$ rpki-client -vvf rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft File: 2677581645A49D82B36AA830484865F4B9D0FC43.mft (raw, json) Hash identifier: 6ejyVNPkKz28+1mhYgQ/pRsIIl2VYotccS5Mw7YLNQE= Subject key identifier: 4B:B0:77:8B:52:76:D7:6E:1D:2A:28:D8:83:8C:4A:4B:67:16:F5:9E Authority key identifier: 26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43 Certificate issuer: /CN=2677581645A49D82B36AA830484865F4B9D0FC43 Certificate serial: 3B6C12FC6AA34FFD4BDC6B1D8E273A6649478888 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:25:24 +0000 Manifest this update: Tue 02 Jun 2026 12:20:24 +0000 Manifest next update: Wed 03 Jun 2026 14:36:24 +0000 Files and hashes: 1: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: 5qL4Akm0PbHI3eo3BSoRkovQkTSvAIBUTKI6uUAYPHA=) 2: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zMOWhJqH1J6fUN/OnJAxp19ayumIrg3uRIfyARwlsqI=) 3: 2677581645A49D82B36AA830484865F4B9D0FC43.crl (hash: TNSnnRxqtEK4ylQNPbIPlAU+yS7chl9AlNCKxXo6gmQ=) 4: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: ePHUQHjUtQqmubSQINVLXHx5bVCNeo3QJkNOBue6jYg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6c:12:fc:6a:a3:4f:fd:4b:dc:6b:1d:8e:27:3a:66:49:47:88:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2677581645A49D82B36AA830484865F4B9D0FC43 Validity Not Before: Jun 2 12:20:24 2026 GMT Not After : Jun 3 14:36:24 2026 GMT Subject: CN=4BB0778B5276D76E1D2A28D8838C4A4B6716F59E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:93:3d:37:33:54:9f:b3:cd:48:6b:da:cc: 6e:27:46:46:e6:8a:59:80:30:8e:35:b9:29:ee:3e: a3:7b:f2:42:43:61:b6:66:0f:95:c0:85:52:82:db: 84:93:34:d6:6f:ee:a9:d9:a1:11:da:6f:21:b3:4d: 12:13:84:50:63:8d:3b:e4:f4:0a:bc:82:75:45:e7: 11:1b:8b:da:e6:24:ce:a8:9f:2d:8c:ce:59:d3:ed: a7:09:53:fb:ac:e7:8e:c8:dd:e2:76:ce:52:f7:c1: db:86:fc:f5:db:be:70:5f:ab:5a:2c:81:8f:d4:31: b8:0e:a9:bc:97:05:37:9e:23:55:b5:27:9b:ad:3f: e7:b7:2a:0b:13:a1:71:74:e7:24:2a:ba:a8:01:41: 02:30:6a:af:7e:f9:21:c8:8f:cd:03:ee:a1:75:ed: 0a:83:50:2d:e4:16:3a:75:d8:91:27:c6:e2:d2:4e: ed:27:bc:ae:b4:bf:5a:7e:4d:24:d2:66:b0:bc:60: 02:87:5e:36:60:c6:7f:4b:cc:24:e2:72:7c:6c:61: 3d:d0:6d:4d:86:12:ce:a8:9b:e4:0a:41:a0:66:c0: ba:eb:21:23:b3:bf:d1:de:68:09:7f:9a:98:c9:d8: 88:75:26:1f:cf:6b:af:cd:d1:32:bd:68:a8:f9:f1: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B0:77:8B:52:76:D7:6E:1D:2A:28:D8:83:8C:4A:4B:67:16:F5:9E X509v3 Authority Key Identifier: keyid:26:77:58:16:45:A4:9D:82:B3:6A:A8:30:48:48:65:F4:B9:D0:FC:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2677581645A49D82B36AA830484865F4B9D0FC43.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/2677581645A49D82B36AA830484865F4B9D0FC43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:52:ed:9c:1e:7e:47:d2:9e:3f:da:80:47:dc:84:6c:b6:6b: 63:b1:6a:7a:f4:45:bb:9c:7c:11:31:6f:3f:f2:60:e4:f9:14: 9f:89:ff:23:4e:5c:91:5b:be:18:65:0f:6f:01:34:30:d4:ff: 88:dd:fe:2f:14:7b:87:bb:9d:aa:4f:28:a4:35:fa:6b:61:9e: b1:44:eb:88:1d:68:94:d5:79:f9:34:c7:7f:5e:61:75:3e:60: 6d:0e:5c:f8:1f:75:af:09:0e:1b:b4:95:7e:d8:a2:a0:f4:04: e0:e6:0d:5e:eb:80:ee:7b:ee:a0:bd:79:09:47:20:74:02:53: 07:ea:f1:78:19:d6:ee:73:2b:c8:b6:90:22:93:09:06:69:e4: 89:c4:77:8c:93:c6:92:e3:69:fe:32:3d:3f:83:3e:15:66:9b: 58:64:fe:8f:bf:b2:c5:61:d8:3b:e2:a9:86:00:d1:0b:e8:a5: 19:ea:59:fa:07:3d:1c:5e:2b:b7:22:3a:c4:28:6c:e2:9e:03: f1:e4:64:5a:16:e8:16:eb:31:6b:ec:88:37:98:72:06:56:c8: e0:3e:46:37:3d:17:a1:c9:f2:3d:e1:75:8c:58:04:76:8b:66: ab:1b:af:00:67:a7:93:12:b7:cd:05:d0:80:3e:98:54:c5:66: 72:26:70:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2wS/GqjT/1L3Gsdjic6ZklHiIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY3NzU4MTY0NUE0OUQ4MkIzNkFBODMwNDg0ODY1RjRC OUQwRkM0MzAeFw0yNjA2MDIxMjIwMjRaFw0yNjA2MDMxNDM2MjRaMDMxMTAvBgNV BAMTKDRCQjA3NzhCNTI3NkQ3NkUxRDJBMjhEODgzOEM0QTRCNjcxNkY1OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KJM9NzNUn7PNSGvazG4nRkbm ilmAMI41uSnuPqN78kJDYbZmD5XAhVKC24STNNZv7qnZoRHabyGzTRIThFBjjTvk 9Aq8gnVF5xEbi9rmJM6ony2MzlnT7acJU/us547I3eJ2zlL3wduG/PXbvnBfq1os gY/UMbgOqbyXBTeeI1W1J5utP+e3KgsToXF05yQquqgBQQIwaq9++SHIj80D7qF1 7QqDUC3kFjp12JEnxuLSTu0nvK60v1p+TSTSZrC8YAKHXjZgxn9LzCTicnxsYT3Q bU2GEs6om+QKQaBmwLrrISOzv9HeaAl/mpjJ2Ih1Jh/Pa6/N0TK9aKj58TwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS7B3i1J2124dKijYg4xKS2cW9Z4wHwYDVR0j BBgwFoAUJndYFkWknYKzaqgwSEhl9LnQ/EMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGFmMzE1OTktOGIwOC00ZmZkLWEwNTYtNzk1ZThhYTBhNTg2LzAvMjY3NzU4MTY0 NUE0OUQ4MkIzNkFBODMwNDg0ODY1RjRCOUQwRkM0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNjc3NTgxNjQ1QTQ5RDgyQjM2QUE4MzA0ODQ4NjVGNEI5RDBG QzQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvMjY3NzU4MTY0NUE0OUQ4MkIzNkFBODMwNDg0ODY1 RjRCOUQwRkM0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5S7ZwefkfSnj/agEfchGy2a2Oxanr0Rbuc fBExbz/yYOT5FJ+J/yNOXJFbvhhlD28BNDDU/4jd/i8Ue4e7napPKKQ1+mthnrFE 64gdaJTVefk0x39eYXU+YG0OXPgfda8JDhu0lX7YoqD0BODmDV7rgO577qC9eQlH IHQCUwfq8XgZ1u5zK8i2kCKTCQZp5InEd4yTxpLjaf4yPT+DPhVmm1hk/o+/ssVh 2DviqYYA0QvopRnqWfoHPRxeK7ciOsQobOKeA/HkZFoW6BbrMWvsiDeYcgZWyOA+ Rjc9F6HJ8j3hdYxYBHaLZqsbrwBnp5MSt80F0IA+mFTFZnImcCI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:42 2026 by rpki-client