$ rpki-client -vvf rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft File: 0453EE44B6298E574434A213BFD59854FBBC1AC9.mft (raw, json) Hash identifier: KnNTBhVp4ZbHnD2ye+3w1ENtEpywYYmEJb4qC0oO74Q= Subject key identifier: 47:26:9D:93:88:E7:47:9B:D8:78:9E:80:32:E4:78:DD:8B:47:A6:D3 Authority key identifier: 04:53:EE:44:B6:29:8E:57:44:34:A2:13:BF:D5:98:54:FB:BC:1A:C9 Certificate issuer: /CN=0453EE44B6298E574434A213BFD59854FBBC1AC9 Certificate serial: 0FD818442BEEEB7710EBC7A054904923F9619653 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 21:20:05 +0000 Manifest this update: Tue 16 Jun 2026 21:15:05 +0000 Manifest next update: Wed 17 Jun 2026 22:40:05 +0000 Files and hashes: 1: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: 7NlmtYXZ6oozA3ARYN5xU0ZSurydVsw5V4omrofalOI=) 2: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: 9cSUjwh9z6+6ZJ3LgshkbKPWLwwzg4ImlK/YQG0hafg=) 3: 0453EE44B6298E574434A213BFD59854FBBC1AC9.crl (hash: C0nsQ/CU2eRix7TI16bio2NuwJxHqaMO8DICM3AD/Vk=) 4: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: cIZPGEVWJFWOc4kuja4Zgt6H/ILhtTMjLdnFHfcUoyY=) 5: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: HWOy6TZ8QT68FcB2BCMFfmYX+XsnVwiXZ6wBXEIZ6YM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.crl rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d8:18:44:2b:ee:eb:77:10:eb:c7:a0:54:90:49:23:f9:61:96:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0453EE44B6298E574434A213BFD59854FBBC1AC9 Validity Not Before: Jun 16 21:15:05 2026 GMT Not After : Jun 17 22:40:05 2026 GMT Subject: CN=47269D9388E7479BD8789E8032E478DD8B47A6D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:19:5c:ef:f7:c5:93:01:2d:22:38:e5:29: d6:ed:65:79:7d:0c:9c:c0:f7:d6:21:6b:35:0c:d3: 35:6f:7d:e2:e2:9d:de:fd:1c:fe:e1:83:7c:d4:ab: 09:2b:11:98:6d:12:27:cd:cf:e2:21:62:94:c2:6e: f6:f3:ce:93:04:0f:96:0d:81:32:90:a8:96:67:54: c5:1e:ef:2e:74:3f:63:ab:05:88:2d:45:c2:ad:37: e5:78:9c:80:44:62:57:5d:2f:1a:b6:83:bb:0b:10: 28:01:b4:8f:d0:e4:ca:f5:cb:4f:ff:94:97:60:f3: b7:0e:1f:b8:ac:73:b0:0b:18:f2:84:38:5a:4e:d4: 85:8e:ff:82:5e:3f:a6:19:e4:35:e3:aa:f1:bb:22: a5:4e:63:e5:29:89:29:27:5e:29:3f:40:d1:75:f0: 60:c4:e1:a3:2e:9e:1a:fd:ab:b4:3b:20:01:d6:4f: 43:86:3c:81:9a:20:fa:b5:fb:78:4c:c9:1d:f3:31: 29:3d:e1:82:73:d9:c6:11:13:3b:7b:35:29:bf:d8: 86:77:d2:02:0d:c1:d9:1a:12:37:b2:a0:09:ce:92: 28:c3:68:a2:c3:45:e5:a7:6c:db:5f:42:f3:ef:a6: 5a:6d:57:4e:42:17:f4:53:37:ec:ee:c2:13:34:eb: 28:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:26:9D:93:88:E7:47:9B:D8:78:9E:80:32:E4:78:DD:8B:47:A6:D3 X509v3 Authority Key Identifier: keyid:04:53:EE:44:B6:29:8E:57:44:34:A2:13:BF:D5:98:54:FB:BC:1A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9c:9e:07:0f:af:db:42:e3:02:0d:e4:90:65:20:e1:9b:e1: 6f:45:65:ce:52:36:12:47:45:ea:b9:2c:06:f6:8c:bd:43:66: 19:9c:5e:89:fd:c1:32:ec:e1:2d:23:2c:c5:d8:7a:3a:de:2f: eb:45:34:37:41:63:f8:a3:6e:ad:57:36:99:c6:7c:94:76:71: a5:b5:e5:14:7f:30:0e:6a:80:8f:5b:d2:36:5a:ee:63:b9:2f: 56:42:5b:aa:e4:aa:16:16:3f:ed:05:68:d8:b2:49:06:b0:c9: 17:97:3b:77:0f:21:37:14:7b:ab:fe:b8:76:64:09:b0:ce:c0: 34:63:1d:f4:f5:4d:3e:d1:16:ef:ad:bc:c9:7e:cd:33:79:59: b7:55:eb:b7:b4:22:fb:06:00:66:f1:1c:87:07:1c:6a:3f:81: 47:2e:5c:ec:e0:cf:bb:2a:8f:43:39:a6:f3:8a:d3:45:14:cc: e2:c4:6a:65:f9:68:69:fa:5c:ff:48:36:1d:3d:40:65:c1:3b: af:66:c4:18:88:0f:2e:3a:f1:e8:0a:da:8f:8a:c2:1c:5c:ba: aa:c3:de:f6:35:05:c1:ca:52:22:a8:5d:9d:61:01:64:24:da: 10:23:12:02:9f:fb:9f:92:b1:a6:32:2f:cc:60:a9:61:28:47: 2e:e0:cc:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9gYRCvu63cQ68egVJBJI/lhllMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1M0VFNDRCNjI5OEU1NzQ0MzRBMjEzQkZENTk4NTRG QkJDMUFDOTAeFw0yNjA2MTYyMTE1MDVaFw0yNjA2MTcyMjQwMDVaMDMxMTAvBgNV BAMTKDQ3MjY5RDkzODhFNzQ3OUJEODc4OUU4MDMyRTQ3OEREOEI0N0E2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyxlc7/fFkwEtIjjlKdbtZXl9 DJzA99YhazUM0zVvfeLind79HP7hg3zUqwkrEZhtEifNz+IhYpTCbvbzzpMED5YN gTKQqJZnVMUe7y50P2OrBYgtRcKtN+V4nIBEYlddLxq2g7sLECgBtI/Q5Mr1y0// lJdg87cOH7isc7ALGPKEOFpO1IWO/4JeP6YZ5DXjqvG7IqVOY+UpiSknXik/QNF1 8GDE4aMunhr9q7Q7IAHWT0OGPIGaIPq1+3hMyR3zMSk94YJz2cYREzt7NSm/2IZ3 0gINwdkaEjeyoAnOkijDaKLDReWnbNtfQvPvplptV05CF/RTN+zuwhM06yjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURyadk4jnR5vYeJ6AMuR43YtHptMwHwYDVR0j BBgwFoAUBFPuRLYpjldENKITv9WYVPu8GskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzU3YjkwY2ItOGViZC00YzdiLThjMzEtMTMzYThiNGVkNjljLzAvMDQ1M0VFNDRC NjI5OEU1NzQ0MzRBMjEzQkZENTk4NTRGQkJDMUFDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDUzRUU0NEI2Mjk4RTU3NDQzNEEyMTNCRkQ1OTg1NEZCQkMx QUM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvMDQ1M0VFNDRCNjI5OEU1NzQ0MzRBMjEzQkZENTk4 NTRGQkJDMUFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWcngcPr9tC4wIN5JBlIOGb4W9FZc5SNhJH Req5LAb2jL1DZhmcXon9wTLs4S0jLMXYejreL+tFNDdBY/ijbq1XNpnGfJR2caW1 5RR/MA5qgI9b0jZa7mO5L1ZCW6rkqhYWP+0FaNiySQawyReXO3cPITcUe6v+uHZk CbDOwDRjHfT1TT7RFu+tvMl+zTN5WbdV67e0IvsGAGbxHIcHHGo/gUcuXOzgz7sq j0M5pvOK00UUzOLEamX5aGn6XP9INh09QGXBO69mxBiIDy468egK2o+KwhxcuqrD 3vY1BcHKUiKoXZ1hAWQk2hAjEgKf+5+SsaYyL8xgqWEoRy7gzFg= -----END CERTIFICATE-----Generated at Wed Jun 17 11:50:37 2026 by rpki-client