$ rpki-client -vvf rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft File: F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft (raw, json) Hash identifier: /sfKbKibNNMy0aeXtYZvA1tdgsF0u1GACnJSAod47T4= Subject key identifier: 02:9D:28:9D:6B:47:F3:4D:C0:EE:53:E7:72:21:36:6C:49:37:81:44 Authority key identifier: F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 Certificate issuer: /CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Certificate serial: 26824BBC30E83AD49730519C632883A4CC349D9D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 16:29:32 +0000 Manifest this update: Sat 13 Jun 2026 16:24:32 +0000 Manifest next update: Sun 14 Jun 2026 16:57:32 +0000 Files and hashes: 1: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: NyzMvcvP5P8597pti0RlOgOJdexX/ZQfgDt+YCdTIKE=) 2: F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl (hash: dUO2x+4xh3M9ORLr+aGPl38ljb0H81CG5OhCX5Ovt2w=) 3: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: /vHPttEy0S/+L0N0xJZEd760O2VDEp7iklZoHe07g/s=) 4: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: aue2+kr7HTRk/tNCSk94pVQ+a17G6VqHTtAotfDji1I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:82:4b:bc:30:e8:3a:d4:97:30:51:9c:63:28:83:a4:cc:34:9d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Validity Not Before: Jun 13 16:24:32 2026 GMT Not After : Jun 14 16:57:32 2026 GMT Subject: CN=029D289D6B47F34DC0EE53E77221366C49378144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0b:da:94:64:af:b3:d5:85:72:35:c6:e5:fd: 29:59:41:de:58:f4:ea:fc:ab:50:05:2b:86:77:04: 00:d3:e2:08:69:07:7b:36:6b:ba:a8:fe:4f:c4:52: 27:e9:64:6f:39:f6:94:04:0b:a4:36:3f:6e:53:3e: 3b:6a:59:a7:e1:c7:00:cb:8e:2f:1b:43:2a:6e:aa: 58:bf:f6:60:1c:5e:dd:81:59:f9:15:52:0e:cc:d9: 16:96:08:af:ec:d3:02:fe:1b:10:23:b1:3b:f2:57: da:c5:6e:9b:f7:b7:cf:97:d3:11:c0:ac:4b:e0:81: 2b:43:10:ad:d3:86:fd:b6:e1:32:ae:d3:e6:e1:df: 12:6b:1a:19:da:80:47:3e:69:69:9e:9b:6e:8b:90: 76:c1:cf:4d:77:c7:b5:5e:69:bf:13:56:a2:39:12: 2d:24:97:a5:cf:b1:3d:70:68:12:93:0f:7a:ed:db: 5c:dc:20:cb:6f:4e:60:2e:75:14:bf:eb:ca:28:a7: 2c:ea:73:e7:d6:b8:4a:9b:02:ae:c4:0b:fa:3a:b8: 94:28:4a:8c:3c:33:4c:d3:b1:e5:62:cb:da:63:cc: 30:0d:d5:05:13:ac:65:86:1d:6a:c7:6b:5a:a8:70: 22:ed:bb:6f:b4:0e:90:04:2e:ea:5f:4d:0b:08:47: b8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9D:28:9D:6B:47:F3:4D:C0:EE:53:E7:72:21:36:6C:49:37:81:44 X509v3 Authority Key Identifier: keyid:F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:64:34:95:59:5a:c8:f3:5d:f5:39:29:12:39:d9:49:8f:f1: 27:3d:bd:2b:b4:ca:fd:af:73:d6:7d:76:f4:7e:d0:5b:bc:bf: 6b:d2:8d:0f:e8:3d:dd:ae:07:0b:67:9e:92:54:41:26:87:5c: 63:2c:38:30:3f:25:78:db:5f:de:94:41:2b:d4:84:ef:49:4f: d4:d1:a6:ea:c7:ba:83:16:70:e0:df:31:c9:83:57:60:f1:58: fb:18:32:97:c7:da:b1:49:ab:50:db:29:96:4f:50:dc:0a:52: 1b:74:91:0f:a8:a2:3b:00:82:13:14:2d:61:10:cc:23:1e:23: 70:c1:f2:3a:f4:72:56:c9:ff:fc:01:ba:c6:4e:fe:81:80:e7: fe:e3:b5:e5:68:2e:f9:84:86:f8:b2:50:dd:12:26:7f:9c:21: 33:2b:5e:53:1f:d3:d8:35:09:e2:39:73:7c:0a:c6:3b:b2:99: 48:1f:ca:10:13:4a:7c:3d:ea:4f:82:19:d3:19:53:e4:7c:81: f2:3f:f5:04:f9:9d:c0:90:5b:37:3d:87:18:05:2a:ae:38:5d: 22:b0:11:3e:bb:e1:03:b7:17:73:67:36:03:ea:32:fd:be:09: 2b:58:ef:19:5e:9b:03:13:e5:de:55:b7:93:f6:7e:72:72:fd: 93:76:97:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJoJLvDDoOtSXMFGcYyiDpMw0nZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4NTQy N0IyNDA0MDAeFw0yNjA2MTMxNjI0MzJaFw0yNjA2MTQxNjU3MzJaMDMxMTAvBgNV BAMTKDAyOUQyODlENkI0N0YzNERDMEVFNTNFNzcyMjEzNjZDNDkzNzgxNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeC9qUZK+z1YVyNcbl/SlZQd5Y 9Or8q1AFK4Z3BADT4ghpB3s2a7qo/k/EUifpZG859pQEC6Q2P25TPjtqWafhxwDL ji8bQypuqli/9mAcXt2BWfkVUg7M2RaWCK/s0wL+GxAjsTvyV9rFbpv3t8+X0xHA rEvggStDEK3Thv224TKu0+bh3xJrGhnagEc+aWmem26LkHbBz013x7Veab8TVqI5 Ei0kl6XPsT1waBKTD3rt21zcIMtvTmAudRS/68oopyzqc+fWuEqbAq7EC/o6uJQo Sow8M0zTseViy9pjzDAN1QUTrGWGHWrHa1qocCLtu2+0DpAELupfTQsIR7jpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAp0onWtH803A7lPnciE2bEk3gUQwHwYDVR0j BBgwFoAU+ED4ttMy5X6j3Lhn27DYVCeyQEAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA0M2E4ODktYzg2MS00ZDI5LTlkNzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZE MzMyRTU3RUEzRENCODY3REJCMEQ4NTQyN0IyNDA0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODQwRjhCNkQzMzJFNTdFQTNEQ0I4NjdEQkIwRDg1NDI3QjI0 MDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk NzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4 NTQyN0IyNDA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJkNJVZWsjzXfU5KRI52UmP8Sc9vSu0yv2v c9Z9dvR+0Fu8v2vSjQ/oPd2uBwtnnpJUQSaHXGMsODA/JXjbX96UQSvUhO9JT9TR purHuoMWcODfMcmDV2DxWPsYMpfH2rFJq1DbKZZPUNwKUht0kQ+oojsAghMULWEQ zCMeI3DB8jr0clbJ//wBusZO/oGA5/7jteVoLvmEhviyUN0SJn+cITMrXlMf09g1 CeI5c3wKxjuymUgfyhATSnw96k+CGdMZU+R8gfI/9QT5ncCQWzc9hxgFKq44XSKw ET674QO3F3NnNgPqMv2+CStY7xlemwMT5d5Vt5P2fnJy/ZN2lxY= -----END CERTIFICATE-----Generated at Sun Jun 14 00:58:25 2026 by rpki-client