$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft File: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft (raw, json) Hash identifier: YCszIq+jXCU/v3aqwlyMABrVUfOu08/8WjePad6OkvI= Subject key identifier: 16:BF:9F:3B:B0:F1:85:01:BD:34:AA:BD:58:84:A1:CF:5E:A6:EF:19 Authority key identifier: A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB Certificate issuer: /CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB Certificate serial: 66096F86B3475065CE5C138748D56D53AB1C8834 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 07:39:29 +0000 Manifest this update: Tue 02 Jun 2026 07:34:29 +0000 Manifest next update: Wed 03 Jun 2026 10:30:29 +0000 Files and hashes: 1: 3130332e35342e3136382e302f32342d3234203d3e20313530343833.roa (hash: KJ4tcOWA2SH5n/Mp2J21qXYJWXIviat2U7Oo6EVnrbg=) 2: A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl (hash: wV43e2OPZaET0jHOzHvFJ2d/wOU6vsisw3o+isiHzhI=) 3: 3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa (hash: inh5OwQ0YrBgY5xCxaOxxgj16EXDsFBhdopHtNq3Eyc=) 4: 3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa (hash: 53bRIBjSwWo7fUHZf8q8wJM22KHC6YENy9XlgqItFdw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:09:6f:86:b3:47:50:65:ce:5c:13:87:48:d5:6d:53:ab:1c:88:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A55F7F6B7FDFD244898FC836B306F8884F94A8EB Validity Not Before: Jun 2 07:34:29 2026 GMT Not After : Jun 3 10:30:29 2026 GMT Subject: CN=16BF9F3BB0F18501BD34AABD5884A1CF5EA6EF19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9a:f8:19:73:25:a9:ce:5e:ef:37:f2:8e:1c: fd:86:bc:c5:23:0b:4c:25:0f:b0:a3:26:40:58:97: 22:43:02:3d:9b:77:a0:48:15:f7:4b:73:42:e2:f5: 29:84:f5:fe:c6:9f:61:06:3e:66:ba:84:72:f7:36: f8:1b:f6:c5:bd:b2:cb:20:90:4d:c4:90:08:59:ac: b0:a2:5e:9a:b9:b1:ce:09:27:51:ec:ef:c5:59:e2: 3e:1e:d1:ef:5d:69:43:e6:4d:52:86:ca:c6:45:d4: fc:d8:d9:b3:a5:24:54:b3:f2:15:95:a5:4e:8b:0d: 31:00:47:2f:55:c9:e7:c7:aa:8a:41:84:e1:06:0b: 96:28:13:84:13:ef:73:4e:0e:eb:59:0d:73:3f:4e: 30:59:3f:9b:f4:18:cf:6d:2d:fa:fd:5c:ee:b7:50: 62:82:60:0f:31:d0:83:9c:1f:36:74:12:dc:66:6a: 12:80:87:83:0f:a2:79:13:c9:3f:f7:1b:ab:11:95: 49:d7:b2:02:1f:58:4f:04:5a:cc:b4:02:f4:a3:89: f1:47:f2:58:f7:b4:1f:92:e1:60:f6:01:57:b1:89: 78:0f:8e:cb:a6:3d:20:d6:7b:fc:26:b6:53:4b:97: 1c:3a:22:27:7b:3c:b4:de:cd:43:8b:fe:e0:d2:14: 49:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BF:9F:3B:B0:F1:85:01:BD:34:AA:BD:58:84:A1:CF:5E:A6:EF:19 X509v3 Authority Key Identifier: keyid:A5:5F:7F:6B:7F:DF:D2:44:89:8F:C8:36:B3:06:F8:88:4F:94:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/A55F7F6B7FDFD244898FC836B306F8884F94A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b7:7c:66:22:d4:6a:b0:65:cd:ff:b7:8b:2e:8e:4a:76:2b: 50:06:9c:81:5c:7d:68:2e:a8:39:d1:90:0c:ee:42:f6:d7:40: 48:a2:93:2d:00:51:76:1b:7b:3d:6d:25:e6:e1:17:87:a4:4f: a8:90:e1:8f:07:62:ee:78:e5:58:d9:68:7e:ac:58:18:6c:0c: 64:b6:e0:b2:49:28:3c:0f:61:e9:18:bd:86:a5:85:15:1a:c3: 0a:9e:14:79:64:ac:eb:ce:5d:98:ff:8e:76:14:35:a9:ef:52: 33:68:f2:c7:f2:45:4c:2f:ae:b5:fc:95:e7:71:a9:10:df:59: 00:da:5b:a4:43:bd:ef:8a:a9:68:d3:e0:07:1b:ee:25:88:19: 7b:f5:7a:0c:ff:9d:fa:76:62:6e:c7:cd:c7:52:00:9d:1a:0a: f1:8c:f4:d4:11:00:54:bd:f5:5c:25:00:62:2f:54:a1:b0:7e: 66:d1:4e:b8:07:68:22:fa:89:f0:23:69:63:27:85:06:53:5e: b9:b9:fe:4e:bd:d7:4e:d7:be:7d:9c:a0:07:93:8a:ac:39:8c: cf:9f:2c:34:a3:ac:b4:ad:85:5b:40:4f:60:88:58:76:dc:90: 74:38:41:83:92:ea:29:eb:20:11:2b:b3:0e:94:4d:dd:7d:ea: 1e:e5:23:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZglvhrNHUGXOXBOHSNVtU6sciDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU1RjdGNkI3RkRGRDI0NDg5OEZDODM2QjMwNkY4ODg0 Rjk0QThFQjAeFw0yNjA2MDIwNzM0MjlaFw0yNjA2MDMxMDMwMjlaMDMxMTAvBgNV BAMTKDE2QkY5RjNCQjBGMTg1MDFCRDM0QUFCRDU4ODRBMUNGNUVBNkVGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMmvgZcyWpzl7vN/KOHP2GvMUj C0wlD7CjJkBYlyJDAj2bd6BIFfdLc0Li9SmE9f7Gn2EGPma6hHL3Nvgb9sW9sssg kE3EkAhZrLCiXpq5sc4JJ1Hs78VZ4j4e0e9daUPmTVKGysZF1PzY2bOlJFSz8hWV pU6LDTEARy9VyefHqopBhOEGC5YoE4QT73NODutZDXM/TjBZP5v0GM9tLfr9XO63 UGKCYA8x0IOcHzZ0EtxmahKAh4MPonkTyT/3G6sRlUnXsgIfWE8EWsy0AvSjifFH 8lj3tB+S4WD2AVexiXgPjsumPSDWe/wmtlNLlxw6Iid7PLTezUOL/uDSFEk9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFr+fO7DxhQG9NKq9WIShz16m7xkwHwYDVR0j BBgwFoAUpV9/a3/f0kSJj8g2swb4iE+UqOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmUzMzA2MzMtYTdkMS00ZDBhLWExY2MtYjZjM2VlZGZiYzE3LzAvQTU1RjdGNkI3 RkRGRDI0NDg5OEZDODM2QjMwNkY4ODg0Rjk0QThFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNTVGN0Y2QjdGREZEMjQ0ODk4RkM4MzZCMzA2Rjg4ODRGOTRB OEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmUzMzA2MzMtYTdkMS00ZDBhLWEx Y2MtYjZjM2VlZGZiYzE3LzAvQTU1RjdGNkI3RkRGRDI0NDg5OEZDODM2QjMwNkY4 ODg0Rjk0QThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADC3fGYi1GqwZc3/t4sujkp2K1AGnIFcfWgu qDnRkAzuQvbXQEiiky0AUXYbez1tJebhF4ekT6iQ4Y8HYu545VjZaH6sWBhsDGS2 4LJJKDwPYekYvYalhRUawwqeFHlkrOvOXZj/jnYUNanvUjNo8sfyRUwvrrX8ledx qRDfWQDaW6RDve+KqWjT4Acb7iWIGXv1egz/nfp2Ym7HzcdSAJ0aCvGM9NQRAFS9 9VwlAGIvVKGwfmbRTrgHaCL6ifAjaWMnhQZTXrm5/k69107Xvn2coAeTiqw5jM+f LDSjrLSthVtAT2CIWHbckHQ4QYOS6inrIBErsw6UTd196h7lIz8= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:06 2026 by rpki-client