$ rpki-client -vvf rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft File: A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft (raw, json) Hash identifier: m5NilUdAvLeWFRHUHIQL1nI81eCImRkxYRQhw7i+pko= Subject key identifier: A3:A0:68:FC:D0:09:3B:FE:1A:AD:DF:56:44:7A:DC:8F:D5:E7:38:EE Authority key identifier: A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D Certificate issuer: /CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D Certificate serial: 7FD6DDBA393DB4B15255A131CA4069F4CD992BE5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:51:53 +0000 Manifest this update: Tue 16 Jun 2026 18:46:53 +0000 Manifest next update: Wed 17 Jun 2026 19:58:53 +0000 Files and hashes: 1: A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl (hash: xW67yN9PWxkzB5/jpalx9CseAKMtG+nZ6fMkwnGafeY=) 2: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (hash: njKsV+Ks6jWYRD/Bk8dM3j39b6JxY/7zJuEqTLSaQJo=) 3: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (hash: lhhFXTGZiU1QkHFYBJ4wWU0h/3XC744iXGiTVreBn18=) 4: 3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (hash: W7doPEAlt7atW3PujV3jj4JUbhiVhrrULJlIpRgUn64=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d6:dd:ba:39:3d:b4:b1:52:55:a1:31:ca:40:69:f4:cd:99:2b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D Validity Not Before: Jun 16 18:46:53 2026 GMT Not After : Jun 17 19:58:53 2026 GMT Subject: CN=A3A068FCD0093BFE1AADDF56447ADC8FD5E738EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8e:d6:2f:e6:5d:5e:92:62:7a:1d:d4:65:a4: 98:b6:47:61:28:ef:b0:64:b8:e2:6d:7d:35:7d:77: b0:0c:14:7e:8d:a9:48:b7:56:8c:36:e8:d1:04:e1: 25:8c:f3:5b:23:01:00:e7:73:74:8f:ba:bd:cb:07: 43:f5:45:32:ab:48:cb:da:f2:ea:e9:c4:98:b1:ed: ad:fe:c0:70:d4:e4:96:0c:ae:93:5d:89:df:1e:70: ee:36:a0:f6:20:8e:9b:28:eb:35:ad:9b:2f:83:d4: 4b:9b:f3:ea:0e:89:8a:03:2c:24:a2:f1:39:a3:5a: aa:c9:c1:c0:35:6f:db:a1:05:f9:62:dd:85:0a:d3: 67:77:ab:91:7b:60:fb:19:8b:3b:ca:31:82:2e:69: f9:5d:50:89:25:b0:3c:84:a4:8c:56:dd:76:5e:91: 35:bd:f9:46:5d:91:f0:fd:6c:90:52:33:70:60:c6: ee:c7:24:4d:13:52:8f:a2:84:ba:c8:79:4b:e0:7f: 22:7b:50:cb:c2:87:7a:2b:d7:9d:ae:64:ab:e1:c7: f9:a1:0d:b9:5f:84:d9:4e:58:32:0e:1f:85:91:05: fa:20:84:0f:53:7d:39:f6:ed:11:e4:fc:19:38:c7: 47:f5:f5:dc:17:05:d7:02:9e:1b:fa:f8:24:67:12: e0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A0:68:FC:D0:09:3B:FE:1A:AD:DF:56:44:7A:DC:8F:D5:E7:38:EE X509v3 Authority Key Identifier: keyid:A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b8:fa:1b:2d:83:43:95:64:de:87:d2:6b:26:d4:c4:df:a5: b3:f0:1e:99:65:b2:ad:78:98:c0:e8:1e:cd:0d:94:02:61:1f: 42:3e:8b:8c:2f:7b:8e:8b:7a:9e:a6:60:1b:15:14:32:92:b3: 4b:10:0d:12:b7:8a:2a:12:1e:6c:8e:08:5d:13:f3:d3:d6:69: a0:ec:3d:07:6c:45:d3:a0:dc:8c:81:4d:7e:df:30:cf:40:97: 76:b2:5c:ba:2e:8c:04:fb:b3:66:59:73:5f:05:8c:58:a8:77: 31:0f:95:c3:ad:82:5e:00:8b:92:5f:c1:d4:42:49:d4:02:d1: 34:1c:2e:29:fb:58:ed:84:c0:32:f0:1b:44:82:0c:ac:92:7d: 2d:d3:fd:13:06:e6:93:7d:90:ee:90:d0:76:b9:ab:6b:73:88: 6d:df:98:83:03:ef:d2:d9:60:89:70:75:9a:87:56:ce:33:e8: bd:db:61:6e:5b:ff:d9:5a:d1:8b:bb:e7:9d:36:be:a3:d1:bf: 21:2a:c5:31:2a:0e:d1:b6:e7:65:06:6b:c3:c0:a9:b4:31:bb: 8b:79:ce:5e:3e:1e:09:17:ef:05:a2:fb:c8:35:ab:e3:22:c6: de:09:ae:3d:4a:e1:1b:0d:6c:98:a2:6d:6a:88:cf:bd:05:68: 8f:98:92:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf9bdujk9tLFSVaExykBp9M2ZK+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTExRTBBNjIzODI2RTI3Q0YyRkMyOUNCOUIwMTA4RkMy RDFBRDAwRDAeFw0yNjA2MTYxODQ2NTNaFw0yNjA2MTcxOTU4NTNaMDMxMTAvBgNV BAMTKEEzQTA2OEZDRDAwOTNCRkUxQUFEREY1NjQ0N0FEQzhGRDVFNzM4RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRjtYv5l1ekmJ6HdRlpJi2R2Eo 77BkuOJtfTV9d7AMFH6NqUi3Vow26NEE4SWM81sjAQDnc3SPur3LB0P1RTKrSMva 8urpxJix7a3+wHDU5JYMrpNdid8ecO42oPYgjpso6zWtmy+D1Eub8+oOiYoDLCSi 8TmjWqrJwcA1b9uhBfli3YUK02d3q5F7YPsZizvKMYIuafldUIklsDyEpIxW3XZe kTW9+UZdkfD9bJBSM3Bgxu7HJE0TUo+ihLrIeUvgfyJ7UMvCh3or152uZKvhx/mh DblfhNlOWDIOH4WRBfoghA9TfTn27RHk/Bk4x0f19dwXBdcCnhv6+CRnEuBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo6Bo/NAJO/4ard9WRHrcj9XnOO4wHwYDVR0j BBgwFoAUoR4KYjgm4nzy/CnLmwEI/C0a0A0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU5ZTU2NTgtYWIxMC00Mjk3LTkyZjQtZjZhMjY2M2U1NGMwLzAvQTExRTBBNjIz ODI2RTI3Q0YyRkMyOUNCOUIwMTA4RkMyRDFBRDAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTFFMEE2MjM4MjZFMjdDRjJGQzI5Q0I5QjAxMDhGQzJEMUFE MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU5ZTU2NTgtYWIxMC00Mjk3LTky ZjQtZjZhMjY2M2U1NGMwLzAvQTExRTBBNjIzODI2RTI3Q0YyRkMyOUNCOUIwMTA4 RkMyRDFBRDAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB64+hstg0OVZN6H0msm1MTfpbPwHpllsq14 mMDoHs0NlAJhH0I+i4wve46Lep6mYBsVFDKSs0sQDRK3iioSHmyOCF0T89PWaaDs PQdsRdOg3IyBTX7fMM9Al3ayXLoujAT7s2ZZc18FjFiodzEPlcOtgl4Ai5JfwdRC SdQC0TQcLin7WO2EwDLwG0SCDKySfS3T/RMG5pN9kO6Q0Ha5q2tziG3fmIMD79LZ YIlwdZqHVs4z6L3bYW5b/9la0Yu75502vqPRvyEqxTEqDtG252UGa8PAqbQxu4t5 zl4+HgkX7wWi+8g1q+Mixt4Jrj1K4RsNbJiibWqIz70FaI+Ykog= -----END CERTIFICATE-----Generated at Wed Jun 17 11:14:11 2026 by rpki-client