$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft File: 545EA992851AF2726DCE8FE1F2938BE936777BC9.mft (raw, json) Hash identifier: 1DfFm+NHKUtHvndNdcn0sEDKUK8wz1EmFNfMXRRba54= Subject key identifier: B7:09:86:F7:6C:DB:09:B1:AE:CD:E2:08:1A:6F:AD:85:19:0E:E8:7E Authority key identifier: 54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9 Certificate issuer: /CN=545EA992851AF2726DCE8FE1F2938BE936777BC9 Certificate serial: 2FE7CE6283B6519C2D221286D6A7439A4BF71AC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:21:18 +0000 Manifest this update: Tue 16 Jun 2026 18:16:18 +0000 Manifest next update: Wed 17 Jun 2026 18:41:18 +0000 Files and hashes: 1: 545EA992851AF2726DCE8FE1F2938BE936777BC9.crl (hash: bqbLbcspUF8SBG7GeeY+2rouZMga5ogBiIVIlEB7IvU=) 2: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: CF93x0CUSZc9nwaPIf94Rg3qFl8JOdqJteM1vot6/7Q=) 3: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: vaJ2Jnx34d5ViQhIOJO1KUl8K4Z1siF9VMxKO/oKGPo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e7:ce:62:83:b6:51:9c:2d:22:12:86:d6:a7:43:9a:4b:f7:1a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=545EA992851AF2726DCE8FE1F2938BE936777BC9 Validity Not Before: Jun 16 18:16:18 2026 GMT Not After : Jun 17 18:41:18 2026 GMT Subject: CN=B70986F76CDB09B1AECDE2081A6FAD85190EE87E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:0c:d4:68:84:8a:01:b1:9e:35:f2:5f:93: 1d:64:3b:c7:5e:53:be:9d:eb:67:34:86:74:6b:18: 3f:53:18:a2:94:f5:b6:eb:6a:36:ec:72:d2:1e:51: cd:a3:21:b0:54:41:ef:0c:57:89:db:89:57:9f:5b: ed:3a:3b:ad:99:0a:66:79:54:5a:a6:c7:c0:3a:c6: 22:2e:51:55:49:91:40:18:fe:24:4c:9c:0c:2b:b4: 26:7d:9d:6c:3f:62:a8:00:ed:46:95:19:41:f0:fe: 95:f9:4f:71:ae:cf:b0:6d:2f:79:e9:d9:fe:24:7f: 45:39:c2:b2:16:24:d3:e9:e4:32:37:26:03:2e:39: 6b:e3:8e:cc:12:25:ee:9a:52:8b:5b:23:94:5b:b4: 8c:e0:4a:6f:4f:da:87:4f:5a:3b:db:41:d2:e9:fc: 50:fe:68:ac:c8:f3:cb:c7:7a:46:e6:e6:1a:38:0a: 70:92:b4:a5:17:b2:19:91:25:2d:08:8c:ae:d8:25: 0d:bd:32:37:df:9c:1f:ed:10:b3:43:59:4e:d5:44: fa:43:b4:7e:0c:c5:37:53:af:e1:2d:0f:fb:4a:85: fe:97:cc:59:48:45:be:e6:23:a6:d2:c6:81:72:84: b4:19:12:13:06:b5:9b:82:bc:f8:72:de:76:ab:50: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:09:86:F7:6C:DB:09:B1:AE:CD:E2:08:1A:6F:AD:85:19:0E:E8:7E X509v3 Authority Key Identifier: keyid:54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:10:37:28:cf:0a:0a:c1:50:6d:9c:64:ed:60:6f:2c:48:9c: 30:02:72:34:bb:6c:27:dd:bd:01:3f:81:1a:ea:09:90:fa:fe: 83:48:a9:77:cf:61:25:17:f4:c2:ee:aa:40:70:e8:80:98:35: d4:79:af:41:e5:73:5e:81:3c:aa:d3:34:3c:3d:16:1c:ad:0c: 5c:2a:f4:24:42:dc:ba:23:83:f8:98:7a:6e:9a:4c:44:f8:5f: 1a:9c:14:bd:33:50:a2:7a:59:33:da:41:1e:f3:9c:60:fd:41: df:33:e2:24:c8:d5:6d:48:21:37:74:60:25:f5:6c:b4:96:44: 13:34:07:20:84:88:51:01:b6:a0:65:1f:83:02:4d:63:70:0a: bd:5e:17:71:e2:6f:2b:c0:9a:3d:94:55:18:26:f6:ed:0b:a0: 04:10:bf:f9:88:3a:fb:8c:68:19:d4:db:f3:16:97:c4:ad:79: 85:32:d5:b2:e7:f4:ec:cc:b9:a3:0d:eb:17:78:f6:b8:3c:4b: a7:32:7e:44:a2:5a:67:2e:7a:23:fc:38:75:7b:ab:e1:de:1b: b5:17:6f:c1:c0:e4:b7:e2:10:6c:95:0e:98:19:49:13:67:1b: 2e:eb:bf:57:e3:2a:e4:06:5f:d7:b0:43:00:e3:c9:c5:12:66: 02:0c:52:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+fOYoO2UZwtIhKG1qdDmkv3GsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ1RUE5OTI4NTFBRjI3MjZEQ0U4RkUxRjI5MzhCRTkz Njc3N0JDOTAeFw0yNjA2MTYxODE2MThaFw0yNjA2MTcxODQxMThaMDMxMTAvBgNV BAMTKEI3MDk4NkY3NkNEQjA5QjFBRUNERTIwODFBNkZBRDg1MTkwRUU4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AgzUaISKAbGeNfJfkx1kO8de U76d62c0hnRrGD9TGKKU9bbrajbsctIeUc2jIbBUQe8MV4nbiVefW+06O62ZCmZ5 VFqmx8A6xiIuUVVJkUAY/iRMnAwrtCZ9nWw/YqgA7UaVGUHw/pX5T3Guz7BtL3np 2f4kf0U5wrIWJNPp5DI3JgMuOWvjjswSJe6aUotbI5RbtIzgSm9P2odPWjvbQdLp /FD+aKzI88vHekbm5ho4CnCStKUXshmRJS0IjK7YJQ29MjffnB/tELNDWU7VRPpD tH4MxTdTr+EtD/tKhf6XzFlIRb7mI6bSxoFyhLQZEhMGtZuCvPhy3narUI7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtwmG92zbCbGuzeIIGm+thRkO6H4wHwYDVR0j BBgwFoAUVF6pkoUa8nJtzo/h8pOL6TZ3e8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNlYWM5YzAtZGUxYi00NmRkLWJmMzctMThmZTNhOGQ1ZmJmLzAvNTQ1RUE5OTI4 NTFBRjI3MjZEQ0U4RkUxRjI5MzhCRTkzNjc3N0JDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDVFQTk5Mjg1MUFGMjcyNkRDRThGRTFGMjkzOEJFOTM2Nzc3 QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNlYWM5YzAtZGUxYi00NmRkLWJm MzctMThmZTNhOGQ1ZmJmLzAvNTQ1RUE5OTI4NTFBRjI3MjZEQ0U4RkUxRjI5MzhC RTkzNjc3N0JDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUQNyjPCgrBUG2cZO1gbyxInDACcjS7bCfd vQE/gRrqCZD6/oNIqXfPYSUX9MLuqkBw6ICYNdR5r0Hlc16BPKrTNDw9FhytDFwq 9CRC3Lojg/iYem6aTET4XxqcFL0zUKJ6WTPaQR7znGD9Qd8z4iTI1W1IITd0YCX1 bLSWRBM0ByCEiFEBtqBlH4MCTWNwCr1eF3HibyvAmj2UVRgm9u0LoAQQv/mIOvuM aBnU2/MWl8SteYUy1bLn9OzMuaMN6xd49rg8S6cyfkSiWmcueiP8OHV7q+HeG7UX b8HA5LfiEGyVDpgZSRNnGy7rv1fjKuQGX9ewQwDjycUSZgIMUnI= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:26 2026 by rpki-client