$ rpki-client -vvf rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft File: 10553E9FBD62D012FC01AA60343F1431B2A6A334.mft (raw, json) Hash identifier: JjtcPHgkDy0JgY27aacfmrUojG7BXfwiTFqIo5qerOo= Subject key identifier: C3:94:49:61:90:5B:27:32:C3:C9:48:38:89:AC:A1:EC:31:5D:5D:B2 Authority key identifier: 10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34 Certificate issuer: /CN=10553E9FBD62D012FC01AA60343F1431B2A6A334 Certificate serial: 68165B6E0DA5FFE0A89E84DF14E95D0ED11EA9CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 21:06:25 +0000 Manifest this update: Fri 19 Jun 2026 21:01:25 +0000 Manifest next update: Sun 21 Jun 2026 01:02:25 +0000 Files and hashes: 1: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (hash: CzpBmVwagEtnKqxKjT1pUSrqGuU3xrwBdruiL5NCJ14=) 2: 10553E9FBD62D012FC01AA60343F1431B2A6A334.crl (hash: zEUWeIknjLv/FD1IHh6ZKFHp1sRHzbOAjWlWaE78fAk=) 3: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (hash: k9nD44XinJnJpBwRMmDV5yfpMBTjz+PYwIGe6HEFz9s=) 4: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (hash: tbo+ssCZ1GgyC2ZlsuUJYvzfgqZD9OlbY8lym/UKgpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:16:5b:6e:0d:a5:ff:e0:a8:9e:84:df:14:e9:5d:0e:d1:1e:a9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10553E9FBD62D012FC01AA60343F1431B2A6A334 Validity Not Before: Jun 19 21:01:25 2026 GMT Not After : Jun 21 01:02:25 2026 GMT Subject: CN=C3944961905B2732C3C9483889ACA1EC315D5DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8f:7d:36:86:20:ea:15:51:d1:0d:d9:d3:70: 66:6f:9e:fa:a4:fc:6c:e2:6e:05:88:a0:11:4f:54: 41:e1:df:0b:24:8f:29:12:5c:64:fa:90:d7:e9:b4: 8e:67:d1:d3:a0:ee:a7:2c:4c:dd:ce:30:a4:f7:1d: ba:09:d4:7f:fc:86:96:a3:c8:05:bc:17:7b:1e:03: 06:f6:83:a9:32:7f:f0:20:f1:92:88:52:b6:cd:67: 9b:ba:dd:32:eb:42:1b:57:06:9c:4a:c8:ad:bb:45: 3b:0b:ed:3f:33:8d:9a:cf:9c:87:9b:c8:c4:55:08: 22:ce:2c:2a:e2:fd:05:98:5c:bd:a3:cc:ce:7e:1a: f2:b3:69:b6:b9:a9:f1:2a:72:98:91:d6:4b:f9:2b: 01:59:77:95:27:56:dc:44:8e:c3:41:e0:8c:43:59: 91:7c:99:47:e6:44:e5:15:e1:dd:06:03:31:b5:28: fe:0f:6a:50:ad:4d:fe:21:39:51:7e:f5:e1:b1:12: 21:cf:7b:0e:6e:cf:07:f4:49:8b:08:fc:41:8d:48: 57:9d:83:05:a1:cb:bd:98:b6:ef:b3:f1:65:44:69: 15:52:82:f0:db:dd:1e:56:d0:d1:86:1f:df:21:eb: c8:2c:47:78:b1:a5:6c:36:7b:cb:c9:d6:2a:0d:26: d1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:94:49:61:90:5B:27:32:C3:C9:48:38:89:AC:A1:EC:31:5D:5D:B2 X509v3 Authority Key Identifier: keyid:10:55:3E:9F:BD:62:D0:12:FC:01:AA:60:34:3F:14:31:B2:A6:A3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10553E9FBD62D012FC01AA60343F1431B2A6A334.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/10553E9FBD62D012FC01AA60343F1431B2A6A334.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:05:73:33:6a:09:6b:1d:d3:49:86:5f:30:32:24:32:0f:b8: c3:79:50:d0:4a:9a:f7:28:20:56:e6:bb:47:72:e9:bc:d6:bc: e3:a8:5c:ed:01:f8:b7:4e:b7:7c:96:74:a5:28:ac:04:55:89: ce:43:b1:5d:37:70:70:0a:57:d9:1b:f2:49:8e:52:7c:f3:46: ec:df:ac:d2:b7:1f:ed:60:92:b1:ab:4d:18:ae:55:97:d6:74: ee:85:cf:fe:81:6e:6a:98:d8:91:6d:1a:62:f4:12:c0:25:6f: 07:d1:d6:14:17:c4:f7:c6:fb:a5:98:be:eb:34:9d:64:c1:0b: 31:bd:1a:26:e3:43:2e:15:7a:74:73:fa:12:7d:e3:09:55:ae: 6a:a4:0b:34:12:f1:17:d9:05:34:03:9c:1b:8e:11:06:0c:04: 72:b3:35:29:d4:b8:8f:c0:71:05:8f:e1:3c:18:4b:c5:c1:99: d5:5e:0f:5f:7c:23:6b:9c:2e:cf:2c:77:87:69:c9:c8:f6:69: d4:13:8e:8a:8f:75:28:ac:25:bd:f1:9b:a2:fc:78:63:5f:fc: b4:a3:50:22:c7:bc:16:0f:d5:50:2f:9f:36:77:74:85:56:09: 35:e8:ce:9d:1a:31:27:90:99:f8:00:3b:72:a9:f3:6c:a0:96: 77:ea:2d:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBZbbg2l/+ConoTfFOldDtEeqcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA1NTNFOUZCRDYyRDAxMkZDMDFBQTYwMzQzRjE0MzFC MkE2QTMzNDAeFw0yNjA2MTkyMTAxMjVaFw0yNjA2MjEwMTAyMjVaMDMxMTAvBgNV BAMTKEMzOTQ0OTYxOTA1QjI3MzJDM0M5NDgzODg5QUNBMUVDMzE1RDVEQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoj302hiDqFVHRDdnTcGZvnvqk /GzibgWIoBFPVEHh3wskjykSXGT6kNfptI5n0dOg7qcsTN3OMKT3HboJ1H/8hpaj yAW8F3seAwb2g6kyf/Ag8ZKIUrbNZ5u63TLrQhtXBpxKyK27RTsL7T8zjZrPnIeb yMRVCCLOLCri/QWYXL2jzM5+GvKzaba5qfEqcpiR1kv5KwFZd5UnVtxEjsNB4IxD WZF8mUfmROUV4d0GAzG1KP4PalCtTf4hOVF+9eGxEiHPew5uzwf0SYsI/EGNSFed gwWhy72Ytu+z8WVEaRVSgvDb3R5W0NGGH98h68gsR3ixpWw2e8vJ1ioNJtFrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw5RJYZBbJzLDyUg4iayh7DFdXbIwHwYDVR0j BBgwFoAUEFU+n71i0BL8AapgND8UMbKmozQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTcyMTY0MjUtNmFhMy00NDI5LWIxNzUtODY5MDFiYjBjYjFmLzAvMTA1NTNFOUZC RDYyRDAxMkZDMDFBQTYwMzQzRjE0MzFCMkE2QTMzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDU1M0U5RkJENjJEMDEyRkMwMUFBNjAzNDNGMTQzMUIyQTZB MzM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTcyMTY0MjUtNmFhMy00NDI5LWIx NzUtODY5MDFiYjBjYjFmLzAvMTA1NTNFOUZCRDYyRDAxMkZDMDFBQTYwMzQzRjE0 MzFCMkE2QTMzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUFczNqCWsd00mGXzAyJDIPuMN5UNBKmvco IFbmu0dy6bzWvOOoXO0B+LdOt3yWdKUorARVic5DsV03cHAKV9kb8kmOUnzzRuzf rNK3H+1gkrGrTRiuVZfWdO6Fz/6BbmqY2JFtGmL0EsAlbwfR1hQXxPfG+6WYvus0 nWTBCzG9GibjQy4VenRz+hJ94wlVrmqkCzQS8RfZBTQDnBuOEQYMBHKzNSnUuI/A cQWP4TwYS8XBmdVeD198I2ucLs8sd4dpycj2adQTjoqPdSisJb3xm6L8eGNf/LSj UCLHvBYP1VAvnzZ3dIVWCTXozp0aMSeQmfgAO3Kp82yglnfqLcs= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:12 2026 by rpki-client