$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft File: C855F0A07BFEA69901C5345D79932B70E2991F5E.mft (raw, json) Hash identifier: L2CEg8R2AMdjmWYquA0tqm7/x2kYE9+Y2B8O+4KagTs= Subject key identifier: C9:E9:27:79:3F:92:75:1F:56:D4:28:5C:9B:C2:13:D9:5F:B6:62:9F Authority key identifier: C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E Certificate issuer: /CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Certificate serial: 71E4696EA20EFE3023610251F483F0CE8D658BAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 19:18:46 +0000 Manifest this update: Fri 12 Jun 2026 19:13:46 +0000 Manifest next update: Sat 13 Jun 2026 21:34:46 +0000 Files and hashes: 1: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: 6IFvIlwM6aIx7tnOnE1+rdakVYbeL0dKrUmRNu3aOIc=) 2: 3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa (hash: 8F99VevvPnC2SR7w+F2wdLh67GSWSbbQHmOucM9JJac=) 3: C855F0A07BFEA69901C5345D79932B70E2991F5E.crl (hash: tcuWmU1yEBsVkaCWgy+D4/QwfpDdcyN5goMFsDs6rW4=) 4: 3130332e3136392e3134332e302f32342d3234203d3e20323135373237.roa (hash: HMvuZA5GEygwEQ/A4E++UiWHcNENuOx/DwxIrFLrduA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e4:69:6e:a2:0e:fe:30:23:61:02:51:f4:83:f0:ce:8d:65:8b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Validity Not Before: Jun 12 19:13:46 2026 GMT Not After : Jun 13 21:34:46 2026 GMT Subject: CN=C9E927793F92751F56D4285C9BC213D95FB6629F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0a:a7:ba:50:7c:34:b9:f2:ef:7c:46:df:7f: 5c:ad:a7:68:39:e5:ea:5d:4b:b2:c1:9d:b4:ae:70: d6:49:55:9a:72:3f:a3:68:5b:0a:a5:a1:ea:28:78: 14:f1:ad:86:fc:15:3b:40:04:80:e9:71:38:cd:99: 66:84:ea:7e:19:ef:73:0b:8c:0a:0e:c0:45:42:1b: 1e:50:9a:88:b7:ba:80:be:ad:72:ee:c0:c5:83:c9: 30:be:8b:37:20:e3:ce:36:8c:1e:00:7d:05:8f:70: 5a:42:03:0e:06:38:c0:a1:50:58:d0:d1:b6:f0:c2: ee:9b:3c:45:79:02:80:72:2d:6c:19:c7:7f:17:75: c1:39:7d:5c:2c:5b:e1:46:88:ca:ff:b8:ee:6b:95: 90:c2:82:3b:71:41:5a:3a:63:43:7a:10:23:71:7c: 4c:d0:6a:fe:e0:cc:ad:e3:48:13:c0:63:c3:f0:0e: db:44:0e:97:6c:7d:8a:88:52:39:9d:4d:91:f9:8c: cf:9f:e3:d3:68:32:33:72:81:9c:82:5e:53:90:44: 6a:f7:6e:30:e7:50:5a:e8:d1:4c:b1:17:48:1c:41: 8e:7a:b5:57:a8:8d:91:26:a2:c1:5b:89:52:e6:81: ac:6f:a2:6b:1b:a1:e3:11:f6:a8:65:2c:08:fe:06: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E9:27:79:3F:92:75:1F:56:D4:28:5C:9B:C2:13:D9:5F:B6:62:9F X509v3 Authority Key Identifier: keyid:C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:89:17:7d:6d:14:87:f1:ee:cd:ef:59:a3:22:02:6c:30:ea: 53:04:6d:0e:22:e4:f0:4c:54:a7:44:c3:3c:66:e9:54:7e:06: 1e:24:8c:57:fd:6e:31:28:32:70:dd:10:76:88:5e:1f:05:47: 53:41:67:38:4e:67:44:d1:bb:f5:ab:13:f0:e3:c6:14:6f:4c: e3:e2:ac:38:c1:f5:5f:a3:46:6f:19:89:bc:a0:9f:69:31:ac: bb:97:6d:f2:54:89:c6:61:4e:89:a8:11:37:2a:c0:7d:0c:d3: 56:a2:e9:27:df:7d:e5:60:0a:a9:8d:30:88:21:34:33:64:4f: 41:5b:48:32:c8:18:aa:b1:d4:75:8e:eb:b1:5e:50:4f:5d:93: 86:6d:2c:b7:41:05:e8:5b:8e:77:31:21:1b:49:48:8a:23:d7: 1a:0f:ad:ee:8e:7e:d2:0d:c3:df:4b:97:1f:44:69:c2:f2:ac: 36:94:91:5b:b1:ca:a1:18:c7:10:ea:cd:cb:0f:7d:5d:7b:12: 45:77:f7:cb:12:0c:ba:e2:7e:dc:1c:eb:c5:f7:a6:64:5c:0e: 90:5a:a4:65:af:47:8f:b1:4e:34:11:53:3b:26:58:d0:ee:0c: 34:d1:d6:42:56:3f:01:ab:3a:3d:02:15:90:7d:62:c8:50:85: e7:bc:03:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUceRpbqIO/jAjYQJR9IPwzo1li64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBF Mjk5MUY1RTAeFw0yNjA2MTIxOTEzNDZaFw0yNjA2MTMyMTM0NDZaMDMxMTAvBgNV BAMTKEM5RTkyNzc5M0Y5Mjc1MUY1NkQ0Mjg1QzlCQzIxM0Q5NUZCNjYyOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCqe6UHw0ufLvfEbff1ytp2g5 5epdS7LBnbSucNZJVZpyP6NoWwqloeooeBTxrYb8FTtABIDpcTjNmWaE6n4Z73ML jAoOwEVCGx5Qmoi3uoC+rXLuwMWDyTC+izcg4842jB4AfQWPcFpCAw4GOMChUFjQ 0bbwwu6bPEV5AoByLWwZx38XdcE5fVwsW+FGiMr/uO5rlZDCgjtxQVo6Y0N6ECNx fEzQav7gzK3jSBPAY8PwDttEDpdsfYqIUjmdTZH5jM+f49NoMjNygZyCXlOQRGr3 bjDnUFro0UyxF0gcQY56tVeojZEmosFbiVLmgaxvomsboeMR9qhlLAj+Bhi1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyekneT+SdR9W1Chcm8IT2V+2Yp8wHwYDVR0j BBgwFoAUyFXwoHv+ppkBxTRdeZMrcOKZH14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZkZTFhOGUtYzJiOC00OTk2LTk0OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3 QkZFQTY5OTAxQzUzNDVENzk5MzJCNzBFMjk5MUY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODU1RjBBMDdCRkVBNjk5MDFDNTM0NUQ3OTkzMkI3MEUyOTkx RjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvQzg1NUYwQTA3QkZFQTY5OTAxQzUzNDVENzk5MzJC NzBFMjk5MUY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqJF31tFIfx7s3vWaMiAmww6lMEbQ4i5PBM VKdEwzxm6VR+Bh4kjFf9bjEoMnDdEHaIXh8FR1NBZzhOZ0TRu/WrE/DjxhRvTOPi rDjB9V+jRm8Zibygn2kxrLuXbfJUicZhTomoETcqwH0M01ai6SfffeVgCqmNMIgh NDNkT0FbSDLIGKqx1HWO67FeUE9dk4ZtLLdBBehbjncxIRtJSIoj1xoPre6OftIN w99Llx9EacLyrDaUkVuxyqEYxxDqzcsPfV17EkV398sSDLriftwc68X3pmRcDpBa pGWvR4+xTjQRUzsmWNDuDDTR1kJWPwGrOj0CFZB9YshQhee8A/s= -----END CERTIFICATE-----Generated at Sat Jun 13 10:37:41 2026 by rpki-client