$ rpki-client -vvf rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft File: B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft (raw, json) Hash identifier: Lso0qTG0dNvOLUPRd+VL0S4MWRBo+jnFRumTdq4+4/U= Subject key identifier: 2A:09:71:43:9E:6F:6C:7E:9E:E7:48:3D:50:54:13:4C:08:E2:EA:22 Authority key identifier: B6:3B:54:AD:0E:76:4D:B5:25:0C:E7:F1:2E:DB:43:2F:0C:02:89:7C Certificate issuer: /CN=B63B54AD0E764DB5250CE7F12EDB432F0C02897C Certificate serial: 5349F6080B1B42F5BDEB245426DB24AD4A8FE5BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 21:30:11 +0000 Manifest this update: Tue 16 Jun 2026 21:25:11 +0000 Manifest next update: Thu 18 Jun 2026 00:20:11 +0000 Files and hashes: 1: 3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (hash: Xlw4ZgOA9dxklZxuwsm7BdQVTv81WEpzZ+FyUCbJp8U=) 2: 3130332e35352e32382e302f32332d3234203d3e20313530343837.roa (hash: EOraKN7NbhJxKTOduQMxHR15n6cFJJTiK2diztwSbic=) 3: B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl (hash: llPQZFd5r9HzcahVH75lzl62ZpS2Hp9Ah0fWy+VqkoQ=) 4: 3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (hash: zDvSDZMoY6Znb5y3IJOyYf9v6rjB8P6HkgrYk/e4IOY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:49:f6:08:0b:1b:42:f5:bd:eb:24:54:26:db:24:ad:4a:8f:e5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B63B54AD0E764DB5250CE7F12EDB432F0C02897C Validity Not Before: Jun 16 21:25:11 2026 GMT Not After : Jun 18 00:20:11 2026 GMT Subject: CN=2A0971439E6F6C7E9EE7483D5054134C08E2EA22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:35:97:cf:87:0a:81:21:e5:3c:77:f3:c1: 7a:66:d5:56:cf:b1:58:03:8b:d6:f1:52:91:d6:fc: 55:12:08:c7:f1:04:99:82:84:f1:c6:09:d9:fa:2d: 59:fa:60:ef:cf:b1:17:01:06:d8:81:35:a1:b4:78: e8:b7:88:93:1e:ae:56:d4:7b:b1:4b:dd:93:d1:9e: 40:07:23:8d:fc:fc:1b:4e:a4:60:6f:25:bb:b4:df: 49:76:49:81:4b:ac:12:9b:db:6e:52:7e:c9:22:25: b1:7b:87:32:28:26:60:05:d7:3b:f8:8b:e9:6c:88: 4c:2c:a9:d5:02:0f:4c:b7:b9:6b:f4:88:af:ca:08: 21:84:26:3d:4c:01:1d:8d:ff:38:7e:2b:d4:2f:16: bb:fc:0c:9e:9e:9d:d8:33:29:ae:e6:73:03:fe:e9: 90:36:17:e1:0c:b8:68:fe:13:bc:26:f7:47:b8:a8: 51:2f:74:90:02:d4:7b:58:62:10:b0:a1:12:6b:a8: ba:0c:79:56:c5:82:5b:d7:ed:09:35:bd:28:9f:c3: 59:42:a0:e9:47:fc:d5:b5:32:c1:11:c4:23:66:d4: 64:10:5f:62:16:e2:7b:47:f3:28:1d:58:68:cc:f2: e2:14:6a:1d:f3:c4:56:03:14:1e:04:49:99:76:a8: 59:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:09:71:43:9E:6F:6C:7E:9E:E7:48:3D:50:54:13:4C:08:E2:EA:22 X509v3 Authority Key Identifier: keyid:B6:3B:54:AD:0E:76:4D:B5:25:0C:E7:F1:2E:DB:43:2F:0C:02:89:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:02:40:f7:4f:b3:a6:2f:0f:5a:a3:f1:84:1d:3f:5d:9c:10: 47:b5:b0:04:88:3a:ba:ad:d4:f3:22:70:3f:72:81:f1:68:2e: ae:01:fa:7d:06:50:5a:ac:94:d9:17:57:8d:5c:6d:07:d9:60: 98:e9:4d:18:77:0a:38:e1:69:7f:cb:c9:61:1c:4b:5d:d0:41: 2c:e5:8d:2c:80:cf:d3:18:03:ba:34:fe:72:d0:cd:56:73:4d: 69:a8:72:3e:14:6a:c3:69:04:4a:a3:74:e7:3e:5c:7b:e6:23: a8:d0:2f:24:11:76:9b:e9:6b:1a:a0:d5:7d:36:db:16:9b:f0: 4c:ee:9a:ca:11:f1:47:a8:19:9c:b1:56:cb:2f:f9:2e:56:34: 6d:19:fa:84:bd:88:c7:02:94:3b:a8:74:1b:96:7a:7f:10:be: 9d:ab:15:a8:01:20:4b:8e:c4:60:d1:4d:84:c7:d7:8e:b4:34: 1e:59:10:b8:33:54:34:87:d7:37:bc:fd:1d:a7:f8:0a:35:5f: e4:2d:47:40:5e:aa:86:ec:9d:58:da:56:e4:7a:e5:0d:2c:f7: 7c:23:f9:7d:f4:17:fb:4d:f6:7f:9f:ac:46:66:41:67:bc:d5: aa:2b:a9:43:b8:c1:0f:51:80:be:e4:8a:11:47:70:16:20:4c: d1:7e:6c:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0n2CAsbQvW96yRUJtskrUqP5bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzQjU0QUQwRTc2NERCNTI1MENFN0YxMkVEQjQzMkYw QzAyODk3QzAeFw0yNjA2MTYyMTI1MTFaFw0yNjA2MTgwMDIwMTFaMDMxMTAvBgNV BAMTKDJBMDk3MTQzOUU2RjZDN0U5RUU3NDgzRDUwNTQxMzRDMDhFMkVBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBDWXz4cKgSHlPHfzwXpm1VbP sVgDi9bxUpHW/FUSCMfxBJmChPHGCdn6LVn6YO/PsRcBBtiBNaG0eOi3iJMerlbU e7FL3ZPRnkAHI438/BtOpGBvJbu030l2SYFLrBKb225SfskiJbF7hzIoJmAF1zv4 i+lsiEwsqdUCD0y3uWv0iK/KCCGEJj1MAR2N/zh+K9QvFrv8DJ6endgzKa7mcwP+ 6ZA2F+EMuGj+E7wm90e4qFEvdJAC1HtYYhCwoRJrqLoMeVbFglvX7Qk1vSifw1lC oOlH/NW1MsERxCNm1GQQX2IW4ntH8ygdWGjM8uIUah3zxFYDFB4ESZl2qFkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKglxQ55vbH6e50g9UFQTTAji6iIwHwYDVR0j BBgwFoAUtjtUrQ52TbUlDOfxLttDLwwCiXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTUwNDc5M2MtYzIwOS00NjlhLThlM2MtZWIzZjVhODM4NjNmLzAvQjYzQjU0QUQw RTc2NERCNTI1MENFN0YxMkVEQjQzMkYwQzAyODk3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjNCNTRBRDBFNzY0REI1MjUwQ0U3RjEyRURCNDMyRjBDMDI4 OTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTUwNDc5M2MtYzIwOS00NjlhLThl M2MtZWIzZjVhODM4NjNmLzAvQjYzQjU0QUQwRTc2NERCNTI1MENFN0YxMkVEQjQz MkYwQzAyODk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsCQPdPs6YvD1qj8YQdP12cEEe1sASIOrqt 1PMicD9ygfFoLq4B+n0GUFqslNkXV41cbQfZYJjpTRh3CjjhaX/LyWEcS13QQSzl jSyAz9MYA7o0/nLQzVZzTWmocj4UasNpBEqjdOc+XHvmI6jQLyQRdpvpaxqg1X02 2xab8EzumsoR8UeoGZyxVssv+S5WNG0Z+oS9iMcClDuodBuWen8Qvp2rFagBIEuO xGDRTYTH1460NB5ZELgzVDSH1ze8/R2n+Ao1X+QtR0BeqobsnVjaVuR65Q0s93wj +X30F/tN9n+frEZmQWe81aorqUO4wQ9RgL7kihFHcBYgTNF+bO8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:43:47 2026 by rpki-client