$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft File: 40064999DEC3F3BD85C4F883982B58D76246EE84.mft (raw, json) Hash identifier: I1BItvkau6bYJriGpbG0yqpFEYhDJDhgknlKsn47Sj8= Subject key identifier: C1:B1:82:F7:8E:74:CB:40:51:26:3A:F0:F0:27:0C:07:17:32:CA:6C Authority key identifier: 40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84 Certificate issuer: /CN=40064999DEC3F3BD85C4F883982B58D76246EE84 Certificate serial: 6B18D618EF9762D4211A086B631AD2840E7685BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 20:44:15 +0000 Manifest this update: Tue 16 Jun 2026 20:39:15 +0000 Manifest next update: Thu 18 Jun 2026 00:12:15 +0000 Files and hashes: 1: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: 15DFdluo9UaifGQn5fMYNCJmiCD2xxrlbDWmIvigFwY=) 2: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: pVbAEY3jNiaOa2/I5+aOrojXUWJy/5MAJ3dSN22Pu3k=) 3: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: DFH3OJkZQ9cFzoKHDc7LTDhy6MoupWNGOe7R0l60x2E=) 4: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: xfswO543iSh9SG/x27NWXDQKULYEPhHMqzXL1c7JMEI=) 5: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: Ohcd5IRv432594So8px8ggqzCMekQcg85+VPfjz2MNY=) 6: 40064999DEC3F3BD85C4F883982B58D76246EE84.crl (hash: ZIixEZzhlMjykV/aJ9vShiVHgDfs3oEwJkLa+WX5iUk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:18:d6:18:ef:97:62:d4:21:1a:08:6b:63:1a:d2:84:0e:76:85:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40064999DEC3F3BD85C4F883982B58D76246EE84 Validity Not Before: Jun 16 20:39:15 2026 GMT Not After : Jun 18 00:12:15 2026 GMT Subject: CN=C1B182F78E74CB4051263AF0F0270C071732CA6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:35:20:10:50:55:8c:21:64:81:a0:bd:87:82: ba:e1:23:44:b3:dd:fe:2b:df:b5:24:99:52:bb:cf: 66:4a:61:d0:17:c9:ff:f7:11:73:c7:bd:70:99:1d: c8:a7:1b:4a:26:b6:de:9a:60:11:69:a9:2e:df:b0: dc:f8:3c:3a:4b:72:d8:26:6f:d7:6a:07:b7:4b:87: 22:2f:1e:1e:73:ea:2b:fa:27:cb:59:0b:a0:56:e9: f6:07:c3:d6:ae:5a:cf:cf:e3:db:43:d8:2d:65:5c: fb:e6:28:87:aa:e8:1e:f8:8c:98:b6:1e:f1:c1:13: 58:94:95:9b:71:71:e3:de:e0:af:fa:0e:f9:09:0f: 04:c7:42:61:9c:79:b7:8b:77:8e:d3:aa:2c:54:a4: 3a:46:ea:a3:7d:6d:a9:39:8d:6d:86:c4:46:05:24: 8e:31:42:93:fc:84:03:dc:2c:5a:ab:c1:3e:af:7b: f8:a1:93:db:6f:8c:c6:4c:d1:89:ae:10:68:36:ff: 43:36:93:bd:e0:fa:e8:bb:58:90:fb:83:9e:5d:26: ea:83:b7:e3:96:05:87:20:6d:24:64:cf:9f:c8:fa: 1c:ab:f7:cf:ea:85:90:ca:ec:fe:e5:f9:24:0f:16: 7a:b2:d0:ad:96:65:86:30:42:1d:e5:4a:70:1a:45: ba:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B1:82:F7:8E:74:CB:40:51:26:3A:F0:F0:27:0C:07:17:32:CA:6C X509v3 Authority Key Identifier: keyid:40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ae:d9:b6:41:b6:1b:32:47:f7:e3:3b:3a:14:68:e3:2c:d2: db:85:61:2d:93:ff:e4:63:2c:92:33:89:0b:04:fa:99:e6:eb: c1:e5:6b:41:43:c4:da:1e:13:bd:c4:d9:4f:e8:ef:b3:be:7d: b8:7a:fc:37:5e:82:1f:a1:93:2e:4c:b8:a0:89:a2:87:4d:ca: b9:9f:a2:ba:8f:81:e6:2c:2e:a7:77:3c:36:e8:ac:8d:80:2b: 1f:7d:15:b7:55:67:77:f7:0e:f0:b4:2c:be:dc:35:67:c3:7e: 10:fc:78:f2:f6:09:0d:c9:f8:6f:ae:dc:35:17:f1:83:6a:56: 9a:d0:d5:95:7a:80:fc:90:b0:7d:2b:09:21:7f:ce:f3:de:e8: ca:db:fc:92:b6:86:d1:c3:b8:6e:12:4e:67:ca:b9:96:a2:e3: 04:48:c0:f7:33:b4:c5:9a:f1:dc:8c:a0:c6:ee:0a:f6:b8:60: 10:75:be:3f:50:ec:98:3a:29:f8:34:a4:8f:52:fe:09:e6:d0: 7e:32:e9:0c:f9:dc:7d:a9:7c:0c:fd:d7:84:a9:f1:f6:d3:f4: 88:1b:e1:e8:52:50:11:60:a6:28:6d:54:fe:5c:e3:67:43:e9: 7b:43:04:64:60:3c:dc:71:9a:e1:78:8d:b3:83:0d:f0:d1:05: d4:31:a5:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxjWGO+XYtQhGghrYxrShA52hb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAwNjQ5OTlERUMzRjNCRDg1QzRGODgzOTgyQjU4RDc2 MjQ2RUU4NDAeFw0yNjA2MTYyMDM5MTVaFw0yNjA2MTgwMDEyMTVaMDMxMTAvBgNV BAMTKEMxQjE4MkY3OEU3NENCNDA1MTI2M0FGMEYwMjcwQzA3MTczMkNBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpNSAQUFWMIWSBoL2HgrrhI0Sz 3f4r37UkmVK7z2ZKYdAXyf/3EXPHvXCZHcinG0omtt6aYBFpqS7fsNz4PDpLctgm b9dqB7dLhyIvHh5z6iv6J8tZC6BW6fYHw9auWs/P49tD2C1lXPvmKIeq6B74jJi2 HvHBE1iUlZtxcePe4K/6DvkJDwTHQmGcebeLd47TqixUpDpG6qN9bak5jW2GxEYF JI4xQpP8hAPcLFqrwT6ve/ihk9tvjMZM0YmuEGg2/0M2k73g+ui7WJD7g55dJuqD t+OWBYcgbSRkz5/I+hyr98/qhZDK7P7l+SQPFnqy0K2WZYYwQh3lSnAaRbqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwbGC9450y0BRJjrw8CcMBxcyymwwHwYDVR0j BBgwFoAUQAZJmd7D872FxPiDmCtY12JG7oQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDBkMmQzZTMtNGMyMC00YTkwLTgzM2UtZWFkNDNjMzM5OTFlLzAvNDAwNjQ5OTlE RUMzRjNCRDg1QzRGODgzOTgyQjU4RDc2MjQ2RUU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDA2NDk5OURFQzNGM0JEODVDNEY4ODM5ODJCNThENzYyNDZF RTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvNDAwNjQ5OTlERUMzRjNCRDg1QzRGODgzOTgyQjU4 RDc2MjQ2RUU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGu2bZBthsyR/fjOzoUaOMs0tuFYS2T/+Rj LJIziQsE+pnm68Hla0FDxNoeE73E2U/o77O+fbh6/Ddegh+hky5MuKCJoodNyrmf orqPgeYsLqd3PDborI2AKx99FbdVZ3f3DvC0LL7cNWfDfhD8ePL2CQ3J+G+u3DUX 8YNqVprQ1ZV6gPyQsH0rCSF/zvPe6Mrb/JK2htHDuG4STmfKuZai4wRIwPcztMWa 8dyMoMbuCva4YBB1vj9Q7Jg6Kfg0pI9S/gnm0H4y6Qz53H2pfAz914Sp8fbT9Igb 4ehSUBFgpihtVP5c42dD6XtDBGRgPNxxmuF4jbODDfDRBdQxpZY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:32 2026 by rpki-client