$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft File: 5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft (raw, json) Hash identifier: vIElUp7MfdNKrInPsQlOepJzr1hIFK7BotlPVS3sPsU= Subject key identifier: CD:54:3B:41:4A:F6:62:99:0E:0D:D4:DA:53:14:0F:08:F7:3C:FC:B8 Authority key identifier: 55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D Certificate issuer: /CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D Certificate serial: 7CD13B14199B54A02E9CECE4E5A0ED7975437BCE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:30:14 +0000 Manifest this update: Tue 16 Jun 2026 17:25:14 +0000 Manifest next update: Wed 17 Jun 2026 18:49:14 +0000 Files and hashes: 1: 3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa (hash: 8JHdIEqNbeJfT5OVw6EBi4k3e542O+VmKhuJlmXA+os=) 2: 5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl (hash: Hnuyqf0ITz3D/9nEPCv1U9Zb3OK/VO6XCRbErytiBSg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d1:3b:14:19:9b:54:a0:2e:9c:ec:e4:e5:a0:ed:79:75:43:7b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D Validity Not Before: Jun 16 17:25:14 2026 GMT Not After : Jun 17 18:49:14 2026 GMT Subject: CN=CD543B414AF662990E0DD4DA53140F08F73CFCB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:23:b6:da:cb:24:2d:7d:36:da:98:b6:9f:af: f3:d5:44:42:11:31:26:b0:7d:e0:cc:9b:f3:e2:17: e0:e1:79:f0:bb:c7:65:7c:d8:bb:a5:11:f1:5b:d8: ac:c9:ea:9b:82:a2:cb:08:7f:83:68:d6:8f:37:5f: 82:b9:dc:b1:7e:8e:2a:91:7a:ae:15:9c:36:74:1f: f8:0b:e1:7a:fd:8d:53:ef:10:fc:cb:7f:d9:bc:4b: 83:dc:0a:f9:21:71:92:55:1b:72:c2:10:73:07:6a: 4c:65:f6:a0:83:92:c3:2d:de:0b:e0:2a:17:94:e7: d9:da:5d:98:74:e3:19:00:aa:25:ab:6e:66:ae:e7: 82:10:ac:82:d0:0c:76:da:ea:e4:7c:05:3b:59:4a: 72:86:ce:ac:02:c9:7b:e5:ab:54:bf:9c:61:5b:76: 26:98:38:ad:d9:30:ff:a5:38:0b:8b:b0:45:75:49: 55:42:d9:55:59:88:37:9b:26:1d:f8:26:ae:3d:07: 21:95:54:87:ed:e0:8c:61:66:0d:f2:7d:6a:45:53: 36:46:bc:60:32:0d:fa:84:72:98:fb:0e:0a:85:c4: 8f:a8:19:fd:9d:12:a5:11:92:02:90:d6:1d:2b:d2: ab:c1:32:79:e4:31:7a:d5:4a:24:79:db:ab:8b:ab: ec:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:54:3B:41:4A:F6:62:99:0E:0D:D4:DA:53:14:0F:08:F7:3C:FC:B8 X509v3 Authority Key Identifier: keyid:55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c5:2b:58:9a:b6:e0:f0:ba:71:a6:e5:5f:ed:64:bc:60:0a: 7a:45:f8:55:f1:04:b3:55:26:29:cd:55:1c:38:57:2e:cd:83: 92:40:48:90:5a:ac:dc:23:f7:53:f3:a3:bc:c8:29:b3:29:54: ac:3d:1d:cf:d4:6d:6b:c0:93:6e:ce:1c:39:a5:c0:cf:8f:3c: 7e:72:19:c8:01:85:48:3a:7d:61:ef:b3:d7:f2:33:b4:4b:b3: 7d:a8:81:28:70:52:86:11:78:2d:5c:26:19:1b:37:d8:07:3d: da:92:8e:9f:b6:cf:88:0a:77:32:4a:70:71:04:82:6b:b3:3a: 54:03:07:b8:da:1a:47:41:c1:a9:6b:ef:f2:54:81:11:21:27: 8e:cc:0e:17:b8:22:f0:cf:96:4d:1c:a6:66:21:24:32:b1:66: 80:cc:ff:b2:92:cd:33:0a:cd:46:db:66:5f:04:a3:10:7d:84: 80:6f:9e:61:df:e1:4f:a3:d1:a5:d7:bc:54:04:ae:42:38:a4: d5:53:10:7a:0c:dc:6c:b0:04:c8:50:cc:90:06:39:ff:4e:2b: 26:b4:6c:76:ca:3a:81:ba:8f:be:95:f5:f6:29:3d:5a:4a:61: b1:b5:54:5a:16:f5:48:fe:f8:d8:c0:73:cc:c3:bb:be:d4:f3: 54:b8:8f:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNE7FBmbVKAunOzk5aDteXVDe84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwM0ZGNTY1NzAxMjMzN0VERjNBMzlDREE4QTIwRUZD RDlGNzI1RDAeFw0yNjA2MTYxNzI1MTRaFw0yNjA2MTcxODQ5MTRaMDMxMTAvBgNV BAMTKENENTQzQjQxNEFGNjYyOTkwRTBERDREQTUzMTQwRjA4RjczQ0ZDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbI7bayyQtfTbamLafr/PVREIR MSawfeDMm/PiF+DhefC7x2V82LulEfFb2KzJ6puCossIf4No1o83X4K53LF+jiqR eq4VnDZ0H/gL4Xr9jVPvEPzLf9m8S4PcCvkhcZJVG3LCEHMHakxl9qCDksMt3gvg KheU59naXZh04xkAqiWrbmau54IQrILQDHba6uR8BTtZSnKGzqwCyXvlq1S/nGFb diaYOK3ZMP+lOAuLsEV1SVVC2VVZiDebJh34Jq49ByGVVIft4IxhZg3yfWpFUzZG vGAyDfqEcpj7DgqFxI+oGf2dEqURkgKQ1h0r0qvBMnnkMXrVSiR526uLq+xLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzVQ7QUr2YpkODdTaUxQPCPc8/LgwHwYDVR0j BBgwFoAUVQP/VlcBIzft86Oc2oog782fcl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhNWZmZGMtMTUxYS00YWFkLWEyYjctNDMyNjQ5ZGU2ZGJlLzAvNTUwM0ZGNTY1 NzAxMjMzN0VERjNBMzlDREE4QTIwRUZDRDlGNzI1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NTAzRkY1NjU3MDEyMzM3RURGM0EzOUNEQThBMjBFRkNEOUY3 MjVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNhNWZmZGMtMTUxYS00YWFkLWEy YjctNDMyNjQ5ZGU2ZGJlLzAvNTUwM0ZGNTY1NzAxMjMzN0VERjNBMzlDREE4QTIw RUZDRDlGNzI1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnFK1iatuDwunGm5V/tZLxgCnpF+FXxBLNV JinNVRw4Vy7Ng5JASJBarNwj91Pzo7zIKbMpVKw9Hc/UbWvAk27OHDmlwM+PPH5y GcgBhUg6fWHvs9fyM7RLs32ogShwUoYReC1cJhkbN9gHPdqSjp+2z4gKdzJKcHEE gmuzOlQDB7jaGkdBwalr7/JUgREhJ47MDhe4IvDPlk0cpmYhJDKxZoDM/7KSzTMK zUbbZl8EoxB9hIBvnmHf4U+j0aXXvFQErkI4pNVTEHoM3GywBMhQzJAGOf9OKya0 bHbKOoG6j76V9fYpPVpKYbG1VFoW9Uj++NjAc8zDu77U81S4jyU= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:06 2026 by rpki-client