$ rpki-client -vvf rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft File: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft (raw, json) Hash identifier: DBRFgvDxHIr8Tou3v+XbxouVf8uL7OwECONdhbPIR4s= Subject key identifier: A9:E1:49:D0:70:9E:D0:C5:7F:99:58:10:5C:E0:7C:9D:3D:40:F6:CB Authority key identifier: 1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 Certificate issuer: /CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Certificate serial: 75B230328CC66CA0B393215A9AF2C356A7A8B942 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 00:50:25 +0000 Manifest this update: Sat 13 Jun 2026 00:45:25 +0000 Manifest next update: Sun 14 Jun 2026 04:14:25 +0000 Files and hashes: 1: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl (hash: iID9x2hpCi0TimxVQoxVb9W4pzKqplrBUXwuAVB9WHw=) 2: 3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa (hash: 8ZC6zz9Re3rZ3m+opQHEHUjBM1e+RO/tPdv5dWkLhp4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 04:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b2:30:32:8c:c6:6c:a0:b3:93:21:5a:9a:f2:c3:56:a7:a8:b9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Validity Not Before: Jun 13 00:45:25 2026 GMT Not After : Jun 14 04:14:25 2026 GMT Subject: CN=A9E149D0709ED0C57F9958105CE07C9D3D40F6CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:00:53:95:f5:95:ca:1e:09:e8:f3:f7:62: 1e:41:d3:c6:15:2e:5a:11:d8:13:9b:46:2c:b8:cf: 6e:64:d2:e3:25:30:d7:67:1a:4b:f9:27:3b:c1:b8: af:63:a8:7b:ad:b4:8f:76:6e:50:36:16:0c:04:e3: 2d:7a:60:48:16:44:e0:1c:97:e3:99:c5:2e:04:b2: b0:6c:e6:53:9c:e8:2c:dc:89:61:37:1f:93:11:d3: 16:87:6c:a9:e6:21:4c:f9:5c:cc:39:10:f5:bd:ca: 11:78:79:79:72:ca:7b:0e:b7:00:44:0d:c5:a2:7b: ad:25:56:55:1b:5f:78:04:23:49:4d:7b:1e:32:c9: 0c:91:8f:17:35:fd:53:83:31:7a:11:06:67:2c:43: f9:26:5d:4f:d0:35:3d:26:d8:e7:74:ce:d5:23:40: ed:5e:a1:93:44:5f:cd:bb:84:c3:22:6b:d7:4b:a9: 65:57:3f:74:6d:14:bd:38:d8:c2:2a:c3:52:f0:db: 77:e3:77:69:37:f0:95:4f:e4:79:98:6e:27:4e:b9: d0:26:a0:9c:26:8b:e6:33:1d:ef:4c:80:30:75:90: 31:ad:1e:24:61:e0:26:26:ca:60:77:17:c1:4e:30: 0c:1a:f7:85:4c:75:72:1e:d7:36:2d:77:ec:ab:82: 9a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E1:49:D0:70:9E:D0:C5:7F:99:58:10:5C:E0:7C:9D:3D:40:F6:CB X509v3 Authority Key Identifier: keyid:1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:db:af:b0:0f:0d:6f:bd:78:f4:83:17:dc:d9:41:51:d2:78: 2c:c1:98:2f:26:7c:4f:8c:d4:32:5b:af:fa:4a:7e:08:eb:a3: eb:f4:a7:a6:6d:a5:27:6c:ad:f1:b0:06:4e:1a:5a:80:a0:d2: e5:93:cb:6f:55:04:d4:aa:58:c4:6b:a6:fd:11:06:2e:d6:e1: e9:9e:31:a4:39:b5:c2:1c:12:75:bd:4a:c7:ee:92:f1:e1:e7: a6:fd:21:53:28:d0:6f:27:c7:6e:f7:69:12:b1:f3:d0:0d:09: 38:63:f2:c0:7c:6f:87:90:54:21:5a:99:c7:97:a6:1e:8b:d4: d3:77:bd:b0:39:c8:0a:0a:46:c6:19:0a:6f:33:db:98:a8:74: c4:49:f6:d7:18:05:9e:f6:b5:68:0d:c6:55:a2:34:8c:0e:94: 8d:8d:fa:91:5b:0f:8b:16:fe:27:b6:65:6c:79:28:08:9e:eb: a3:61:1b:16:11:0a:c7:81:58:61:10:ac:5e:09:3c:91:8c:5f: 46:a1:6d:13:3f:9f:02:ab:dd:80:e1:7b:81:15:d1:b7:a4:dc: 06:67:a8:5e:45:59:c5:b6:41:e7:2d:51:ad:b1:cb:43:20:8d: 93:f4:95:a5:57:c8:5a:93:1a:eb:a7:ff:48:4c:2f:ab:f1:6e: ff:0e:21:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbIwMozGbKCzkyFamvLDVqeouUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRF OUY0QkI4OTAeFw0yNjA2MTMwMDQ1MjVaFw0yNjA2MTQwNDE0MjVaMDMxMTAvBgNV BAMTKEE5RTE0OUQwNzA5RUQwQzU3Rjk5NTgxMDVDRTA3QzlEM0Q0MEY2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBwBTlfWVyh4J6PP3Yh5B08YV LloR2BObRiy4z25k0uMlMNdnGkv5JzvBuK9jqHuttI92blA2FgwE4y16YEgWROAc l+OZxS4EsrBs5lOc6CzciWE3H5MR0xaHbKnmIUz5XMw5EPW9yhF4eXlyynsOtwBE DcWie60lVlUbX3gEI0lNex4yyQyRjxc1/VODMXoRBmcsQ/kmXU/QNT0m2Od0ztUj QO1eoZNEX827hMMia9dLqWVXP3RtFL042MIqw1Lw23fjd2k38JVP5HmYbidOudAm oJwmi+YzHe9MgDB1kDGtHiRh4CYmymB3F8FOMAwa94VMdXIe1zYtd+yrgpqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqeFJ0HCe0MV/mVgQXOB8nT1A9sswHwYDVR0j BBgwFoAUGg2tJFdmrrGbsE9ojwACVOn0u4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4NDMyY2QtYTA0Ny00ODViLTgxNDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1 NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRFOUY0QkI4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTBEQUQyNDU3NjZBRUIxOUJCMDRGNjg4RjAwMDI1NEU5RjRC Qjg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4NDMyY2QtYTA0Ny00ODViLTgx NDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAy NTRFOUY0QkI4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzbr7APDW+9ePSDF9zZQVHSeCzBmC8mfE+M 1DJbr/pKfgjro+v0p6ZtpSdsrfGwBk4aWoCg0uWTy29VBNSqWMRrpv0RBi7W4eme MaQ5tcIcEnW9SsfukvHh56b9IVMo0G8nx273aRKx89ANCThj8sB8b4eQVCFamceX ph6L1NN3vbA5yAoKRsYZCm8z25iodMRJ9tcYBZ72tWgNxlWiNIwOlI2N+pFbD4sW /ie2ZWx5KAie66NhGxYRCseBWGEQrF4JPJGMX0ahbRM/nwKr3YDhe4EV0bek3AZn qF5FWcW2QectUa2xy0MgjZP0laVXyFqTGuun/0hML6vxbv8OIS0= -----END CERTIFICATE-----Generated at Sat Jun 13 20:16:55 2026 by rpki-client