$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft File: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft (raw, json) Hash identifier: haI4AjnrxLLBYDmRr5DWXn2Ao6JKJaltedHaIDPlk1I= Subject key identifier: B7:B2:E3:CC:0E:BE:6B:1F:52:B0:AC:C1:47:77:FD:13:4C:03:87:7D Authority key identifier: 00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF Certificate issuer: /CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Certificate serial: 7EB708E255B51BAEADCEF946D17D52CCBBCFF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 04:38:25 +0000 Manifest this update: Wed 17 Jun 2026 04:33:25 +0000 Manifest next update: Thu 18 Jun 2026 04:55:25 +0000 Files and hashes: 1: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: Rh9qnUB02qhjNfXj2g1O5tEu9u7bYMmnyx0Vs0JNy30=) 2: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: RevoOpF5++1wWoPWwmQB4PPK000UixnKZHWg4wTOKek=) 3: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl (hash: s8atBBVWjx4OQZVzRa8F1ka5FxXh9RhKr1EL8b1JZnM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b7:08:e2:55:b5:1b:ae:ad:ce:f9:46:d1:7d:52:cc:bb:cf:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Validity Not Before: Jun 17 04:33:25 2026 GMT Not After : Jun 18 04:55:25 2026 GMT Subject: CN=B7B2E3CC0EBE6B1F52B0ACC14777FD134C03877D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:08:45:fa:92:29:04:ec:c7:6d:10:f1:45:39: df:f8:d0:e5:fd:88:f4:12:bd:39:e2:0e:74:c8:43: 1f:2e:9c:81:bf:d0:fc:b1:ff:38:48:89:ac:6e:a2: 9d:24:71:bf:b0:ec:5e:9b:9d:23:fb:bd:d6:18:2c: d7:ae:03:f6:02:26:90:e9:3a:70:cf:ff:ee:58:91: 5f:32:e0:5e:df:ee:db:b7:8f:b5:4c:da:c9:ca:b0: 68:3c:dc:84:ee:75:1a:28:c2:25:43:01:cb:51:c8: 85:48:bb:76:18:1a:34:77:85:c6:19:d6:79:d4:42: 3a:9d:c1:f8:c6:fe:7f:15:2f:ad:a5:9d:74:4f:2e: bf:19:df:2d:0c:50:1a:3b:b7:79:f3:e3:4a:ea:33: 4d:60:79:4d:c6:a7:f7:e0:0a:8d:f5:fb:84:5d:89: 72:ea:47:4f:b2:5a:0a:90:74:7b:3e:e7:7b:26:cb: 46:44:1f:a2:79:ba:ee:10:0b:d8:fd:40:2d:95:00: 0f:74:fc:69:86:de:a0:61:1d:a6:bd:39:77:8b:0e: a1:09:2c:11:4d:43:f5:e5:cb:1f:fd:7d:e7:4e:b7: e8:68:85:3a:b4:c2:b5:3f:a9:5e:75:19:75:60:7f: 77:47:27:df:ba:15:5c:29:1c:0b:dd:d5:15:4c:47: 25:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B2:E3:CC:0E:BE:6B:1F:52:B0:AC:C1:47:77:FD:13:4C:03:87:7D X509v3 Authority Key Identifier: keyid:00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fb:f7:fa:2a:31:8c:e5:dc:6e:e2:6c:d5:4a:cf:48:dc:f9: 09:e9:d3:19:2d:e7:cd:cc:bc:ca:01:9d:ae:aa:8d:83:45:35: 54:db:29:5f:dc:51:36:54:ea:e3:bc:aa:b9:df:79:4c:84:4a: 4e:fb:ea:85:60:4c:e9:6f:02:24:5c:0d:9d:fe:a1:36:ad:26: 5b:f6:6e:a3:01:bd:2c:53:9d:6d:ff:33:62:00:53:65:90:14: 6e:94:fa:62:80:d8:bb:60:24:0d:28:d1:8f:2e:59:7d:95:0b: 8f:94:8f:0b:a4:6a:58:64:5b:d9:82:72:03:0e:79:18:84:f7: 7c:34:60:f9:c7:de:97:80:10:db:38:02:e0:85:b5:fb:8e:aa: d8:14:b7:aa:22:a0:b9:6d:d5:03:4b:e8:05:0b:65:27:cb:9e: e3:f1:74:01:5c:cb:1f:6d:a8:a6:dd:d4:72:fa:92:34:3c:5b: 85:12:27:fa:40:40:d3:d3:5a:16:3d:8c:62:8f:f0:9f:66:06: d9:31:f0:55:29:66:8f:9f:57:41:3e:2c:7a:2a:c9:61:8a:dd: b8:c1:ae:69:f4:1b:ba:de:b3:48:bc:25:27:71:4a:6f:95:24: f8:3d:2e:c2:52:23:52:24:e5:47:5c:04:a6:e5:3b:f1:b6:5c: cb:d5:08:c7 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITfrcI4lW1G66tzvlG0X1SzLvP9DANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwMDg0MURCREU1RjZDRUJGOEM5NEZERUUyMjc3NzE5NDZF MjE1MkNGMB4XDTI2MDYxNzA0MzMyNVoXDTI2MDYxODA0NTUyNVowMzExMC8GA1UE AxMoQjdCMkUzQ0MwRUJFNkIxRjUyQjBBQ0MxNDc3N0ZEMTM0QzAzODc3RDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANIIRfqSKQTsx20Q8UU53/jQ5f2I 9BK9OeIOdMhDHy6cgb/Q/LH/OEiJrG6inSRxv7DsXpudI/u91hgs164D9gImkOk6 cM//7liRXzLgXt/u27ePtUzaycqwaDzchO51GijCJUMBy1HIhUi7dhgaNHeFxhnW edRCOp3B+Mb+fxUvraWddE8uvxnfLQxQGju3efPjSuozTWB5Tcan9+AKjfX7hF2J cupHT7JaCpB0ez7neybLRkQfonm67hAL2P1ALZUAD3T8aYbeoGEdpr05d4sOoQks EU1D9eXLH/1950636GiFOrTCtT+pXnUZdWB/d0cn37oVXCkcC93VFUxHJZMCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBS3suPMDr5rH1KwrMFHd/0TTAOHfTAfBgNVHSME GDAWgBQAhB295fbOv4yU/e4id3GUbiFSzzAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC8wMDg0MURCREU1 RjZDRUJGOEM5NEZERUUyMjc3NzE5NDZFMjE1MkNGLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzAwODQxREJERTVGNkNFQkY4Qzk0RkRFRTIyNzc3MTk0NkUyMTUy Q0YuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMjUwMjIwNS01YzU0LTQ3ZGItYWU2 Zi05ZDQ4ZTE4MzI0MWMvMC8wMDg0MURCREU1RjZDRUJGOEM5NEZERUUyMjc3NzE5 NDZFMjE1MkNGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAMPv3+ioxjOXcbuJs1UrPSNz5CenTGS3nzcy8 ygGdrqqNg0U1VNspX9xRNlTq47yqud95TIRKTvvqhWBM6W8CJFwNnf6hNq0mW/Zu owG9LFOdbf8zYgBTZZAUbpT6YoDYu2AkDSjRjy5ZfZULj5SPC6RqWGRb2YJyAw55 GIT3fDRg+cfel4AQ2zgC4IW1+46q2BS3qiKguW3VA0voBQtlJ8ue4/F0AVzLH22o pt3UcvqSNDxbhRIn+kBA09NaFj2MYo/wn2YG2THwVSlmj59XQT4seirJYYrduMGu afQbut6zSLwlJ3FKb5Uk+D0uwlIjUiTlR1wEpuU78bZcy9UIxw== -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:38 2026 by rpki-client