$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft File: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft (raw, json) Hash identifier: 0EWWHVsrgY4PVHNSWEzqSYBEETrEb1Tfu4sKBhV2xPM= Subject key identifier: A9:B8:5B:DC:49:6C:6B:FB:53:FB:19:F3:B5:C9:E9:DE:AD:23:EB:E9 Authority key identifier: D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17 Certificate issuer: /CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17 Certificate serial: 3F3CE79B2A01B12E2CADA9C9F7A17917EF4A2BF1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:19:17 +0000 Manifest this update: Fri 19 Jun 2026 19:14:17 +0000 Manifest next update: Sat 20 Jun 2026 22:18:17 +0000 Files and hashes: 1: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: whFYG+jTb2gWlU4tXTKDvr8VOmh33B5+fTwOyqIk0yw=) 2: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: glLFkt9sfYEvpqjXuBfssPvW+ZRZ2fl6wfErSqQG7zc=) 3: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: LLuRHn4xhc/MivkLWWh5CVLPBZ4K3sNosIj++ElGxco=) 4: D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl (hash: U2In+9cA9B2Ys4mB0UQfa96RSogAoEWJQI5rwBUjKSY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3c:e7:9b:2a:01:b1:2e:2c:ad:a9:c9:f7:a1:79:17:ef:4a:2b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55488515F49C9E2A95F614752BA7CBAD5DC0C17 Validity Not Before: Jun 19 19:14:17 2026 GMT Not After : Jun 20 22:18:17 2026 GMT Subject: CN=A9B85BDC496C6BFB53FB19F3B5C9E9DEAD23EBE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:a1:0d:db:62:aa:e5:7a:4b:eb:de:f9:47: d1:39:24:18:5c:eb:59:c5:7f:47:6e:1f:01:a0:28: ee:ea:b0:0c:f4:7b:21:3a:72:97:65:40:b6:a0:27: 0a:b4:eb:8c:6a:27:4f:05:71:e1:32:bc:8d:96:76: 52:b4:c5:c7:e6:ed:b6:12:9f:3b:20:f2:98:3a:3b: d9:97:e1:f5:14:83:cd:d2:92:8e:b3:b7:9f:19:6f: bf:65:08:00:b2:17:4a:2d:c7:d2:7d:a9:ec:dd:16: e3:4c:14:10:f3:fb:bb:c3:b5:63:ce:74:b0:b1:8e: fb:64:99:4e:d6:c8:60:b4:d4:40:5c:a0:c3:bf:e5: a6:c0:dc:50:3a:97:63:53:3d:bc:a3:a3:37:e3:0d: b4:6c:56:23:5d:67:a8:4f:fd:4c:1c:21:70:0d:54: dc:ca:bb:d2:bb:25:f9:53:a4:0e:7d:39:33:72:75: a5:8d:60:20:0b:d2:b6:2c:67:8b:ee:53:79:bb:68: ae:e2:01:ce:ae:00:48:a0:b2:7e:bf:3d:57:51:57: 23:d7:46:9d:2c:85:5e:96:65:89:03:bb:dc:5a:b2: 62:3d:f5:1c:35:74:92:4d:64:d4:c0:21:4d:77:ea: fa:96:6d:19:e8:c0:da:5f:40:f9:03:36:9f:dc:f9: 11:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B8:5B:DC:49:6C:6B:FB:53:FB:19:F3:B5:C9:E9:DE:AD:23:EB:E9 X509v3 Authority Key Identifier: keyid:D5:54:88:51:5F:49:C9:E2:A9:5F:61:47:52:BA:7C:BA:D5:DC:0C:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/D55488515F49C9E2A95F614752BA7CBAD5DC0C17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b2:da:e8:eb:33:24:a7:e4:bf:84:5c:ec:6d:e7:6c:bd:48: b8:c2:f0:07:80:00:65:ba:13:11:7e:34:07:30:be:16:67:68: c5:f6:b9:77:a8:46:88:9c:d9:b1:b5:e0:cb:6e:be:c4:5d:83: 0b:f1:19:86:28:57:66:0a:14:57:e5:35:d2:c1:f3:52:89:45: 82:a9:d9:23:94:a1:a1:33:6a:74:9e:91:f1:34:03:fd:1a:1c: 88:71:de:86:7b:90:9e:90:64:99:e7:75:e0:41:1b:57:27:21: 1e:ac:e1:eb:a7:64:c9:93:50:df:89:5c:98:65:28:23:42:74: 52:96:d2:bb:2f:6a:03:33:6e:8b:d7:c0:24:a0:f3:d3:9a:73: 06:c0:7f:79:31:bd:ff:f7:db:f2:ed:d7:d3:6f:5e:52:72:13: 6b:2e:e5:36:0c:2c:3c:e8:b2:e4:ce:ad:eb:db:f5:78:42:f1: 64:43:65:9a:17:63:b8:59:22:6a:f2:9e:0d:63:99:db:21:86: 00:ad:dd:8e:4c:3b:04:2b:be:9e:52:50:8d:e4:4b:52:71:83: 01:32:13:44:30:bc:ec:c9:27:3c:2a:30:f5:b2:98:fe:97:e5: 50:14:d3:9a:a4:e6:f8:2b:03:1b:c7:cf:b9:00:28:1b:5b:2f: 1b:5a:9a:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPzznmyoBsS4sranJ96F5F+9KK/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDg4NTE1RjQ5QzlFMkE5NUY2MTQ3NTJCQTdDQkFE NURDMEMxNzAeFw0yNjA2MTkxOTE0MTdaFw0yNjA2MjAyMjE4MTdaMDMxMTAvBgNV BAMTKEE5Qjg1QkRDNDk2QzZCRkI1M0ZCMTlGM0I1QzlFOURFQUQyM0VCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmKEN22Kq5XpL6975R9E5JBhc 61nFf0duHwGgKO7qsAz0eyE6cpdlQLagJwq064xqJ08FceEyvI2WdlK0xcfm7bYS nzsg8pg6O9mX4fUUg83Sko6zt58Zb79lCACyF0otx9J9qezdFuNMFBDz+7vDtWPO dLCxjvtkmU7WyGC01EBcoMO/5abA3FA6l2NTPbyjozfjDbRsViNdZ6hP/UwcIXAN VNzKu9K7JflTpA59OTNydaWNYCAL0rYsZ4vuU3m7aK7iAc6uAEigsn6/PVdRVyPX Rp0shV6WZYkDu9xasmI99Rw1dJJNZNTAIU136vqWbRnowNpfQPkDNp/c+RF3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqbhb3Elsa/tT+xnztcnp3q0j6+kwHwYDVR0j BBgwFoAU1VSIUV9JyeKpX2FHUrp8utXcDBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMzNzBkMjQtYTY1Ni00MzM2LTg0MmItOWJkNWRjYTJiNDBhLzAvRDU1NDg4NTE1 RjQ5QzlFMkE5NUY2MTQ3NTJCQTdDQkFENURDMEMxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTU0ODg1MTVGNDlDOUUyQTk1RjYxNDc1MkJBN0NCQUQ1REMw QzE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvRDU1NDg4NTE1RjQ5QzlFMkE5NUY2MTQ3NTJCQTdD QkFENURDMEMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFey2ujrMySn5L+EXOxt52y9SLjC8AeAAGW6 ExF+NAcwvhZnaMX2uXeoRoic2bG14MtuvsRdgwvxGYYoV2YKFFflNdLB81KJRYKp 2SOUoaEzanSekfE0A/0aHIhx3oZ7kJ6QZJnndeBBG1cnIR6s4eunZMmTUN+JXJhl KCNCdFKW0rsvagMzbovXwCSg89OacwbAf3kxvf/32/Lt19NvXlJyE2su5TYMLDzo suTOrevb9XhC8WRDZZoXY7hZImryng1jmdshhgCt3Y5MOwQrvp5SUI3kS1JxgwEy E0QwvOzJJzwqMPWymP6X5VAU05qk5vgrAxvHz7kAKBtbLxtamoY= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:18 2026 by rpki-client