$ rpki-client -vvf rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft File: 01D21CF844B21F1A9486A445F946566129AD4A58.mft (raw, json) Hash identifier: ZR+cAd1RrFTJprHwRvFOZJQ4Kqr6DIuOxi8GBq76WNI= Subject key identifier: 15:C0:DC:6E:8C:4F:18:8B:7D:55:79:67:CF:4F:7B:AC:C5:66:46:10 Authority key identifier: 01:D2:1C:F8:44:B2:1F:1A:94:86:A4:45:F9:46:56:61:29:AD:4A:58 Certificate issuer: /CN=01D21CF844B21F1A9486A445F946566129AD4A58 Certificate serial: 72FD6B16613C3962B1FB1666F3C2ADA94BEF1034 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:26:28 +0000 Manifest this update: Tue 02 Jun 2026 13:21:28 +0000 Manifest next update: Wed 03 Jun 2026 16:12:28 +0000 Files and hashes: 1: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: ufsOCUOJb9bQMTjSTFriIXnfAAEVhWffzH9OME9bvBM=) 2: 01D21CF844B21F1A9486A445F946566129AD4A58.crl (hash: JeL/v2vduAUA+K5LXeETytKaLUNxKbyDBdC2cpdt1/4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.crl rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 16:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fd:6b:16:61:3c:39:62:b1:fb:16:66:f3:c2:ad:a9:4b:ef:10:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01D21CF844B21F1A9486A445F946566129AD4A58 Validity Not Before: Jun 2 13:21:28 2026 GMT Not After : Jun 3 16:12:28 2026 GMT Subject: CN=15C0DC6E8C4F188B7D557967CF4F7BACC5664610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:8f:86:e6:89:cd:3f:ac:43:2b:d3:fe:f4: 1c:fc:96:31:78:93:03:1d:a2:42:83:8e:9d:b7:79: a7:2a:75:f0:f3:1f:b2:58:30:04:04:07:e0:fb:20: a1:59:3a:3b:99:d3:8b:7b:2c:e3:d1:1e:02:2f:21: 57:fe:2f:69:9f:dd:dd:82:b5:09:86:a2:c3:02:bb: 88:42:93:56:98:11:fc:7f:aa:c4:8b:60:ed:64:94: cb:44:53:e5:3e:26:27:61:c1:5e:6a:2a:ad:3c:ed: 96:2d:ef:c1:5f:f8:ae:3e:97:81:96:cc:da:02:43: b7:a4:99:1d:a3:92:15:f4:60:c0:46:f8:51:61:b2: b3:c6:f0:19:f3:5b:24:b0:05:ef:b0:2a:f8:72:a9: bb:dc:78:ac:04:ee:06:83:8c:ce:b1:ef:88:69:94: a2:0c:12:64:8e:7d:05:e7:fd:5b:66:4e:85:24:20: 7c:bb:aa:a5:ea:ed:8c:13:a3:53:f2:af:ce:9c:e0: 76:14:41:4d:c8:2c:f6:97:e8:3e:00:67:32:6e:5d: 43:51:2b:3b:e2:97:70:41:f1:21:32:18:97:fe:bf: 77:c6:c5:73:4c:72:91:ec:92:00:46:a2:cd:12:25: 46:c6:56:78:53:74:b7:45:69:0a:cc:80:97:39:91: 0b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C0:DC:6E:8C:4F:18:8B:7D:55:79:67:CF:4F:7B:AC:C5:66:46:10 X509v3 Authority Key Identifier: keyid:01:D2:1C:F8:44:B2:1F:1A:94:86:A4:45:F9:46:56:61:29:AD:4A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01D21CF844B21F1A9486A445F946566129AD4A58.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/01D21CF844B21F1A9486A445F946566129AD4A58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:43:79:fd:fa:63:95:14:7d:0d:c0:ab:bd:17:52:1f:e2:fe: b6:02:3a:58:d5:a4:5c:a8:d4:28:a5:78:a5:75:72:ab:66:b3: e0:fc:11:20:94:32:78:a4:8d:3f:9c:31:39:24:65:4e:2a:56: 0f:f8:e3:34:d3:04:47:a9:5e:65:83:70:24:12:30:cc:04:f0: 02:ba:97:66:90:2e:58:4e:3e:a2:42:39:3c:d2:bf:1e:21:e6: 9c:74:58:79:ed:0f:e7:6f:98:49:cd:ed:c7:b4:09:75:5f:37: da:23:f5:e1:ef:ca:a5:83:2b:b8:20:e6:db:68:89:91:9e:0f: 65:5d:0c:fa:21:f7:8a:1b:a0:ee:f9:9a:53:82:ac:26:fb:0d: d2:db:db:78:ef:e1:16:65:c9:82:e7:b0:89:1f:25:15:91:ea: b1:85:6e:31:04:13:7a:ed:50:b1:79:2e:16:e7:52:6e:65:ed: a3:7c:a4:09:49:2e:4d:94:3e:48:e3:c3:c6:b0:ab:94:c6:7f: 24:b8:70:5e:16:65:fc:94:42:b8:52:b0:ab:01:fa:18:b9:3e: 63:84:e0:39:dd:89:27:35:a2:23:50:20:df:c9:6f:4f:52:e9: 38:d5:d5:18:f5:a7:7c:ac:71:43:7a:26:60:eb:8e:08:1f:14: 78:b0:20:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcv1rFmE8OWKx+xZm88KtqUvvEDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFEMjFDRjg0NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2NjEy OUFENEE1ODAeFw0yNjA2MDIxMzIxMjhaFw0yNjA2MDMxNjEyMjhaMDMxMTAvBgNV BAMTKDE1QzBEQzZFOEM0RjE4OEI3RDU1Nzk2N0NGNEY3QkFDQzU2NjQ2MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmpI+G5onNP6xDK9P+9Bz8ljF4 kwMdokKDjp23eacqdfDzH7JYMAQEB+D7IKFZOjuZ04t7LOPRHgIvIVf+L2mf3d2C tQmGosMCu4hCk1aYEfx/qsSLYO1klMtEU+U+JidhwV5qKq087ZYt78Ff+K4+l4GW zNoCQ7ekmR2jkhX0YMBG+FFhsrPG8BnzWySwBe+wKvhyqbvceKwE7gaDjM6x74hp lKIMEmSOfQXn/VtmToUkIHy7qqXq7YwTo1Pyr86c4HYUQU3ILPaX6D4AZzJuXUNR Kzvil3BB8SEyGJf+v3fGxXNMcpHskgBGos0SJUbGVnhTdLdFaQrMgJc5kQunAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFcDcboxPGIt9VXlnz097rMVmRhAwHwYDVR0j BBgwFoAUAdIc+ESyHxqUhqRF+UZWYSmtSlgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTM0ZDgyNzctMjkxMC00MDc1LWI5MzctNjZmOTQzNTE4ZTI5LzAvMDFEMjFDRjg0 NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2NjEyOUFENEE1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUQyMUNGODQ0QjIxRjFBOTQ4NkE0NDVGOTQ2NTY2MTI5QUQ0 QTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTM0ZDgyNzctMjkxMC00MDc1LWI5 MzctNjZmOTQzNTE4ZTI5LzAvMDFEMjFDRjg0NEIyMUYxQTk0ODZBNDQ1Rjk0NjU2 NjEyOUFENEE1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRDef36Y5UUfQ3Aq70XUh/i/rYCOljVpFyo 1CileKV1cqtms+D8ESCUMnikjT+cMTkkZU4qVg/44zTTBEepXmWDcCQSMMwE8AK6 l2aQLlhOPqJCOTzSvx4h5px0WHntD+dvmEnN7ce0CXVfN9oj9eHvyqWDK7gg5tto iZGeD2VdDPoh94oboO75mlOCrCb7DdLb23jv4RZlyYLnsIkfJRWR6rGFbjEEE3rt ULF5LhbnUm5l7aN8pAlJLk2UPkjjw8awq5TGfyS4cF4WZfyUQrhSsKsB+hi5PmOE 4DndiSc1oiNQIN/Jb09S6TjV1Rj1p3yscUN6JmDrjggfFHiwILI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:10:01 2026 by rpki-client