$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft File: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft (raw, json) Hash identifier: wpGCFXlbxngLS8cYKcouswJtOYG3vc1ezi0DPS5Uu54= Subject key identifier: CE:9B:71:70:7C:0D:54:A3:06:D1:9B:35:CF:01:4D:54:21:43:1D:AC Authority key identifier: 53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 Certificate issuer: /CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Certificate serial: 602EE3B3C7857D759A5EFDD70BF17F2F256F8C30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:44:55 +0000 Manifest this update: Wed 17 Jun 2026 01:39:55 +0000 Manifest next update: Thu 18 Jun 2026 04:32:55 +0000 Files and hashes: 1: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl (hash: 0jIf8jClmvXsjDQ443TG7+v8wZ1cGkORW2n1p7NTkKc=) 2: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: d/lQ7Oz9/jWtBq0Ck1NBYGMJFkT573cCc0+ynKJPdok=) 3: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: 1t9yzNFOj0CAbODcXUQcoM9eYOKr+Gim4y4R0hZm1ws=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:2e:e3:b3:c7:85:7d:75:9a:5e:fd:d7:0b:f1:7f:2f:25:6f:8c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Validity Not Before: Jun 17 01:39:55 2026 GMT Not After : Jun 18 04:32:55 2026 GMT Subject: CN=CE9B71707C0D54A306D19B35CF014D5421431DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1d:a1:ba:06:2f:a6:eb:34:ce:28:e1:94:b6: 83:78:d9:95:31:34:83:3b:72:e2:a5:16:94:bf:97: 64:6b:ee:65:21:ab:e0:44:74:14:d3:cf:bb:f9:58: e7:1a:e5:1f:a6:db:e7:f7:c5:5b:9a:76:81:d7:52: 26:38:ec:c2:19:17:8c:00:4b:d2:97:8c:c1:0d:ba: 46:09:08:2d:d1:07:e7:e8:d5:27:34:db:ac:be:1f: 83:d1:15:ae:b7:a1:d5:d5:02:d8:ba:d2:1c:85:bd: 79:ec:55:71:ae:a5:f3:e5:54:0c:a6:21:ad:c4:6d: cf:13:16:9e:c9:47:a6:7b:29:1c:63:09:11:3f:7f: 79:30:80:08:7c:ec:31:97:ad:26:5c:5a:f4:27:31: 29:7d:f8:03:12:d2:8a:a1:21:93:7a:63:5a:07:42: 3c:f4:44:a5:90:0b:c5:bd:a2:1b:23:2b:a5:08:e6: 51:09:56:64:fa:01:43:6f:26:6f:d5:58:d6:c1:6b: d0:33:03:51:6a:66:1a:d5:26:f6:78:74:a9:e4:bc: e8:3e:84:c4:4e:74:2f:88:77:d8:1b:49:d6:99:5e: 3b:d2:4e:6a:71:45:62:bb:f7:8f:74:2f:a9:44:7f: c0:6b:74:2b:77:58:66:0c:9e:2c:0d:1e:fe:f6:e3: f7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9B:71:70:7C:0D:54:A3:06:D1:9B:35:CF:01:4D:54:21:43:1D:AC X509v3 Authority Key Identifier: keyid:53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:15:ae:34:c6:6a:19:45:f2:27:1c:99:cf:73:2e:36:ee:8d: f0:1c:56:49:cc:ca:a6:46:13:e2:0b:0f:a1:b6:e3:f4:28:ae: 86:08:b5:00:82:b2:d0:72:53:fc:ed:63:86:62:cb:25:d3:40: f9:ec:b1:7d:d7:ea:24:80:d3:e6:5d:75:79:75:3d:48:71:ee: 7c:b0:9d:fd:6a:ac:70:4c:39:46:f5:52:d5:e4:b9:8c:35:41: d9:1e:2e:91:ea:f9:bc:e4:a6:ad:e3:72:0e:07:b1:db:86:60: d8:e5:ce:c2:54:09:02:0d:da:76:6b:01:c9:57:f0:a2:de:17: f0:91:eb:00:5b:d4:fa:39:64:e7:2f:39:af:5a:02:39:87:31: 92:4e:bb:fc:42:aa:11:d4:fd:cc:bd:3d:7a:c4:3c:25:77:75: 2e:b4:5a:d7:bc:a0:06:0f:b8:3a:2a:c9:3c:3c:08:92:19:bb: e3:18:06:8f:76:09:d1:db:58:c4:0d:1b:33:f2:05:08:66:f5: 9a:b3:e0:b0:85:3e:6d:25:11:0e:3f:71:d6:92:4e:59:5e:57: 16:9c:2a:3e:56:43:4e:85:29:0e:90:2f:c3:da:49:52:c5:9a: cc:e8:e2:14:aa:46:db:73:36:a5:a3:d8:15:87:57:57:b6:d7: 24:cf:03:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYC7js8eFfXWaXv3XC/F/LyVvjDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENCQkE3 QzAzQzg0OTAeFw0yNjA2MTcwMTM5NTVaFw0yNjA2MTgwNDMyNTVaMDMxMTAvBgNV BAMTKENFOUI3MTcwN0MwRDU0QTMwNkQxOUIzNUNGMDE0RDU0MjE0MzFEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HaG6Bi+m6zTOKOGUtoN42ZUx NIM7cuKlFpS/l2Rr7mUhq+BEdBTTz7v5WOca5R+m2+f3xVuadoHXUiY47MIZF4wA S9KXjMENukYJCC3RB+fo1Sc026y+H4PRFa63odXVAti60hyFvXnsVXGupfPlVAym Ia3Ebc8TFp7JR6Z7KRxjCRE/f3kwgAh87DGXrSZcWvQnMSl9+AMS0oqhIZN6Y1oH Qjz0RKWQC8W9ohsjK6UI5lEJVmT6AUNvJm/VWNbBa9AzA1FqZhrVJvZ4dKnkvOg+ hMROdC+Id9gbSdaZXjvSTmpxRWK79490L6lEf8BrdCt3WGYMniwNHv724/ctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzptxcHwNVKMG0Zs1zwFNVCFDHawwHwYDVR0j BBgwFoAUUwDQ7seiGq+tYbbkCCjLunwDyEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFiM2MwM2QtMmUyZS00ODk3LTg2OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVD N0EyMUFBRkFENjFCNkU0MDgyOENCQkE3QzAzQzg0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzAwRDBFRUM3QTIxQUFGQUQ2MUI2RTQwODI4Q0JCQTdDMDND ODQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFiM2MwM2QtMmUyZS00ODk3LTg2 OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENC QkE3QzAzQzg0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUVrjTGahlF8iccmc9zLjbujfAcVknMyqZG E+ILD6G24/QoroYItQCCstByU/ztY4ZiyyXTQPnssX3X6iSA0+ZddXl1PUhx7nyw nf1qrHBMOUb1UtXkuYw1QdkeLpHq+bzkpq3jcg4HsduGYNjlzsJUCQIN2nZrAclX 8KLeF/CR6wBb1Po5ZOcvOa9aAjmHMZJOu/xCqhHU/cy9PXrEPCV3dS60Wte8oAYP uDoqyTw8CJIZu+MYBo92CdHbWMQNGzPyBQhm9Zqz4LCFPm0lEQ4/cdaSTlleVxac Kj5WQ06FKQ6QL8PaSVLFmszo4hSqRttzNqWj2BWHV1e21yTPA48= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:41 2026 by rpki-client