$ rpki-client -vvf rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft File: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft (raw, json) Hash identifier: mF8+OR54zgAYDHTZvBaFehomCBeV2AtXYA14Tz+q9rk= Subject key identifier: 89:5A:35:E9:4E:23:EB:64:8C:60:99:D8:58:23:3B:2C:B8:4A:AE:D1 Authority key identifier: 1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA Certificate issuer: /CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Certificate serial: 1CC6A4F1DC0BFEE1368DE47AD8ED752DD0261BA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:34:43 +0000 Manifest this update: Wed 17 Jun 2026 01:29:43 +0000 Manifest next update: Thu 18 Jun 2026 05:23:43 +0000 Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: nSsVilLmRiJa0+a7BBDxlGj708JBl0xDsJ3rq/l4Ock=) 2: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl (hash: kFxp+mOecZ/ilAnlxaDlmF/jhcdoCwnRZL4u9+Aob2o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c6:a4:f1:dc:0b:fe:e1:36:8d:e4:7a:d8:ed:75:2d:d0:26:1b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Validity Not Before: Jun 17 01:29:43 2026 GMT Not After : Jun 18 05:23:43 2026 GMT Subject: CN=895A35E94E23EB648C6099D858233B2CB84AAED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c4:97:bf:94:1b:c7:55:5b:6e:72:fc:1f:e2: f1:3c:09:04:e9:36:11:f3:3d:c3:d3:6c:6f:fb:02: af:bc:41:81:27:9f:76:58:22:50:53:fe:f9:2d:5f: e0:e8:f9:fa:7e:cc:24:3d:f5:32:c0:cf:fe:ae:ad: b5:ce:ab:c8:33:f7:9a:ce:39:59:8a:24:51:fa:4f: c5:cd:96:f3:66:e7:0e:14:db:5e:fa:39:3a:01:26: 4a:70:5e:20:91:79:09:48:9a:dc:c5:56:c8:6d:83: 21:00:52:0f:4d:ab:91:a7:08:4f:c6:6f:20:5a:d0: 5f:fe:59:a6:3e:72:9c:68:81:89:32:59:f8:95:d2: 3e:e4:bd:c7:75:0e:fb:93:f2:6f:bc:c9:c6:e8:90: db:9b:be:1a:bc:18:35:90:ad:da:cd:d4:6b:e3:cb: 17:98:58:75:eb:49:2f:d6:fe:3d:de:c3:15:84:91: e1:d7:8b:71:7a:02:0b:17:05:bb:2f:8b:a3:f5:c4: 00:35:de:54:67:f9:34:e7:a7:0f:82:3f:c5:4f:f9: a9:97:fe:ab:50:aa:c7:8c:8c:b3:05:dd:3c:ad:a6: 90:45:a6:78:5c:58:cb:a2:36:f9:6c:b9:92:25:80: 0c:8a:ea:db:4c:58:27:43:27:28:de:2d:7e:cc:76: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5A:35:E9:4E:23:EB:64:8C:60:99:D8:58:23:3B:2C:B8:4A:AE:D1 X509v3 Authority Key Identifier: keyid:1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:eb:95:f5:b5:f5:8b:72:b6:62:35:cc:b0:31:d0:64:9e:08: 1c:14:63:0b:a0:04:e0:a3:b7:90:38:29:d7:e5:ec:84:09:20: b5:87:fb:1d:9c:53:03:14:9d:e2:44:f1:5e:7d:88:ec:e2:08: c7:56:71:c1:f4:e2:20:c4:95:db:18:f8:91:82:29:4e:5d:4b: 7f:5a:67:34:26:9c:e4:cd:d5:90:af:8f:1f:8a:42:ad:72:bd: dc:59:32:5c:b1:6b:7b:f0:9d:3f:59:55:22:26:ab:ca:c1:53: 0b:4b:13:f8:ed:69:68:17:64:b7:fb:43:65:28:9a:38:ab:1c: b6:8b:86:d6:8d:5b:28:f8:a1:5e:80:00:bb:6c:35:a4:5e:2b: da:7c:6c:f9:6a:5d:0d:0d:2f:b7:d6:d8:02:d2:2c:0e:6d:8c: a1:ec:19:31:ea:e9:55:57:65:fc:1c:ea:f4:36:16:45:ff:5f: 1e:01:12:9f:20:79:52:d0:f2:34:39:c5:27:3e:bf:a5:ad:b4: 4c:90:d7:7a:1c:4d:1e:06:c6:a2:74:00:28:96:05:04:29:84: 46:14:86:ef:3c:1f:ab:0c:e6:a6:c9:ff:86:89:a8:62:5b:21: c2:82:b0:e5:83:86:8e:75:61:37:07:63:ce:1b:4f:3a:e5:36: 54:3d:bd:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMak8dwL/uE2jeR62O11LdAmG6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhD MTA0NTFGQTAeFw0yNjA2MTcwMTI5NDNaFw0yNjA2MTgwNTIzNDNaMDMxMTAvBgNV BAMTKDg5NUEzNUU5NEUyM0VCNjQ4QzYwOTlEODU4MjMzQjJDQjg0QUFFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTxJe/lBvHVVtucvwf4vE8CQTp NhHzPcPTbG/7Aq+8QYEnn3ZYIlBT/vktX+Do+fp+zCQ99TLAz/6urbXOq8gz95rO OVmKJFH6T8XNlvNm5w4U2176OToBJkpwXiCReQlImtzFVshtgyEAUg9Nq5GnCE/G byBa0F/+WaY+cpxogYkyWfiV0j7kvcd1DvuT8m+8ycbokNubvhq8GDWQrdrN1Gvj yxeYWHXrSS/W/j3ewxWEkeHXi3F6AgsXBbsvi6P1xAA13lRn+TTnpw+CP8VP+amX /qtQqseMjLMF3TytppBFpnhcWMuiNvlsuZIlgAyK6ttMWCdDJyjeLX7MdnbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiVo16U4j62SMYJnYWCM7LLhKrtEwHwYDVR0j BBgwFoAUHUVzJchfP+4t5X/T7SUm2MEEUfowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQwMWIyZDEtMDFjYS00MGU4LWJmNzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVD ODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhDMTA0NTFGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDQ1NzMyNUM4NUYzRkVFMkRFNTdGRDNFRDI1MjZEOEMxMDQ1 MUZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2 RDhDMTA0NTFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDrlfW19YtytmI1zLAx0GSeCBwUYwugBOCj t5A4Kdfl7IQJILWH+x2cUwMUneJE8V59iOziCMdWccH04iDEldsY+JGCKU5dS39a ZzQmnOTN1ZCvjx+KQq1yvdxZMlyxa3vwnT9ZVSImq8rBUwtLE/jtaWgXZLf7Q2Uo mjirHLaLhtaNWyj4oV6AALtsNaReK9p8bPlqXQ0NL7fW2ALSLA5tjKHsGTHq6VVX Zfwc6vQ2FkX/Xx4BEp8geVLQ8jQ5xSc+v6WttEyQ13ocTR4GxqJ0ACiWBQQphEYU hu88H6sM5qbJ/4aJqGJbIcKCsOWDho51YTcHY84bTzrlNlQ9vUI= -----END CERTIFICATE-----Generated at Wed Jun 17 12:50:49 2026 by rpki-client