$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft File: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft (raw, json) Hash identifier: 14ICBkpogUng9VlyqeZfbxvG/w/lmdCUMizuFGG8mHg= Subject key identifier: F8:DA:BB:CA:ED:89:A2:DA:42:51:9C:97:F1:C1:DC:D0:44:E3:82:33 Authority key identifier: 25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 Certificate issuer: /CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Certificate serial: 3C837E5A5E007D6E9BD3086D16CE5E7AFF69A244 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:51:50 +0000 Manifest this update: Tue 16 Jun 2026 22:46:50 +0000 Manifest next update: Thu 18 Jun 2026 01:14:50 +0000 Files and hashes: 1: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: gPZAQ+bxPkBJwcTxVnEcsmMlAofGkUTs2Mpi2Ou9ROM=) 2: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl (hash: hEol8caMS7AOhbVPS7srY82/DLDEFd3Qv60nFE9P7bM=) 3: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: RZQJpTRRgue7IYV2PEsoGXrZll3cpomqzvFUOIs6rno=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:83:7e:5a:5e:00:7d:6e:9b:d3:08:6d:16:ce:5e:7a:ff:69:a2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Validity Not Before: Jun 16 22:46:50 2026 GMT Not After : Jun 18 01:14:50 2026 GMT Subject: CN=F8DABBCAED89A2DA42519C97F1C1DCD044E38233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:9a:a7:5b:57:53:aa:e5:69:ff:69:b5:c8: 12:cd:72:9f:6a:f8:a7:34:3f:ad:01:db:c7:9a:00: 8a:56:48:5e:b5:65:af:f0:cd:16:1d:82:d1:fa:6e: 6c:14:7c:75:5b:11:75:9b:a2:49:05:1d:be:5e:3f: 4d:42:c2:ee:0e:90:69:05:83:c8:54:5c:7a:05:bc: f1:2f:06:35:e7:74:f4:f8:be:fd:a4:f5:41:95:84: 7a:f0:9e:81:83:47:f9:6d:f5:91:12:db:f4:30:4a: 52:dd:40:eb:f9:b3:81:0d:c3:ac:17:1e:ab:a1:b7: ec:e6:ce:0d:c3:db:d1:34:93:8a:86:e3:f8:49:d7: 17:63:38:1a:2b:65:7d:0c:74:29:21:83:26:ba:3c: e2:7e:60:4e:b9:cf:2a:50:c6:67:1b:3b:84:36:cc: 30:da:a5:82:1d:10:f7:47:94:38:db:02:be:62:7e: 6b:7a:cb:92:34:27:2e:43:02:69:7b:08:d6:f3:e4: d3:8c:d0:90:11:0d:be:23:14:dd:20:76:fe:b5:ae: f7:91:80:63:c6:d1:81:f5:e0:2e:fc:3e:36:90:29: 63:1d:72:61:ee:04:8d:e5:8f:86:18:41:34:10:fe: 6c:f0:2f:61:b2:cc:db:36:69:b6:2c:c0:5b:58:9c: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DA:BB:CA:ED:89:A2:DA:42:51:9C:97:F1:C1:DC:D0:44:E3:82:33 X509v3 Authority Key Identifier: keyid:25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:31:ad:2c:f0:d6:49:3d:61:b1:c0:77:42:9e:db:6b:5d:c8: 06:08:df:92:7e:57:bf:4f:1a:d5:28:74:96:82:d6:bd:78:93: d3:c4:68:33:dc:b1:b1:e8:f6:03:12:57:a5:21:4f:95:fb:3a: 1a:11:bf:f0:0f:c2:73:87:73:4f:2f:a0:5b:d7:0b:47:02:39: a5:a7:6e:fb:e6:7f:5c:5d:91:d9:1a:74:91:ce:3c:f4:78:7d: f2:21:65:5b:50:59:61:45:f5:2f:23:46:03:6d:77:5f:9b:32: 6a:63:fe:d7:e6:94:0c:02:cf:ba:ef:67:d2:25:bc:1a:e9:7b: 52:11:a2:23:0f:c4:cf:e8:0e:51:ff:b6:15:99:b6:5f:f1:64: 74:f5:1c:28:e2:fb:5c:15:64:0c:37:83:51:f5:43:5d:85:f4: 37:00:e8:3b:04:0d:cd:c6:f2:14:c3:9d:8b:75:70:89:2d:e6: f4:a9:6e:48:c4:2b:29:07:98:3a:30:b7:27:fe:e1:70:01:68: 91:91:94:a2:cd:1b:c3:c6:32:29:49:84:ec:30:f4:5f:75:17: 6b:a2:11:f9:9b:fa:cd:34:58:cc:c6:4c:b6:b2:0b:c6:d9:62: b4:5d:e5:bf:ab:ce:3e:86:d1:75:2d:c4:97:e4:09:c6:6b:b4: f1:b6:78:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIN+Wl4AfW6b0whtFs5eev9pokQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdG QzFFNkY5MzAeFw0yNjA2MTYyMjQ2NTBaFw0yNjA2MTgwMTE0NTBaMDMxMTAvBgNV BAMTKEY4REFCQkNBRUQ4OUEyREE0MjUxOUM5N0YxQzFEQ0QwNDRFMzgyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/ZqnW1dTquVp/2m1yBLNcp9q +Kc0P60B28eaAIpWSF61Za/wzRYdgtH6bmwUfHVbEXWbokkFHb5eP01Cwu4OkGkF g8hUXHoFvPEvBjXndPT4vv2k9UGVhHrwnoGDR/lt9ZES2/QwSlLdQOv5s4ENw6wX Hquht+zmzg3D29E0k4qG4/hJ1xdjOBorZX0MdCkhgya6POJ+YE65zypQxmcbO4Q2 zDDapYIdEPdHlDjbAr5ifmt6y5I0Jy5DAml7CNbz5NOM0JARDb4jFN0gdv61rveR gGPG0YH14C78PjaQKWMdcmHuBI3lj4YYQTQQ/mzwL2GyzNs2abYswFtYnPbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Nq7yu2JotpCUZyX8cHc0ETjgjMwHwYDVR0j BBgwFoAUJXr97p+h7WxVq/DAzPFz5/web5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTZmNzUwMjEtODM2OC00NDgxLTkyNjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5 RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdGQzFFNkY5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTdBRkRFRTlGQTFFRDZDNTVBQkYwQzBDQ0YxNzNFN0ZDMUU2 RjkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTcz RTdGQzFFNkY5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcxrSzw1kk9YbHAd0Ke22tdyAYI35J+V79P GtUodJaC1r14k9PEaDPcsbHo9gMSV6UhT5X7OhoRv/APwnOHc08voFvXC0cCOaWn bvvmf1xdkdkadJHOPPR4ffIhZVtQWWFF9S8jRgNtd1+bMmpj/tfmlAwCz7rvZ9Il vBrpe1IRoiMPxM/oDlH/thWZtl/xZHT1HCji+1wVZAw3g1H1Q12F9DcA6DsEDc3G 8hTDnYt1cIkt5vSpbkjEKykHmDowtyf+4XABaJGRlKLNG8PGMilJhOww9F91F2ui Efmb+s00WMzGTLayC8bZYrRd5b+rzj6G0XUtxJfkCcZrtPG2eJg= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:06 2026 by rpki-client