$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft File: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft (raw, json) Hash identifier: R2z6AWZL1kdIHcuD5zbYasZNsuyAuhlT4UK4BxqYzlY= Subject key identifier: 0D:03:27:60:3E:3A:F0:47:D4:6A:55:0A:BB:99:4E:C7:33:E1:C4:65 Authority key identifier: 98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 Certificate issuer: /CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Certificate serial: 191CC0DC937962E08B232AC3E9C5A6E6C9B76F86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 14:57:21 +0000 Manifest this update: Tue 16 Jun 2026 14:52:21 +0000 Manifest next update: Wed 17 Jun 2026 17:55:21 +0000 Files and hashes: 1: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: iZC63XKtQ4A+tLBPo00EIvl5gTnecWbM3wWVRgyRhoQ=) 2: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: lNL+7ARcgDGS7ohITNzXBQoor5a/mLNbtFseoR7TmUw=) 3: 323430353a363063303a3a2f33322d3332203d3e20313332363337.roa (hash: CrMtOMSFObcp/eUieJpJ4rq+BfgXeOHMxmhovNg+UBg=) 4: 3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa (hash: w40+4vjnbHq0TV83WSPBOHHWioBKVnOPxDYQ5jp0iE0=) 5: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl (hash: tvBgLvy3s3X5zkRY0SNkPzdVYd431o+lxXb0lrFtJEY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1c:c0:dc:93:79:62:e0:8b:23:2a:c3:e9:c5:a6:e6:c9:b7:6f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Validity Not Before: Jun 16 14:52:21 2026 GMT Not After : Jun 17 17:55:21 2026 GMT Subject: CN=0D0327603E3AF047D46A550ABB994EC733E1C465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4e:37:3c:76:fe:6e:4f:2b:a2:31:b1:52:c3: 68:1c:94:d4:b2:74:8d:2b:6c:7c:31:7b:2e:e5:84: 49:23:35:b4:fe:45:f2:e0:ca:9a:ef:4a:e0:92:49: 2f:13:5a:93:25:35:f5:39:63:a9:a7:76:da:ec:7c: 08:20:ce:c5:c1:cd:95:3c:84:9a:2f:5f:14:73:6f: 98:34:63:4c:bb:e1:6f:de:e6:27:28:11:a5:d7:b9: 7b:67:f1:66:b1:a0:39:3f:48:7c:b9:1f:03:ea:95: f8:b3:cb:9c:24:b9:c9:35:a6:e5:64:3c:80:72:db: 42:10:a4:b1:24:2b:ce:01:f0:39:1b:98:d1:03:16: 41:25:f1:8d:99:64:ff:7e:fe:70:23:23:5b:39:8e: 8b:b9:c3:94:b3:f5:03:78:37:9d:fe:e3:c7:5e:eb: 7b:ab:d0:c8:ce:d6:f0:2c:d9:ba:10:ff:c4:26:b3: c9:f6:86:6c:2c:ac:70:3d:77:79:c7:a6:7f:60:35: 1a:fc:d8:fb:be:ba:a8:58:50:62:b0:74:a3:3b:2a: 40:99:59:44:56:0a:a3:42:74:1d:66:57:3e:8b:ba: 9a:44:0f:19:27:3c:99:8d:1a:51:e9:46:5a:ca:ae: 4a:07:3e:89:8a:a2:ec:b1:c1:d9:c7:5b:54:a2:c5: 3e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:03:27:60:3E:3A:F0:47:D4:6A:55:0A:BB:99:4E:C7:33:E1:C4:65 X509v3 Authority Key Identifier: keyid:98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:4a:2e:18:79:e4:88:0f:00:a2:5b:16:43:73:96:f2:ff:5b: 3e:df:2b:ee:4e:a2:95:65:c9:f5:b8:fe:d5:fc:64:db:40:75: 04:52:99:b1:15:7d:54:b7:39:b6:47:eb:ad:65:c8:45:e4:4f: d8:c1:cb:29:90:1e:b2:1c:b7:35:3a:2d:c7:96:dd:e9:33:32: 0e:98:e6:55:86:7d:9e:72:0d:8f:4f:42:2b:d4:72:3c:ee:3d: 4b:76:ea:a7:1e:2a:d8:a8:f2:8b:9c:79:34:7d:2d:08:d4:ae: 9c:06:7c:1c:48:82:29:6f:fc:e0:6e:91:79:94:13:fd:ee:37: 64:1f:df:96:12:66:d9:ab:73:ea:b1:d8:cf:50:c3:4c:ce:88: 0f:48:fc:6b:09:0f:71:66:b3:40:c5:c9:c9:86:ae:ba:63:74: a1:9c:96:6f:bb:fc:15:c8:3f:e5:a7:95:46:c4:5b:21:ad:0a: 87:33:9b:71:f0:27:de:0d:59:3e:3b:38:53:70:6b:a9:96:ba: 3a:4a:25:73:d8:ed:6e:53:18:4d:25:76:5a:73:61:42:62:4c: 3d:13:e1:9e:9b:ad:cb:73:16:24:d2:5f:89:52:da:8b:1e:33: 73:32:31:9e:88:1f:fd:37:72:12:1f:32:e0:c4:c8:6e:78:18: 5a:1a:ff:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGRzA3JN5YuCLIyrD6cWm5sm3b4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUwOEUz RUZEOTU2OTAeFw0yNjA2MTYxNDUyMjFaFw0yNjA2MTcxNzU1MjFaMDMxMTAvBgNV BAMTKDBEMDMyNzYwM0UzQUYwNDdENDZBNTUwQUJCOTk0RUM3MzNFMUM0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTjc8dv5uTyuiMbFSw2gclNSy dI0rbHwxey7lhEkjNbT+RfLgyprvSuCSSS8TWpMlNfU5Y6mndtrsfAggzsXBzZU8 hJovXxRzb5g0Y0y74W/e5icoEaXXuXtn8WaxoDk/SHy5HwPqlfizy5wkuck1puVk PIBy20IQpLEkK84B8DkbmNEDFkEl8Y2ZZP9+/nAjI1s5jou5w5Sz9QN4N53+48de 63ur0MjO1vAs2boQ/8Qms8n2hmwsrHA9d3nHpn9gNRr82Pu+uqhYUGKwdKM7KkCZ WURWCqNCdB1mVz6LuppEDxknPJmNGlHpRlrKrkoHPomKouyxwdnHW1SixT6nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDQMnYD468EfUalUKu5lOxzPhxGUwHwYDVR0j BBgwFoAUmAYbkvBBB9x+qcajio3gjj79lWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y2ZDU1ODItOWE2My00MWU1LTg5NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJG MDQxMDdEQzdFQTlDNkEzOEE4REUwOEUzRUZEOTU2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODA2MUI5MkYwNDEwN0RDN0VBOUM2QTM4QThERTA4RTNFRkQ5 NTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOTgwNjFCOTJGMDQxMDdEQzdFQTlDNkEzOEE4REUw OEUzRUZEOTU2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZKLhh55IgPAKJbFkNzlvL/Wz7fK+5OopVl yfW4/tX8ZNtAdQRSmbEVfVS3ObZH661lyEXkT9jByymQHrIctzU6LceW3ekzMg6Y 5lWGfZ5yDY9PQivUcjzuPUt26qceKtio8ouceTR9LQjUrpwGfBxIgilv/OBukXmU E/3uN2Qf35YSZtmrc+qx2M9Qw0zOiA9I/GsJD3Fms0DFycmGrrpjdKGclm+7/BXI P+WnlUbEWyGtCoczm3HwJ94NWT47OFNwa6mWujpKJXPY7W5TGE0ldlpzYUJiTD0T 4Z6brctzFiTSX4lS2oseM3MyMZ6IH/03chIfMuDEyG54GFoa/+E= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:38 2026 by rpki-client