$ rpki-client -vvf rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft File: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft (raw, json) Hash identifier: pqnP0owgqJ9LTpy3IIVTKJGewNfcxGrYg6U/j5Qc4Tc= Subject key identifier: 58:46:CA:2A:48:10:30:C4:85:71:C6:33:A9:F2:E6:CD:A8:B5:FA:56 Authority key identifier: 05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF Certificate issuer: /CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Certificate serial: 08D4316C38E419A49867E34D6A0B76255CC922E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:42:21 +0000 Manifest this update: Wed 17 Jun 2026 03:37:21 +0000 Manifest next update: Thu 18 Jun 2026 04:15:21 +0000 Files and hashes: 1: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl (hash: 3KytDnB1cqX1DA58y7FMggy/p+lZVFUjmoWJP3qXnIc=) 2: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (hash: DKOQH9+FY5KWIJZ/d+jpR5uVEMysXkF+IGiRwUECgAs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d4:31:6c:38:e4:19:a4:98:67:e3:4d:6a:0b:76:25:5c:c9:22:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Validity Not Before: Jun 17 03:37:21 2026 GMT Not After : Jun 18 04:15:21 2026 GMT Subject: CN=5846CA2A481030C48571C633A9F2E6CDA8B5FA56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6c:d3:c9:42:f7:ca:be:a1:6c:35:c7:9f:94: 5f:ac:4e:1c:c5:1b:c9:f1:09:94:25:36:8e:8f:7a: 4a:62:b9:21:6c:e0:ef:8b:cb:a7:c8:d2:a6:71:64: 6e:76:da:34:67:e0:be:35:2e:97:45:d0:37:a8:b2: 45:58:23:11:b3:cc:fc:ef:36:76:39:6c:4a:5a:43: 1d:2d:f6:ad:33:6a:c8:dd:05:4a:a2:3e:41:4a:bf: c1:3a:42:a3:81:15:3d:05:18:76:02:f5:cb:6e:5d: 15:9c:92:91:d8:99:9d:16:93:66:2e:ce:ec:74:9c: 13:1a:d7:69:4c:28:8b:3e:79:01:6f:e0:63:9a:ae: 1b:d0:94:7d:38:0d:44:bc:d9:b2:dd:0b:74:c2:ae: 5f:33:0a:f7:94:e9:a9:49:0f:07:74:a7:64:db:9a: cf:6d:d4:ac:4d:f0:27:ee:69:a8:0e:8c:c0:42:59: 2b:87:72:cc:51:2c:49:1b:14:8d:58:3c:8a:70:5c: 28:e4:52:07:33:67:6d:92:c5:12:b1:2c:53:79:4c: 9a:45:c2:03:04:08:87:d0:5b:af:bf:54:b8:c5:f6: 25:a2:16:ea:21:40:a2:a4:a5:ea:ea:7c:de:7c:b9: 0a:da:8b:68:b1:a1:c5:b8:3e:93:97:96:7a:82:78: a9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:46:CA:2A:48:10:30:C4:85:71:C6:33:A9:F2:E6:CD:A8:B5:FA:56 X509v3 Authority Key Identifier: keyid:05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:aa:58:08:f6:ac:e6:94:50:f0:b3:85:1d:57:dc:4b:16:ce: 98:e0:b8:e0:f4:82:1d:eb:f6:f6:3e:15:30:47:c0:e5:a6:e9: 3b:74:de:e4:3a:f9:f4:22:c9:8f:e8:44:6f:a0:ae:52:8a:97: 90:01:cd:97:23:5e:fb:c5:8f:32:27:30:e4:d8:f6:e6:10:ec: 04:cf:4f:fb:18:ce:95:7d:2b:36:50:51:00:bc:0e:1c:b5:a2: 56:10:30:ee:62:93:65:a7:e7:ec:a9:9b:80:c2:7d:a9:3f:ec: 8a:05:54:46:96:fe:b9:ea:42:d2:6f:7d:90:bf:3c:f2:99:82: af:3c:b0:70:bf:b7:ab:9a:26:01:80:e6:e0:22:63:b5:c5:5b: 7c:fb:fc:fb:42:d8:20:d2:63:e3:40:6c:0e:f2:87:05:61:af: 95:42:3c:1c:e7:7c:1c:54:9b:f9:68:1d:7e:7d:70:10:37:9f: 13:3c:c9:cc:88:b5:af:15:4b:f4:3a:7c:b7:06:db:8e:0a:4b: f8:7f:33:bb:51:04:98:0c:0e:c8:d2:67:3a:2b:53:14:d9:94: 5d:4c:b9:1c:76:7e:56:41:55:23:d2:99:b3:59:6f:f3:3e:70: 96:a6:7c:c9:b7:55:ff:41:81:d1:3e:f5:86:16:d9:05:25:6a: a8:16:4a:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCNQxbDjkGaSYZ+NNagt2JVzJIugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdFRjdD MkY0OURBRjAeFw0yNjA2MTcwMzM3MjFaFw0yNjA2MTgwNDE1MjFaMDMxMTAvBgNV BAMTKDU4NDZDQTJBNDgxMDMwQzQ4NTcxQzYzM0E5RjJFNkNEQThCNUZBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwbNPJQvfKvqFsNceflF+sThzF G8nxCZQlNo6PekpiuSFs4O+Ly6fI0qZxZG522jRn4L41LpdF0DeoskVYIxGzzPzv NnY5bEpaQx0t9q0zasjdBUqiPkFKv8E6QqOBFT0FGHYC9ctuXRWckpHYmZ0Wk2Yu zux0nBMa12lMKIs+eQFv4GOarhvQlH04DUS82bLdC3TCrl8zCveU6alJDwd0p2Tb ms9t1KxN8CfuaagOjMBCWSuHcsxRLEkbFI1YPIpwXCjkUgczZ22SxRKxLFN5TJpF wgMECIfQW6+/VLjF9iWiFuohQKKkperqfN58uQrai2ixocW4PpOXlnqCeKk5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWEbKKkgQMMSFccYzqfLmzai1+lYwHwYDVR0j BBgwFoAUBWDi/QHG590D5Nf/swt+98L0na8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyZjk4YTAtMDk0Ny00ZjdhLWJlZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQw MUM2RTdERDAzRTREN0ZGQjMwQjdFRjdDMkY0OURBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNTYwRTJGRDAxQzZFN0REMDNFNEQ3RkZCMzBCN0VGN0MyRjQ5 REFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyZjk4YTAtMDk0Ny00ZjdhLWJl ZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdF RjdDMkY0OURBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqqWAj2rOaUUPCzhR1X3EsWzpjguOD0gh3r 9vY+FTBHwOWm6Tt03uQ6+fQiyY/oRG+grlKKl5ABzZcjXvvFjzInMOTY9uYQ7ATP T/sYzpV9KzZQUQC8Dhy1olYQMO5ik2Wn5+ypm4DCfak/7IoFVEaW/rnqQtJvfZC/ PPKZgq88sHC/t6uaJgGA5uAiY7XFW3z7/PtC2CDSY+NAbA7yhwVhr5VCPBznfBxU m/loHX59cBA3nxM8ycyIta8VS/Q6fLcG244KS/h/M7tRBJgMDsjSZzorUxTZlF1M uRx2flZBVSPSmbNZb/M+cJamfMm3Vf9BgdE+9YYW2QUlaqgWSuA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:08:57 2026 by rpki-client