$ rpki-client -vvf rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft File: D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft (raw, json) Hash identifier: mVWAo2y947Khpa0L8eH82YAeCff3gC8RcUqQiJBMN4s= Subject key identifier: E0:6E:18:CB:3B:C3:9B:44:EB:62:3D:E7:55:56:40:05:D5:21:E4:5D Authority key identifier: D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2 Certificate issuer: /CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2 Certificate serial: 2087037C54312002A17A0DA0C5E28A0C11643354 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 00:54:03 +0000 Manifest this update: Wed 17 Jun 2026 00:49:03 +0000 Manifest next update: Thu 18 Jun 2026 03:31:03 +0000 Files and hashes: 1: 3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (hash: ut81wNpcxfZaRtfYOIEu10o1O6sE5PD51eUSrS4eL90=) 2: 3130332e31342e37352e302f32342d3234203d3e20313334363332.roa (hash: peOff/bMaPRVFv7RqgmuHQIO5KzTIHkBdGVMuXkb3Y0=) 3: 323030313a6466373a353430303a3a2f34382d3438203d3e20313334363332.roa (hash: rH/HlzNj8EN1t4rBBnxlIYgmTwkrb8JdSMLp5n/vbuw=) 4: D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl (hash: VONq+yg4xOIKlfA0nkPdSCl0hePY23Q9TZNVGoREf6U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:87:03:7c:54:31:20:02:a1:7a:0d:a0:c5:e2:8a:0c:11:64:33:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D57816B86ABF0E6E25D84D1D5EB37F57672082E2 Validity Not Before: Jun 17 00:49:03 2026 GMT Not After : Jun 18 03:31:03 2026 GMT Subject: CN=E06E18CB3BC39B44EB623DE755564005D521E45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ef:03:b9:17:74:10:6a:41:8a:74:37:6d:48: 01:ec:62:4a:47:d6:f6:9a:27:02:5b:70:f0:43:1c: 7f:e0:09:60:b0:50:03:6f:f0:c6:2d:46:05:35:4b: 06:88:74:eb:a9:67:f1:a3:1b:3a:ae:90:03:3e:f1: 8e:96:5b:20:81:87:f1:da:67:72:85:0a:ee:95:57: 3d:2b:f1:cc:9f:32:0c:4b:da:35:0f:c0:7e:fb:d9: 77:89:8d:30:99:32:55:64:8e:c6:b0:af:0e:2e:a8: f3:d6:41:50:e0:aa:c2:e9:64:6a:77:9b:07:2f:e5: e5:e2:73:d0:e3:cd:c4:ee:27:85:e4:44:66:b5:c6: 32:a8:41:e0:f1:4f:2d:5a:77:d0:d1:c9:57:13:ad: d1:2d:03:c9:52:38:a6:eb:06:04:39:d9:73:39:91: 22:a9:7e:3a:d6:42:65:5d:b6:25:8c:6b:3f:8b:4f: 26:ce:04:9c:8f:8e:69:fa:bc:ad:90:79:5e:e4:71: 91:05:b8:ff:a7:75:f0:64:08:6f:06:69:2f:e3:b9: 2f:57:a1:eb:2b:ea:7e:f8:2d:39:3b:0b:db:27:d2: 52:44:2d:de:bb:7c:06:89:df:46:89:90:7f:f9:b8: 6a:b5:4e:3d:f6:b8:8c:3e:12:cb:86:83:99:56:fb: 85:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6E:18:CB:3B:C3:9B:44:EB:62:3D:E7:55:56:40:05:D5:21:E4:5D X509v3 Authority Key Identifier: keyid:D5:78:16:B8:6A:BF:0E:6E:25:D8:4D:1D:5E:B3:7F:57:67:20:82:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/D57816B86ABF0E6E25D84D1D5EB37F57672082E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c8:45:2b:b1:fa:ac:1c:9d:ff:03:d0:3b:45:72:bb:db:9d: 9f:78:b8:97:b7:46:e3:8b:d4:8d:f6:5f:4c:3b:af:e6:02:4a: 91:45:ce:98:26:37:ef:aa:95:a3:c9:ec:9d:f3:eb:30:37:3c: 9c:dc:28:8e:41:cb:e8:89:1c:46:2c:ca:2f:15:5f:18:5c:b2: 66:14:c8:db:71:6d:a6:de:4a:f2:50:78:7e:6d:c0:97:3b:c1: 98:b6:56:0e:3b:51:d0:b9:f7:a1:c4:98:65:f9:5e:ce:b3:3c: 27:9f:3a:7f:b7:50:bb:47:aa:29:c7:b6:35:4a:d8:a8:2f:c8: 61:9a:61:88:34:82:ae:b3:67:91:e8:99:be:ea:13:b6:14:c5: 9e:3d:ec:f1:48:55:48:82:e0:19:5e:9d:3e:4e:d0:a8:43:01: 16:ac:e2:6c:e0:71:9f:80:94:cd:2b:2f:5b:c9:50:1e:d0:d7: d1:53:b8:4d:fc:02:44:3a:66:02:8a:68:d2:e9:e5:d1:79:86: bc:9a:12:c2:41:2c:55:42:a3:5d:db:6e:7e:67:37:31:f1:64: fe:90:6a:c9:bb:70:4c:ab:75:35:19:4f:f8:93:45:c3:50:74: c1:5b:92:9c:cd:63:a1:30:45:47:55:9f:ea:c3:63:d3:87:d5: 6a:4f:0b:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIIcDfFQxIAKheg2gxeKKDBFkM1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU3ODE2Qjg2QUJGMEU2RTI1RDg0RDFENUVCMzdGNTc2 NzIwODJFMjAeFw0yNjA2MTcwMDQ5MDNaFw0yNjA2MTgwMzMxMDNaMDMxMTAvBgNV BAMTKEUwNkUxOENCM0JDMzlCNDRFQjYyM0RFNzU1NTY0MDA1RDUyMUU0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu7wO5F3QQakGKdDdtSAHsYkpH 1vaaJwJbcPBDHH/gCWCwUANv8MYtRgU1SwaIdOupZ/GjGzqukAM+8Y6WWyCBh/Ha Z3KFCu6VVz0r8cyfMgxL2jUPwH772XeJjTCZMlVkjsawrw4uqPPWQVDgqsLpZGp3 mwcv5eXic9DjzcTuJ4XkRGa1xjKoQeDxTy1ad9DRyVcTrdEtA8lSOKbrBgQ52XM5 kSKpfjrWQmVdtiWMaz+LTybOBJyPjmn6vK2QeV7kcZEFuP+ndfBkCG8GaS/juS9X oesr6n74LTk7C9sn0lJELd67fAaJ30aJkH/5uGq1Tj32uIw+EsuGg5lW+4XNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4G4YyzvDm0TrYj3nVVZABdUh5F0wHwYDVR0j BBgwFoAU1XgWuGq/Dm4l2E0dXrN/V2cgguIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTAwMGUyM2UtZjQ0YS00Y2ZjLWJmNTYtZDk5YTA5MmQ3MzE0LzAvRDU3ODE2Qjg2 QUJGMEU2RTI1RDg0RDFENUVCMzdGNTc2NzIwODJFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTc4MTZCODZBQkYwRTZFMjVEODREMUQ1RUIzN0Y1NzY3MjA4 MkUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAwMGUyM2UtZjQ0YS00Y2ZjLWJm NTYtZDk5YTA5MmQ3MzE0LzAvRDU3ODE2Qjg2QUJGMEU2RTI1RDg0RDFENUVCMzdG NTc2NzIwODJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnIRSux+qwcnf8D0DtFcrvbnZ94uJe3RuOL 1I32X0w7r+YCSpFFzpgmN++qlaPJ7J3z6zA3PJzcKI5By+iJHEYsyi8VXxhcsmYU yNtxbabeSvJQeH5twJc7wZi2Vg47UdC596HEmGX5Xs6zPCefOn+3ULtHqinHtjVK 2KgvyGGaYYg0gq6zZ5Homb7qE7YUxZ497PFIVUiC4BlenT5O0KhDARas4mzgcZ+A lM0rL1vJUB7Q19FTuE38AkQ6ZgKKaNLp5dF5hryaEsJBLFVCo13bbn5nNzHxZP6Q asm7cEyrdTUZT/iTRcNQdMFbkpzNY6EwRUdVn+rDY9OH1WpPCz0= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:01 2026 by rpki-client