$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft File: 54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft (raw, json) Hash identifier: uSOM9awKUamn25lzoe46+H8tCBFIRp/2rlrcQ9qvWRM= Subject key identifier: D9:A7:FF:43:45:36:C6:84:28:1E:F5:D4:4D:F6:65:6E:B6:91:B0:DD Authority key identifier: 54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7 Certificate issuer: /CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7 Certificate serial: 294F5467AA4F6C937FE500EF179F353D8195C393 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:00:11 +0000 Manifest this update: Wed 17 Jun 2026 01:55:11 +0000 Manifest next update: Thu 18 Jun 2026 05:04:11 +0000 Files and hashes: 1: 323430363a656230303a3a2f33322d3438203d3e20313332363533.roa (hash: wOGa5HDAD18g7s458WGuA2zw20U9eHUQmcNEuznV9cc=) 2: 3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa (hash: RX5pvrelsOfCczsPMOPyTT9EJaPRhnL4ZABJet9eUTU=) 3: 54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl (hash: 8yfdrTVRxmm3cGWDj7bqNigdN5JZIA4zvkmop9FFO94=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:4f:54:67:aa:4f:6c:93:7f:e5:00:ef:17:9f:35:3d:81:95:c3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7 Validity Not Before: Jun 17 01:55:11 2026 GMT Not After : Jun 18 05:04:11 2026 GMT Subject: CN=D9A7FF434536C684281EF5D44DF6656EB691B0DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:6c:fd:5f:2b:38:1b:fe:26:ee:cc:99:ae: 73:7d:40:df:f0:65:12:03:65:3b:d2:ce:2c:7e:fd: c8:af:97:b5:d3:14:ef:5a:5d:a9:a4:39:94:b1:65: a6:25:fe:82:85:06:31:41:ad:49:ef:d1:a9:df:5f: 9e:9c:cb:7f:02:61:61:b5:aa:98:8a:76:e5:ba:96: 79:8f:0d:60:3b:e7:60:b7:d7:e2:53:f6:94:08:51: 07:f6:99:b5:af:c7:c9:a4:f7:44:e9:fb:c9:da:fa: 63:ab:84:39:8a:43:b8:28:5c:0e:6e:ed:ad:3a:48: cb:47:b3:ad:94:b8:60:dd:d0:3c:89:98:dd:0a:d5: d1:32:2c:65:ec:63:ca:6e:7f:db:50:d4:01:68:73: 9b:c3:c9:4a:86:2a:90:77:22:52:e1:1c:cf:69:ee: a2:62:6e:e7:53:13:19:b1:02:94:00:a4:32:40:16: ae:c2:35:7e:fd:32:5d:23:4c:c2:c8:fd:99:98:c9: 1c:99:6c:40:00:e7:42:e1:3b:0e:6c:27:eb:fd:c1: 58:38:44:c5:47:66:ea:4f:c4:67:df:50:75:00:7f: 48:64:05:e7:66:7c:90:7e:db:a9:e3:e8:2c:01:7a: 7d:b8:3f:00:d7:35:e5:cf:76:3e:af:5e:5c:71:c6: 0f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A7:FF:43:45:36:C6:84:28:1E:F5:D4:4D:F6:65:6E:B6:91:B0:DD X509v3 Authority Key Identifier: keyid:54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:37:73:86:64:87:2b:68:a8:b4:4d:d6:2a:01:ee:49:bf:b8: db:55:ab:f0:82:6d:c6:af:09:95:8c:bc:c8:96:8b:1f:31:3e: 4e:95:0e:d6:92:63:74:a4:96:f1:97:6b:45:21:51:00:11:05: 3f:6e:fd:d2:1e:83:2f:26:e5:e7:c1:83:89:c1:d9:7b:bb:b9: 05:25:2f:37:f1:c6:ce:7c:eb:31:cb:f9:64:64:2e:c0:74:f0: d5:4e:fc:6f:af:bc:a3:3b:80:60:ff:8a:37:04:b7:7f:e2:c2: fd:69:bb:68:44:64:80:07:a6:d7:8d:b5:fe:88:60:de:7b:00: 86:a9:07:46:06:ab:4b:ea:08:92:63:81:34:ef:cd:c9:3e:79: e7:80:d9:db:62:a4:13:fc:f4:dc:de:32:f3:f1:44:22:a8:e7: 8c:a2:48:81:39:c4:82:b4:03:50:c6:bf:c7:ff:3f:18:39:93: 32:ab:ce:60:aa:ca:28:3a:a4:3f:42:af:1d:50:27:d9:96:24: 76:25:ed:da:c6:d0:14:ea:84:90:30:79:94:65:98:28:96:3d: e4:1a:34:88:86:3a:c0:61:a1:8e:2b:ad:cf:c0:b2:cb:49:c9: a5:b4:3d:4c:de:c1:27:d9:41:82:ba:a7:e5:b2:fe:37:52:74: e6:dc:2c:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKU9UZ6pPbJN/5QDvF581PYGVw5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0MDc3NTRBMjRBRjI0OUYwRkU2RjVDOURENjQxRUJE QzkyOUJCNzAeFw0yNjA2MTcwMTU1MTFaFw0yNjA2MTgwNTA0MTFaMDMxMTAvBgNV BAMTKEQ5QTdGRjQzNDUzNkM2ODQyODFFRjVENDRERjY2NTZFQjY5MUIwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUmz9Xys4G/4m7syZrnN9QN/w ZRIDZTvSzix+/civl7XTFO9aXamkOZSxZaYl/oKFBjFBrUnv0anfX56cy38CYWG1 qpiKduW6lnmPDWA752C31+JT9pQIUQf2mbWvx8mk90Tp+8na+mOrhDmKQ7goXA5u 7a06SMtHs62UuGDd0DyJmN0K1dEyLGXsY8puf9tQ1AFoc5vDyUqGKpB3IlLhHM9p 7qJibudTExmxApQApDJAFq7CNX79Ml0jTMLI/ZmYyRyZbEAA50LhOw5sJ+v9wVg4 RMVHZupPxGffUHUAf0hkBedmfJB+26nj6CwBen24PwDXNeXPdj6vXlxxxg95AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2af/Q0U2xoQoHvXUTfZlbraRsN0wHwYDVR0j BBgwFoAUVEB3VKJK8knw/m9cndZB69ySm7cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkMjdjMGEtOTc5Mi00Y2JjLTlhOTYtZTcxMDUwYTFkZGUwLzAvNTQ0MDc3NTRB MjRBRjI0OUYwRkU2RjVDOURENjQxRUJEQzkyOUJCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDQwNzc1NEEyNEFGMjQ5RjBGRTZGNUM5REQ2NDFFQkRDOTI5 QkI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkMjdjMGEtOTc5Mi00Y2JjLTlh OTYtZTcxMDUwYTFkZGUwLzAvNTQ0MDc3NTRBMjRBRjI0OUYwRkU2RjVDOURENjQx RUJEQzkyOUJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA03c4ZkhytoqLRN1ioB7km/uNtVq/CCbcav CZWMvMiWix8xPk6VDtaSY3SklvGXa0UhUQARBT9u/dIegy8m5efBg4nB2Xu7uQUl Lzfxxs586zHL+WRkLsB08NVO/G+vvKM7gGD/ijcEt3/iwv1pu2hEZIAHpteNtf6I YN57AIapB0YGq0vqCJJjgTTvzck+eeeA2dtipBP89NzeMvPxRCKo54yiSIE5xIK0 A1DGv8f/Pxg5kzKrzmCqyig6pD9Crx1QJ9mWJHYl7drG0BTqhJAweZRlmCiWPeQa NIiGOsBhoY4rrc/AsstJyaW0PUzewSfZQYK6p+Wy/jdSdObcLGE= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:03 2026 by rpki-client