$ rpki-client -vvf rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft File: 4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft (raw, json) Hash identifier: BhMYN7Q966Na0FCXRaUfo6c7MMPz9+zakp+859Mv3/8= Subject key identifier: 69:22:8B:0D:C5:74:EC:61:81:36:C5:DA:D2:15:05:59:C6:AD:D5:36 Authority key identifier: 41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5 Certificate issuer: /CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5 Certificate serial: 53C3050BAF1C7C1D87757B95D8301FB6A9537502 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 20:08:36 +0000 Manifest this update: Tue 16 Jun 2026 20:03:36 +0000 Manifest next update: Thu 18 Jun 2026 00:01:36 +0000 Files and hashes: 1: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: MIfS/eHMskBKSqBbwRfOeUTCESkdJmMT09TJQUGAcLg=) 2: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: t4tJtjdDpsJpFR/xtJD4ECgHePAHDWhC6e/Cj+1efek=) 3: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: ATgc6Id4lihO/sLAGAO1j7xGe/4awMhi2w1w0ztaLuU=) 4: 4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl (hash: Vi/yquP2szEimcNe6o+kPFp1+DZ++UaZHzM2ZbtjlkI=) 5: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: chcA0La2Ovm9yQOvdpAAt2EqYZMflbdwEaNV+8DJqdc=) 6: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: dMqa0oYO4c22L7uxBboRe6E/5z9CmS2c9aynUToZXQs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c3:05:0b:af:1c:7c:1d:87:75:7b:95:d8:30:1f:b6:a9:53:75:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4138E0AD4646D8B5B19164813105E2EC7C5AC4A5 Validity Not Before: Jun 16 20:03:36 2026 GMT Not After : Jun 18 00:01:36 2026 GMT Subject: CN=69228B0DC574EC618136C5DAD2150559C6ADD536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:56:19:cc:a2:fe:59:61:b5:63:0b:e0:4c:5c: 71:18:3b:e1:de:71:0c:b1:bb:9e:4f:18:c3:47:3d: 53:a6:63:10:7a:da:03:9b:38:ae:bf:b4:b6:e6:59: 07:fd:30:2d:a2:57:c5:fc:8d:af:41:94:d3:91:26: a9:43:cc:3b:7f:ed:a2:ba:c4:70:10:1b:fb:32:fc: 47:a9:66:c7:24:38:e1:3d:ea:e8:5f:45:d5:80:3c: 11:85:16:aa:c9:de:0e:e5:e2:a3:11:56:cc:e9:30: cc:bf:b3:2c:d7:e8:85:b3:6f:15:e0:10:a9:ad:f2: 20:40:59:89:09:ea:69:b0:60:15:b6:5c:43:1b:ce: 4c:52:43:73:47:6b:e5:25:7c:fb:38:89:7d:e6:f7: 88:2e:60:69:b7:85:3a:4a:31:5d:ec:ff:ca:02:eb: 3c:cc:9c:13:9d:b0:e5:f4:17:2e:5a:b5:10:7f:c2: b7:53:b7:19:63:12:87:81:f5:9c:70:c2:51:9c:6c: 00:55:8f:8c:79:a3:9b:09:fb:47:97:f0:ad:8d:d9: bf:ed:be:64:24:9e:2b:ea:89:ec:7d:82:e4:46:de: 7d:c7:e7:61:34:be:3e:6a:97:79:25:4d:ac:98:a7: 3e:39:d5:b5:47:c4:38:82:c9:99:ed:ed:0c:e9:f5: 6a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:22:8B:0D:C5:74:EC:61:81:36:C5:DA:D2:15:05:59:C6:AD:D5:36 X509v3 Authority Key Identifier: keyid:41:38:E0:AD:46:46:D8:B5:B1:91:64:81:31:05:E2:EC:7C:5A:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/4138E0AD4646D8B5B19164813105E2EC7C5AC4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2d:43:e1:d9:c6:5c:22:2e:7c:d8:af:a2:2d:96:8c:0c:8b: c9:40:5d:e4:bc:f4:d4:c0:52:e4:65:1a:1a:ba:26:72:89:5c: 9e:34:fe:d9:30:e6:87:33:b0:8f:4a:c7:4b:35:ea:fe:21:bf: cd:a4:9e:ed:06:a1:14:63:c6:fb:df:eb:e3:e4:20:fd:06:2e: 48:28:70:4f:3d:c6:ab:49:93:e4:b3:43:d1:29:1f:42:49:76: 9c:5d:03:d5:06:9e:54:83:ad:7d:c7:90:9e:e0:2d:27:8b:ff: 53:e0:2e:2d:05:92:e6:a3:4e:aa:3c:3d:53:21:ca:73:f4:70: 7d:e1:3d:aa:b1:af:fc:59:30:03:e6:57:7a:97:9d:89:18:c4: 09:84:9e:2c:cb:c8:d1:ae:1f:64:84:ca:c4:da:24:35:2d:8b: a0:6e:fa:42:aa:56:bf:df:89:7a:b2:94:01:b1:db:eb:8e:63: 75:b0:0c:c8:64:b6:5f:85:74:37:71:4d:60:1e:2a:4c:86:94: 07:f6:9e:92:d0:16:9b:48:59:d5:59:bc:a0:54:be:ac:0e:91: 0c:53:01:93:b4:58:93:a3:5d:11:da:31:53:3b:ee:5c:f7:71: 67:f9:2f:99:27:82:00:1e:4e:02:5d:82:05:5e:61:a6:47:c5: fa:0d:5a:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8MFC68cfB2HdXuV2DAftqlTdQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3 QzVBQzRBNTAeFw0yNjA2MTYyMDAzMzZaFw0yNjA2MTgwMDAxMzZaMDMxMTAvBgNV BAMTKDY5MjI4QjBEQzU3NEVDNjE4MTM2QzVEQUQyMTUwNTU5QzZBREQ1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcVhnMov5ZYbVjC+BMXHEYO+He cQyxu55PGMNHPVOmYxB62gObOK6/tLbmWQf9MC2iV8X8ja9BlNORJqlDzDt/7aK6 xHAQG/sy/EepZsckOOE96uhfRdWAPBGFFqrJ3g7l4qMRVszpMMy/syzX6IWzbxXg EKmt8iBAWYkJ6mmwYBW2XEMbzkxSQ3NHa+UlfPs4iX3m94guYGm3hTpKMV3s/8oC 6zzMnBOdsOX0Fy5atRB/wrdTtxljEoeB9ZxwwlGcbABVj4x5o5sJ+0eX8K2N2b/t vmQknivqiex9guRG3n3H52E0vj5ql3klTayYpz451bVHxDiCyZnt7Qzp9WotAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaSKLDcV07GGBNsXa0hUFWcat1TYwHwYDVR0j BBgwFoAUQTjgrUZG2LWxkWSBMQXi7HxaxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2RlNzE0MzctODVmYy00N2FmLTk2ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0 NjQ2RDhCNUIxOTE2NDgxMzEwNUUyRUM3QzVBQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTM4RTBBRDQ2NDZEOEI1QjE5MTY0ODEzMTA1RTJFQzdDNUFD NEE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvNDEzOEUwQUQ0NjQ2RDhCNUIxOTE2NDgxMzEwNUUy RUM3QzVBQzRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYtQ+HZxlwiLnzYr6ItlowMi8lAXeS89NTA UuRlGhq6JnKJXJ40/tkw5oczsI9Kx0s16v4hv82knu0GoRRjxvvf6+PkIP0GLkgo cE89xqtJk+SzQ9EpH0JJdpxdA9UGnlSDrX3HkJ7gLSeL/1PgLi0FkuajTqo8PVMh ynP0cH3hPaqxr/xZMAPmV3qXnYkYxAmEnizLyNGuH2SEysTaJDUti6Bu+kKqVr/f iXqylAGx2+uOY3WwDMhktl+FdDdxTWAeKkyGlAf2npLQFptIWdVZvKBUvqwOkQxT AZO0WJOjXRHaMVM77lz3cWf5L5knggAeTgJdggVeYaZHxfoNWmY= -----END CERTIFICATE-----Generated at Wed Jun 17 12:39:59 2026 by rpki-client