$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft File: CD845730E45E4D531071D97C1EDC23DA378D662F.mft (raw, json) Hash identifier: FW0Kt60tk02BTO4u2bDTpBagmgb10AQCTunbAHqMtvY= Subject key identifier: EF:FB:ED:CA:C7:38:F1:77:97:59:01:D3:71:D8:1C:5B:19:73:DC:CD Authority key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F Certificate issuer: /CN=CD845730E45E4D531071D97C1EDC23DA378D662F Certificate serial: 4100B2DB705E3C01863B1E8C844F6050E7BB64DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 03:07:52 +0000 Manifest this update: Sat 13 Jun 2026 03:02:52 +0000 Manifest next update: Sun 14 Jun 2026 04:21:52 +0000 Files and hashes: 1: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: qBRAe7C40tWA04dsJPNXkwqtoGUaunwx7S+rfFhu9ho=) 2: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: ZyTKIgLUxCGhcIet/CFJoBSXRoiA7e9G+Kr6S5o0mEQ=) 3: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: BgiKJc54U9vx0Bz6VAlgbJ7Gti2eL3QTE9xees67wzA=) 4: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: lb4d9lrnmMWGai0ItqfgLnvKFt7iEuEC2HCE9pUg2nE=) 5: CD845730E45E4D531071D97C1EDC23DA378D662F.crl (hash: O+t2gC72OAkujI+OeOP/FkDwdQPY7ZO7VdT5wPrRKHs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 04:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:00:b2:db:70:5e:3c:01:86:3b:1e:8c:84:4f:60:50:e7:bb:64:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD845730E45E4D531071D97C1EDC23DA378D662F Validity Not Before: Jun 13 03:02:52 2026 GMT Not After : Jun 14 04:21:52 2026 GMT Subject: CN=EFFBEDCAC738F177975901D371D81C5B1973DCCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:64:33:a5:b1:ec:5a:c5:44:d6:26:f0:e5: e3:2f:49:ce:98:90:66:f8:ca:18:fc:12:a5:4a:be: ce:5c:fc:cf:e4:f4:65:9a:80:6c:0e:2d:00:ff:f8: 0f:ea:a8:4a:9c:72:14:34:5a:35:4d:0e:09:e6:27: 65:a9:54:79:b7:14:b2:a1:56:d7:1b:65:3c:8f:83: 92:95:cc:3e:2f:3d:ac:c2:a6:45:64:b9:53:d9:2e: 18:ad:ef:de:e2:a4:98:b5:a4:a6:72:96:fc:5f:f7: f1:fa:04:ca:a9:54:b1:cd:cb:3f:4e:bf:00:f6:74: 1e:34:44:95:1d:93:f7:14:09:3f:3c:15:7a:68:90: 5b:eb:b8:be:ab:26:47:21:b3:80:1e:1a:e3:9c:3f: fb:29:58:06:20:c6:53:4c:cb:e1:07:fa:ed:12:56: 0f:e5:40:54:ba:ec:74:2a:80:ea:29:f6:01:1d:dc: 3b:0b:b7:99:fa:83:dd:0a:cd:d1:0c:7d:88:57:4c: ac:94:80:7e:80:be:3a:90:5e:f6:a0:0b:6c:c3:5a: df:ff:94:ac:e2:60:12:52:a0:1a:87:21:61:0d:a8: 81:fe:b0:07:a4:39:40:b3:4f:32:af:30:b3:b3:81: 3a:18:b1:04:96:d1:55:af:37:7c:d7:8f:96:41:97: 66:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FB:ED:CA:C7:38:F1:77:97:59:01:D3:71:D8:1C:5B:19:73:DC:CD X509v3 Authority Key Identifier: keyid:CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6c:d9:8e:39:e7:81:6d:d3:49:2e:67:e5:5c:c1:89:c3:04: 9e:fa:1b:24:ce:9a:fb:0f:08:f1:00:c0:3d:b1:df:b4:4e:aa: bc:65:f3:de:ab:0c:fc:d6:14:62:ac:64:3f:63:dc:f8:36:d5: db:77:cd:1d:66:ca:4c:bf:c6:81:bb:3b:dd:7a:2f:c3:8d:d0: 98:e2:50:c6:55:4e:0c:5b:7f:6e:df:e4:44:34:d3:78:1b:ea: b8:70:cd:a3:ae:b9:fc:a9:8b:a3:e5:06:86:22:c6:89:28:8f: 5b:1c:69:36:c2:4a:19:6d:c7:43:26:80:51:51:f2:cf:07:89: b0:2a:c2:db:b9:09:41:86:73:2a:6a:56:ea:6f:c6:10:0b:4b: 11:a9:57:ca:f7:34:d1:17:d4:cd:d0:7c:7a:ca:87:74:85:17: cf:fd:2c:4d:d3:a2:6c:00:0a:f9:36:cf:65:ff:20:c6:65:27: ba:17:31:a2:e0:54:60:2c:55:26:e1:e1:c2:51:c9:2a:53:df: d1:cd:69:ad:12:a1:fb:60:44:8c:3e:2b:8b:3a:cd:93:ef:60: 8b:84:cd:78:01:c0:fe:fe:69:5e:bf:13:cb:00:ef:e4:90:ed: a9:aa:4c:ca:17:72:c8:5c:01:9f:91:6d:c1:49:16:5c:71:6b: 9c:39:a7:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQCy23BePAGGOx6MhE9gUOe7ZN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEz NzhENjYyRjAeFw0yNjA2MTMwMzAyNTJaFw0yNjA2MTQwNDIxNTJaMDMxMTAvBgNV BAMTKEVGRkJFRENBQzczOEYxNzc5NzU5MDFEMzcxRDgxQzVCMTk3M0RDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy1GQzpbHsWsVE1ibw5eMvSc6Y kGb4yhj8EqVKvs5c/M/k9GWagGwOLQD/+A/qqEqcchQ0WjVNDgnmJ2WpVHm3FLKh VtcbZTyPg5KVzD4vPazCpkVkuVPZLhit797ipJi1pKZylvxf9/H6BMqpVLHNyz9O vwD2dB40RJUdk/cUCT88FXpokFvruL6rJkchs4AeGuOcP/spWAYgxlNMy+EH+u0S Vg/lQFS67HQqgOop9gEd3DsLt5n6g90KzdEMfYhXTKyUgH6AvjqQXvagC2zDWt// lKziYBJSoBqHIWENqIH+sAekOUCzTzKvMLOzgToYsQSW0VWvN3zXj5ZBl2bNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7/vtysc48XeXWQHTcdgcWxlz3M0wHwYDVR0j BBgwFoAUzYRXMOReTVMQcdl8Htwj2jeNZi8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA5NjJjNmUtNTk1YS00N2M0LWFhN2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBF NDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEzNzhENjYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDg0NTczMEU0NUU0RDUzMTA3MUQ5N0MxRURDMjNEQTM3OEQ2 NjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIz REEzNzhENjYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVs2Y4554Ft00kuZ+VcwYnDBJ76GyTOmvsP CPEAwD2x37ROqrxl896rDPzWFGKsZD9j3Pg21dt3zR1myky/xoG7O916L8ON0Jji UMZVTgxbf27f5EQ003gb6rhwzaOuufypi6PlBoYixokoj1scaTbCShltx0MmgFFR 8s8HibAqwtu5CUGGcypqVupvxhALSxGpV8r3NNEX1M3QfHrKh3SFF8/9LE3TomwA Cvk2z2X/IMZlJ7oXMaLgVGAsVSbh4cJRySpT39HNaa0SoftgRIw+K4s6zZPvYIuE zXgBwP7+aV6/E8sA7+SQ7amqTMoXcshcAZ+RbcFJFlxxa5w5pxA= -----END CERTIFICATE-----Generated at Sat Jun 13 17:28:52 2026 by rpki-client