$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft File: E54912D936D5BF778FBB732E7E449916627DA941.mft (raw, json) Hash identifier: IsFaqL8SyjqGGG7TLPL+fcXugrq8B7Zq2PfSwfkqyYs= Subject key identifier: 11:D2:29:FB:7A:7B:10:FB:81:62:D2:33:AE:19:64:02:3C:9B:6A:09 Authority key identifier: E5:49:12:D9:36:D5:BF:77:8F:BB:73:2E:7E:44:99:16:62:7D:A9:41 Certificate issuer: /CN=E54912D936D5BF778FBB732E7E449916627DA941 Certificate serial: 0B6A8A4BD562F70B1A7346116B19514DBC8CBEAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E54912D936D5BF778FBB732E7E449916627DA941.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 17:40:55 +0000 Manifest this update: Sat 13 Jun 2026 17:35:55 +0000 Manifest next update: Sun 14 Jun 2026 20:56:55 +0000 Files and hashes: 1: E54912D936D5BF778FBB732E7E449916627DA941.crl (hash: 0m+y3rf8wGbW+ExG4dS0HOp4VCRkpuVA6mtbvWgqKIQ=) 2: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: afoPHznoH0e131M1W28pnPXY7hbzwID+nPCNXifuAL4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.crl rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E54912D936D5BF778FBB732E7E449916627DA941.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:6a:8a:4b:d5:62:f7:0b:1a:73:46:11:6b:19:51:4d:bc:8c:be:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E54912D936D5BF778FBB732E7E449916627DA941 Validity Not Before: Jun 13 17:35:55 2026 GMT Not After : Jun 14 20:56:55 2026 GMT Subject: CN=11D229FB7A7B10FB8162D233AE1964023C9B6A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:61:95:0c:73:00:57:e1:c3:40:9e:37:bb: 52:d4:79:d3:75:a2:33:7f:2b:7b:4c:74:27:35:27: 7a:ff:8b:9a:47:51:f1:55:33:21:fb:a7:10:c4:8e: 20:46:56:31:30:b5:2a:36:6f:16:8c:0b:43:f3:bd: 57:d9:5e:f7:80:3e:4e:d9:3e:68:6b:54:fc:73:54: db:a4:31:93:ef:f6:78:a7:6e:fc:6c:42:c5:51:e2: 3e:51:21:8b:f7:4f:22:33:9d:c5:85:7c:07:4a:73: ce:d6:6f:a2:e9:b8:f4:ea:e6:29:f3:01:d5:ef:32: 0c:8d:bb:39:44:21:26:2a:dc:f0:27:f3:ea:73:6c: b3:85:2a:a3:db:a7:67:5c:3a:f4:b8:4e:4a:ce:77: f9:c2:97:82:82:64:2e:46:76:5c:9a:04:60:c1:c9: c5:72:75:18:84:1d:a4:e1:17:e2:75:35:94:f0:45: 9e:71:49:3b:1a:15:20:83:85:6c:b3:43:ce:7c:92: 71:d4:4b:35:fd:fd:c6:38:8c:cf:6d:ff:6a:b4:37: 28:a4:bc:59:5a:6c:59:17:0f:16:c3:4e:f0:06:a8: 8a:22:b9:e3:7f:94:5c:13:35:70:fe:ec:9c:57:5d: ee:7b:1c:19:0f:4f:5f:8e:ed:3e:10:02:d7:58:a3: 3c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D2:29:FB:7A:7B:10:FB:81:62:D2:33:AE:19:64:02:3C:9B:6A:09 X509v3 Authority Key Identifier: keyid:E5:49:12:D9:36:D5:BF:77:8F:BB:73:2E:7E:44:99:16:62:7D:A9:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E54912D936D5BF778FBB732E7E449916627DA941.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:58:3c:bc:ea:dc:39:4e:55:dd:42:08:e9:55:60:19:d0:55: 29:f7:ae:8b:7b:59:6e:1d:cd:25:61:84:a8:5d:f2:25:30:2f: ba:51:d3:05:3c:01:dd:94:7a:06:8e:a0:d6:a7:e2:44:31:dc: 8f:d6:2a:e6:2d:d1:02:86:e3:ab:73:91:9e:34:14:e4:0b:3c: e8:9c:f7:15:8c:dc:87:16:40:e2:43:83:57:1c:8a:35:21:18: d6:a6:90:b5:b4:71:da:ec:64:9a:63:2c:d2:31:ee:3e:31:d3: 11:be:99:18:32:c1:0a:ff:1c:59:7d:f5:7f:32:f7:0b:fb:14: 0a:79:57:bd:55:4c:ba:e6:a3:73:37:8e:fb:e8:36:69:d0:fc: 2b:82:26:39:f5:6e:f0:bf:b4:88:c4:9a:26:6d:0d:ae:f3:b1: df:94:35:bb:57:81:9c:46:70:a9:6e:a1:4a:7d:ad:45:39:bc: 8f:eb:07:85:1a:86:72:ba:32:ab:f4:01:c3:e8:cb:17:9a:4e: 43:60:f8:cf:1a:05:45:e1:bb:ca:82:d6:c6:e9:e8:b7:2d:fe: 4a:0c:84:79:00:73:47:67:5f:6c:e6:93:e7:3f:47:dc:b3:50: e1:09:84:d6:e6:18:14:25:19:bc:fa:9a:64:c3:f1:ff:3f:a6: c1:44:2d:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2qKS9Vi9wsac0YRaxlRTbyMvqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU0OTEyRDkzNkQ1QkY3NzhGQkI3MzJFN0U0NDk5MTY2 MjdEQTk0MTAeFw0yNjA2MTMxNzM1NTVaFw0yNjA2MTQyMDU2NTVaMDMxMTAvBgNV BAMTKDExRDIyOUZCN0E3QjEwRkI4MTYyRDIzM0FFMTk2NDAyM0M5QjZBMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdmGVDHMAV+HDQJ43u1LUedN1 ojN/K3tMdCc1J3r/i5pHUfFVMyH7pxDEjiBGVjEwtSo2bxaMC0PzvVfZXveAPk7Z PmhrVPxzVNukMZPv9ninbvxsQsVR4j5RIYv3TyIzncWFfAdKc87Wb6LpuPTq5inz AdXvMgyNuzlEISYq3PAn8+pzbLOFKqPbp2dcOvS4TkrOd/nCl4KCZC5GdlyaBGDB ycVydRiEHaThF+J1NZTwRZ5xSTsaFSCDhWyzQ858knHUSzX9/cY4jM9t/2q0Nyik vFlabFkXDxbDTvAGqIoiueN/lFwTNXD+7JxXXe57HBkPT1+O7T4QAtdYozwRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEdIp+3p7EPuBYtIzrhlkAjybagkwHwYDVR0j BBgwFoAU5UkS2TbVv3ePu3MufkSZFmJ9qUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJiNWZhNGEtYmVhNi00NjRmLWI0MDktMTFkOWEzNzYxYTZjLzEvRTU0OTEyRDkz NkQ1QkY3NzhGQkI3MzJFN0U0NDk5MTY2MjdEQTk0MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNTQ5MTJEOTM2RDVCRjc3OEZCQjczMkU3RTQ0OTkxNjYyN0RB OTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvRTU0OTEyRDkzNkQ1QkY3NzhGQkI3MzJFN0U0NDk5 MTY2MjdEQTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5YPLzq3DlOVd1CCOlVYBnQVSn3rot7WW4d zSVhhKhd8iUwL7pR0wU8Ad2UegaOoNan4kQx3I/WKuYt0QKG46tzkZ40FOQLPOic 9xWM3IcWQOJDg1ccijUhGNamkLW0cdrsZJpjLNIx7j4x0xG+mRgywQr/HFl99X8y 9wv7FAp5V71VTLrmo3M3jvvoNmnQ/CuCJjn1bvC/tIjEmiZtDa7zsd+UNbtXgZxG cKluoUp9rUU5vI/rB4UahnK6Mqv0AcPoyxeaTkNg+M8aBUXhu8qC1sbp6Lct/koM hHkAc0dnX2zmk+c/R9yzUOEJhNbmGBQlGbz6mmTD8f8/psFELco= -----END CERTIFICATE-----Generated at Sat Jun 13 20:28:16 2026 by rpki-client