$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft File: D88374740C8E344956042586CFB98762292C9BED.mft (raw, json) Hash identifier: chZTQ22braadwQN18+Sa8lGDEMAklcw64jyKFK2a7AQ= Subject key identifier: 39:5A:8F:AF:B9:98:A1:9E:E2:FD:76:6C:73:D9:E2:1C:A3:06:A1:95 Authority key identifier: D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED Certificate issuer: /CN=D88374740C8E344956042586CFB98762292C9BED Certificate serial: 1035F046AE4269ED16D25DE47E76B99042C53C72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft Manifest number: 39 Signing time: Sun 14 Jun 2026 01:09:19 +0000 Manifest this update: Sun 14 Jun 2026 01:04:19 +0000 Manifest next update: Mon 15 Jun 2026 03:56:19 +0000 Files and hashes: 1: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: pi4GpQEqsy5D0pG1/itP4Rd3gKkO+zB1DmoOxM7Tnmw=) 2: D88374740C8E344956042586CFB98762292C9BED.crl (hash: qEscoHs8JEMJzsbsLiSo15TsCUUPP/FyDDSm8SF+t8I=) 3: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: 5Is2TaaRgt6RZbxF5fTOe8DOSBDKMRf8+8dK8LxpkgM=) 4: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: lP4x2eURdSlbv1g2ymW9KzMnGg6tWIQJ2QaIxsnxvtg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:35:f0:46:ae:42:69:ed:16:d2:5d:e4:7e:76:b9:90:42:c5:3c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88374740C8E344956042586CFB98762292C9BED Validity Not Before: Jun 14 01:04:19 2026 GMT Not After : Jun 15 03:56:19 2026 GMT Subject: CN=395A8FAFB998A19EE2FD766C73D9E21CA306A195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4e:3a:31:9f:5c:22:2f:4d:f9:83:fd:57:80: 2f:77:19:75:2c:14:06:96:0a:e0:65:99:06:b3:33: d5:42:76:b5:3f:37:c6:0d:a1:d2:94:70:09:df:18: 44:19:2f:de:03:c5:61:88:c3:d4:0a:6a:8b:5a:d8: 6c:b2:0f:09:af:35:f6:8c:20:ee:58:95:b8:f7:7f: 87:20:a5:5c:e8:04:49:86:4d:f7:5e:98:c6:f2:c0: 2d:61:84:b2:e5:ea:6e:5b:3c:48:9f:78:1d:ef:55: c2:29:02:5e:88:8d:65:e5:2d:b7:49:c1:55:45:43: 4a:03:5c:11:03:d5:11:19:fb:6c:4f:6b:09:58:7b: 9c:41:a5:ec:8e:51:df:53:5f:71:f2:83:35:3b:69: 85:95:db:cc:b8:64:0f:e1:ed:78:1b:60:38:89:3b: f6:6c:35:75:ef:70:9d:fd:6a:c3:9d:7e:d0:70:fb: 9b:d9:70:20:bc:de:a5:ae:54:6e:e7:ce:a2:16:0d: 7b:01:d7:ae:01:2a:ed:ed:de:1e:83:a8:42:cb:5c: 0e:c1:1c:38:69:93:01:84:cf:9c:67:7f:17:bf:e9: 3c:bd:b8:a0:34:6a:8b:a7:7b:d5:5e:2f:5b:b3:9a: 93:72:6a:07:28:da:07:cd:cc:d8:a2:bf:34:a9:43: 14:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5A:8F:AF:B9:98:A1:9E:E2:FD:76:6C:73:D9:E2:1C:A3:06:A1:95 X509v3 Authority Key Identifier: keyid:D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:20:4b:98:aa:d0:fc:db:d3:9e:a7:35:42:9d:d5:b4:7c:66: 6c:50:32:af:bf:f7:b2:10:50:5e:2a:d4:c9:5b:91:42:f5:fc: 36:8d:f2:97:ff:09:41:d4:d1:2a:de:a5:04:ef:0f:de:6c:c5: c7:c3:ce:84:0c:74:79:fd:a0:d0:b1:2e:d1:c8:bf:1c:1e:dc: 90:b9:8e:db:db:25:05:b5:b1:d1:2d:76:20:bb:e3:71:99:ab: b0:5a:af:45:0a:d5:ef:7d:47:bf:37:da:93:1d:7a:98:09:93: f7:c9:72:c9:a1:e7:6b:e7:70:f2:34:b0:6f:fa:18:e6:38:c2: 2e:ee:85:dc:00:3c:e1:e2:ed:29:93:26:25:e2:4e:50:01:ee: 03:5c:29:7c:11:a9:1f:29:46:1e:19:de:37:cc:bd:25:17:22: 40:b9:e7:d3:52:a5:38:30:4f:ea:34:ab:2f:01:a4:63:ae:05: ba:0b:2e:a2:f2:64:8b:7f:8f:7f:b7:6a:78:7f:43:b9:8a:61: 22:24:cf:89:ab:f6:72:f5:6d:e5:d8:ab:ac:11:14:a9:eb:2e: 02:c2:cc:7e:e4:f7:c8:d2:e4:df:e6:36:61:5b:73:0b:b2:fb: 91:aa:a9:b2:2f:c0:f7:67:11:80:e6:78:1e:4a:61:25:4c:c8: 57:6d:92:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEDXwRq5Cae0W0l3kfna5kELFPHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIy OTJDOUJFRDAeFw0yNjA2MTQwMTA0MTlaFw0yNjA2MTUwMzU2MTlaMDMxMTAvBgNV BAMTKDM5NUE4RkFGQjk5OEExOUVFMkZENzY2QzczRDlFMjFDQTMwNkExOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQTjoxn1wiL035g/1XgC93GXUs FAaWCuBlmQazM9VCdrU/N8YNodKUcAnfGEQZL94DxWGIw9QKaota2GyyDwmvNfaM IO5Ylbj3f4cgpVzoBEmGTfdemMbywC1hhLLl6m5bPEifeB3vVcIpAl6IjWXlLbdJ wVVFQ0oDXBED1REZ+2xPawlYe5xBpeyOUd9TX3HygzU7aYWV28y4ZA/h7XgbYDiJ O/ZsNXXvcJ39asOdftBw+5vZcCC83qWuVG7nzqIWDXsB164BKu3t3h6DqELLXA7B HDhpkwGEz5xnfxe/6Ty9uKA0aoune9VeL1uzmpNyagco2gfNzNiivzSpQxSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOVqPr7mYoZ7i/XZsc9niHKMGoZUwHwYDVR0j BBgwFoAU2IN0dAyONElWBCWGz7mHYiksm+0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWViZTdhZDgtZTE1Yy00MDE0LWJmYjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQw QzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIyOTJDOUJFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODgzNzQ3NDBDOEUzNDQ5NTYwNDI1ODZDRkI5ODc2MjI5MkM5 QkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3 NjIyOTJDOUJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAgS5iq0Pzb056nNUKd1bR8ZmxQMq+/97IQ UF4q1MlbkUL1/DaN8pf/CUHU0SrepQTvD95sxcfDzoQMdHn9oNCxLtHIvxwe3JC5 jtvbJQW1sdEtdiC743GZq7Bar0UK1e99R7832pMdepgJk/fJcsmh52vncPI0sG/6 GOY4wi7uhdwAPOHi7SmTJiXiTlAB7gNcKXwRqR8pRh4Z3jfMvSUXIkC559NSpTgw T+o0qy8BpGOuBboLLqLyZIt/j3+3anh/Q7mKYSIkz4mr9nL1beXYq6wRFKnrLgLC zH7k98jS5N/mNmFbcwuy+5GqqbIvwPdnEYDmeB5KYSVMyFdtkn0= -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:32 2026 by rpki-client