$ rpki-client -vvf rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.mft File: A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.mft (raw, json) Hash identifier: Js5ubQWFWdSQ0L5PHOa0HqsGSwH14s0BkBk4E56RR0c= Subject key identifier: 72:9E:8E:24:5F:8D:55:A4:5A:5E:EE:68:A3:F1:2B:78:5B:72:56:18 Authority key identifier: A6:3A:F0:0E:CA:AA:35:92:90:20:D6:F9:F7:FA:A2:67:3B:1B:47:AF Certificate issuer: /CN=A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF Certificate serial: 5F4EEB6D18F5D40FBFA9B75ACB6339FC0F06BFBB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 17:36:04 +0000 Manifest this update: Tue 02 Jun 2026 17:31:04 +0000 Manifest next update: Wed 03 Jun 2026 17:38:04 +0000 Files and hashes: 1: A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.crl (hash: +sc5qtNK26U/jspHHFznn78hcJuEbuZMC2+SdJuIENM=) 2: 3130332e3133372e3134342e302f32332d3234203d3e20313338383439.roa (hash: BJIV0M1LieiEIXkjZ4xndCN7SzyVPyBnaXnNbSG/tf8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.crl rsync://rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4e:eb:6d:18:f5:d4:0f:bf:a9:b7:5a:cb:63:39:fc:0f:06:bf:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF Validity Not Before: Jun 2 17:31:04 2026 GMT Not After : Jun 3 17:38:04 2026 GMT Subject: CN=729E8E245F8D55A45A5EEE68A3F12B785B725618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:97:52:1c:e3:97:42:d3:90:fc:6b:90:dc: ae:1f:73:14:44:92:e6:40:2a:a2:b2:b8:7a:c4:23: 94:5d:03:e4:bd:08:8b:ec:b9:22:dc:da:37:ee:bf: eb:0a:38:22:37:70:e5:33:42:f7:0e:3b:98:24:9a: dd:c2:b1:30:fd:11:28:5c:b5:aa:c5:bd:0a:e1:e4: 04:6a:cb:b6:0a:7e:b8:c8:76:6f:db:74:f7:46:5e: 14:9a:a3:43:f5:ca:4e:e0:1b:f6:45:49:b0:1d:8d: dd:ba:0b:f4:af:d8:48:6b:42:3d:b2:d9:2a:ee:64: ed:6e:04:6a:db:68:67:ba:9c:28:be:f0:f2:f7:3e: 8d:e4:13:28:35:67:16:2c:2b:1b:6c:23:1d:a0:33: 9f:99:30:d0:96:68:74:f3:61:c6:eb:a3:a9:b1:f1: ea:10:9b:61:ea:b7:3a:66:5a:95:05:1d:e0:c6:b6: 18:44:ae:04:62:c8:f8:6d:7b:28:80:15:50:7a:e9: 59:cd:ab:66:59:ae:60:21:b3:3d:77:85:97:9e:d9: ca:c0:02:0b:76:ab:c2:23:34:73:89:b6:a5:0d:01: 03:c8:01:05:48:18:11:f1:40:34:d6:61:cb:5b:ed: f9:c5:f4:7c:77:01:93:61:f8:3a:6f:07:f5:09:88: c9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9E:8E:24:5F:8D:55:A4:5A:5E:EE:68:A3:F1:2B:78:5B:72:56:18 X509v3 Authority Key Identifier: keyid:A6:3A:F0:0E:CA:AA:35:92:90:20:D6:F9:F7:FA:A2:67:3B:1B:47:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/A63AF00ECAAA35929020D6F9F7FAA2673B1B47AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e2:a1:94:b9:33:a3:ab:6f:85:90:1f:f7:b2:a5:25:af:d8: 2e:44:ca:a5:10:b2:cf:bf:a9:08:4a:50:e4:b3:b1:c5:b6:25: ce:2f:2d:39:c7:99:ff:b4:01:26:dd:bd:5c:95:e2:df:ee:e0: 14:0b:a4:ad:fb:72:54:d1:21:8e:14:ab:46:93:e1:4b:02:89: 53:0c:e9:45:cc:1c:bb:3e:2a:1e:43:19:a2:98:79:45:95:8e: b8:98:13:55:b5:10:95:2c:da:cf:bf:e9:68:f3:14:5d:e0:64: ed:eb:52:62:fa:32:32:e2:a0:2a:1c:2d:6d:f2:ef:25:58:7f: 0e:a4:c9:18:12:06:b4:6c:6f:14:f9:29:0b:3c:c6:1b:57:a7: c1:c1:b8:3a:62:b3:38:4a:84:05:61:6f:f0:7b:55:f2:60:87: 73:92:06:ff:b8:c0:c3:66:c0:c6:8a:97:f3:d3:02:0d:8a:74: 4b:fd:a7:db:98:32:0a:ba:43:dd:ed:78:77:23:16:ee:7f:d7: cc:a8:57:10:14:48:2e:f4:f0:90:20:f3:ae:c4:45:ee:7c:cd: 07:e6:78:25:74:05:8d:eb:cc:5e:77:c6:81:8b:e9:56:c2:fa: f0:d0:18:61:02:9f:c9:6f:54:8c:21:df:9c:52:84:fe:d0:14: 47:8b:7b:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX07rbRj11A+/qbday2M5/A8Gv7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQUYwMEVDQUFBMzU5MjkwMjBENkY5RjdGQUEyNjcz QjFCNDdBRjAeFw0yNjA2MDIxNzMxMDRaFw0yNjA2MDMxNzM4MDRaMDMxMTAvBgNV BAMTKDcyOUU4RTI0NUY4RDU1QTQ1QTVFRUU2OEEzRjEyQjc4NUI3MjU2MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wJdSHOOXQtOQ/GuQ3K4fcxRE kuZAKqKyuHrEI5RdA+S9CIvsuSLc2jfuv+sKOCI3cOUzQvcOO5gkmt3CsTD9EShc tarFvQrh5ARqy7YKfrjIdm/bdPdGXhSao0P1yk7gG/ZFSbAdjd26C/Sv2EhrQj2y 2SruZO1uBGrbaGe6nCi+8PL3Po3kEyg1ZxYsKxtsIx2gM5+ZMNCWaHTzYcbro6mx 8eoQm2HqtzpmWpUFHeDGthhErgRiyPhteyiAFVB66VnNq2ZZrmAhsz13hZee2crA Agt2q8IjNHOJtqUNAQPIAQVIGBHxQDTWYctb7fnF9Hx3AZNh+DpvB/UJiMmPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcp6OJF+NVaRaXu5oo/EreFtyVhgwHwYDVR0j BBgwFoAUpjrwDsqqNZKQINb59/qiZzsbR68wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU0NjE4M2MtZDllZi00YzMzLWJlOTktZTg0YmVkYjEwYjY4LzAvQTYzQUYwMEVD QUFBMzU5MjkwMjBENkY5RjdGQUEyNjczQjFCNDdBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNjNBRjAwRUNBQUEzNTkyOTAyMEQ2RjlGN0ZBQTI2NzNCMUI0 N0FGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU0NjE4M2MtZDllZi00YzMzLWJl OTktZTg0YmVkYjEwYjY4LzAvQTYzQUYwMEVDQUFBMzU5MjkwMjBENkY5RjdGQUEy NjczQjFCNDdBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnioZS5M6Orb4WQH/eypSWv2C5EyqUQss+/ qQhKUOSzscW2Jc4vLTnHmf+0ASbdvVyV4t/u4BQLpK37clTRIY4Uq0aT4UsCiVMM 6UXMHLs+Kh5DGaKYeUWVjriYE1W1EJUs2s+/6WjzFF3gZO3rUmL6MjLioCocLW3y 7yVYfw6kyRgSBrRsbxT5KQs8xhtXp8HBuDpiszhKhAVhb/B7VfJgh3OSBv+4wMNm wMaKl/PTAg2KdEv9p9uYMgq6Q93teHcjFu5/18yoVxAUSC708JAg867ERe58zQfm eCV0BY3rzF53xoGL6VbC+vDQGGECn8lvVIwh35xShP7QFEeLew0= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:26 2026 by rpki-client