$ rpki-client -vvf rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft File: 15253A2B5044241610CA488254A5FBDEFCA83946.mft (raw, json) Hash identifier: q8Yp3bYe/PDylPL0GGXp/Aq2G7Wna2P0d9yCh42zLr8= Subject key identifier: 1D:1A:19:F0:9A:D4:52:21:63:04:6C:8E:C8:55:E2:18:7D:2B:23:F5 Authority key identifier: 15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46 Certificate issuer: /CN=15253A2B5044241610CA488254A5FBDEFCA83946 Certificate serial: 7756AC71A236E648529BD96111C77E190FB58E31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:54:04 +0000 Manifest this update: Wed 17 Jun 2026 00:49:04 +0000 Manifest next update: Thu 18 Jun 2026 01:38:04 +0000 Files and hashes: 1: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: DsGlxrIFXIfC4wlTwbks5STw6xrwCN1b5SZ94KRIDxg=) 2: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: MIDcVmBGH/hqqNu3jf3HAG0eJ6hq9A6F1DDrnx/T2Oc=) 3: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: SnVOuYeK/dyKwN1E/1MKTRAqaoKx5Hf44hqaGuxO+48=) 4: 15253A2B5044241610CA488254A5FBDEFCA83946.crl (hash: Kuji955vVpdjb3GEyhxHjjIrrmaPCtEaq6Bmi7A2USg=) 5: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: GPQzQ2Y9IpoZxGxlL+qxlZ5PT+jJ6xJj6pibO+05n+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:56:ac:71:a2:36:e6:48:52:9b:d9:61:11:c7:7e:19:0f:b5:8e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15253A2B5044241610CA488254A5FBDEFCA83946 Validity Not Before: Jun 17 00:49:04 2026 GMT Not After : Jun 18 01:38:04 2026 GMT Subject: CN=1D1A19F09AD4522163046C8EC855E2187D2B23F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:74:e5:48:85:8c:68:c1:0d:4d:7a:bf:f3: fa:8a:f6:5d:97:41:c9:b0:45:0a:d3:2d:99:16:64: 43:21:86:5a:ad:a6:ca:c6:54:16:5a:24:59:ec:48: 92:13:c6:a2:43:36:e1:28:3b:f0:94:d1:85:e5:13: 6c:34:a4:46:86:44:8c:16:5a:4b:91:ae:58:86:80: 5b:64:f0:90:73:9e:62:a2:7a:c0:27:9d:43:de:6f: 1d:d2:37:f8:c0:b0:6a:66:8c:ef:07:18:1a:a5:b6: 21:fd:f4:b4:ae:a8:78:d0:2b:f6:4d:f7:90:40:14: da:87:5c:d3:fb:58:4e:52:bc:76:8d:cb:69:42:ff: 70:1f:6f:17:cf:b5:be:77:83:93:fb:83:16:0a:1b: 81:1a:4f:08:36:d3:e9:58:51:c0:52:31:cc:50:21: f5:66:ad:e0:cc:23:36:5d:2f:2d:8c:dc:a2:d2:71: 90:a2:b8:ac:96:07:85:15:f9:f9:f4:f2:84:11:84: 59:b9:45:48:f3:9d:2f:b3:6a:93:22:d4:cd:4a:6c: b8:4a:1f:78:01:c2:b0:ff:c7:80:be:2f:69:62:85: c1:d3:4f:9b:e8:d1:90:bb:15:ba:8c:ba:18:2d:29: 30:e0:2b:f6:85:5a:a0:e6:f8:76:fc:ae:4e:ee:31: 3d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1A:19:F0:9A:D4:52:21:63:04:6C:8E:C8:55:E2:18:7D:2B:23:F5 X509v3 Authority Key Identifier: keyid:15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:21:02:61:3a:5a:01:0d:ed:83:a3:31:38:bf:68:1c:ac:66: 4e:ea:22:f1:ba:bb:f6:1f:2e:42:dd:12:f5:24:67:a1:32:ef: 10:50:6e:64:d4:c9:e1:b4:35:9f:df:71:d8:07:71:3e:a6:4c: a2:13:d3:2c:61:6e:ee:5a:a4:f4:9c:4b:44:eb:3d:0e:66:40: cf:c1:39:f1:a3:ff:c4:2d:d4:2d:46:bd:07:94:70:ad:75:52: f6:d4:3d:ef:ea:c9:90:4c:18:1e:f8:f3:94:fa:b1:32:e2:8a: 47:c8:46:73:cd:27:a5:14:40:9d:d4:39:15:d0:fd:df:a8:2a: b2:bc:d7:93:5a:95:c7:a2:7b:30:50:de:94:a7:bf:77:64:c4: f0:14:a4:4a:0f:6d:73:a1:f2:62:4f:9b:c5:e9:d1:73:76:4f: 9b:2a:96:07:ee:7d:e6:ec:05:98:75:c2:48:ba:40:94:53:f1: b6:0e:16:af:61:49:52:2f:af:a1:df:97:2c:d8:19:c9:cc:d0: 3a:1b:17:20:8c:fa:a8:2e:6e:f7:8d:e4:fb:2a:bd:fb:45:7d: 44:f9:3a:a8:f0:d0:46:0e:b8:29:dd:4a:5f:14:f7:12:65:08: a7:ae:e9:3e:c0:65:e5:e1:ee:0e:d7:5b:35:2a:fa:ae:e0:78: 1d:86:0d:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1ascaI25khSm9lhEcd+GQ+1jjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUyNTNBMkI1MDQ0MjQxNjEwQ0E0ODgyNTRBNUZCREVG Q0E4Mzk0NjAeFw0yNjA2MTcwMDQ5MDRaFw0yNjA2MTgwMTM4MDRaMDMxMTAvBgNV BAMTKDFEMUExOUYwOUFENDUyMjE2MzA0NkM4RUM4NTVFMjE4N0QyQjIzRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsLHTlSIWMaMENTXq/8/qK9l2X QcmwRQrTLZkWZEMhhlqtpsrGVBZaJFnsSJITxqJDNuEoO/CU0YXlE2w0pEaGRIwW WkuRrliGgFtk8JBznmKiesAnnUPebx3SN/jAsGpmjO8HGBqltiH99LSuqHjQK/ZN 95BAFNqHXNP7WE5SvHaNy2lC/3AfbxfPtb53g5P7gxYKG4EaTwg20+lYUcBSMcxQ IfVmreDMIzZdLy2M3KLScZCiuKyWB4UV+fn08oQRhFm5RUjznS+zapMi1M1KbLhK H3gBwrD/x4C+L2lihcHTT5vo0ZC7FbqMuhgtKTDgK/aFWqDm+Hb8rk7uMT0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHRoZ8JrUUiFjBGyOyFXiGH0rI/UwHwYDVR0j BBgwFoAUFSU6K1BEJBYQykiCVKX73vyoOUYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdlZGNiN2UtYzM4ZC00ZTY3LTgyYmQtNGU4MTUwYjg4NTYxLzAvMTUyNTNBMkI1 MDQ0MjQxNjEwQ0E0ODgyNTRBNUZCREVGQ0E4Mzk0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTI1M0EyQjUwNDQyNDE2MTBDQTQ4ODI1NEE1RkJERUZDQTgz OTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvMTUyNTNBMkI1MDQ0MjQxNjEwQ0E0ODgyNTRBNUZC REVGQ0E4Mzk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8hAmE6WgEN7YOjMTi/aBysZk7qIvG6u/Yf LkLdEvUkZ6Ey7xBQbmTUyeG0NZ/fcdgHcT6mTKIT0yxhbu5apPScS0TrPQ5mQM/B OfGj/8Qt1C1GvQeUcK11UvbUPe/qyZBMGB7485T6sTLiikfIRnPNJ6UUQJ3UORXQ /d+oKrK815NalceiezBQ3pSnv3dkxPAUpEoPbXOh8mJPm8Xp0XN2T5sqlgfufebs BZh1wki6QJRT8bYOFq9hSVIvr6HflyzYGcnM0DobFyCM+qgubveN5PsqvftFfUT5 Oqjw0EYOuCndSl8U9xJlCKeu6T7AZeXh7g7XWzUq+q7geB2GDQg= -----END CERTIFICATE-----Generated at Wed Jun 17 12:51:13 2026 by rpki-client