$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft File: 4242BEFAB7FD9E772FB16847C540331384EE1024.mft (raw, json) Hash identifier: 565JKxE/gq6vzC42F/rCe5RE/o6WlWsaVMWqYGG+RLs= Subject key identifier: AC:BE:54:FA:35:F1:53:5C:D6:D3:44:FA:F1:15:09:41:6C:08:37:42 Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 Certificate issuer: /CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Certificate serial: 153A72E396E1A387DAFC3F2B7262D458E222F502 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 08:54:43 +0000 Manifest this update: Sat 13 Jun 2026 08:49:43 +0000 Manifest next update: Sun 14 Jun 2026 12:29:43 +0000 Files and hashes: 1: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (hash: PfMnHFIZGrnZM82g+rsBwK7aW3WScriYgqF0KRQ2e7o=) 2: 4242BEFAB7FD9E772FB16847C540331384EE1024.crl (hash: 7vUsk2MYFAFdTK/L3hYQDZQz+qMhXnJwRik1sZTYQ74=) 3: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (hash: nXrFney4rm86RaxvLz8FHxrD0eDVyhHMOFWuNh0v780=) 4: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (hash: HZhaUoMvo6PbB0DDiHNG1KzdNqQKbOCBQCGJxhRr7TU=) 5: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (hash: ENboBx8oAXnbGQ10S7i2zUMk/RdQE6cutileOuH+d/M=) 6: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (hash: tIIyaOJKHjPPuva/q/Aqc1Qh+BSiqDBH0wmDFkgmMzY=) 7: 323030313a6632303a663030303a3a2f33362d3438203d3e203338313534.roa (hash: yBBw20MUl3ywel5nMkYQ+sxWLo0uKsXTdelznoPGQgw=) 8: 3230332e38332e32362e302f32332d3234203d3e203538333738.roa (hash: Cw/pDcSCd6i3ij4/wfpHGGndxOrkB5cRBItVY3wwyXY=) 9: 3230322e3138322e3136302e302f31392d3234203d3e2039383735.roa (hash: ZoyEeEkhjYB7kmWXbankgfqmtUA/RIwDGWmG85rq3MM=) 10: 3230322e3138322e3137372e302f32342d3234203d3e203538343738.roa (hash: 5cRboxzFOLvbyc9aSM3Coqx837mIFEIAXFoJ+a6/PqQ=) 11: 323030313a6632303a323030303a3a2f33362d3438203d3e2039383735.roa (hash: df7n82FEObULXOysxP6bG6yjwPocx8D3thReHoveLMI=) 12: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (hash: 8HTV0U7VPfbofWQktj6RT5pn5RIkHHJ7XlxCG7/lIR4=) 13: 3130332e37312e3232342e302f32322d3234203d3e2039383735.roa (hash: C/tjvABwEX3e3XuDh6lRQ/cpU/5HYFGHpATqucNO6pQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3a:72:e3:96:e1:a3:87:da:fc:3f:2b:72:62:d4:58:e2:22:f5:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024 Validity Not Before: Jun 13 08:49:43 2026 GMT Not After : Jun 14 12:29:43 2026 GMT Subject: CN=ACBE54FA35F1535CD6D344FAF11509416C083742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3e:cb:72:ce:12:59:06:1b:48:d1:ea:88:cc: 95:c1:e7:b0:8d:81:e3:b1:fd:5f:e0:38:20:73:6c: 91:13:cc:e9:63:88:03:ec:32:ac:60:d0:f9:4d:da: f0:91:05:1b:c8:eb:d6:39:5d:1c:a9:66:15:68:56: ca:d1:1c:a3:65:3d:c4:7f:ff:e0:ff:e7:90:fc:c5: ab:ac:fd:89:e8:aa:f0:5e:c6:15:41:81:37:de:e6: c0:9a:0e:b3:a7:31:09:5f:16:0c:f8:2a:36:fb:9b: 9f:34:62:57:ee:e9:b6:77:7b:00:12:68:7b:d4:65: c1:b6:5c:20:ed:96:fb:09:05:2b:2b:df:87:04:2e: 1f:d4:0f:9b:59:a4:4f:ac:4b:d9:6c:0b:6a:71:0e: 1c:49:3a:fd:e1:48:7f:dc:35:28:0f:16:7d:9c:f0: 5f:ef:b7:85:55:39:ac:a2:1b:42:6a:b3:e0:88:ca: 82:3c:b8:33:83:cb:0c:d8:a0:5c:6c:0f:2e:0b:16: 15:0c:6b:45:23:59:fc:7b:f2:7e:ae:cc:e0:f2:f6: c5:c1:7a:c5:02:c5:aa:ff:ea:91:29:99:19:da:70: 73:2b:57:35:b3:ff:ab:50:23:0f:c3:54:39:0f:30: 6e:fc:c2:cf:b2:96:f3:37:ff:5b:64:72:bf:da:6f: 2f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BE:54:FA:35:F1:53:5C:D6:D3:44:FA:F1:15:09:41:6C:08:37:42 X509v3 Authority Key Identifier: keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:24:9c:60:51:ec:d1:8e:b9:b0:86:1a:7d:a3:42:23:e6:11: 98:ce:3d:cf:2f:3a:a6:d9:c9:94:4b:34:51:ef:54:32:0c:16: 14:70:96:f2:06:de:3b:77:94:77:dc:f3:6a:fc:f0:a5:91:98: 86:b3:2d:0f:e0:4f:e6:ca:a2:c8:ef:4e:8d:f6:2a:b1:34:84: 12:cc:0e:ad:94:0f:a1:d5:9f:4d:50:b5:16:b2:c7:0b:f5:d0: 19:eb:39:e1:06:b6:26:0c:8b:43:65:9c:54:70:39:05:b8:e0: 6e:63:67:56:eb:33:43:2b:e7:42:a3:1c:a8:b7:5b:e5:4e:54: c0:71:5d:c9:d5:dd:23:6d:50:79:77:e4:02:6a:2f:6c:fa:f9: 25:89:49:7e:df:47:8b:1d:f0:87:aa:c3:68:96:50:c0:bd:02: 98:b9:17:11:57:76:b7:08:cf:3a:22:ad:ac:f4:62:e0:c8:11: 45:fb:6b:df:c0:e4:1a:24:07:82:4b:6c:f6:1d:7a:53:99:05: b8:ad:f5:ce:29:1e:36:20:b6:d9:6c:54:69:0a:09:b2:97:35: 21:3f:4d:07:57:f6:7c:06:85:fb:2b:e9:7a:3d:3b:0a:8d:b6: 47:ab:7e:9e:51:9e:8a:d5:ac:98:98:b3:1e:d8:5b:e4:02:6a: ba:1b:d9:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFTpy45bho4fa/D8rcmLUWOIi9QIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4 NEVFMTAyNDAeFw0yNjA2MTMwODQ5NDNaFw0yNjA2MTQxMjI5NDNaMDMxMTAvBgNV BAMTKEFDQkU1NEZBMzVGMTUzNUNENkQzNDRGQUYxMTUwOTQxNkMwODM3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXPstyzhJZBhtI0eqIzJXB57CN geOx/V/gOCBzbJETzOljiAPsMqxg0PlN2vCRBRvI69Y5XRypZhVoVsrRHKNlPcR/ /+D/55D8xaus/YnoqvBexhVBgTfe5sCaDrOnMQlfFgz4Kjb7m580Ylfu6bZ3ewAS aHvUZcG2XCDtlvsJBSsr34cELh/UD5tZpE+sS9lsC2pxDhxJOv3hSH/cNSgPFn2c 8F/vt4VVOayiG0Jqs+CIyoI8uDODywzYoFxsDy4LFhUMa0UjWfx78n6uzODy9sXB esUCxar/6pEpmRnacHMrVzWz/6tQIw/DVDkPMG78ws+ylvM3/1tkcr/aby8PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrL5U+jXxU1zW00T68RUJQWwIN0IwHwYDVR0j BBgwFoAUQkK++rf9nncvsWhHxUAzE4TuECQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJiZmU3NzYtMDBhMy00Nzc2LWJmM2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFC N0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4NEVFMTAyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjQyQkVGQUI3RkQ5RTc3MkZCMTY4NDdDNTQwMzMxMzg0RUUx MDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJiZmU3NzYtMDBhMy00Nzc2LWJm M2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMz MTM4NEVFMTAyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0knGBR7NGOubCGGn2jQiPmEZjOPc8vOqbZ yZRLNFHvVDIMFhRwlvIG3jt3lHfc82r88KWRmIazLQ/gT+bKosjvTo32KrE0hBLM Dq2UD6HVn01QtRayxwv10BnrOeEGtiYMi0NlnFRwOQW44G5jZ1brM0Mr50KjHKi3 W+VOVMBxXcnV3SNtUHl35AJqL2z6+SWJSX7fR4sd8Ieqw2iWUMC9Api5FxFXdrcI zzoiraz0YuDIEUX7a9/A5BokB4JLbPYdelOZBbit9c4pHjYgttlsVGkKCbKXNSE/ TQdX9nwGhfsr6Xo9OwqNtkerfp5RnorVrJiYsx7YW+QCarob2eY= -----END CERTIFICATE-----Generated at Sun Jun 14 06:30:55 2026 by rpki-client