$ rpki-client -vvf rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft File: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft (raw, json) Hash identifier: UyxXo4LXO6iKJgwAtTcfQ3adsK+ON3PXRrDDDeGUBCw= Subject key identifier: 75:4E:F6:82:7B:50:91:0E:6A:B4:EB:0A:00:5D:04:D7:41:1C:D9:64 Authority key identifier: A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB Certificate issuer: /CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Certificate serial: 5C33B9254796219AAB1AA56A3DA557D837C0E1C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:20:36 +0000 Manifest this update: Wed 17 Jun 2026 06:15:36 +0000 Manifest next update: Thu 18 Jun 2026 10:19:36 +0000 Files and hashes: 1: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: Cj0SZJARZifKQYTCMZbpWyS0hulziUW0qpiTLUY0MXw=) 2: A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl (hash: HS51H4RhthQ9+nfZC13Guh6xzb9AqsAF70W+UGyzlPA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:33:b9:25:47:96:21:9a:ab:1a:a5:6a:3d:a5:57:d8:37:c0:e1:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A442332E47EDF95121F835CB9EEE89CCD0FD23AB Validity Not Before: Jun 17 06:15:36 2026 GMT Not After : Jun 18 10:19:36 2026 GMT Subject: CN=754EF6827B50910E6AB4EB0A005D04D7411CD964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:6a:2e:f8:e1:15:c2:e0:7e:5e:57:e7:1e: 48:68:22:d9:8d:36:8b:09:79:97:41:8b:47:70:45: d1:8a:62:dc:17:9d:fe:c0:86:0b:63:9b:ae:ee:d8: 91:76:72:e4:7a:ee:ef:04:01:de:f1:5e:55:29:0f: c2:95:7a:89:d0:70:8e:df:9f:ad:0b:56:a7:97:ac: 44:3c:a4:ab:c2:56:15:cc:2e:63:02:15:cc:40:50: 86:05:e9:9a:26:9c:49:23:ee:2e:7b:96:c8:39:0c: f5:7f:7d:69:2c:29:2a:04:2a:e6:b5:85:1a:50:63: d0:9a:71:57:0b:4f:14:cc:4d:db:f7:6c:c4:c1:98: ee:1d:e4:62:e8:84:72:9b:61:3e:b1:46:a4:5b:94: 89:d7:ba:29:f4:f4:d0:ec:95:0c:d8:6d:78:d0:0d: af:85:ba:29:18:25:86:92:51:d8:ff:9d:3e:f5:f6: 98:bb:89:f4:c3:b5:cf:71:d6:0f:de:53:71:24:38: 23:b2:52:47:b1:47:b5:8f:88:c6:14:2a:4e:3c:92: a8:46:c0:59:fa:2f:ba:f6:13:3e:51:47:dc:50:3f: 89:90:73:e0:36:58:39:65:29:e4:1c:e8:d1:de:69: 7d:ab:9f:54:07:44:46:d7:51:38:1f:1c:28:d6:a8: e9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4E:F6:82:7B:50:91:0E:6A:B4:EB:0A:00:5D:04:D7:41:1C:D9:64 X509v3 Authority Key Identifier: keyid:A4:42:33:2E:47:ED:F9:51:21:F8:35:CB:9E:EE:89:CC:D0:FD:23:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/A442332E47EDF95121F835CB9EEE89CCD0FD23AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:65:51:51:6e:74:be:8d:a2:08:8d:dc:d4:ab:20:45:55:79: ed:2d:fc:75:d4:5e:18:43:74:ed:92:b4:7d:d8:41:b0:be:54: 8d:6b:1b:80:14:55:07:be:8f:54:97:a4:40:d5:df:91:5a:92: 00:c4:bc:ba:4d:9a:b2:37:10:36:2d:99:46:3f:80:39:61:37: df:c3:fc:70:f0:7d:66:22:15:0a:c7:25:82:e5:64:9c:d8:dd: 79:37:93:94:81:69:84:88:90:d8:22:34:8e:61:47:f1:29:16: 12:30:ce:66:09:b7:79:c8:cd:b8:94:2e:61:63:62:5f:4a:25: 21:a3:11:f1:74:4d:87:7d:cf:33:5e:85:b6:ee:33:8a:0d:aa: 03:20:bc:8e:9c:96:7f:5c:e9:28:06:ba:69:2f:bd:7e:7d:7f: 5a:5f:58:1b:7e:43:a4:3a:2a:13:0d:32:cd:6d:51:30:4a:77: 99:25:34:bb:f0:42:8a:86:a0:7f:90:43:5e:2c:6a:de:66:e2: 63:62:1f:2f:f8:27:c6:e7:d8:02:1f:5b:62:a0:2e:b7:0d:06: 9b:20:43:8b:a8:5c:a9:02:7b:c6:ad:e1:60:8e:9d:e3:8e:62: f3:79:bc:08:2d:55:aa:51:cf:f6:16:e5:61:bc:5a:13:e6:cb: f0:60:bd:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDO5JUeWIZqrGqVqPaVX2DfA4cEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NE MEZEMjNBQjAeFw0yNjA2MTcwNjE1MzZaFw0yNjA2MTgxMDE5MzZaMDMxMTAvBgNV BAMTKDc1NEVGNjgyN0I1MDkxMEU2QUI0RUIwQTAwNUQwNEQ3NDExQ0Q5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSWou+OEVwuB+XlfnHkhoItmN NosJeZdBi0dwRdGKYtwXnf7Ahgtjm67u2JF2cuR67u8EAd7xXlUpD8KVeonQcI7f n60LVqeXrEQ8pKvCVhXMLmMCFcxAUIYF6ZomnEkj7i57lsg5DPV/fWksKSoEKua1 hRpQY9CacVcLTxTMTdv3bMTBmO4d5GLohHKbYT6xRqRblInXuin09NDslQzYbXjQ Da+FuikYJYaSUdj/nT719pi7ifTDtc9x1g/eU3EkOCOyUkexR7WPiMYUKk48kqhG wFn6L7r2Ez5RR9xQP4mQc+A2WDllKeQc6NHeaX2rn1QHREbXUTgfHCjWqOkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdU72gntQkQ5qtOsKAF0E10Ec2WQwHwYDVR0j BBgwFoAUpEIzLkft+VEh+DXLnu6JzND9I6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTYwZjg0NjEtYmIyYy00ZDNlLWE1YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0 N0VERjk1MTIxRjgzNUNCOUVFRTg5Q0NEMEZEMjNBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNDQyMzMyRTQ3RURGOTUxMjFGODM1Q0I5RUVFODlDQ0QwRkQy M0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvQTQ0MjMzMkU0N0VERjk1MTIxRjgzNUNCOUVFRTg5 Q0NEMEZEMjNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxlUVFudL6NogiN3NSrIEVVee0t/HXUXhhD dO2StH3YQbC+VI1rG4AUVQe+j1SXpEDV35FakgDEvLpNmrI3EDYtmUY/gDlhN9/D /HDwfWYiFQrHJYLlZJzY3Xk3k5SBaYSIkNgiNI5hR/EpFhIwzmYJt3nIzbiULmFj Yl9KJSGjEfF0TYd9zzNehbbuM4oNqgMgvI6cln9c6SgGumkvvX59f1pfWBt+Q6Q6 KhMNMs1tUTBKd5klNLvwQoqGoH+QQ14sat5m4mNiHy/4J8bn2AIfW2KgLrcNBpsg Q4uoXKkCe8at4WCOneOOYvN5vAgtVapRz/YW5WG8WhPmy/Bgvco= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:20 2026 by rpki-client