$ rpki-client -vvf rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft File: A9E3887289ED85663942126250F7D66CD58FE1F5.mft (raw, json) Hash identifier: KNe2t+5103XmT3EdbUmI788poFu9DctXbGCsamsxpDg= Subject key identifier: 54:31:FD:CA:80:A3:D2:00:45:55:C2:FA:5A:F4:BD:F6:BF:82:B2:79 Authority key identifier: A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 Certificate issuer: /CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Certificate serial: 546E632563111F2D2BD7957F7BF887A13D8EC74F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:07:38 +0000 Manifest this update: Wed 17 Jun 2026 08:02:38 +0000 Manifest next update: Thu 18 Jun 2026 09:40:38 +0000 Files and hashes: 1: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: JytxgR9jZstQPJBZYCIpgiXASID1MDjbIa5qz0t9YDc=) 2: A9E3887289ED85663942126250F7D66CD58FE1F5.crl (hash: 4/ycPQoklJa1VT2Ue19HSQzHJkT4Jc6rCOLSt7EmoR4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:6e:63:25:63:11:1f:2d:2b:d7:95:7f:7b:f8:87:a1:3d:8e:c7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Validity Not Before: Jun 17 08:02:38 2026 GMT Not After : Jun 18 09:40:38 2026 GMT Subject: CN=5431FDCA80A3D2004555C2FA5AF4BDF6BF82B279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:7a:09:35:77:47:da:68:d0:94:5d:0c:15: 00:69:c0:d7:73:83:6d:c3:22:b1:bb:f7:46:fc:cc: bc:c5:d9:8b:54:be:63:54:94:68:0d:34:8a:5e:16: 55:44:37:b7:69:0c:6f:23:5a:b7:5c:c7:91:40:77: 6d:0a:b9:8b:60:90:09:17:90:33:9e:e5:ca:c1:a3: 52:04:29:ef:07:75:f3:3e:74:c7:51:b4:d2:f4:68: 7c:ee:f1:6e:0a:3b:ae:f4:a3:98:a9:ab:ae:76:f8: 3b:23:bb:70:b5:72:57:fb:5a:94:95:f8:a6:c5:bb: b6:38:72:81:fa:1a:7c:4a:0f:ee:3c:fb:9b:3d:bf: d9:e0:0d:48:44:7d:6c:84:b9:91:d3:5d:15:7d:b6: 57:76:56:cf:44:1d:5d:4f:fd:b9:16:a3:8f:c2:c2: ec:41:3b:e6:57:fc:9a:69:9b:a5:b0:08:5b:80:dd: cc:56:ee:19:8a:25:e0:fa:c4:a2:42:83:d5:4e:98: 8f:94:1d:23:fa:d3:0c:b0:45:ad:45:64:33:cc:7d: 9f:bb:4a:9e:50:b4:d1:7b:cd:d1:9b:97:e6:ee:f9: 77:01:2b:37:da:86:f8:ab:48:95:f6:0d:ba:cc:57: d6:51:8b:89:55:74:ff:34:ed:c1:76:d1:7e:e6:0e: 9b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:31:FD:CA:80:A3:D2:00:45:55:C2:FA:5A:F4:BD:F6:BF:82:B2:79 X509v3 Authority Key Identifier: keyid:A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:26:83:b4:57:bb:ca:8a:c5:13:50:f0:f0:0c:e2:09:12:63: d2:50:2c:c0:4c:72:60:2c:be:73:8c:f2:06:d5:46:8b:f3:b3: be:c9:db:15:f5:e4:5a:7a:7a:0e:94:73:fb:6e:8d:10:51:b0: 11:3a:94:2b:15:9a:3f:4b:01:52:0c:ba:48:61:11:0c:64:19: ef:ff:03:44:1f:46:98:e2:d0:2c:ab:7f:ae:bd:18:54:52:73: ce:93:d1:d2:9d:2c:19:2b:b8:7e:1e:4d:d8:82:23:6b:a9:9f: a9:cb:37:40:06:ce:6a:94:05:e2:ba:16:4f:59:f5:0c:f2:52: 9c:e2:82:16:13:68:8f:a1:05:e7:c1:18:d9:ac:ff:61:fc:fd: d7:e6:85:8e:7f:b4:db:d9:91:1e:5a:43:30:69:13:cd:48:fb: ec:77:cb:fc:3e:ea:ea:be:c4:5e:6f:d6:4b:4e:08:cf:43:dd: 44:fa:8a:72:f0:63:e0:81:39:be:3c:53:1c:d4:04:49:92:5b: b8:3b:5b:c8:32:98:9c:42:89:33:d6:50:f5:c9:6f:9d:df:f4: 30:63:39:9b:6e:02:98:29:63:bc:b9:53:10:23:82:91:c5:4c: 71:91:3c:60:a6:cb:81:5c:6f:88:5f:13:92:df:57:e1:f8:4b: 47:8c:66:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVG5jJWMRHy0r15V/e/iHoT2Ox08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNE NThGRTFGNTAeFw0yNjA2MTcwODAyMzhaFw0yNjA2MTgwOTQwMzhaMDMxMTAvBgNV BAMTKDU0MzFGRENBODBBM0QyMDA0NTU1QzJGQTVBRjRCREY2QkY4MkIyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4bnoJNXdH2mjQlF0MFQBpwNdz g23DIrG790b8zLzF2YtUvmNUlGgNNIpeFlVEN7dpDG8jWrdcx5FAd20KuYtgkAkX kDOe5crBo1IEKe8HdfM+dMdRtNL0aHzu8W4KO670o5ipq652+Dsju3C1clf7WpSV +KbFu7Y4coH6GnxKD+48+5s9v9ngDUhEfWyEuZHTXRV9tld2Vs9EHV1P/bkWo4/C wuxBO+ZX/Jppm6WwCFuA3cxW7hmKJeD6xKJCg9VOmI+UHSP60wywRa1FZDPMfZ+7 Sp5QtNF7zdGbl+bu+XcBKzfahvirSJX2DbrMV9ZRi4lVdP807cF20X7mDpsNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVDH9yoCj0gBFVcL6WvS99r+CsnkwHwYDVR0j BBgwFoAUqeOIconthWY5QhJiUPfWbNWP4fUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTQzY2M2YTgtZTdhYS00ZjM3LWJkMDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4 OUVEODU2NjM5NDIxMjYyNTBGN0Q2NkNENThGRTFGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOUUzODg3Mjg5RUQ4NTY2Mzk0MjEyNjI1MEY3RDY2Q0Q1OEZF MUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTQzY2M2YTgtZTdhYS00ZjM3LWJk MDgtZjJlYjU3ZTg4NzM2LzAvQTlFMzg4NzI4OUVEODU2NjM5NDIxMjYyNTBGN0Q2 NkNENThGRTFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYmg7RXu8qKxRNQ8PAM4gkSY9JQLMBMcmAs vnOM8gbVRovzs77J2xX15Fp6eg6Uc/tujRBRsBE6lCsVmj9LAVIMukhhEQxkGe// A0QfRpji0Cyrf669GFRSc86T0dKdLBkruH4eTdiCI2upn6nLN0AGzmqUBeK6Fk9Z 9QzyUpzighYTaI+hBefBGNms/2H8/dfmhY5/tNvZkR5aQzBpE81I++x3y/w+6uq+ xF5v1ktOCM9D3UT6inLwY+CBOb48UxzUBEmSW7g7W8gymJxCiTPWUPXJb53f9DBj OZtuApgpY7y5UxAjgpHFTHGRPGCmy4Fcb4hfE5LfV+H4S0eMZrY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:19 2026 by rpki-client