$ rpki-client -vvf rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft File: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft (raw, json) Hash identifier: QAHZ6y3AnKWiHp/3trenYxIJoZNZbqOlBsgVHSy3YMw= Subject key identifier: 6A:80:C5:57:9B:BB:DB:6B:DE:C7:BE:A8:A6:EF:D2:1E:81:6C:3C:49 Authority key identifier: 1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA Certificate issuer: /CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Certificate serial: 2783F6C80ABD64CED191BAA2A00F49D0C1A928C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:55:57 +0000 Manifest this update: Tue 02 Jun 2026 12:50:57 +0000 Manifest next update: Wed 03 Jun 2026 14:55:57 +0000 Files and hashes: 1: 1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl (hash: Rh1DMBgC1K1j+fUa/Nhd8lgtluC6ptseceJnyvG00C4=) 2: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: nSsVilLmRiJa0+a7BBDxlGj708JBl0xDsJ3rq/l4Ock=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:83:f6:c8:0a:bd:64:ce:d1:91:ba:a2:a0:0f:49:d0:c1:a9:28:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D457325C85F3FEE2DE57FD3ED2526D8C10451FA Validity Not Before: Jun 2 12:50:57 2026 GMT Not After : Jun 3 14:55:57 2026 GMT Subject: CN=6A80C5579BBBDB6BDEC7BEA8A6EFD21E816C3C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:73:c8:5c:07:3e:d8:be:b7:01:78:fc:12:1e: 35:64:19:cc:94:c3:14:bd:09:f6:fc:5e:84:83:6c: fb:62:13:c1:21:38:ad:a8:66:f4:7a:8f:42:1d:b2: 4d:d4:f2:68:d5:38:96:77:8e:bf:ca:85:f7:b7:55: a3:7b:fe:db:0a:46:46:8b:c6:63:bb:63:79:e8:54: 6c:9f:2d:61:b8:ff:25:3e:83:42:08:a9:f0:80:4d: ab:2b:61:52:ca:fe:54:88:c5:e4:48:ca:c9:92:b6: 88:fc:c0:dd:68:ce:0c:c7:fc:28:14:73:bd:e5:38: aa:14:c0:90:27:7b:78:6b:01:7e:1d:45:08:9d:d2: f3:1d:c8:0d:99:7d:d2:b5:cb:1b:25:a9:c1:9f:a4: 4c:c4:5f:cb:ba:1b:eb:5c:af:ab:df:79:d7:0f:2c: f8:4e:8b:49:3d:3b:6d:5a:1c:1d:a3:54:ea:2f:57: 83:06:1d:7e:9a:04:9e:45:39:47:b2:ec:c6:03:86: b0:5e:70:98:47:10:d4:1b:00:47:e7:2d:3a:f0:11: fd:03:11:a6:ee:bf:16:d3:8c:bc:da:7f:fc:47:09: 57:00:c3:5a:08:df:cf:fe:47:dd:70:e9:c9:1a:43: 15:5c:eb:41:16:43:2f:45:24:fc:35:62:8e:9e:ec: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:80:C5:57:9B:BB:DB:6B:DE:C7:BE:A8:A6:EF:D2:1E:81:6C:3C:49 X509v3 Authority Key Identifier: keyid:1D:45:73:25:C8:5F:3F:EE:2D:E5:7F:D3:ED:25:26:D8:C1:04:51:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/1D457325C85F3FEE2DE57FD3ED2526D8C10451FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:12:bb:49:5f:30:c2:0a:02:3c:79:5d:b7:e0:0d:9f:fb:27: 84:56:79:30:cf:8f:61:21:f3:06:97:64:87:19:2e:00:6c:d2: 41:20:b5:7d:73:af:87:ec:6f:d7:9a:74:51:c9:80:1b:99:dd: fa:46:a0:8b:15:c1:6f:24:14:63:d6:d4:15:52:52:9d:3f:05: 25:fd:64:ff:f1:8b:23:f1:ba:0b:46:48:d7:2f:9d:2b:7e:17: ec:ca:b5:24:21:d9:13:95:25:7c:fa:00:24:e5:35:af:bc:08: af:37:23:28:a6:c2:59:7c:28:41:41:32:4c:8f:1a:e6:10:a7: 5a:d0:27:78:81:dd:e7:75:9b:87:c8:c2:4b:47:ba:92:c2:75: 16:ea:21:4b:d4:55:e3:48:20:19:3d:45:2c:f4:70:89:23:37: 2c:4b:99:a5:b5:7b:84:d3:4d:58:af:2a:3d:f2:f4:a4:bf:12: 0c:2d:91:a2:29:dc:db:60:36:fb:5c:87:28:ca:f3:70:3c:1e: ac:83:f5:ad:9b:6d:9f:25:f4:74:b6:86:a2:fe:b1:c0:08:0d: 3f:4a:b8:34:aa:13:c6:87:ce:90:c7:88:13:27:37:4c:72:57: f8:31:eb:86:9e:b7:6d:36:4c:de:25:47:fe:45:77:9c:1a:02: c9:e2:9b:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ4P2yAq9ZM7RkbqioA9J0MGpKMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhD MTA0NTFGQTAeFw0yNjA2MDIxMjUwNTdaFw0yNjA2MDMxNDU1NTdaMDMxMTAvBgNV BAMTKDZBODBDNTU3OUJCQkRCNkJERUM3QkVBOEE2RUZEMjFFODE2QzNDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjc8hcBz7YvrcBePwSHjVkGcyU wxS9Cfb8XoSDbPtiE8EhOK2oZvR6j0Idsk3U8mjVOJZ3jr/Khfe3VaN7/tsKRkaL xmO7Y3noVGyfLWG4/yU+g0IIqfCATasrYVLK/lSIxeRIysmStoj8wN1ozgzH/CgU c73lOKoUwJAne3hrAX4dRQid0vMdyA2ZfdK1yxslqcGfpEzEX8u6G+tcr6vfedcP LPhOi0k9O21aHB2jVOovV4MGHX6aBJ5FOUey7MYDhrBecJhHENQbAEfnLTrwEf0D EabuvxbTjLzaf/xHCVcAw1oI38/+R91w6ckaQxVc60EWQy9FJPw1Yo6e7NxlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaoDFV5u722vex76opu/SHoFsPEkwHwYDVR0j BBgwFoAUHUVzJchfP+4t5X/T7SUm2MEEUfowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQwMWIyZDEtMDFjYS00MGU4LWJmNzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVD ODVGM0ZFRTJERTU3RkQzRUQyNTI2RDhDMTA0NTFGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDQ1NzMyNUM4NUYzRkVFMkRFNTdGRDNFRDI1MjZEOEMxMDQ1 MUZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvMUQ0NTczMjVDODVGM0ZFRTJERTU3RkQzRUQyNTI2 RDhDMTA0NTFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYSu0lfMMIKAjx5XbfgDZ/7J4RWeTDPj2Eh 8waXZIcZLgBs0kEgtX1zr4fsb9eadFHJgBuZ3fpGoIsVwW8kFGPW1BVSUp0/BSX9 ZP/xiyPxugtGSNcvnSt+F+zKtSQh2ROVJXz6ACTlNa+8CK83Iyimwll8KEFBMkyP GuYQp1rQJ3iB3ed1m4fIwktHupLCdRbqIUvUVeNIIBk9RSz0cIkjNyxLmaW1e4TT TVivKj3y9KS/EgwtkaIp3NtgNvtchyjK83A8HqyD9a2bbZ8l9HS2hqL+scAIDT9K uDSqE8aHzpDHiBMnN0xyV/gx64aet202TN4lR/5Fd5waAsnim8M= -----END CERTIFICATE-----Generated at Wed Jun 3 04:21:02 2026 by rpki-client