$ rpki-client -vvf rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft File: 0453EE44B6298E574434A213BFD59854FBBC1AC9.mft (raw, json) Hash identifier: 6u+vtANuqiFAHOtCBEyoolKEY1WOt3P16c/lIFR7GRM= Subject key identifier: 1A:A2:4B:C9:E5:A0:BD:C4:9C:82:05:32:9B:EE:03:58:AE:FE:D6:86 Authority key identifier: 04:53:EE:44:B6:29:8E:57:44:34:A2:13:BF:D5:98:54:FB:BC:1A:C9 Certificate issuer: /CN=0453EE44B6298E574434A213BFD59854FBBC1AC9 Certificate serial: 53045E818BD5909DE739CE2C5BFB525B6AAE019A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 16:40:04 +0000 Manifest this update: Tue 02 Jun 2026 16:35:04 +0000 Manifest next update: Wed 03 Jun 2026 17:49:04 +0000 Files and hashes: 1: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: 9cSUjwh9z6+6ZJ3LgshkbKPWLwwzg4ImlK/YQG0hafg=) 2: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: HWOy6TZ8QT68FcB2BCMFfmYX+XsnVwiXZ6wBXEIZ6YM=) 3: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: cIZPGEVWJFWOc4kuja4Zgt6H/ILhtTMjLdnFHfcUoyY=) 4: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: 7NlmtYXZ6oozA3ARYN5xU0ZSurydVsw5V4omrofalOI=) 5: 0453EE44B6298E574434A213BFD59854FBBC1AC9.crl (hash: C4fjIHjp+DcogswQZ0yoo92ZyTH8vrJDard7yiNoIGY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.crl rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 17:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:04:5e:81:8b:d5:90:9d:e7:39:ce:2c:5b:fb:52:5b:6a:ae:01:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0453EE44B6298E574434A213BFD59854FBBC1AC9 Validity Not Before: Jun 2 16:35:04 2026 GMT Not After : Jun 3 17:49:04 2026 GMT Subject: CN=1AA24BC9E5A0BDC49C8205329BEE0358AEFED686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:5f:9b:94:b3:64:5d:2a:5c:9a:74:04:47: d5:cb:0f:11:be:dc:e5:e9:9b:12:ad:42:db:32:99: ac:f4:22:56:31:02:9c:6e:68:40:a6:8a:f1:4c:90: 48:31:89:9a:2e:9e:4c:7b:da:b7:05:79:32:5f:e6: e7:d6:7e:c4:a0:18:b6:49:5b:33:5f:23:30:45:82: 3d:b1:ee:2a:47:ec:8b:5d:72:42:74:61:cd:f5:e9: 74:47:6f:bc:6d:f6:79:40:00:2d:a5:c7:53:1d:8f: a1:88:58:d1:b7:27:87:f4:5e:cd:45:a3:68:fd:61: 3d:9c:2b:55:8b:73:ae:19:1f:ae:3d:59:90:7e:30: 82:4e:08:da:76:37:a4:8f:e2:fc:17:99:17:40:68: fd:4f:1b:e9:a5:e3:bc:68:b4:50:95:2e:74:64:43: 1d:bd:e3:d6:66:d1:44:92:af:25:95:23:1c:58:30: a5:98:39:91:e0:c9:cc:dc:43:19:4a:9f:db:98:b3: 78:f5:c8:ff:05:25:71:ba:a9:3d:03:88:1d:a1:63: bf:b8:0f:c5:99:9c:14:e2:39:9f:39:bb:ec:de:5c: 09:f0:14:bd:12:52:7a:a9:18:99:85:5f:b5:f6:0c: 1f:a0:49:93:49:b2:2c:51:a7:c3:9e:a1:46:9d:74: 91:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A2:4B:C9:E5:A0:BD:C4:9C:82:05:32:9B:EE:03:58:AE:FE:D6:86 X509v3 Authority Key Identifier: keyid:04:53:EE:44:B6:29:8E:57:44:34:A2:13:BF:D5:98:54:FB:BC:1A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0453EE44B6298E574434A213BFD59854FBBC1AC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/0453EE44B6298E574434A213BFD59854FBBC1AC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d9:fb:51:b1:b8:76:92:d4:c5:fd:3e:6f:85:7a:0a:8e:b3: e5:b8:d5:84:80:d0:ea:a2:3c:2d:d4:5a:b1:4c:db:4f:3c:c7: 4a:5d:59:85:d7:5b:0e:7b:f4:e7:dd:0a:01:18:fa:d7:f8:9b: 71:73:92:ca:24:34:02:5d:dd:57:48:b0:00:09:1f:92:cf:e3: 16:21:2b:3a:ce:b4:a5:9b:db:58:b9:86:aa:2d:d7:ba:14:10: 1a:ba:65:a1:bd:a2:65:5f:1f:7a:a3:69:8f:92:3f:5b:dc:9b: 39:6d:ef:46:cf:0a:99:d7:03:49:1d:13:fc:28:03:a7:63:ff: 49:1c:41:98:9a:f8:2b:54:fb:b9:a6:af:84:13:a1:c2:c2:e8: 2e:ef:0e:fd:65:a9:f7:ed:10:3b:56:1c:40:81:a0:50:4b:68: 75:23:ea:41:bd:ad:d9:62:4b:0a:2c:28:cf:73:81:63:10:79: c8:fe:06:f7:51:62:40:78:4a:c0:58:48:bf:ae:c5:b0:99:f8: bd:5a:1e:e8:c4:f1:b2:e5:3d:4a:9c:2e:69:3d:b5:c2:d4:dc: 6e:d7:9c:dd:e6:da:68:c9:d0:c8:6a:da:c2:3f:76:4d:3b:cc: 75:29:af:3d:b5:0b:e2:c0:0c:93:5e:0a:f0:af:e6:4f:5f:d9: 8c:d7:15:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwRegYvVkJ3nOc4sW/tSW2quAZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1M0VFNDRCNjI5OEU1NzQ0MzRBMjEzQkZENTk4NTRG QkJDMUFDOTAeFw0yNjA2MDIxNjM1MDRaFw0yNjA2MDMxNzQ5MDRaMDMxMTAvBgNV BAMTKDFBQTI0QkM5RTVBMEJEQzQ5QzgyMDUzMjlCRUUwMzU4QUVGRUQ2ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4d1+blLNkXSpcmnQER9XLDxG+ 3OXpmxKtQtsymaz0IlYxApxuaECmivFMkEgxiZounkx72rcFeTJf5ufWfsSgGLZJ WzNfIzBFgj2x7ipH7ItdckJ0Yc316XRHb7xt9nlAAC2lx1Mdj6GIWNG3J4f0Xs1F o2j9YT2cK1WLc64ZH649WZB+MIJOCNp2N6SP4vwXmRdAaP1PG+ml47xotFCVLnRk Qx2949Zm0USSryWVIxxYMKWYOZHgyczcQxlKn9uYs3j1yP8FJXG6qT0DiB2hY7+4 D8WZnBTiOZ85u+zeXAnwFL0SUnqpGJmFX7X2DB+gSZNJsixRp8OeoUaddJHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGqJLyeWgvcScggUym+4DWK7+1oYwHwYDVR0j BBgwFoAUBFPuRLYpjldENKITv9WYVPu8GskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzU3YjkwY2ItOGViZC00YzdiLThjMzEtMTMzYThiNGVkNjljLzAvMDQ1M0VFNDRC NjI5OEU1NzQ0MzRBMjEzQkZENTk4NTRGQkJDMUFDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDUzRUU0NEI2Mjk4RTU3NDQzNEEyMTNCRkQ1OTg1NEZCQkMx QUM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvMDQ1M0VFNDRCNjI5OEU1NzQ0MzRBMjEzQkZENTk4 NTRGQkJDMUFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHZ+1GxuHaS1MX9Pm+FegqOs+W41YSA0Oqi PC3UWrFM2088x0pdWYXXWw579OfdCgEY+tf4m3FzksokNAJd3VdIsAAJH5LP4xYh KzrOtKWb21i5hqot17oUEBq6ZaG9omVfH3qjaY+SP1vcmzlt70bPCpnXA0kdE/wo A6dj/0kcQZia+CtU+7mmr4QTocLC6C7vDv1lqfftEDtWHECBoFBLaHUj6kG9rdli SwosKM9zgWMQecj+BvdRYkB4SsBYSL+uxbCZ+L1aHujE8bLlPUqcLmk9tcLU3G7X nN3m2mjJ0Mhq2sI/dk07zHUprz21C+LADJNeCvCv5k9f2YzXFeI= -----END CERTIFICATE-----Generated at Wed Jun 3 03:54:17 2026 by rpki-client