$ rpki-client -vvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft File: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft (raw, json) Hash identifier: A1GFtd4Hv2nau2+IUpxJm3uM4HH+BwYbEqKD8r+Wqh4= Subject key identifier: 55:BE:89:78:E0:09:43:00:75:0D:1D:BD:59:B1:03:C7:25:A0:DC:C3 Authority key identifier: 58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14 Certificate issuer: /CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214 Certificate serial: 54610AEB039184BB50EA9CE8348129A5FED4D25A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 04:58:00 +0000 Manifest this update: Thu 18 Jun 2026 04:53:00 +0000 Manifest next update: Fri 19 Jun 2026 08:20:00 +0000 Files and hashes: 1: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl (hash: Ufryh+ZeCVYw05mi3MusDGICeXKJAeAsZjiHdSN5YDU=) 2: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: DqsdEihr1ttmWqRVkhtn/IKvZWR3wypbn1l1kKvrrac=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:61:0a:eb:03:91:84:bb:50:ea:9c:e8:34:81:29:a5:fe:d4:d2:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214 Validity Not Before: Jun 18 04:53:00 2026 GMT Not After : Jun 19 08:20:00 2026 GMT Subject: CN=55BE8978E0094300750D1DBD59B103C725A0DCC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:a0:78:81:ff:e0:42:85:04:70:9c:17:e0: c5:da:b9:f5:e6:3b:3a:cb:4e:94:da:1f:6a:77:33: ce:90:12:b9:45:bc:37:af:73:27:6b:23:2e:bf:5f: f9:f6:a3:4b:04:36:9f:7b:17:fa:b2:bb:a9:d7:df: 12:9e:54:b1:7e:70:ea:ad:69:89:ad:7c:96:33:32: c4:97:a5:4f:e3:cd:99:b4:ac:f9:3b:6a:f4:8d:ed: 7d:60:94:40:a3:fd:00:11:ed:5a:06:b3:d5:9c:4f: 2b:f5:d0:8d:3d:64:f1:1b:c9:ce:aa:cf:ad:49:d5: dc:41:eb:a4:ce:16:35:f5:36:dd:6a:63:91:6f:de: 57:9e:88:48:6c:7c:4e:cb:d8:d0:3f:2f:64:ec:e2: a0:60:90:54:76:e2:d6:d8:fb:98:70:02:5d:21:86: c0:e6:31:31:df:62:fe:71:07:a0:54:9a:b3:f0:54: f7:7b:71:7e:26:71:a2:1e:12:4e:81:fb:16:50:15: ef:7b:eb:6d:db:77:fe:4e:86:4a:54:37:90:c2:34: 0e:a1:df:e7:a1:2a:6f:12:f3:49:88:ef:b8:b4:ec: 0d:6e:49:88:42:a4:01:37:7a:42:d8:0b:1a:4b:8a: 41:3a:99:e2:69:be:bf:20:7a:8b:89:aa:cd:24:6e: 36:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BE:89:78:E0:09:43:00:75:0D:1D:BD:59:B1:03:C7:25:A0:DC:C3 X509v3 Authority Key Identifier: keyid:58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:3e:40:0e:a2:97:40:3b:ed:c7:27:bd:8d:09:2c:ee:65:03: 36:06:8f:dd:3a:d0:eb:ce:21:5b:bc:9d:d4:a3:66:a8:31:5b: 29:8d:dd:3a:6d:bd:3c:02:e1:fa:4c:a8:dc:f2:21:4c:ec:2c: 22:b7:6a:78:1b:3d:f8:87:5f:6e:5d:62:77:d8:9e:2c:5e:6a: cd:f0:cc:45:be:13:9d:29:07:74:67:eb:12:16:07:29:33:6c: b7:be:62:27:0b:33:6c:9b:69:f2:72:13:61:79:7c:00:25:d5: 17:6d:0a:9c:b5:a9:5e:71:a4:8a:66:4d:69:c4:ad:e6:af:a8: b7:68:bb:22:5b:9d:aa:49:36:4b:fd:62:a5:78:71:35:39:68: 2a:34:e0:6d:6d:dd:10:3a:e1:f9:3c:8d:6b:59:e3:18:64:d7: 9b:99:1f:ad:ca:e4:b9:76:9d:a7:64:2a:7b:ff:7b:51:f3:cc: ec:7c:ff:5c:91:c1:0c:38:4f:74:2f:23:31:b7:1a:78:41:3b: e8:27:b8:83:5a:d4:5e:2b:2f:7a:4f:33:0a:a4:dd:ee:e8:cb: 09:e7:16:c8:4d:a0:fa:4e:1a:96:5d:79:6f:70:65:10:0b:d6: 4e:cf:c0:83:ba:18:bd:ba:3a:52:21:c5:83:51:62:69:91:ba: 6f:d6:28:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGEK6wORhLtQ6pzoNIEppf7U0lowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2M0VGQ0Y4Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZEQjE4 NTYxMzIxNDAeFw0yNjA2MTgwNDUzMDBaFw0yNjA2MTkwODIwMDBaMDMxMTAvBgNV BAMTKDU1QkU4OTc4RTAwOTQzMDA3NTBEMURCRDU5QjEwM0M3MjVBMERDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cKB4gf/gQoUEcJwX4MXaufXm OzrLTpTaH2p3M86QErlFvDevcydrIy6/X/n2o0sENp97F/qyu6nX3xKeVLF+cOqt aYmtfJYzMsSXpU/jzZm0rPk7avSN7X1glECj/QAR7VoGs9WcTyv10I09ZPEbyc6q z61J1dxB66TOFjX1Nt1qY5Fv3leeiEhsfE7L2NA/L2Ts4qBgkFR24tbY+5hwAl0h hsDmMTHfYv5xB6BUmrPwVPd7cX4mcaIeEk6B+xZQFe97623bd/5OhkpUN5DCNA6h 3+ehKm8S80mI77i07A1uSYhCpAE3ekLYCxpLikE6meJpvr8geouJqs0kbjZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVb6JeOAJQwB1DR29WbEDxyWg3MMwHwYDVR0j BBgwFoAUWGPvz4znBhzf8brO6vz9sYVhMhQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg3ZGQ1OTctNDBjZC00MDliLWIzYzUtMjg1MmNlMDE0ODg5LzAvNTg2M0VGQ0Y4 Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZEQjE4NTYxMzIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81ODYzRUZDRjhDRTcwNjFDREZGMUJBQ0VFQUZDRkRCMTg1NjEz MjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvNTg2M0VGQ0Y4Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZE QjE4NTYxMzIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQ+QA6il0A77ccnvY0JLO5lAzYGj9060OvO IVu8ndSjZqgxWymN3TptvTwC4fpMqNzyIUzsLCK3angbPfiHX25dYnfYnixeas3w zEW+E50pB3Rn6xIWBykzbLe+YicLM2ybafJyE2F5fAAl1RdtCpy1qV5xpIpmTWnE reavqLdouyJbnapJNkv9YqV4cTU5aCo04G1t3RA64fk8jWtZ4xhk15uZH63K5Ll2 nadkKnv/e1HzzOx8/1yRwQw4T3QvIzG3GnhBO+gnuINa1F4rL3pPMwqk3e7oywnn FshNoPpOGpZdeW9wZRAL1k7PwIO6GL26OlIhxYNRYmmRum/WKCc= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:25 2026 by rpki-client