$ rpki-client -vvf rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft File: 153D132907038920D30874D8E1EA33161B940EA6.mft (raw, json) Hash identifier: wH7NUSwvprNY8JnIMjzYaF+rqE9zkd5Nz4lIluA3b/A= Subject key identifier: 12:05:5B:65:25:0B:DB:1E:1F:A6:B0:45:8B:F9:50:AE:D6:DD:18:F4 Authority key identifier: 15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6 Certificate issuer: /CN=153D132907038920D30874D8E1EA33161B940EA6 Certificate serial: 6AB53CA9F60AEB10D238E51B86C1D08BCF4C195E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 03:49:21 +0000 Manifest this update: Sat 20 Jun 2026 03:44:21 +0000 Manifest next update: Sun 21 Jun 2026 05:57:21 +0000 Files and hashes: 1: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: pulqmJflTAxdM7jOySuU657i95+QOMozLp6rdyTPI6U=) 2: 153D132907038920D30874D8E1EA33161B940EA6.crl (hash: UIF/XlLxvnb+wTUkg5ytnAzO8e/icyQCByl88nv53Ww=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 05:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b5:3c:a9:f6:0a:eb:10:d2:38:e5:1b:86:c1:d0:8b:cf:4c:19:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153D132907038920D30874D8E1EA33161B940EA6 Validity Not Before: Jun 20 03:44:21 2026 GMT Not After : Jun 21 05:57:21 2026 GMT Subject: CN=12055B65250BDB1E1FA6B0458BF950AED6DD18F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:09:00:12:3f:9d:ab:62:ed:7b:df:1b:cf:12: 60:3d:1d:82:9c:a7:f9:7f:83:9c:85:5c:f3:e9:5b: 0b:e8:c8:98:eb:2a:a6:b1:8c:12:e3:16:99:92:dd: 13:4c:96:bc:18:3f:30:21:01:77:96:d8:fa:28:99: cc:07:33:2c:7a:ff:9d:5b:b1:54:8a:1c:04:43:bb: 1a:d0:a6:79:9c:1a:43:a5:d5:39:22:18:65:b3:72: cd:c1:d3:c6:6d:bf:c6:86:09:64:86:36:c7:d7:b8: 9d:b7:14:f8:e6:6d:15:55:66:83:28:82:19:8c:05: dc:3e:14:4b:95:12:2f:44:c0:ae:ec:38:ba:10:2e: e8:44:c5:02:da:82:59:ed:1c:fd:3d:58:68:e9:46: 3e:e9:73:16:83:4c:4e:cb:59:50:cc:5e:37:59:8c: cd:80:63:e7:ed:a7:11:78:99:92:eb:99:2a:c9:3d: 89:60:a8:8a:69:4b:80:28:60:2b:8c:49:df:d1:3a: 0b:4c:fa:29:18:58:31:d4:50:22:db:86:aa:c3:3f: 52:9f:45:a7:fa:c3:c8:26:c8:9e:21:ce:66:e7:c1: 46:0f:c0:85:cb:1e:66:b1:a5:32:4f:be:4d:8d:e7: 54:98:d2:ec:2b:83:3e:e2:eb:78:b7:ef:30:b1:c7: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:05:5B:65:25:0B:DB:1E:1F:A6:B0:45:8B:F9:50:AE:D6:DD:18:F4 X509v3 Authority Key Identifier: keyid:15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9b:a8:a7:b7:dc:e2:da:65:0b:f6:21:d6:b3:40:8a:77:ea: b4:27:43:53:52:26:c3:b2:2b:d9:6d:fd:07:99:fd:a8:1d:d5: 03:b2:db:15:22:7a:7b:08:9b:3f:f1:30:cd:92:db:d6:1e:39: dc:71:62:89:d1:72:4b:a4:be:62:0b:5b:08:b5:93:4a:af:01: ec:a2:2e:85:56:b1:82:49:55:c9:d3:6a:e0:5f:9b:05:a1:43: f4:b6:6f:d8:85:8f:db:52:64:dc:6d:b9:c7:88:17:4d:b2:6d: 53:15:34:6e:34:86:d5:0a:39:ce:62:31:ed:e3:61:54:ed:9b: 57:25:2b:45:9e:3c:ff:de:ea:98:a8:11:b1:54:aa:05:b5:37: 98:09:f1:89:f0:aa:42:c7:b2:c1:25:ad:95:7d:80:91:70:b5: 5e:65:d2:3d:84:b5:57:65:fd:b7:dc:72:c6:97:01:21:8a:57: a1:9e:ca:45:89:6a:49:ab:68:2b:0d:43:b7:c4:56:f7:0d:c1: 50:6a:f1:d6:d8:cd:db:30:1c:d8:44:ca:ed:fc:ad:6f:2b:fa: 3c:c5:1d:a9:0a:91:fc:8a:12:4a:2a:a9:a4:45:83:d0:6f:eb: d9:5d:4d:32:18:f2:78:72:20:0b:bd:a5:11:e5:6b:9f:75:90: 97:27:1c:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarU8qfYK6xDSOOUbhsHQi89MGV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUzRDEzMjkwNzAzODkyMEQzMDg3NEQ4RTFFQTMzMTYx Qjk0MEVBNjAeFw0yNjA2MjAwMzQ0MjFaFw0yNjA2MjEwNTU3MjFaMDMxMTAvBgNV BAMTKDEyMDU1QjY1MjUwQkRCMUUxRkE2QjA0NThCRjk1MEFFRDZERDE4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCQASP52rYu173xvPEmA9HYKc p/l/g5yFXPPpWwvoyJjrKqaxjBLjFpmS3RNMlrwYPzAhAXeW2PoomcwHMyx6/51b sVSKHARDuxrQpnmcGkOl1TkiGGWzcs3B08Ztv8aGCWSGNsfXuJ23FPjmbRVVZoMo ghmMBdw+FEuVEi9EwK7sOLoQLuhExQLaglntHP09WGjpRj7pcxaDTE7LWVDMXjdZ jM2AY+ftpxF4mZLrmSrJPYlgqIppS4AoYCuMSd/ROgtM+ikYWDHUUCLbhqrDP1Kf Raf6w8gmyJ4hzmbnwUYPwIXLHmaxpTJPvk2N51SY0uwrgz7i63i37zCxxxehAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEgVbZSUL2x4fprBFi/lQrtbdGPQwHwYDVR0j BBgwFoAUFT0TKQcDiSDTCHTY4eozFhuUDqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2YTU3YzUtZGY3My00M2Y1LTg2NWQtNmJkMjQ4YzIyZmJhLzAvMTUzRDEzMjkw NzAzODkyMEQzMDg3NEQ4RTFFQTMzMTYxQjk0MEVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTNEMTMyOTA3MDM4OTIwRDMwODc0RDhFMUVBMzMxNjFCOTQw RUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2 NWQtNmJkMjQ4YzIyZmJhLzAvMTUzRDEzMjkwNzAzODkyMEQzMDg3NEQ4RTFFQTMz MTYxQjk0MEVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2bqKe33OLaZQv2IdazQIp36rQnQ1NSJsOy K9lt/QeZ/agd1QOy2xUiensImz/xMM2S29YeOdxxYonRckukvmILWwi1k0qvAeyi LoVWsYJJVcnTauBfmwWhQ/S2b9iFj9tSZNxtuceIF02ybVMVNG40htUKOc5iMe3j YVTtm1clK0WePP/e6pioEbFUqgW1N5gJ8YnwqkLHssElrZV9gJFwtV5l0j2EtVdl /bfccsaXASGKV6GeykWJakmraCsNQ7fEVvcNwVBq8dbYzdswHNhEyu38rW8r+jzF HakKkfyKEkoqqaRFg9Bv69ldTTIY8nhyIAu9pRHla591kJcnHPU= -----END CERTIFICATE-----Generated at Sat Jun 20 09:11:49 2026 by rpki-client