$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft File: D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft (raw, json) Hash identifier: wPnWfWOqtF31Sr6sNKrsh6T1H9EWPYR7iKF4iKvsDn4= Subject key identifier: 40:BF:B9:F3:5F:7B:82:CD:FD:07:68:F7:20:F5:47:4F:7B:B7:42:9C Authority key identifier: D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A Certificate issuer: /CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A Certificate serial: 038AB1989AF6304CD2C4C41420F6B0D8A84B6E74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:20:34 +0000 Manifest this update: Wed 17 Jun 2026 06:15:34 +0000 Manifest next update: Thu 18 Jun 2026 06:54:34 +0000 Files and hashes: 1: 3130332e3233342e33342e302f32332d3233203d3e20313531353231.roa (hash: v4OcOT72Y+Fw3xPxNhOv5K2oe1NqroMaIJLaKP7M7LE=) 2: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: XXYg212KqJilVz4UQhoA9JNZDN5djYbD/oi5ScwKYIs=) 3: D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl (hash: +nYAVzWbrS8YhlLe0AtRsaw3AaLR+MiXKhYxmqztdaU=) 4: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: osJeCPZtE9R9btD8iw5N1b2W8PoHsZHfReclzn2JK+k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8a:b1:98:9a:f6:30:4c:d2:c4:c4:14:20:f6:b0:d8:a8:4b:6e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A Validity Not Before: Jun 17 06:15:34 2026 GMT Not After : Jun 18 06:54:34 2026 GMT Subject: CN=40BFB9F35F7B82CDFD0768F720F5474F7BB7429C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:fa:ef:46:50:ee:91:00:61:7a:69:12:78: 7c:61:71:11:fb:8e:e2:ac:48:b9:e2:69:78:f2:23: 85:9e:d7:b5:6e:d6:8c:b7:4a:1c:35:3f:53:e6:5c: 76:6a:78:5c:ae:93:0e:39:12:b4:37:df:a9:60:fc: bd:a2:5a:84:d5:4a:11:cc:18:48:2b:a8:5b:70:3c: e8:d2:50:03:c2:d9:36:9c:ff:ff:85:d5:f5:4b:62: 65:73:87:d4:4c:94:fb:01:c8:c7:cb:a1:2e:d1:a4: 6a:96:e9:3f:8f:03:83:da:d9:da:bf:4b:48:80:54: 32:10:8b:15:cf:ed:a0:a7:cc:f6:74:78:f0:82:13: 4d:32:e6:ff:19:a1:44:fb:df:17:93:09:2a:0c:eb: ee:71:7c:d0:7a:9a:63:3a:6a:09:94:83:de:d2:89: 5b:47:66:47:13:6f:39:dc:ca:a4:25:38:db:48:04: 5e:18:5f:2d:d3:01:4f:b2:0d:86:8d:ea:86:29:5b: 67:4b:0b:65:72:13:42:e1:7e:c8:7b:d4:78:3d:cb: 4c:63:f3:b6:53:2e:ab:4f:3f:60:84:fb:33:04:1f: 5c:b6:ee:b0:39:27:b8:ed:32:0c:e6:fe:1c:f3:08: 05:c8:09:a8:eb:74:41:a1:0f:05:e0:7d:a6:3c:c7: 99:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BF:B9:F3:5F:7B:82:CD:FD:07:68:F7:20:F5:47:4F:7B:B7:42:9C X509v3 Authority Key Identifier: keyid:D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:53:f7:07:1d:db:a1:20:b5:12:69:4f:97:fc:c6:4d:8f:fe: 2d:0d:c3:b6:4e:c6:6d:e2:d0:88:dd:44:5f:22:87:8c:92:20: 61:ec:bd:a3:65:44:52:39:93:8c:35:ea:0e:9d:c0:76:1c:2c: 0c:d1:6d:58:bf:5f:6c:2b:8f:c7:97:76:96:12:f7:a0:12:98: 07:94:bd:c6:a8:4c:e9:a6:7a:c6:31:31:54:dd:f0:e8:e7:18: 3c:65:ea:98:fd:ac:62:05:13:49:c2:24:92:dd:29:ff:43:d6: 92:43:0a:f3:7f:0f:2b:cf:49:97:ed:42:72:26:b5:f2:0c:5e: 05:10:c6:1e:0b:b5:23:98:8a:61:01:ba:12:3d:35:71:79:b2: ef:b8:df:fb:1a:7e:2f:9c:d8:ce:0b:19:6d:0d:2a:54:34:1c: e7:2a:40:e6:70:c6:d5:44:10:98:63:d1:a6:a8:34:af:0d:95: b3:64:3c:94:2b:18:47:df:1b:45:74:82:29:8b:73:62:e3:af: 74:d8:f0:c7:8e:66:af:df:84:6f:55:33:ac:26:41:9b:40:55: d6:d5:4c:b5:c1:b5:4f:66:f8:ab:44:b5:96:93:23:50:4e:0f: 1f:75:a9:78:22:71:30:cc:ef:0a:a5:17:5a:03:de:c2:7e:63: 64:13:dc:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4qxmJr2MEzSxMQUIPaw2KhLbnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwN0I3NjhGNjc2Qjc4NjUwQUE4MjhGQTNENEIxQkJF MjhFRUQzQTAeFw0yNjA2MTcwNjE1MzRaFw0yNjA2MTgwNjU0MzRaMDMxMTAvBgNV BAMTKDQwQkZCOUYzNUY3QjgyQ0RGRDA3NjhGNzIwRjU0NzRGN0JCNzQyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DfrvRlDukQBhemkSeHxhcRH7 juKsSLniaXjyI4We17Vu1oy3Shw1P1PmXHZqeFyukw45ErQ336lg/L2iWoTVShHM GEgrqFtwPOjSUAPC2Tac//+F1fVLYmVzh9RMlPsByMfLoS7RpGqW6T+PA4Pa2dq/ S0iAVDIQixXP7aCnzPZ0ePCCE00y5v8ZoUT73xeTCSoM6+5xfNB6mmM6agmUg97S iVtHZkcTbzncyqQlONtIBF4YXy3TAU+yDYaN6oYpW2dLC2VyE0Lhfsh71Hg9y0xj 87ZTLqtPP2CE+zMEH1y27rA5J7jtMgzm/hzzCAXICajrdEGhDwXgfaY8x5nfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQL+58197gs39B2j3IPVHT3u3QpwwHwYDVR0j BBgwFoAU0Ae3aPZ2t4ZQqoKPo9Sxu+KO7TowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdhNmIyM2ItYzQxZS00NDQ5LWExNDktYmMwYzZjOGIwMTFiLzAvRDAwN0I3NjhG Njc2Qjc4NjUwQUE4MjhGQTNENEIxQkJFMjhFRUQzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDA3Qjc2OEY2NzZCNzg2NTBBQTgyOEZBM0Q0QjFCQkUyOEVF RDNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDAwN0I3NjhGNjc2Qjc4NjUwQUE4MjhGQTNENEIx QkJFMjhFRUQzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBT9wcd26EgtRJpT5f8xk2P/i0Nw7ZOxm3i 0IjdRF8ih4ySIGHsvaNlRFI5k4w16g6dwHYcLAzRbVi/X2wrj8eXdpYS96ASmAeU vcaoTOmmesYxMVTd8OjnGDxl6pj9rGIFE0nCJJLdKf9D1pJDCvN/DyvPSZftQnIm tfIMXgUQxh4LtSOYimEBuhI9NXF5su+43/safi+c2M4LGW0NKlQ0HOcqQOZwxtVE EJhj0aaoNK8NlbNkPJQrGEffG0V0gimLc2Ljr3TY8MeOZq/fhG9VM6wmQZtAVdbV TLXBtU9m+KtEtZaTI1BODx91qXgicTDM7wqlF1oD3sJ+Y2QT3EI= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:48 2026 by rpki-client