$ rpki-client -vvf rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft File: 1351A2C01F31DE3BE0AE00B957282481FA877D80.mft (raw, json) Hash identifier: t0m2gyPLDT9nyTNHEOxee4oR6pS5cwyRjKphR725mQI= Subject key identifier: DD:80:2A:92:FE:82:97:98:3F:B9:ED:35:DC:3F:E1:B8:60:31:03:A0 Authority key identifier: 13:51:A2:C0:1F:31:DE:3B:E0:AE:00:B9:57:28:24:81:FA:87:7D:80 Certificate issuer: /CN=1351A2C01F31DE3BE0AE00B957282481FA877D80 Certificate serial: 25145806D6DB6D6754E01C36170D5BCCD13369E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:26:00 +0000 Manifest this update: Tue 02 Jun 2026 21:21:00 +0000 Manifest next update: Wed 03 Jun 2026 23:48:00 +0000 Files and hashes: 1: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: VfT1JeeXKm1v01tmdjLA+eN6veAeXQzQ5yXazEtdaok=) 2: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: fjuzJS9VCKizjfIN5unaQZhEiXot8Mm25qklVdFMhbs=) 3: 1351A2C01F31DE3BE0AE00B957282481FA877D80.crl (hash: gHLhtP+18mTJXV9ylNAxiv2ix/NwxhAQr1wEaAh+KTM=) 4: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: XC72sTT1UANPWg5y93bIJ8fKMA+26iRggZMn6hJnkeY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.crl rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:14:58:06:d6:db:6d:67:54:e0:1c:36:17:0d:5b:cc:d1:33:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1351A2C01F31DE3BE0AE00B957282481FA877D80 Validity Not Before: Jun 2 21:21:00 2026 GMT Not After : Jun 3 23:48:00 2026 GMT Subject: CN=DD802A92FE8297983FB9ED35DC3FE1B8603103A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ac:34:71:fa:d7:14:8d:aa:1e:7d:9b:d4:4b: 2b:b6:19:9a:df:c7:bb:0e:88:71:8a:ac:35:fd:33: c6:59:a7:6e:74:bc:b2:16:21:6f:5d:5f:88:4e:4e: 50:69:3b:d6:4c:2e:f2:5d:96:e3:8b:e3:f0:f3:33: e6:72:70:11:5a:95:a9:38:12:b7:30:38:09:0b:7b: 45:d6:5a:b4:c9:6b:f5:4a:c8:5e:c2:90:f2:e7:0c: 39:84:1e:fc:41:ab:82:6c:55:25:55:2c:77:b8:8c: 4d:34:e8:3e:19:85:c7:89:a5:87:7e:d7:1a:ec:cc: 07:1e:a4:62:12:b5:38:a6:a7:d5:12:38:d1:bd:1c: b2:10:7b:57:76:5b:b4:f2:bc:7b:f4:cd:07:bb:16: 80:26:e6:06:97:f2:e7:a4:9a:0b:8d:29:22:7c:c7: f8:2e:4e:8f:1a:80:2f:8b:4e:d2:c0:66:59:c5:30: ea:c1:aa:cd:e5:0d:c1:ad:56:a1:29:b2:5f:d5:46: b5:b0:7f:89:87:eb:17:b5:3f:9d:ea:4f:01:23:f0: f0:1a:70:96:ce:3e:de:21:c1:3f:8e:11:1c:88:d3: 3b:49:8d:20:ef:e0:5a:fa:f6:76:73:b4:33:1f:a3: c1:14:e7:6e:ff:2d:83:ea:3a:3b:c8:4d:49:57:88: 89:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:80:2A:92:FE:82:97:98:3F:B9:ED:35:DC:3F:E1:B8:60:31:03:A0 X509v3 Authority Key Identifier: keyid:13:51:A2:C0:1F:31:DE:3B:E0:AE:00:B9:57:28:24:81:FA:87:7D:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1351A2C01F31DE3BE0AE00B957282481FA877D80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/1351A2C01F31DE3BE0AE00B957282481FA877D80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:15:70:a7:b7:b1:cf:2f:56:06:ee:69:f2:2e:56:d3:7e:e5: ce:a3:d5:e1:15:c5:43:b8:84:77:49:7c:f1:86:2a:9d:00:93: b5:95:68:06:c1:2d:03:6a:c9:e4:96:fa:53:f5:7b:58:8f:af: dc:e4:1e:a0:ad:b8:95:98:2e:8c:5e:1e:1b:24:d7:95:1f:f5: f4:34:d3:81:47:7e:8c:fd:a4:3d:19:f5:1a:49:9a:8f:33:9f: b2:20:6e:99:91:07:e2:8c:f1:6a:b2:47:df:73:53:17:35:6e: 88:82:ca:fc:1b:7b:45:cd:88:dc:52:e6:d0:63:50:d0:df:d0: de:9f:4a:86:2e:1f:08:ad:48:65:26:bb:91:7f:9d:26:ed:b2: 59:d6:35:1d:82:8e:55:b4:f3:dd:95:8f:69:8f:26:0f:46:2d: 6c:bf:12:36:7a:62:1f:aa:fc:4a:42:ec:0b:a6:c5:a2:71:ce: 08:7b:82:75:a1:c9:9f:af:15:97:bb:d6:fe:68:0c:7a:1d:35: 12:0b:f8:be:9d:d0:e5:90:fe:de:7a:bf:ae:2a:89:29:c4:87: d7:17:45:34:51:75:b6:dd:cb:3b:0d:8f:6b:0b:11:ab:f0:79: 0f:cb:d2:6c:c2:37:17:97:2f:49:7b:7e:fd:02:2f:97:45:56: 9d:31:40:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJRRYBtbbbWdU4Bw2Fw1bzNEzaeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM1MUEyQzAxRjMxREUzQkUwQUUwMEI5NTcyODI0ODFG QTg3N0Q4MDAeFw0yNjA2MDIyMTIxMDBaFw0yNjA2MDMyMzQ4MDBaMDMxMTAvBgNV BAMTKEREODAyQTkyRkU4Mjk3OTgzRkI5RUQzNURDM0ZFMUI4NjAzMTAzQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMrDRx+tcUjaoefZvUSyu2GZrf x7sOiHGKrDX9M8ZZp250vLIWIW9dX4hOTlBpO9ZMLvJdluOL4/DzM+ZycBFalak4 ErcwOAkLe0XWWrTJa/VKyF7CkPLnDDmEHvxBq4JsVSVVLHe4jE006D4ZhceJpYd+ 1xrszAcepGIStTimp9USONG9HLIQe1d2W7TyvHv0zQe7FoAm5gaX8uekmguNKSJ8 x/guTo8agC+LTtLAZlnFMOrBqs3lDcGtVqEpsl/VRrWwf4mH6xe1P53qTwEj8PAa cJbOPt4hwT+OERyI0ztJjSDv4Fr69nZztDMfo8EU527/LYPqOjvITUlXiImnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3YAqkv6Cl5g/ue013D/huGAxA6AwHwYDVR0j BBgwFoAUE1GiwB8x3jvgrgC5VygkgfqHfYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVlZmNiZjAtNjZlYy00OGQzLWIyMjEtMGYwOTY4NmQ1ODE4LzAvMTM1MUEyQzAx RjMxREUzQkUwQUUwMEI5NTcyODI0ODFGQTg3N0Q4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzUxQTJDMDFGMzFERTNCRTBBRTAwQjk1NzI4MjQ4MUZBODc3 RDgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMTM1MUEyQzAxRjMxREUzQkUwQUUwMEI5NTcyODI0 ODFGQTg3N0Q4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8VcKe3sc8vVgbuafIuVtN+5c6j1eEVxUO4 hHdJfPGGKp0Ak7WVaAbBLQNqyeSW+lP1e1iPr9zkHqCtuJWYLoxeHhsk15Uf9fQ0 04FHfoz9pD0Z9RpJmo8zn7IgbpmRB+KM8WqyR99zUxc1boiCyvwbe0XNiNxS5tBj UNDf0N6fSoYuHwitSGUmu5F/nSbtslnWNR2CjlW0892Vj2mPJg9GLWy/EjZ6Yh+q /EpC7AumxaJxzgh7gnWhyZ+vFZe71v5oDHodNRIL+L6d0OWQ/t56v64qiSnEh9cX RTRRdbbdyzsNj2sLEavweQ/L0mzCNxeXL0l7fv0CL5dFVp0xQIw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:24 2026 by rpki-client