$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft File: 994E7625F275D75C44DFB4A7ADF4842506F11789.mft (raw, json) Hash identifier: 1ph3nhRxa9QYZugtuYhhYVXqnxWhe5tRfUOdRASu4zQ= Subject key identifier: CD:86:93:24:FE:25:5A:10:9D:05:D6:FA:C5:C7:F8:56:19:61:44:68 Authority key identifier: 99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89 Certificate issuer: /CN=994E7625F275D75C44DFB4A7ADF4842506F11789 Certificate serial: 580A256A266002FF4B9A52E1378CF5C20E1A2E27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:07:36 +0000 Manifest this update: Tue 02 Jun 2026 10:02:36 +0000 Manifest next update: Wed 03 Jun 2026 11:06:36 +0000 Files and hashes: 1: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (hash: r8HkCpINzf8MUL+ZwgRHMLjx/E/uKIxBx07xyWJ8oXY=) 2: 994E7625F275D75C44DFB4A7ADF4842506F11789.crl (hash: NEljy7HaFUSOg457PGncANGHmtNSEtZ5agE2gvqOzUM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.crl rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0a:25:6a:26:60:02:ff:4b:9a:52:e1:37:8c:f5:c2:0e:1a:2e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994E7625F275D75C44DFB4A7ADF4842506F11789 Validity Not Before: Jun 2 10:02:36 2026 GMT Not After : Jun 3 11:06:36 2026 GMT Subject: CN=CD869324FE255A109D05D6FAC5C7F85619614468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:70:ab:2b:b0:93:31:2c:60:bc:06:c5:bd: 2a:5a:d2:e8:55:e9:0e:27:4d:42:5a:21:f3:0a:a8: 0a:f4:c0:ba:f3:9f:b5:b7:5a:60:75:68:62:4c:81: 27:95:06:07:ff:92:c1:a4:27:8b:c6:7d:6c:5e:c6: b4:2a:d1:0c:30:12:ed:2b:29:78:92:ab:23:80:41: da:01:b1:8b:e2:f5:c1:5b:c3:7d:b9:5b:ed:0e:94: da:42:b8:58:ff:61:8f:34:fd:39:06:f1:4c:09:6c: cd:9b:58:d4:1b:b0:de:49:74:85:8f:03:f2:f3:23: 36:5b:77:f5:bb:56:3c:9b:a5:7b:45:0e:b6:1b:e5: 33:32:88:4c:fc:61:57:1f:4c:f2:5f:1f:f8:a8:d4: 14:f3:b2:df:cf:d7:85:7c:0f:9f:ef:b4:10:ec:bf: 56:7b:58:96:ca:e0:9c:72:b4:80:ff:88:d1:e2:54: 2e:3f:64:d4:8d:95:5d:5f:cc:38:9b:86:5f:20:92: c8:26:03:96:14:3c:bc:1a:d2:0d:b5:6b:12:ef:32: 51:89:ce:d4:e3:eb:52:92:3d:7f:63:d7:3e:4a:8c: 4b:8c:1d:c9:e6:50:87:ec:40:b5:6f:0a:60:1b:06: 8a:77:92:6e:be:7a:ed:4f:c0:09:06:d9:9c:22:77: 0c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:86:93:24:FE:25:5A:10:9D:05:D6:FA:C5:C7:F8:56:19:61:44:68 X509v3 Authority Key Identifier: keyid:99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:aa:bd:cb:c0:03:eb:6a:c7:c9:64:b0:c3:f6:da:6e:8d:1d: 6e:90:66:1e:60:c9:89:7a:ca:08:30:24:4b:6b:75:69:14:b8: d7:79:89:17:9b:8e:d5:a5:c8:cc:32:d9:34:e1:54:02:8a:30: fd:c9:b2:62:c0:db:e6:01:73:af:bc:8b:df:11:f6:65:6f:95: 6f:b1:96:8f:ba:5d:4e:91:cb:f6:c4:8b:08:80:8f:7c:52:b8: d1:5c:e1:0c:d1:72:c6:96:31:d9:91:b0:7e:22:d3:08:81:2e: 78:65:4d:0d:9c:58:57:1a:e6:ba:eb:03:95:6a:77:fd:9e:8e: 28:92:73:f3:7e:42:cc:b2:26:f8:eb:3b:eb:62:91:cb:1d:48: 85:12:bf:99:8f:80:78:d0:86:81:12:be:90:82:c5:ce:06:71: 93:21:28:d4:92:5b:0c:43:8c:5f:26:fa:17:2c:91:bd:1c:5d: b6:38:ae:33:5d:d2:cf:4e:62:bf:3c:ad:b0:a4:9e:e0:b8:e1: 81:b9:fd:fb:03:c8:f0:a7:f6:63:62:09:90:d1:5f:ac:8e:40: 45:10:c1:35:91:d4:2c:1c:5a:20:05:34:b3:4a:88:e0:28:66: 5d:35:d5:94:24:7f:db:fe:ba:3e:a5:9a:d8:79:72:1f:c8:36: 66:f3:d0:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWAolaiZgAv9LmlLhN4z1wg4aLicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0RTc2MjVGMjc1RDc1QzQ0REZCNEE3QURGNDg0MjUw NkYxMTc4OTAeFw0yNjA2MDIxMDAyMzZaFw0yNjA2MDMxMTA2MzZaMDMxMTAvBgNV BAMTKENEODY5MzI0RkUyNTVBMTA5RDA1RDZGQUM1QzdGODU2MTk2MTQ0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXPHCrK7CTMSxgvAbFvSpa0uhV 6Q4nTUJaIfMKqAr0wLrzn7W3WmB1aGJMgSeVBgf/ksGkJ4vGfWxexrQq0QwwEu0r KXiSqyOAQdoBsYvi9cFbw325W+0OlNpCuFj/YY80/TkG8UwJbM2bWNQbsN5JdIWP A/LzIzZbd/W7VjybpXtFDrYb5TMyiEz8YVcfTPJfH/io1BTzst/P14V8D5/vtBDs v1Z7WJbK4JxytID/iNHiVC4/ZNSNlV1fzDibhl8gksgmA5YUPLwa0g21axLvMlGJ ztTj61KSPX9j1z5KjEuMHcnmUIfsQLVvCmAbBop3km6+eu1PwAkG2ZwidwyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzYaTJP4lWhCdBdb6xcf4VhlhRGgwHwYDVR0j BBgwFoAUmU52JfJ111xE37SnrfSEJQbxF4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVjNjc3ZmQtZDU2OS00Y2M1LWE1NjMtOWIwZjI0OGIxYWYxLzEvOTk0RTc2MjVG Mjc1RDc1QzQ0REZCNEE3QURGNDg0MjUwNkYxMTc4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTRFNzYyNUYyNzVENzVDNDRERkI0QTdBREY0ODQyNTA2RjEx Nzg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvOTk0RTc2MjVGMjc1RDc1QzQ0REZCNEE3QURGNDg0 MjUwNkYxMTc4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASqvcvAA+tqx8lksMP22m6NHW6QZh5gyYl6 yggwJEtrdWkUuNd5iRebjtWlyMwy2TThVAKKMP3JsmLA2+YBc6+8i98R9mVvlW+x lo+6XU6Ry/bEiwiAj3xSuNFc4QzRcsaWMdmRsH4i0wiBLnhlTQ2cWFca5rrrA5Vq d/2ejiiSc/N+QsyyJvjrO+tikcsdSIUSv5mPgHjQhoESvpCCxc4GcZMhKNSSWwxD jF8m+hcskb0cXbY4rjNd0s9OYr88rbCknuC44YG5/fsDyPCn9mNiCZDRX6yOQEUQ wTWR1CwcWiAFNLNKiOAoZl011ZQkf9v+uj6lmth5ch/INmbz0Cc= -----END CERTIFICATE-----Generated at Wed Jun 3 03:50:07 2026 by rpki-client