$ rpki-client -vvf rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft File: A655C14C173A3BE852B5A2C52C501937C4340242.mft (raw, json) Hash identifier: OC9vvWY+FtpTf4pkHwiONYSn+Cabk+WO5j90kCK+Hw0= Subject key identifier: 18:29:1F:39:3E:39:BC:08:43:1D:01:61:EB:BA:6D:D9:F8:61:44:8D Authority key identifier: A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42 Certificate issuer: /CN=A655C14C173A3BE852B5A2C52C501937C4340242 Certificate serial: 61A641A8DCFA2D68828A2DC896C95DB713049D72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:26:25 +0000 Manifest this update: Tue 16 Jun 2026 18:21:25 +0000 Manifest next update: Wed 17 Jun 2026 21:10:25 +0000 Files and hashes: 1: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: VTw+tu3SsLrqMi7jJgKUunIG386oKhLKeizx0PYXC2g=) 2: A655C14C173A3BE852B5A2C52C501937C4340242.crl (hash: miE3bfjcdvhhzqMTRM72fKDt02gSKBGqC+2uNyZV6w8=) 3: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: qkm6D0klaQyvN59pQnarOTQhutzEDT+u+1JdsHBl/VQ=) 4: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: St+whbiWn8DuDZzEPL2qqiXyvmUfCd91hjaKC3vJifA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a6:41:a8:dc:fa:2d:68:82:8a:2d:c8:96:c9:5d:b7:13:04:9d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A655C14C173A3BE852B5A2C52C501937C4340242 Validity Not Before: Jun 16 18:21:25 2026 GMT Not After : Jun 17 21:10:25 2026 GMT Subject: CN=18291F393E39BC08431D0161EBBA6DD9F861448D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:f4:3d:17:8c:93:56:2b:4a:a8:05:79:b5: 69:9a:bd:6a:0a:95:f6:8d:2a:92:82:12:59:95:fa: f9:12:6a:10:0e:f0:12:d7:68:2b:1b:b3:6d:af:3f: 54:10:d1:00:d5:aa:de:a8:2e:70:50:a2:cd:27:98: 17:8e:79:13:0f:89:5f:f6:da:7c:a2:9a:d5:b5:52: 33:58:27:cb:07:78:cf:e0:63:13:21:27:40:45:e8: ce:0c:20:cf:5b:27:80:12:d6:e5:ce:2f:6a:55:8a: 36:92:de:a7:02:3d:dc:5e:a2:f2:fc:ec:bd:94:bf: 59:53:c7:3b:98:ec:bc:2e:1e:1c:a0:8f:2c:1d:91: f4:f8:2c:74:66:ee:0d:23:8d:34:fc:82:92:b0:27: 18:54:9b:01:32:bf:22:4b:60:6b:91:82:61:82:b7: 46:c2:2d:a4:20:9e:a2:a3:de:58:1e:3a:84:26:70: d2:1e:c6:57:6b:4b:0e:f0:61:13:b2:3d:0e:b7:6b: 93:64:37:a4:8d:90:b0:64:62:cc:cb:65:3c:bd:10: 6e:16:b5:d0:2e:c3:48:42:2b:9a:dc:7a:c7:7f:08: 1a:6c:95:11:08:30:64:70:7e:12:4b:ff:db:61:b2: 53:1b:7d:df:8d:13:09:73:22:c6:7d:47:54:c4:3e: b3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:29:1F:39:3E:39:BC:08:43:1D:01:61:EB:BA:6D:D9:F8:61:44:8D X509v3 Authority Key Identifier: keyid:A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b8:58:78:64:e4:98:c4:b4:15:b2:13:c4:c7:8d:41:9a:9f: 30:04:7a:06:25:c8:e7:f4:2f:48:e7:f3:4f:64:ef:00:01:27: 1e:71:4e:6f:60:fb:18:ac:ce:95:3c:e3:7d:93:9a:ca:b2:1b: d2:b8:4c:b3:24:d6:f2:b7:be:96:1d:42:12:49:64:b3:05:5f: 8e:7d:6e:d7:eb:1e:44:3b:a3:a0:b2:aa:31:56:24:9c:cf:41: 23:e8:4f:e8:c1:2c:47:5f:41:3b:05:d0:a7:77:f6:ad:01:5b: a0:0b:80:94:e4:8f:84:6d:31:a0:8e:fb:21:52:cd:15:13:93: 73:56:d5:4e:ee:79:10:d2:0e:f1:28:98:4c:f4:3e:8f:7c:91: 50:9f:31:d5:c6:84:69:f0:00:ca:0b:52:d5:d4:95:cd:7e:48: b5:dd:14:81:8c:5f:ed:b3:60:58:fa:7e:18:e5:89:10:87:92: fc:dc:e7:53:e8:71:b9:a7:ec:c2:b1:22:ac:83:0c:ac:6e:8a: 0b:27:53:62:b7:ce:2c:fe:42:c1:a6:7a:f1:6a:f1:cc:cf:cc: e0:a4:f9:92:8c:b9:e7:d4:13:94:17:b7:a3:0b:b9:ac:03:28: ca:15:5f:84:fd:99:97:92:6f:85:bb:c1:b2:b9:ce:7a:ab:21: 7a:48:24:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYaZBqNz6LWiCii3IlsldtxMEnXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1NUMxNEMxNzNBM0JFODUyQjVBMkM1MkM1MDE5MzdD NDM0MDI0MjAeFw0yNjA2MTYxODIxMjVaFw0yNjA2MTcyMTEwMjVaMDMxMTAvBgNV BAMTKDE4MjkxRjM5M0UzOUJDMDg0MzFEMDE2MUVCQkE2REQ5Rjg2MTQ0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJIvQ9F4yTVitKqAV5tWmavWoK lfaNKpKCElmV+vkSahAO8BLXaCsbs22vP1QQ0QDVqt6oLnBQos0nmBeOeRMPiV/2 2nyimtW1UjNYJ8sHeM/gYxMhJ0BF6M4MIM9bJ4AS1uXOL2pVijaS3qcCPdxeovL8 7L2Uv1lTxzuY7LwuHhygjywdkfT4LHRm7g0jjTT8gpKwJxhUmwEyvyJLYGuRgmGC t0bCLaQgnqKj3lgeOoQmcNIexldrSw7wYROyPQ63a5NkN6SNkLBkYszLZTy9EG4W tdAuw0hCK5rcesd/CBpslREIMGRwfhJL/9thslMbfd+NEwlzIsZ9R1TEPrNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGCkfOT45vAhDHQFh67pt2fhhRI0wHwYDVR0j BBgwFoAUplXBTBc6O+hStaLFLFAZN8Q0AkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTgxMjc0YWYtN2NkMC00MGFmLWEzMjEtNjc2ODk4ZDU4ZGI4LzAvQTY1NUMxNEMx NzNBM0JFODUyQjVBMkM1MkM1MDE5MzdDNDM0MDI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNjU1QzE0QzE3M0EzQkU4NTJCNUEyQzUyQzUwMTkzN0M0MzQw MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvQTY1NUMxNEMxNzNBM0JFODUyQjVBMkM1MkM1MDE5 MzdDNDM0MDI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKO4WHhk5JjEtBWyE8THjUGanzAEegYlyOf0 L0jn809k7wABJx5xTm9g+xiszpU8432TmsqyG9K4TLMk1vK3vpYdQhJJZLMFX459 btfrHkQ7o6CyqjFWJJzPQSPoT+jBLEdfQTsF0Kd39q0BW6ALgJTkj4RtMaCO+yFS zRUTk3NW1U7ueRDSDvEomEz0Po98kVCfMdXGhGnwAMoLUtXUlc1+SLXdFIGMX+2z YFj6fhjliRCHkvzc51Pocbmn7MKxIqyDDKxuigsnU2K3ziz+QsGmevFq8czPzOCk +ZKMuefUE5QXt6MLuawDKMoVX4T9mZeSb4W7wbK5znqrIXpIJOQ= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:39 2026 by rpki-client