$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft File: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft (raw, json) Hash identifier: JhoWJ3D0KPbVsDdsf+CowgompdgpEjQ+woU0gTnTc6A= Subject key identifier: 69:DA:C3:C8:FB:A7:84:A9:0B:8C:BF:CD:0C:20:13:63:53:52:70:C7 Authority key identifier: D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17 Certificate issuer: /CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17 Certificate serial: 4B938B1AF7AEA072ACC43DF095CA8768D400F590 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:35:23 +0000 Manifest this update: Tue 16 Jun 2026 17:30:23 +0000 Manifest next update: Wed 17 Jun 2026 21:11:23 +0000 Files and hashes: 1: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl (hash: ej7kboYUgBI3KQZxD6K5RXyrVj9G5zML2Hta5DUFRsI=) 2: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: LLuRHn4xhc/MivkLWWh5CVLPBZ4K3sNosIj++ElGxco=) 3: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: glLFkt9sfYEvpqjXuBfssPvW+ZRZ2fl6wfErSqQG7zc=) 4: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: whFYG+jTb2gWlU4tXTKDvr8VOmh33B5+fTwOyqIk0yw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:93:8b:1a:f7:ae:a0:72:ac:c4:3d:f0:95:ca:87:68:d4:00:f5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17 Validity Not Before: Jun 16 17:30:23 2026 GMT Not After : Jun 17 21:11:23 2026 GMT Subject: CN=69DAC3C8FBA784A90B8CBFCD0C201363535270C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dd:bf:08:d1:f8:80:cf:a0:71:92:0b:9b:8c: cb:c7:8d:9a:dc:8c:5a:4d:09:7b:6c:ce:b7:18:77: 57:62:43:30:6d:0c:d6:e6:e2:90:43:a9:fd:19:c9: 88:f9:21:d6:08:c7:60:cb:c2:df:6c:8f:a7:6d:e7: 45:25:e1:3b:51:5a:71:6c:80:f0:9c:2d:3d:75:33: 11:ae:3a:f9:64:5b:c0:45:81:64:66:31:58:35:61: e3:43:20:c0:1b:f3:a3:47:7d:96:34:3e:2d:8e:f8: 10:70:60:fc:3c:a1:9c:18:ce:37:aa:c0:10:9f:64: f2:d9:a7:8d:91:41:41:06:65:28:7f:a0:6b:fa:33: 33:96:87:a7:b9:06:d6:5c:89:c5:3d:e5:1f:1b:78: ce:3b:dc:6d:0e:51:2d:05:eb:17:28:a1:af:4b:b5: be:84:a5:ad:2d:65:c6:92:0d:8d:8a:5d:42:8c:a8: f8:4a:9e:9e:5e:91:b0:4c:ef:36:07:d5:2e:b4:7e: 17:ec:9b:b6:1b:17:0a:61:2d:a9:30:6b:84:bb:ce: 9d:8a:00:52:d9:dc:2f:e6:86:ca:cb:7c:5b:49:85: be:0a:6f:2a:ad:4e:d3:27:95:c5:22:d2:87:0b:25: d2:e9:93:bd:0a:fd:7c:49:c1:a1:15:31:e8:f6:62: 24:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DA:C3:C8:FB:A7:84:A9:0B:8C:BF:CD:0C:20:13:63:53:52:70:C7 X509v3 Authority Key Identifier: keyid:D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:26:f6:a9:d8:ea:d2:e2:d4:0f:f7:6d:e1:20:54:57:92:56: 3a:ab:4b:dd:fa:66:7e:0c:e9:ed:ed:41:a7:3e:6c:0c:f6:ee: be:30:e8:ad:0c:27:c0:1b:c3:4a:f9:27:bd:20:8f:dc:4a:a0: 52:3d:30:17:0d:8b:ca:1f:38:65:4f:82:eb:51:7c:d7:25:6c: a7:5e:31:af:96:10:93:37:67:ae:24:eb:80:a7:f5:9f:f8:3b: 77:71:5b:73:58:a3:1b:5f:43:23:1b:19:4a:d8:8c:10:b5:06: 35:4a:67:b3:b8:26:17:85:c8:5a:71:5b:f0:ab:11:3b:cc:55: b5:b5:23:ce:c1:17:e0:02:ae:90:4a:80:d2:c2:1a:c7:42:70: a8:28:2f:9b:92:21:30:35:fe:97:58:96:3b:25:c7:94:72:a4: 97:d1:65:e4:e4:3a:07:1a:c6:18:ee:00:09:3e:1f:01:0e:dc: 4f:35:51:47:84:f9:d4:c7:0e:89:97:d9:f4:81:b4:16:e8:53: b4:dd:62:a1:2e:d6:c4:0d:5d:db:32:98:21:66:a7:ae:5a:28: fb:6c:bc:85:3a:f3:84:19:7d:dd:5a:39:22:5d:bf:3a:13:62: c8:a1:d3:30:99:08:ef:28:c7:cf:40:7e:9d:84:dc:77:a9:7a: da:b2:21:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5OLGveuoHKsxD3wlcqHaNQA9ZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDg4NTE1RjQ5QzlFMkE5NUY2MTQ3NTJCQTdDQkFE NURDMEMxNzAeFw0yNjA2MTYxNzMwMjNaFw0yNjA2MTcyMTExMjNaMDMxMTAvBgNV BAMTKDY5REFDM0M4RkJBNzg0QTkwQjhDQkZDRDBDMjAxMzYzNTM1MjcwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm3b8I0fiAz6BxkgubjMvHjZrc jFpNCXtszrcYd1diQzBtDNbm4pBDqf0ZyYj5IdYIx2DLwt9sj6dt50Ul4TtRWnFs gPCcLT11MxGuOvlkW8BFgWRmMVg1YeNDIMAb86NHfZY0Pi2O+BBwYPw8oZwYzjeq wBCfZPLZp42RQUEGZSh/oGv6MzOWh6e5BtZcicU95R8beM473G0OUS0F6xcooa9L tb6Epa0tZcaSDY2KXUKMqPhKnp5ekbBM7zYH1S60fhfsm7YbFwphLakwa4S7zp2K AFLZ3C/mhsrLfFtJhb4KbyqtTtMnlcUi0ocLJdLpk70K/XxJwaEVMej2YiQFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUadrDyPunhKkLjL/NDCATY1NScMcwHwYDVR0j BBgwFoAU1VSIUV9JyeKpX2FHUrp8utXcDBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMzNzBkMjQtYTY1Ni00MzM2LTg0MmItOWJkNWRjYTJiNDBhLzAvRDU1NDg4NTE1 RjQ5QzlFMkE5NUY2MTQ3NTJCQTdDQkFENURDMEMxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTU0ODg1MTVGNDlDOUUyQTk1RjYxNDc1MkJBN0NCQUQ1REMw QzE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvRDU1NDg4NTE1RjQ5QzlFMkE5NUY2MTQ3NTJCQTdD QkFENURDMEMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsm9qnY6tLi1A/3beEgVFeSVjqrS936Zn4M 6e3tQac+bAz27r4w6K0MJ8Abw0r5J70gj9xKoFI9MBcNi8ofOGVPgutRfNclbKde Ma+WEJM3Z64k64Cn9Z/4O3dxW3NYoxtfQyMbGUrYjBC1BjVKZ7O4JheFyFpxW/Cr ETvMVbW1I87BF+ACrpBKgNLCGsdCcKgoL5uSITA1/pdYljslx5RypJfRZeTkOgca xhjuAAk+HwEO3E81UUeE+dTHDomX2fSBtBboU7TdYqEu1sQNXdsymCFmp65aKPts vIU684QZfd1aOSJdvzoTYsih0zCZCO8ox89Afp2E3HepetqyIRA= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:00 2026 by rpki-client