$ rpki-client -vvf rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft File: 15253A2B5044241610CA488254A5FBDEFCA83946.mft (raw, json) Hash identifier: RfRwSeX7keYR6LQwmd+T8925s8C8ty9tI+BiV0ddgdw= Subject key identifier: 98:4D:3A:21:FA:66:FF:44:84:55:90:44:A4:A6:7F:38:E2:29:4E:92 Authority key identifier: 15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46 Certificate issuer: /CN=15253A2B5044241610CA488254A5FBDEFCA83946 Certificate serial: 3503A63AA14E332B71A42A6B36CBCF33169B67CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:55:21 +0000 Manifest this update: Tue 02 Jun 2026 20:50:21 +0000 Manifest next update: Wed 03 Jun 2026 22:40:21 +0000 Files and hashes: 1: 15253A2B5044241610CA488254A5FBDEFCA83946.crl (hash: nYihSjhP16tg5BCBbTOCKumhP3OSL+n+iMYAdczO4Ws=) 2: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: MIDcVmBGH/hqqNu3jf3HAG0eJ6hq9A6F1DDrnx/T2Oc=) 3: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: DsGlxrIFXIfC4wlTwbks5STw6xrwCN1b5SZ94KRIDxg=) 4: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: SnVOuYeK/dyKwN1E/1MKTRAqaoKx5Hf44hqaGuxO+48=) 5: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: GPQzQ2Y9IpoZxGxlL+qxlZ5PT+jJ6xJj6pibO+05n+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:03:a6:3a:a1:4e:33:2b:71:a4:2a:6b:36:cb:cf:33:16:9b:67:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15253A2B5044241610CA488254A5FBDEFCA83946 Validity Not Before: Jun 2 20:50:21 2026 GMT Not After : Jun 3 22:40:21 2026 GMT Subject: CN=984D3A21FA66FF4484559044A4A67F38E2294E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6a:5a:39:66:6d:3a:9c:a3:2c:6b:3a:7a:00: 3b:60:82:d4:99:e8:6b:fc:fc:0b:08:18:05:4e:93: 09:d4:3f:01:05:e9:f8:24:2c:0c:19:8b:57:2c:a7: d8:16:47:31:cf:7b:5e:3c:7b:a8:8e:52:eb:01:10: 39:e2:a0:29:63:0e:93:1e:0d:9a:c9:c5:34:5e:fd: 88:14:c2:16:4a:26:91:5a:b0:eb:70:c2:f1:4f:ef: 69:89:18:3e:1a:7f:1c:47:99:3a:2e:40:52:8f:01: c3:56:f8:83:0b:1e:e4:5d:d1:ff:5a:28:9c:23:c4: 13:6b:df:b7:d2:c1:ee:b2:ba:cb:f2:0d:a3:8e:5e: f6:10:91:96:4d:48:29:a5:99:30:d6:d4:08:22:ad: fd:8f:bf:ba:ab:6f:ed:0d:96:fb:5f:f3:0e:80:7b: c7:4c:50:2b:4a:dd:47:78:aa:f1:aa:6a:10:10:8e: 36:54:5f:3d:ee:47:32:78:02:fd:de:28:9a:89:ac: 4b:9b:9f:ad:51:a9:eb:40:4f:3c:85:ff:7f:c9:f5: b0:f4:fc:6f:73:78:2a:b6:ba:05:4e:b1:09:d2:01: e6:10:8f:c5:79:cc:54:a9:15:a8:f1:23:d4:b8:ea: 3e:6f:a0:d8:d8:f7:32:d8:16:be:a1:d8:28:d1:95: 5f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4D:3A:21:FA:66:FF:44:84:55:90:44:A4:A6:7F:38:E2:29:4E:92 X509v3 Authority Key Identifier: keyid:15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:32:a1:97:a0:fa:ec:8e:6f:2e:7c:ff:e5:66:a3:4f:ff:83: df:cc:8b:f5:c0:6b:0b:25:82:8f:fc:a0:7d:c7:5c:82:a5:21: be:4e:03:e8:23:a6:94:e8:ad:f4:41:ca:c2:a7:44:44:ff:b0: f8:7d:fd:26:30:bf:c0:3e:5b:61:41:24:35:bc:7b:ff:16:9b: 6c:19:23:49:91:0f:e8:ac:d4:e7:ef:3f:76:57:7f:6e:e4:93: 66:f8:94:1e:6a:6f:8f:ec:28:4f:85:f7:9d:4b:63:88:8f:95: 1a:34:e1:7b:dd:a6:db:04:39:ef:17:a8:04:fa:78:43:21:6a: ac:64:22:d6:c6:90:1a:6e:1c:19:a6:52:b1:a2:0f:75:4b:b4: 38:a3:c6:e6:7a:74:79:8f:18:b7:be:5c:b4:93:84:01:53:6b: 8c:83:eb:90:93:d8:c7:b3:bd:53:3f:f1:fb:f2:d1:7a:93:bd: ef:45:9f:a5:bd:b4:31:a6:d9:2b:bb:c8:25:13:6e:11:59:62: b7:46:b9:04:d4:c1:d4:39:47:51:1c:ba:ab:ce:06:f0:69:d7: b2:b8:2b:34:97:f0:75:2c:f6:aa:11:2e:d0:b0:33:57:da:1f: 74:89:73:e2:b8:0f:b9:56:0f:6c:ce:06:1c:11:39:d3:40:31: 8b:09:8b:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQOmOqFOMytxpCprNsvPMxabZ8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUyNTNBMkI1MDQ0MjQxNjEwQ0E0ODgyNTRBNUZCREVG Q0E4Mzk0NjAeFw0yNjA2MDIyMDUwMjFaFw0yNjA2MDMyMjQwMjFaMDMxMTAvBgNV BAMTKDk4NEQzQTIxRkE2NkZGNDQ4NDU1OTA0NEE0QTY3RjM4RTIyOTRFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmalo5Zm06nKMsazp6ADtggtSZ 6Gv8/AsIGAVOkwnUPwEF6fgkLAwZi1csp9gWRzHPe148e6iOUusBEDnioCljDpMe DZrJxTRe/YgUwhZKJpFasOtwwvFP72mJGD4afxxHmTouQFKPAcNW+IMLHuRd0f9a KJwjxBNr37fSwe6yusvyDaOOXvYQkZZNSCmlmTDW1Agirf2Pv7qrb+0Nlvtf8w6A e8dMUCtK3Ud4qvGqahAQjjZUXz3uRzJ4Av3eKJqJrEubn61RqetATzyF/3/J9bD0 /G9zeCq2ugVOsQnSAeYQj8V5zFSpFajxI9S46j5voNjY9zLYFr6h2CjRlV/9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmE06Ifpm/0SEVZBEpKZ/OOIpTpIwHwYDVR0j BBgwFoAUFSU6K1BEJBYQykiCVKX73vyoOUYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdlZGNiN2UtYzM4ZC00ZTY3LTgyYmQtNGU4MTUwYjg4NTYxLzAvMTUyNTNBMkI1 MDQ0MjQxNjEwQ0E0ODgyNTRBNUZCREVGQ0E4Mzk0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTI1M0EyQjUwNDQyNDE2MTBDQTQ4ODI1NEE1RkJERUZDQTgz OTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvMTUyNTNBMkI1MDQ0MjQxNjEwQ0E0ODgyNTRBNUZC REVGQ0E4Mzk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIyoZeg+uyOby58/+Vmo0//g9/Mi/XAawsl go/8oH3HXIKlIb5OA+gjppTorfRBysKnRET/sPh9/SYwv8A+W2FBJDW8e/8Wm2wZ I0mRD+is1OfvP3ZXf27kk2b4lB5qb4/sKE+F951LY4iPlRo04XvdptsEOe8XqAT6 eEMhaqxkItbGkBpuHBmmUrGiD3VLtDijxuZ6dHmPGLe+XLSThAFTa4yD65CT2Mez vVM/8fvy0XqTve9Fn6W9tDGm2Su7yCUTbhFZYrdGuQTUwdQ5R1EcuqvOBvBp17K4 KzSX8HUs9qoRLtCwM1faH3SJc+K4D7lWD2zOBhwROdNAMYsJi9s= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:10 2026 by rpki-client