$ rpki-client -vvf rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft File: 4032440C7B463FEA0D28A5D4682DFA954E77451E.mft (raw, json) Hash identifier: wYLICUMjsrRFvoYC2hvWTIz0UGdBcJcf6L2KpTbI11g= Subject key identifier: B8:97:97:2D:1B:71:17:BB:C0:12:78:2C:81:A8:7D:67:70:E0:FE:D2 Authority key identifier: 40:32:44:0C:7B:46:3F:EA:0D:28:A5:D4:68:2D:FA:95:4E:77:45:1E Certificate issuer: /CN=4032440C7B463FEA0D28A5D4682DFA954E77451E Certificate serial: 66D948964B0134E44B456FF581D455891C384A62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:20:04 +0000 Manifest this update: Tue 16 Jun 2026 17:15:04 +0000 Manifest next update: Wed 17 Jun 2026 19:39:04 +0000 Files and hashes: 1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: 8b7JHKN9jGh8XEFxRZEHDDGBc52rA0ln90frZNev8wg=) 2: 4032440C7B463FEA0D28A5D4682DFA954E77451E.crl (hash: bumT2pWBONLn/xr+mf5V/suzmexf6suY98+932TnIH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.crl rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d9:48:96:4b:01:34:e4:4b:45:6f:f5:81:d4:55:89:1c:38:4a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4032440C7B463FEA0D28A5D4682DFA954E77451E Validity Not Before: Jun 16 17:15:04 2026 GMT Not After : Jun 17 19:39:04 2026 GMT Subject: CN=B897972D1B7117BBC012782C81A87D6770E0FED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:f9:40:20:ba:56:ca:38:e6:93:e3:43:dc: db:4f:41:d2:b7:49:49:09:33:7b:d5:56:34:70:cd: c0:89:96:64:48:35:9d:09:93:e9:41:5a:31:6a:bc: 74:4c:66:42:ca:9e:26:fc:92:e8:3d:55:ef:ed:3a: c8:af:ee:e3:66:f7:87:5f:56:e9:40:c8:64:8f:7b: d9:a2:87:3c:f1:f2:49:b6:c2:b6:22:df:61:c1:d6: 3c:29:84:bc:93:d4:57:51:4d:17:a2:b6:6c:7c:3a: 09:37:bc:45:8e:62:a1:58:c6:95:e5:33:81:94:68: e5:a6:c9:4d:d3:be:83:4c:4d:71:bb:e3:4e:fe:38: 72:3b:dd:73:87:ad:0b:49:f1:e0:d8:52:44:88:3a: 57:10:e2:ab:e3:1d:e9:18:ea:d2:0c:84:b9:38:e2: 7a:77:5b:f2:05:d3:a1:41:1b:3c:8c:8f:8d:b1:6f: d1:76:39:df:ba:6d:de:52:e5:3e:51:f1:dc:42:7a: d5:b6:f7:39:99:22:3d:46:b0:10:db:f2:3c:ce:13: fc:db:c7:8a:df:70:2f:7f:ac:b8:27:cb:92:8b:a9: c4:16:ed:50:ec:a7:86:b9:b2:9a:a8:3a:31:47:0c: 73:f0:78:1f:78:59:c3:6f:90:c8:ab:47:01:94:81: ce:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:97:97:2D:1B:71:17:BB:C0:12:78:2C:81:A8:7D:67:70:E0:FE:D2 X509v3 Authority Key Identifier: keyid:40:32:44:0C:7B:46:3F:EA:0D:28:A5:D4:68:2D:FA:95:4E:77:45:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4032440C7B463FEA0D28A5D4682DFA954E77451E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/4032440C7B463FEA0D28A5D4682DFA954E77451E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2f:80:d4:f5:48:8b:ab:a3:b2:25:ab:f0:10:da:2f:53:b7: 74:d8:c8:01:95:9d:4f:51:89:cb:28:37:4b:0b:87:ba:86:9f: 26:14:6d:6d:c1:8a:bf:1b:e5:94:b6:8a:d4:d0:f7:71:de:53: bb:47:09:43:be:50:e4:fd:94:c1:3b:08:07:26:18:b7:75:6b: 68:3f:4e:28:73:30:9e:f0:58:31:bc:a6:5b:ce:09:35:dd:42: 38:bd:d8:d3:29:2c:dd:89:50:14:b5:5b:e3:00:d7:0b:54:61: 32:9c:a6:7e:62:28:45:1f:89:ae:16:b9:29:06:be:47:09:b9: 9d:46:5c:a6:b0:aa:b2:c5:35:4e:ce:00:7a:e7:29:3c:6e:e5: b0:93:4e:f1:63:79:b8:2f:79:8a:6d:73:ab:3e:ba:74:5f:3d: e4:d1:7e:f5:38:71:11:c3:66:89:3b:8d:f5:69:8d:5b:2b:3e: 91:45:3e:27:62:7a:d5:e9:07:51:04:cc:2f:bc:49:97:64:a6: 68:c0:6f:81:59:ee:2e:3e:5e:71:b5:89:dd:84:4a:12:d9:72: 67:68:47:f8:a0:81:7a:f8:06:88:48:cf:7c:92:3c:7b:3a:f7: ac:54:9d:ba:d6:a8:7d:70:5d:b4:fb:a3:b8:a0:40:9e:d4:1b: da:2a:21:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtlIlksBNORLRW/1gdRViRw4SmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAzMjQ0MEM3QjQ2M0ZFQTBEMjhBNUQ0NjgyREZBOTU0 RTc3NDUxRTAeFw0yNjA2MTYxNzE1MDRaFw0yNjA2MTcxOTM5MDRaMDMxMTAvBgNV BAMTKEI4OTc5NzJEMUI3MTE3QkJDMDEyNzgyQzgxQTg3RDY3NzBFMEZFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFPlAILpWyjjmk+ND3NtPQdK3 SUkJM3vVVjRwzcCJlmRINZ0Jk+lBWjFqvHRMZkLKnib8kug9Ve/tOsiv7uNm94df VulAyGSPe9mihzzx8km2wrYi32HB1jwphLyT1FdRTReitmx8Ogk3vEWOYqFYxpXl M4GUaOWmyU3TvoNMTXG7407+OHI73XOHrQtJ8eDYUkSIOlcQ4qvjHekY6tIMhLk4 4np3W/IF06FBGzyMj42xb9F2Od+6bd5S5T5R8dxCetW29zmZIj1GsBDb8jzOE/zb x4rfcC9/rLgny5KLqcQW7VDsp4a5spqoOjFHDHPweB94WcNvkMirRwGUgc7RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuJeXLRtxF7vAEngsgah9Z3Dg/tIwHwYDVR0j BBgwFoAUQDJEDHtGP+oNKKXUaC36lU53RR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcyMGNlNzYtZGI3NS00NjUxLTg1YjAtMGJmYjE4ZTBiMTc1LzAvNDAzMjQ0MEM3 QjQ2M0ZFQTBEMjhBNUQ0NjgyREZBOTU0RTc3NDUxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDMyNDQwQzdCNDYzRkVBMEQyOEE1RDQ2ODJERkE5NTRFNzc0 NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcyMGNlNzYtZGI3NS00NjUxLTg1 YjAtMGJmYjE4ZTBiMTc1LzAvNDAzMjQ0MEM3QjQ2M0ZFQTBEMjhBNUQ0NjgyREZB OTU0RTc3NDUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAvgNT1SIuro7Ilq/AQ2i9Tt3TYyAGVnU9R icsoN0sLh7qGnyYUbW3Bir8b5ZS2itTQ93HeU7tHCUO+UOT9lME7CAcmGLd1a2g/ TihzMJ7wWDG8plvOCTXdQji92NMpLN2JUBS1W+MA1wtUYTKcpn5iKEUfia4WuSkG vkcJuZ1GXKawqrLFNU7OAHrnKTxu5bCTTvFjebgveYptc6s+unRfPeTRfvU4cRHD Zok7jfVpjVsrPpFFPidietXpB1EEzC+8SZdkpmjAb4FZ7i4+XnG1id2EShLZcmdo R/iggXr4BohIz3ySPHs696xUnbrWqH1wXbT7o7igQJ7UG9oqIcw= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:48 2026 by rpki-client