$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft File: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft (raw, json) Hash identifier: w3U9j4Px6QV1GD4smsya7f1VwhYr4Bhu3HRvCR4C4N4= Subject key identifier: BD:0C:AA:54:EE:50:BD:89:40:B8:92:4C:08:97:C6:DB:B5:7D:B1:DE Authority key identifier: A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 Certificate issuer: /CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Certificate serial: 53B61E5886982628ABFB0B64133880BBA35074B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft Manifest number: 37 Signing time: Fri 12 Jun 2026 15:59:33 +0000 Manifest this update: Fri 12 Jun 2026 15:54:33 +0000 Manifest next update: Sat 13 Jun 2026 19:55:33 +0000 Files and hashes: 1: A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl (hash: UVppHkAsHDpGWc9PTPwmiP0Ku55CT+77mMfQAnpLTUU=) 2: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: 8YrdvedqGs1zZAIQAtRZi80VSrXLRsF6zbtnQUstSsA=) 3: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: m7Frx9lSqsLf1s8zbJ/qpER1sGLgEtc9hyQy6nCFDhY=) 4: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: AZJ4QAHlxTzcVIbJwO/UxabGeC31FjTnD/rHg0D3/ME=) 5: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: +IUhzjX4iJxCcMgbcQWdmMHcD7sxtYcY/3hZmSmLykA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 19:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b6:1e:58:86:98:26:28:ab:fb:0b:64:13:38:80:bb:a3:50:74:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800 Validity Not Before: Jun 12 15:54:33 2026 GMT Not After : Jun 13 19:55:33 2026 GMT Subject: CN=BD0CAA54EE50BD8940B8924C0897C6DBB57DB1DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:f9:2d:7e:f2:55:74:1b:53:98:f3:fc:25: dc:d3:4a:c9:43:38:3d:a8:5d:91:20:aa:53:fd:16: ae:22:dc:98:b2:fe:81:1f:b3:b7:52:06:b5:1e:af: b0:42:bc:34:96:fb:ca:35:7b:5f:77:d8:13:c0:c8: 38:28:44:0c:c2:70:16:e2:2d:e6:41:e1:2f:73:9e: 11:36:f0:b0:ef:f9:b7:e0:3a:f9:4c:b1:db:8e:1e: 6e:05:cd:21:f3:1b:95:6c:3c:97:4e:ad:5e:1e:1a: 78:70:9a:44:d0:0c:61:86:c3:2a:90:98:32:9f:21: 08:af:6d:20:68:13:5a:89:d6:7e:63:24:18:be:9e: b3:b4:03:ed:aa:e4:b5:47:8e:9b:15:8d:38:5f:13: 74:de:6d:cc:b0:1e:34:37:e2:fe:c2:0b:b5:1f:66: d0:bb:43:83:21:3a:2a:9b:c3:ba:f6:a9:96:53:56: 0c:06:e5:a6:9e:79:8c:73:5a:04:87:7b:19:5b:14: bf:e8:06:8b:b1:1e:3b:b1:66:a3:32:f5:cd:b8:8b: ca:15:a8:09:e4:36:b4:34:96:dc:c7:02:bf:4e:33: 88:01:54:fb:4f:ae:ef:16:0c:b1:f8:13:a7:a9:67: 97:08:13:b6:67:aa:ea:a5:f4:13:86:95:38:76:f2: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0C:AA:54:EE:50:BD:89:40:B8:92:4C:08:97:C6:DB:B5:7D:B1:DE X509v3 Authority Key Identifier: keyid:A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1e:74:30:e6:f7:12:45:da:3b:5e:53:f9:2e:3d:dc:c5:d9: 21:47:5c:16:42:4f:e0:a6:ef:34:b1:65:bc:01:19:09:95:db: 1f:cd:4d:6a:8e:9a:e9:80:c4:f1:9e:74:23:a4:3e:8a:5d:dd: 64:26:4b:25:08:8f:05:87:fa:74:2b:43:aa:f1:19:51:89:6d: 53:97:64:00:2d:e2:54:bb:71:62:df:fb:88:fe:20:38:08:e8: 12:3b:12:cd:56:1d:66:b0:96:16:68:c0:b3:1e:e2:33:43:ef: a3:d5:92:1b:3a:ef:84:80:6c:f9:5e:66:c9:c9:74:44:6b:17: 2e:fb:9c:96:57:ae:b0:77:3b:a6:b7:e0:b0:3b:70:72:9c:0f: 20:10:af:aa:60:c5:c2:85:b9:32:f7:1d:a5:24:e9:72:aa:56: 03:ac:d9:0d:9c:fb:b3:9c:c5:8b:ec:6a:2e:7d:30:0e:20:ce: fc:07:96:3e:a7:c3:50:ae:44:59:88:ff:e5:4d:e1:32:87:bc: 72:4a:ed:26:e9:3b:b1:fa:56:43:9e:f5:11:36:09:9c:73:9c: 3a:5a:eb:69:b4:39:1d:92:3b:f1:bf:bf:6b:bd:66:34:cb:75: d0:f1:f6:3d:42:8e:3b:21:cb:f2:c7:cc:8c:84:62:96:6d:e8: 9b:ae:41:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU7YeWIaYJiir+wtkEziAu6NQdLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5QzVF MjJBQjgwMDAeFw0yNjA2MTIxNTU0MzNaFw0yNjA2MTMxOTU1MzNaMDMxMTAvBgNV BAMTKEJEMENBQTU0RUU1MEJEODk0MEI4OTI0QzA4OTdDNkRCQjU3REIxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd2vktfvJVdBtTmPP8JdzTSslD OD2oXZEgqlP9Fq4i3Jiy/oEfs7dSBrUer7BCvDSW+8o1e1932BPAyDgoRAzCcBbi LeZB4S9znhE28LDv+bfgOvlMsduOHm4FzSHzG5VsPJdOrV4eGnhwmkTQDGGGwyqQ mDKfIQivbSBoE1qJ1n5jJBi+nrO0A+2q5LVHjpsVjThfE3TebcywHjQ34v7CC7Uf ZtC7Q4MhOiqbw7r2qZZTVgwG5aaeeYxzWgSHexlbFL/oBouxHjuxZqMy9c24i8oV qAnkNrQ0ltzHAr9OM4gBVPtPru8WDLH4E6epZ5cIE7Znquql9BOGlTh28mWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvQyqVO5QvYlAuJJMCJfG27V9sd4wHwYDVR0j BBgwFoAUpTNv7/ER1bklqJVOU8TJxeIquAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGM1NGJlOWEtOWI1ZC00YzY0LWI0ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZG MTExRDVCOTI1QTg5NTRFNTNDNEM5QzVFMjJBQjgwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTMzNkZFRkYxMTFENUI5MjVBODk1NEU1M0M0QzlDNUUyMkFC ODAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5 QzVFMjJBQjgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUedDDm9xJF2jteU/kuPdzF2SFHXBZCT+Cm 7zSxZbwBGQmV2x/NTWqOmumAxPGedCOkPopd3WQmSyUIjwWH+nQrQ6rxGVGJbVOX ZAAt4lS7cWLf+4j+IDgI6BI7Es1WHWawlhZowLMe4jND76PVkhs674SAbPleZsnJ dERrFy77nJZXrrB3O6a34LA7cHKcDyAQr6pgxcKFuTL3HaUk6XKqVgOs2Q2c+7Oc xYvsai59MA4gzvwHlj6nw1CuRFmI/+VN4TKHvHJK7SbpO7H6VkOe9RE2CZxznDpa 62m0OR2SO/G/v2u9ZjTLddDx9j1Cjjshy/LHzIyEYpZt6JuuQf8= -----END CERTIFICATE-----Generated at Sat Jun 13 10:37:46 2026 by rpki-client