$ rpki-client -vvf rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft File: 328533C99D9FDEAA8F1418F15BD32B96BC206058.mft (raw, json) Hash identifier: n9sRGu6L3pzAekYR7MHBuFTuWuh0fAuLA12TgHujMz0= Subject key identifier: 5E:9A:0D:5F:8E:A4:E6:E1:00:CA:DC:C4:32:96:49:24:2F:DF:0A:F2 Authority key identifier: 32:85:33:C9:9D:9F:DE:AA:8F:14:18:F1:5B:D3:2B:96:BC:20:60:58 Certificate issuer: /CN=328533C99D9FDEAA8F1418F15BD32B96BC206058 Certificate serial: 21537D98A471AF6049730E06B113515570C5BFED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 20:18:45 +0000 Manifest this update: Tue 16 Jun 2026 20:13:45 +0000 Manifest next update: Wed 17 Jun 2026 21:16:45 +0000 Files and hashes: 1: 3130332e3231392e362e302f32342d3234203d3e203338313537.roa (hash: WdtifxvKK3KsxSLiwEXLWrNPcTtmbGv7tQrCl/tBPS8=) 2: 328533C99D9FDEAA8F1418F15BD32B96BC206058.crl (hash: 8PsSmCMWJynETqyng3yUbs+b+KFyZTuQqx97U4XFF8g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.crl rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:53:7d:98:a4:71:af:60:49:73:0e:06:b1:13:51:55:70:c5:bf:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=328533C99D9FDEAA8F1418F15BD32B96BC206058 Validity Not Before: Jun 16 20:13:45 2026 GMT Not After : Jun 17 21:16:45 2026 GMT Subject: CN=5E9A0D5F8EA4E6E100CADCC4329649242FDF0AF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e7:47:12:6a:73:d6:e8:c5:98:9a:d5:df:d4: af:70:4f:89:51:ee:73:b7:db:ea:ad:53:16:0f:7e: c0:cb:62:24:da:90:45:c7:b4:a4:67:4c:0c:80:22: 88:0b:ca:b5:1f:bc:9f:06:db:8c:13:e9:12:7f:06: 58:89:9b:97:57:54:65:8b:0c:24:f8:07:33:0b:40: 9a:6d:94:5f:4f:af:a4:3c:d7:5c:20:49:00:c8:1f: 11:e6:45:75:41:44:5f:eb:75:65:55:9c:97:21:6a: 71:9b:7a:d7:12:d8:63:c0:9a:59:d6:07:45:47:50: 22:e8:43:f7:8e:1e:bd:61:34:eb:c0:e5:c2:73:ec: 9c:9d:3f:c4:63:38:ef:10:28:e7:3b:6b:f9:67:67: 97:ea:6f:a2:d1:06:c1:25:0b:67:d5:a5:51:30:f8: d6:83:13:67:23:5c:64:16:db:27:72:ef:0c:ed:de: 8c:ac:5f:dc:a9:d9:23:c8:1e:08:ac:70:90:33:3b: 98:8e:41:73:4f:b2:96:0b:25:9b:54:9d:32:24:d6: c3:b5:4b:05:67:07:3c:d5:1c:c0:50:34:d6:8f:df: f7:d8:bd:a0:f2:06:80:ed:e4:a7:ce:35:b4:7b:24: 8e:2b:94:0d:2a:d2:b9:15:51:24:53:f6:19:cd:df: fd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9A:0D:5F:8E:A4:E6:E1:00:CA:DC:C4:32:96:49:24:2F:DF:0A:F2 X509v3 Authority Key Identifier: keyid:32:85:33:C9:9D:9F:DE:AA:8F:14:18:F1:5B:D3:2B:96:BC:20:60:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b8:4f:9e:30:bf:3b:0c:67:31:cc:02:68:eb:62:05:fe:47: eb:f4:9a:31:72:06:c4:fd:79:8b:b4:e3:bd:ba:e0:32:eb:18: 91:a5:ee:ba:ce:68:92:ea:f5:79:fd:21:1d:18:24:bc:de:b9: 04:77:fa:f6:79:48:e5:4c:17:1b:67:ab:c3:62:f5:1f:0b:13: c8:e8:20:1b:38:0d:d5:4c:dd:67:95:f1:a7:2e:07:63:2a:42: 1a:42:82:5e:0e:ef:2e:ec:97:6c:5a:34:8b:0a:06:88:c2:b8: 29:31:f3:c3:4c:32:72:c7:f7:8f:0e:ae:c9:1d:8f:b9:31:c3: 6f:fe:3d:b6:79:fd:43:77:2e:a9:7c:0a:da:2a:83:33:f9:68: f5:c2:45:fa:ed:97:35:f0:b0:c0:56:12:51:ef:ea:fb:02:06: 61:b6:be:0b:d8:ff:35:33:22:c8:34:f1:80:e5:42:86:7c:ea: da:10:84:3b:1e:7d:31:e6:aa:1a:2a:72:f1:f9:e3:06:f9:c4: 58:88:3d:21:4a:7f:44:f6:95:d2:78:43:60:b6:5f:f5:a7:4f: 44:72:77:78:ff:7d:87:30:af:4f:99:52:90:bc:74:2e:f5:52: 86:cd:89:74:76:69:11:d4:25:28:03:9d:a6:be:9f:5d:f2:85: f7:c1:44:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIVN9mKRxr2BJcw4GsRNRVXDFv+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI4NTMzQzk5RDlGREVBQThGMTQxOEYxNUJEMzJCOTZC QzIwNjA1ODAeFw0yNjA2MTYyMDEzNDVaFw0yNjA2MTcyMTE2NDVaMDMxMTAvBgNV BAMTKDVFOUEwRDVGOEVBNEU2RTEwMENBRENDNDMyOTY0OTI0MkZERjBBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC350cSanPW6MWYmtXf1K9wT4lR 7nO32+qtUxYPfsDLYiTakEXHtKRnTAyAIogLyrUfvJ8G24wT6RJ/BliJm5dXVGWL DCT4BzMLQJptlF9Pr6Q811wgSQDIHxHmRXVBRF/rdWVVnJchanGbetcS2GPAmlnW B0VHUCLoQ/eOHr1hNOvA5cJz7JydP8RjOO8QKOc7a/lnZ5fqb6LRBsElC2fVpVEw +NaDE2cjXGQW2ydy7wzt3oysX9yp2SPIHgiscJAzO5iOQXNPspYLJZtUnTIk1sO1 SwVnBzzVHMBQNNaP3/fYvaDyBoDt5KfONbR7JI4rlA0q0rkVUSRT9hnN3/0NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXpoNX46k5uEAytzEMpZJJC/fCvIwHwYDVR0j BBgwFoAUMoUzyZ2f3qqPFBjxW9MrlrwgYFgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAyMWVlNzYtYTlmZi00YmZhLTgyMjMtOTQ2ZWVjY2NmMDM2LzAvMzI4NTMzQzk5 RDlGREVBQThGMTQxOEYxNUJEMzJCOTZCQzIwNjA1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMjg1MzNDOTlEOUZERUFBOEYxNDE4RjE1QkQzMkI5NkJDMjA2 MDU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAyMWVlNzYtYTlmZi00YmZhLTgy MjMtOTQ2ZWVjY2NmMDM2LzAvMzI4NTMzQzk5RDlGREVBQThGMTQxOEYxNUJEMzJC OTZCQzIwNjA1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIG4T54wvzsMZzHMAmjrYgX+R+v0mjFyBsT9 eYu047264DLrGJGl7rrOaJLq9Xn9IR0YJLzeuQR3+vZ5SOVMFxtnq8Ni9R8LE8jo IBs4DdVM3WeV8acuB2MqQhpCgl4O7y7sl2xaNIsKBojCuCkx88NMMnLH948Orskd j7kxw2/+PbZ5/UN3Lql8CtoqgzP5aPXCRfrtlzXwsMBWElHv6vsCBmG2vgvY/zUz Isg08YDlQoZ86toQhDsefTHmqhoqcvH54wb5xFiIPSFKf0T2ldJ4Q2C2X/WnT0Ry d3j/fYcwr0+ZUpC8dC71UobNiXR2aRHUJSgDnaa+n13yhffBRHI= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:44 2026 by rpki-client