$ rpki-client -vvf rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft File: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft (raw, json) Hash identifier: KQ4olaqUTLDd0b3HnYAnaLtrcCfKTC3ORy7WR9c3Yr8= Subject key identifier: 1E:06:71:DC:74:77:19:59:76:47:03:57:78:84:46:1B:D2:B1:3E:F8 Authority key identifier: 54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7 Certificate issuer: /CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7 Certificate serial: 66627FDF68A24F10CD71DC04795FA03A091EE7E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft Manifest number: 3B Signing time: Mon 15 Jun 2026 01:28:02 +0000 Manifest this update: Mon 15 Jun 2026 01:23:02 +0000 Manifest next update: Tue 16 Jun 2026 01:45:02 +0000 Files and hashes: 1: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: Tk0zLG1Hphe7t1mTq1IIDbrzYp4b0d3efGQx1H0ipCc=) 2: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: AhYVMQlTuT7zbTcLfZGNm75C7shQlDWThwFiJD95reg=) 3: 540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl (hash: kWDCnZVYfrtc6VJGsyONP7UF6y5ClnbWrnEV7GQRAPM=) 4: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: KN9wGn1zXozmZ3RfAUGCtuXPuU4nroC30cpkr7J9mHQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 01:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:62:7f:df:68:a2:4f:10:cd:71:dc:04:79:5f:a0:3a:09:1e:e7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7 Validity Not Before: Jun 15 01:23:02 2026 GMT Not After : Jun 16 01:45:02 2026 GMT Subject: CN=1E0671DC74771959764703577884461BD2B13EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a4:38:be:08:37:82:f2:ae:b6:5b:cd:69:24: f2:0b:fe:ac:4d:8b:36:bd:12:69:cc:25:5b:7a:2c: 32:9b:a3:b8:24:20:35:c0:f8:f9:91:3c:4e:cb:23: bc:5d:69:89:e5:c0:9d:99:37:ba:8b:1d:6d:50:06: c6:81:1f:26:3f:05:e7:4f:9e:28:9e:7f:2f:09:25: 41:3f:dd:d1:89:68:d5:5a:4f:46:92:1d:ac:33:e0: df:15:a9:b0:45:01:76:e5:b0:77:cb:aa:6e:d4:42: 68:12:e9:15:97:eb:b2:21:cc:67:a8:8f:ba:30:e4: a6:89:75:c3:72:63:96:55:b1:1b:22:c5:fd:9a:1d: 03:d7:63:59:19:0a:00:df:61:36:59:e2:1e:ae:03: 36:1f:b7:65:b2:3d:52:d5:88:f7:81:80:fd:1a:07: a1:e8:0a:91:b5:c3:86:ff:ed:d3:9c:bc:20:88:be: 41:a9:e1:70:b7:ac:6a:0d:55:31:f0:96:9c:d8:80: 43:4c:e1:50:94:b4:f8:5e:c1:22:c9:02:a0:fc:1d: 3b:f0:74:a2:26:52:d9:94:57:17:de:59:ba:41:48: ba:0f:fd:0d:9f:af:0d:4d:4e:95:8c:49:dd:c1:3d: 04:9d:d0:81:a0:03:aa:ef:02:5a:5a:be:6c:83:d4: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:06:71:DC:74:77:19:59:76:47:03:57:78:84:46:1B:D2:B1:3E:F8 X509v3 Authority Key Identifier: keyid:54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ea:63:6b:26:37:5c:5a:3a:33:f1:62:4e:41:59:6d:b4:70: ae:42:5d:aa:19:a1:e6:20:7b:7d:cb:fb:29:42:5c:1b:15:4b: d3:d4:1d:48:7f:80:de:88:89:ce:ab:90:15:b7:e0:bf:be:7a: 1b:1d:3f:51:6f:87:bc:a7:ea:f0:2e:a4:c2:63:59:bf:8d:69: c4:9d:67:28:2b:c9:f1:e9:1a:23:98:b2:15:96:62:1a:56:b4: 44:53:f5:88:66:0f:8b:b3:b8:29:19:cb:8d:d3:88:1d:62:04: 49:eb:26:7a:9a:9d:0b:78:d5:2b:17:a3:0e:c4:04:77:86:cb: 65:3d:7f:57:6a:b2:f8:0f:63:91:c3:3a:5c:99:c1:23:40:89: 71:cc:c6:11:c0:f5:a1:ec:4a:a7:b4:ef:de:d0:d6:6d:3a:c3: c5:2d:1d:f2:0d:f9:d4:3c:64:1a:ab:37:15:b8:10:28:54:46: 32:ec:c1:47:0c:7f:c5:51:cf:6a:a6:d9:35:a9:d4:b3:40:73: 0a:0c:3b:85:8f:f7:04:99:cf:9e:1d:63:34:04:f4:67:7b:c7: 0a:10:75:43:2f:5c:ea:b0:53:19:c0:27:e0:0a:96:80:70:86: a0:c2:44:26:ac:d6:34:bf:ca:31:9d:c9:08:84:b4:dd:fd:54: c3:d8:86:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZmJ/32iiTxDNcdwEeV+gOgke5+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQwOTcyMDA2RUM0RDFDRTBFRERDN0RBMTFEMTQxOUY2 NzI4MTZBNzAeFw0yNjA2MTUwMTIzMDJaFw0yNjA2MTYwMTQ1MDJaMDMxMTAvBgNV BAMTKDFFMDY3MURDNzQ3NzE5NTk3NjQ3MDM1Nzc4ODQ0NjFCRDJCMTNFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVpDi+CDeC8q62W81pJPIL/qxN iza9EmnMJVt6LDKbo7gkIDXA+PmRPE7LI7xdaYnlwJ2ZN7qLHW1QBsaBHyY/BedP niiefy8JJUE/3dGJaNVaT0aSHawz4N8VqbBFAXblsHfLqm7UQmgS6RWX67IhzGeo j7ow5KaJdcNyY5ZVsRsixf2aHQPXY1kZCgDfYTZZ4h6uAzYft2WyPVLViPeBgP0a B6HoCpG1w4b/7dOcvCCIvkGp4XC3rGoNVTHwlpzYgENM4VCUtPhewSLJAqD8HTvw dKImUtmUVxfeWbpBSLoP/Q2frw1NTpWMSd3BPQSd0IGgA6rvAlpavmyD1BzrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHgZx3HR3GVl2RwNXeIRGG9KxPvgwHwYDVR0j BBgwFoAUVAlyAG7E0c4O3cfaEdFBn2coFqcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk3MThmNmItYjUxNi00M2FlLWI1ODktODNhMjVmYWEzMGJlLzAvNTQwOTcyMDA2 RUM0RDFDRTBFRERDN0RBMTFEMTQxOUY2NzI4MTZBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDA5NzIwMDZFQzREMUNFMEVEREM3REExMUQxNDE5RjY3Mjgx NkE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvNTQwOTcyMDA2RUM0RDFDRTBFRERDN0RBMTFEMTQx OUY2NzI4MTZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfqY2smN1xaOjPxYk5BWW20cK5CXaoZoeYg e33L+ylCXBsVS9PUHUh/gN6Iic6rkBW34L++ehsdP1Fvh7yn6vAupMJjWb+NacSd ZygryfHpGiOYshWWYhpWtERT9YhmD4uzuCkZy43TiB1iBEnrJnqanQt41SsXow7E BHeGy2U9f1dqsvgPY5HDOlyZwSNAiXHMxhHA9aHsSqe0797Q1m06w8UtHfIN+dQ8 ZBqrNxW4EChURjLswUcMf8VRz2qm2TWp1LNAcwoMO4WP9wSZz54dYzQE9Gd7xwoQ dUMvXOqwUxnAJ+AKloBwhqDCRCas1jS/yjGdyQiEtN39VMPYhqI= -----END CERTIFICATE-----Generated at Mon Jun 15 16:28:10 2026 by rpki-client