$ rpki-client -vvf rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft File: 3559C104797053AE8E5C72BE7726BF44C2878CF1.mft (raw, json) Hash identifier: PI6+ooDetsPF2pO8vzf0AkTr9oydzVriKopbP2fAZ2U= Subject key identifier: A0:B9:3B:53:84:EC:3B:AC:71:72:22:EF:A4:CB:B2:1C:12:96:34:2F Authority key identifier: 35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1 Certificate issuer: /CN=3559C104797053AE8E5C72BE7726BF44C2878CF1 Certificate serial: 6E6D3A7142F3725BF119C9F370D535529FB90EFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:44:33 +0000 Manifest this update: Tue 02 Jun 2026 23:39:33 +0000 Manifest next update: Wed 03 Jun 2026 23:53:33 +0000 Files and hashes: 1: 3559C104797053AE8E5C72BE7726BF44C2878CF1.crl (hash: ONpiRTAQ8FNmhtgQQupMR51PNmoxtCjNkJ471K8LYY0=) 2: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: eqd0E+Lb4EVtDoQqymHQTLKTQ6HfKOpFx++L2qv+u+A=) 3: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: TDHHkU7auhZbGybqQy/XY5A0u3/rxbPGk544rbieSIw=) 4: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: fC4L8rYhZI0UDA/WORkA1APzTZ9nOmT1ddK9x1B6L7w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:6d:3a:71:42:f3:72:5b:f1:19:c9:f3:70:d5:35:52:9f:b9:0e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3559C104797053AE8E5C72BE7726BF44C2878CF1 Validity Not Before: Jun 2 23:39:33 2026 GMT Not After : Jun 3 23:53:33 2026 GMT Subject: CN=A0B93B5384EC3BAC717222EFA4CBB21C1296342F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:ef:73:b1:85:74:d3:b2:ef:c4:1a:dc:34: 8e:ee:9d:27:fe:ee:6c:47:c8:20:08:83:9b:25:6e: 79:f7:69:25:8a:2d:69:36:37:9e:05:b5:ab:95:93: 5b:95:d3:0a:f4:40:98:70:76:1e:9f:c4:e2:d5:22: ba:01:69:6e:0a:f6:c7:32:1a:0e:e3:11:c0:9b:1d: a3:4f:3b:6b:4c:d1:7f:4d:b0:2b:ff:e5:3f:e5:75: 92:6a:20:6e:fe:25:0e:27:dd:fc:6a:16:6e:67:dd: 89:36:02:c4:b2:a4:72:46:3d:d7:a4:11:55:c5:96: c0:b1:83:6b:89:e3:23:75:f0:eb:81:01:6a:d3:b2: d3:a6:f7:b7:ea:09:eb:9e:bf:57:54:2f:35:67:76: 2b:62:86:59:5f:a9:59:8b:e7:0c:70:5b:03:7c:e1: e1:48:d2:1f:4c:46:27:50:71:9f:94:77:8b:52:d2: c4:87:3d:d1:75:3f:d3:03:20:17:d6:b2:f3:00:f5: 07:78:66:45:b2:ca:03:12:d4:e1:c4:90:30:e2:2d: ba:36:d3:60:dc:58:ba:fd:74:12:82:01:f8:17:b3: e3:15:bc:4a:48:df:57:0d:ef:f8:a5:9b:ee:92:ff: 7b:ac:4d:32:37:01:e7:26:0e:d2:e1:5f:c3:53:e7: a3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B9:3B:53:84:EC:3B:AC:71:72:22:EF:A4:CB:B2:1C:12:96:34:2F X509v3 Authority Key Identifier: keyid:35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:09:4f:82:0d:8e:25:32:ae:56:31:11:49:fc:22:ba:77:32: 19:a1:9e:49:8b:3e:de:3a:f6:0e:b8:0e:cd:b1:9c:a3:94:4e: 7b:d6:56:0b:a3:65:f3:4e:ba:48:46:b5:0c:97:5a:21:a5:cd: 1d:40:2f:2b:84:4a:06:11:d6:06:c7:e8:ec:41:61:39:1e:ef: 47:22:83:2c:44:b3:41:87:c2:8f:5b:d9:41:c0:78:2a:d1:86: 45:9f:77:60:a4:54:aa:4a:a5:a8:26:ac:40:e8:70:5b:6d:35: 0a:d5:4c:38:75:11:3c:c7:a5:0b:ef:63:b1:0c:a9:3e:ba:38: 9e:6b:b5:67:23:76:5b:15:76:14:5d:63:a3:08:b8:a2:5a:15: b0:bd:25:85:31:42:bb:3c:bf:00:0e:cd:42:67:57:ed:d5:a7: ae:12:5c:d6:0c:d2:0c:07:10:cd:ee:7c:f0:07:42:4d:ba:f9: 49:ab:11:92:eb:03:2d:00:6c:7b:de:72:f9:bb:20:8e:65:50: 0a:71:0a:e3:85:83:02:da:c8:95:22:c6:1e:7e:38:2b:e3:96: 1c:f5:98:d0:8a:d0:99:c6:5d:12:d4:4f:eb:85:7f:ce:0f:3c: dc:55:87:01:84:24:55:e1:1a:62:5d:18:48:4b:65:74:cb:b9: 51:2d:15:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbm06cULzclvxGcnzcNU1Up+5DvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1OUMxMDQ3OTcwNTNBRThFNUM3MkJFNzcyNkJGNDRD Mjg3OENGMTAeFw0yNjA2MDIyMzM5MzNaFw0yNjA2MDMyMzUzMzNaMDMxMTAvBgNV BAMTKEEwQjkzQjUzODRFQzNCQUM3MTcyMjJFRkE0Q0JCMjFDMTI5NjM0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75u9zsYV007LvxBrcNI7unSf+ 7mxHyCAIg5slbnn3aSWKLWk2N54FtauVk1uV0wr0QJhwdh6fxOLVIroBaW4K9scy Gg7jEcCbHaNPO2tM0X9NsCv/5T/ldZJqIG7+JQ4n3fxqFm5n3Yk2AsSypHJGPdek EVXFlsCxg2uJ4yN18OuBAWrTstOm97fqCeuev1dULzVnditihllfqVmL5wxwWwN8 4eFI0h9MRidQcZ+Ud4tS0sSHPdF1P9MDIBfWsvMA9Qd4ZkWyygMS1OHEkDDiLbo2 02DcWLr9dBKCAfgXs+MVvEpI31cN7/ilm+6S/3usTTI3AecmDtLhX8NT56N3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoLk7U4TsO6xxciLvpMuyHBKWNC8wHwYDVR0j BBgwFoAUNVnBBHlwU66OXHK+dya/RMKHjPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFmMTZjNDUtOTZmYi00YzkyLTgwNGUtNjRiMGJmMjgwMzAyLzAvMzU1OUMxMDQ3 OTcwNTNBRThFNUM3MkJFNzcyNkJGNDRDMjg3OENGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTU5QzEwNDc5NzA1M0FFOEU1QzcyQkU3NzI2QkY0NEMyODc4 Q0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFmMTZjNDUtOTZmYi00YzkyLTgw NGUtNjRiMGJmMjgwMzAyLzAvMzU1OUMxMDQ3OTcwNTNBRThFNUM3MkJFNzcyNkJG NDRDMjg3OENGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsJT4INjiUyrlYxEUn8Irp3MhmhnkmLPt46 9g64Ds2xnKOUTnvWVgujZfNOukhGtQyXWiGlzR1ALyuESgYR1gbH6OxBYTke70ci gyxEs0GHwo9b2UHAeCrRhkWfd2CkVKpKpagmrEDocFttNQrVTDh1ETzHpQvvY7EM qT66OJ5rtWcjdlsVdhRdY6MIuKJaFbC9JYUxQrs8vwAOzUJnV+3Vp64SXNYM0gwH EM3ufPAHQk26+UmrEZLrAy0AbHvecvm7II5lUApxCuOFgwLayJUixh5+OCvjlhz1 mNCK0JnGXRLUT+uFf84PPNxVhwGEJFXhGmJdGEhLZXTLuVEtFaE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:41 2026 by rpki-client