gNrqvg5DykIpsVdVl1d+wQH6vBlHH2tR3nvXcGK/EVl3iatwypsc++LzpPTcVW1w u6aEQtfcBUAbFNW2n/HxpVUDFM8UtrAlMDE8qmfyFdz8CkFoM7XEog7/6mgUDc4u 0U3zQ39L2xNmWik8awjlUUEWMpnil7CLdKTPQphjfKlE6rzxmrY= -----END CERTIFICATE-----Generated at Sun Jun 14 05:55:19 2026 by rpki-client