$ rpki-client -vvf rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft File: 1587930E115B02B61F9967A961669E9C2E5D3155.mft (raw, json) Hash identifier: 6Ot38cOtha5uoXVR8bee4ZQn4Gdexaq3kl3xIjboQBI= Subject key identifier: 0A:D6:FD:ED:43:E6:1F:D1:2C:68:E6:74:5A:D2:CF:7F:9C:04:BA:D8 Authority key identifier: 15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 Certificate issuer: /CN=1587930E115B02B61F9967A961669E9C2E5D3155 Certificate serial: 61612E732C243FF8FB120C45E48C6ACC131529A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:10:19 +0000 Manifest this update: Wed 17 Jun 2026 02:05:19 +0000 Manifest next update: Thu 18 Jun 2026 03:46:19 +0000 Files and hashes: 1: 1587930E115B02B61F9967A961669E9C2E5D3155.crl (hash: ZCE2T4JNFMjjtC/z8ZGz8kUtGR6X1q/zbFTNrlbljWU=) 2: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: jclNRlrhqL+AfaCj+qvPSgX0Z4Wtr2IefaNqa2LPL2c=) 3: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: bWoZrHRRCMJiRa1MlW6R+wP7Q96czuFPoxQnXJiuOos=) 4: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: UOVDSlhXigw/Uz77MSYpnkR4v33gbqMyBOUU19NWXlU=) 5: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: WdT499tVpG8NeV+SEnNVp+8I6jVjAbHrv0KbxNWN8RU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:61:2e:73:2c:24:3f:f8:fb:12:0c:45:e4:8c:6a:cc:13:15:29:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1587930E115B02B61F9967A961669E9C2E5D3155 Validity Not Before: Jun 17 02:05:19 2026 GMT Not After : Jun 18 03:46:19 2026 GMT Subject: CN=0AD6FDED43E61FD12C68E6745AD2CF7F9C04BAD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:84:74:bf:a2:95:d4:54:de:7c:0b:fb:67:9d: e5:84:c6:5d:bc:ef:d9:2c:a5:31:c5:c3:50:f7:b6: 58:0d:ce:bb:84:5a:3c:0d:4c:fa:08:1d:58:2a:3c: f1:61:ec:34:a0:2f:ed:0b:28:13:8d:0b:af:90:cd: 58:be:84:54:5f:41:e5:fe:94:b4:89:d9:5b:9a:d0: 34:e7:5f:4e:e8:1f:25:18:22:93:51:da:bd:84:2d: 65:da:57:54:6e:95:51:4e:46:3a:27:84:c8:7b:dd: 18:ac:47:ec:65:0b:5f:d3:a2:17:3a:0a:f5:cc:45: 7a:28:88:6f:6c:78:47:54:9f:a7:71:2c:30:c6:f3: 1d:e2:57:68:6f:87:76:cc:38:74:8d:1c:e0:7a:36: 4c:69:9f:d3:35:4d:ce:bd:6a:61:e9:94:c5:de:cf: fd:a2:01:e6:48:83:d9:78:d5:83:d2:3f:25:a7:f5: b7:5a:28:54:17:79:62:52:d8:16:b5:fa:cb:c8:c9: b1:37:4c:fc:52:8a:fe:07:8e:77:86:f2:6a:11:c0: ee:75:64:b3:5f:cc:c3:02:fc:65:0a:bb:18:df:69: 51:bd:52:1a:e0:9b:e2:69:37:d0:cc:f7:b6:8d:34: 6f:69:35:34:a4:fe:7d:ce:51:7e:3d:44:ee:61:c1: c6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D6:FD:ED:43:E6:1F:D1:2C:68:E6:74:5A:D2:CF:7F:9C:04:BA:D8 X509v3 Authority Key Identifier: keyid:15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6b:70:14:e0:d8:b5:33:be:29:1a:12:36:ab:9b:f7:f0:8f: 9e:5a:ea:42:cd:fc:bf:d4:2d:d5:e3:19:4c:59:95:3c:33:f9: 7a:f9:26:0a:f1:78:d4:6e:7c:e2:8e:24:17:ca:bf:5f:4a:f9: bd:af:cb:d8:b6:23:5d:e3:a6:ad:ad:2b:b7:d7:3a:a6:80:61: 06:08:4e:c3:46:f2:9f:a1:e8:8f:88:f0:dc:87:6b:98:96:9a: 28:50:56:91:6a:19:e5:76:8b:ee:ef:6c:0e:ff:32:a8:7d:f0: 40:f7:0a:b0:bc:c5:21:4b:20:6f:b5:3a:c9:6c:f1:e3:48:c6: 75:56:da:99:5f:e6:59:e9:b8:aa:d3:ce:7d:ab:bc:23:10:75: d7:28:04:f1:85:96:d1:9c:a0:93:cf:13:b7:e5:05:88:0c:64: 1d:af:22:a6:57:11:50:dd:61:77:44:4f:7d:cf:e4:4a:d0:59: 60:ba:b1:8e:67:06:f4:5c:01:0c:0e:62:a7:b5:21:ff:ae:4a: 23:ab:46:26:fd:65:3e:90:4f:86:3e:1a:a1:06:44:31:a9:d6: 86:cb:da:4b:87:a7:97:30:70:d3:46:b1:1b:7d:aa:25:bb:d9: 3a:6f:c7:2d:ed:8d:a6:fc:e8:f0:cf:c1:ed:30:0b:c2:0c:c6: a5:8b:03:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYWEucywkP/j7EgxF5IxqzBMVKacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMy RTVEMzE1NTAeFw0yNjA2MTcwMjA1MTlaFw0yNjA2MTgwMzQ2MTlaMDMxMTAvBgNV BAMTKDBBRDZGREVENDNFNjFGRDEyQzY4RTY3NDVBRDJDRjdGOUMwNEJBRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhHS/opXUVN58C/tnneWExl28 79kspTHFw1D3tlgNzruEWjwNTPoIHVgqPPFh7DSgL+0LKBONC6+QzVi+hFRfQeX+ lLSJ2Vua0DTnX07oHyUYIpNR2r2ELWXaV1RulVFORjonhMh73RisR+xlC1/Tohc6 CvXMRXooiG9seEdUn6dxLDDG8x3iV2hvh3bMOHSNHOB6Nkxpn9M1Tc69amHplMXe z/2iAeZIg9l41YPSPyWn9bdaKFQXeWJS2Ba1+svIybE3TPxSiv4HjneG8moRwO51 ZLNfzMMC/GUKuxjfaVG9Uhrgm+JpN9DM97aNNG9pNTSk/n3OUX49RO5hwcbnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCtb97UPmH9EsaOZ0WtLPf5wEutgwHwYDVR0j BBgwFoAUFYeTDhFbArYfmWepYWaenC5dMVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQxMGZhNDMtMGJlMy00NzFhLTljMjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUx MTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMyRTVEMzE1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTg3OTMwRTExNUIwMkI2MUY5OTY3QTk2MTY2OUU5QzJFNUQz MTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlF OUMyRTVEMzE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBrcBTg2LUzvikaEjarm/fwj55a6kLN/L/U LdXjGUxZlTwz+Xr5JgrxeNRufOKOJBfKv19K+b2vy9i2I13jpq2tK7fXOqaAYQYI TsNG8p+h6I+I8NyHa5iWmihQVpFqGeV2i+7vbA7/Mqh98ED3CrC8xSFLIG+1Osls 8eNIxnVW2plf5lnpuKrTzn2rvCMQddcoBPGFltGcoJPPE7flBYgMZB2vIqZXEVDd YXdET33P5ErQWWC6sY5nBvRcAQwOYqe1If+uSiOrRib9ZT6QT4Y+GqEGRDGp1obL 2kuHp5cwcNNGsRt9qiW72Tpvxy3tjab86PDPwe0wC8IMxqWLA9A= -----END CERTIFICATE-----Generated at Wed Jun 17 10:14:46 2026 by rpki-client