$ rpki-client -vvf rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft File: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft (raw, json) Hash identifier: DvjTOewdSzwtpgC8hgZAgahhtiaoW6Ev4ZcB6fi8XCI= Subject key identifier: 25:AC:E7:62:C0:38:EE:03:C3:5B:1B:19:EF:36:16:2D:11:BE:2A:22 Authority key identifier: 48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 Certificate issuer: /CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Certificate serial: 3C728059D19E3A555109A8D01D979205D9C848D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:48:11 +0000 Manifest this update: Tue 16 Jun 2026 19:43:11 +0000 Manifest next update: Wed 17 Jun 2026 22:13:11 +0000 Files and hashes: 1: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl (hash: MalWlZgUJAo8GpqMTWSHlyFtdIfgmRfMAPZZUfm9wfo=) 2: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: MWYhiIEDGx9DoNFz51QvtMWf3c6h+IW6waBKdCBpOXk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:72:80:59:d1:9e:3a:55:51:09:a8:d0:1d:97:92:05:d9:c8:48:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Validity Not Before: Jun 16 19:43:11 2026 GMT Not After : Jun 17 22:13:11 2026 GMT Subject: CN=25ACE762C038EE03C35B1B19EF36162D11BE2A22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:12:0e:53:f7:da:03:6a:4c:2d:c4:bf:0c:c7: 97:8c:a5:25:a3:ed:ff:8d:85:72:fa:34:46:ac:68: e0:ae:d8:7b:27:53:28:8f:bd:0a:bc:0c:dc:a5:f1: fc:47:45:83:99:b9:91:0b:0e:5f:e3:81:70:38:32: b7:4f:ff:e0:fa:18:86:81:8b:b0:dd:cc:ff:2d:09: 2f:ba:86:1e:4b:57:b8:b8:20:b0:c6:5d:5b:70:5c: 64:ec:53:3f:6a:0e:a0:2e:c5:47:ff:1b:4d:56:2e: 01:1c:6f:b0:4c:c2:af:4d:e2:b0:b5:16:d5:85:f8: 3c:73:f7:c9:49:11:f5:85:35:21:42:96:20:7c:70: 9d:e8:68:63:9f:c1:42:d9:d3:ec:36:e1:40:e3:6a: 4a:45:6c:9b:58:2d:38:8b:b0:30:11:c7:2f:53:2e: e2:b3:21:b0:49:8f:69:45:31:33:e4:57:30:bb:e7: a8:98:da:ba:b0:f3:ff:a6:9a:20:b7:c5:77:50:60: 36:3e:ab:ee:a5:d2:d1:8b:d5:8f:cc:36:85:8c:55: 0a:69:22:dc:75:d7:ca:9f:c6:e8:ec:73:44:35:27: 99:b3:25:13:3d:71:96:28:89:27:de:b5:f9:5e:ca: 62:df:23:6e:48:66:3a:8e:cf:5e:58:f1:7d:53:dc: 30:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AC:E7:62:C0:38:EE:03:C3:5B:1B:19:EF:36:16:2D:11:BE:2A:22 X509v3 Authority Key Identifier: keyid:48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:58:d5:d5:c5:22:d1:fd:27:de:f1:f0:c6:e7:ce:b6:0f:8e: 1c:3f:25:e9:4f:fe:88:cc:13:b9:99:b7:fe:98:61:1c:72:2c: d6:f2:35:4c:55:36:05:ed:d3:66:88:e5:bf:6f:e7:ba:17:01: 34:9e:df:5b:eb:14:ec:4a:1b:ab:4a:09:f9:ab:30:88:ce:60: cf:bd:0a:f1:d2:18:0a:80:5a:17:d1:69:b1:33:a3:c5:8f:b6: ed:7b:fc:d0:c5:47:e3:95:9d:ac:84:a9:35:84:f2:cc:5c:7b: 12:30:44:ad:68:6f:09:01:aa:14:4a:4f:70:f3:83:5c:41:28: 3f:ef:36:03:21:fa:05:d1:70:58:b2:63:f2:31:42:a0:6d:12: d3:aa:aa:fc:0f:52:dc:2d:84:68:ae:60:d6:5f:bc:dd:aa:ea: 30:66:40:c0:eb:9c:4f:05:e1:18:4e:15:55:fa:e6:b1:cc:07: d3:49:23:ea:2d:50:71:95:47:68:c4:b0:f1:67:16:5f:c8:64: 0f:c0:7b:40:11:2e:6b:07:82:7b:8f:6c:1c:27:d3:94:6a:af: b7:dc:11:77:0d:96:b0:06:1a:5c:72:9c:1b:9f:02:0c:85:79: 9b:02:e5:ea:40:8b:6c:16:71:b8:7f:80:51:9b:15:bd:93:0f: dc:ea:35:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPHKAWdGeOlVRCajQHZeSBdnISNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0 M0Q1NzZFNTAeFw0yNjA2MTYxOTQzMTFaFw0yNjA2MTcyMjEzMTFaMDMxMTAvBgNV BAMTKDI1QUNFNzYyQzAzOEVFMDNDMzVCMUIxOUVGMzYxNjJEMTFCRTJBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkEg5T99oDakwtxL8Mx5eMpSWj 7f+NhXL6NEasaOCu2HsnUyiPvQq8DNyl8fxHRYOZuZELDl/jgXA4MrdP/+D6GIaB i7DdzP8tCS+6hh5LV7i4ILDGXVtwXGTsUz9qDqAuxUf/G01WLgEcb7BMwq9N4rC1 FtWF+Dxz98lJEfWFNSFCliB8cJ3oaGOfwULZ0+w24UDjakpFbJtYLTiLsDARxy9T LuKzIbBJj2lFMTPkVzC756iY2rqw8/+mmiC3xXdQYDY+q+6l0tGL1Y/MNoWMVQpp Itx118qfxujsc0Q1J5mzJRM9cZYoiSfetfleymLfI25IZjqOz15Y8X1T3DDfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJaznYsA47gPDWxsZ7zYWLRG+KiIwHwYDVR0j BBgwFoAUSFyV6rlp1qSLTgeffq8vGkPVduUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjNiYTAyNGItODdmMi00ZWRkLTg5ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFC OTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0M0Q1NzZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODVDOTVFQUI5NjlENkE0OEI0RTA3OUY3RUFGMkYxQTQzRDU3 NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJG MUE0M0Q1NzZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFY1dXFItH9J97x8MbnzrYPjhw/JelP/ojM E7mZt/6YYRxyLNbyNUxVNgXt02aI5b9v57oXATSe31vrFOxKG6tKCfmrMIjOYM+9 CvHSGAqAWhfRabEzo8WPtu17/NDFR+OVnayEqTWE8sxcexIwRK1obwkBqhRKT3Dz g1xBKD/vNgMh+gXRcFiyY/IxQqBtEtOqqvwPUtwthGiuYNZfvN2q6jBmQMDrnE8F 4RhOFVX65rHMB9NJI+otUHGVR2jEsPFnFl/IZA/Ae0ARLmsHgnuPbBwn05Rqr7fc EXcNlrAGGlxynBufAgyFeZsC5epAi2wWcbh/gFGbFb2TD9zqNdc= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:19 2026 by rpki-client