$ rpki-client -vvf rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft File: D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft (raw, json) Hash identifier: IhItl4cVIDJsDhmzfctGoqcsiHe7oy+Ts+Gw5aLaqv0= Subject key identifier: C7:68:F2:06:18:32:0E:34:48:5B:C8:38:03:03:8B:FB:71:DB:BF:87 Authority key identifier: D5:B2:BC:B4:D7:CD:44:98:6E:0C:DE:AB:B1:9A:3E:8D:A8:ED:A3:DE Certificate issuer: /CN=D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE Certificate serial: 2672CC64EDC539A1E1E2F6817C902411E8BE7972 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:53:28 +0000 Manifest this update: Tue 02 Jun 2026 10:48:28 +0000 Manifest next update: Wed 03 Jun 2026 12:29:28 +0000 Files and hashes: 1: D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl (hash: 3Rhs07ibgyKP/UTHRtKAToDvuNP0etiU29ZpOeuErZE=) 2: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: Mbf898IR+Gt5QKErijFC4UdXVW5evXBibnE21kjCzDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:72:cc:64:ed:c5:39:a1:e1:e2:f6:81:7c:90:24:11:e8:be:79:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE Validity Not Before: Jun 2 10:48:28 2026 GMT Not After : Jun 3 12:29:28 2026 GMT Subject: CN=C768F20618320E34485BC83803038BFB71DBBF87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:99:ad:49:9e:17:3a:2f:e0:30:01:e3:af:39: c4:ff:2b:6a:bc:ec:8a:4f:54:c9:e4:4c:9b:e1:42: ae:cb:4d:8b:36:cd:9c:94:65:98:30:63:60:39:fe: a4:98:d4:7c:b8:fb:47:7d:7d:02:81:b9:1e:e2:85: 93:c0:5e:3c:4b:f6:63:0a:5a:4d:ba:68:5a:28:41: 82:e3:19:c2:fe:87:71:fe:d0:0f:24:32:e8:b5:a5: 07:85:85:90:78:0a:14:4e:28:a2:3a:5d:d0:8a:05: a9:99:08:6f:3d:7b:6e:e2:b5:01:20:91:73:8b:92: 06:a3:a8:fd:dc:23:13:7b:fb:cd:36:f8:59:ce:8a: 5b:c3:43:fb:28:d1:40:f5:d8:bc:56:ef:37:a6:f6: 95:ee:8e:db:12:fa:8a:de:6e:51:c5:bc:ea:d1:1f: ec:b0:67:d8:6b:f5:a9:16:aa:8e:80:09:cd:f9:35: 11:30:0d:4f:43:26:72:3c:a6:42:e5:39:7b:5c:56: f9:bd:d4:e1:9e:69:f6:b0:3c:f3:ad:06:f4:fc:38: da:0f:f3:c6:c0:48:c2:4d:fb:25:01:1a:d0:ec:ce: f5:74:37:df:5a:3f:91:68:b7:32:c4:79:d6:33:0a: 9f:61:1c:e4:ef:da:a9:de:52:de:9f:00:da:95:f1: f7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:68:F2:06:18:32:0E:34:48:5B:C8:38:03:03:8B:FB:71:DB:BF:87 X509v3 Authority Key Identifier: keyid:D5:B2:BC:B4:D7:CD:44:98:6E:0C:DE:AB:B1:9A:3E:8D:A8:ED:A3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/D5B2BCB4D7CD44986E0CDEABB19A3E8DA8EDA3DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:0c:00:09:aa:49:3d:05:86:12:aa:f9:04:88:0a:b9:12:cf: 48:75:22:58:3a:eb:c2:7f:28:49:c6:5e:32:45:1c:be:ff:1a: 46:7b:cf:4c:ee:f7:19:a8:01:d5:e1:94:fb:42:f3:82:dc:7e: 08:5b:2c:8b:4f:f2:82:07:95:73:89:a8:2a:e8:b8:9e:33:fc: a2:25:92:57:9f:d4:c1:a1:30:c5:1a:bc:97:32:5b:0a:79:de: 07:a3:6d:12:6f:cd:a8:88:6c:52:76:6c:6b:c7:23:e2:b4:a8: 8d:e0:0c:1d:d9:fc:c6:7e:7a:af:ca:f3:6e:3d:5e:c7:07:5f: 2a:32:3e:90:42:58:ae:52:76:fc:18:7a:96:e2:6f:06:2f:c0: bb:03:f2:53:34:32:87:ce:e3:7c:de:bb:03:37:e6:d6:a0:75: b9:3f:82:7d:41:a7:b3:9c:78:6f:dd:40:71:db:02:2a:a1:e4: 22:62:69:22:87:31:f2:d0:15:42:48:96:fe:91:bd:96:3e:fb: 12:6f:f3:ce:b3:6d:b2:ef:bc:5e:5e:f0:3f:e8:8f:52:e3:85: ff:bf:dc:cc:9f:eb:75:16:ff:05:5e:88:58:fe:95:67:ab:b5: 56:ce:ec:7c:46:46:33:83:ac:bd:bb:2c:72:b7:3a:51:20:6b: dd:02:64:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJnLMZO3FOaHh4vaBfJAkEei+eXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVCMkJDQjREN0NENDQ5ODZFMENERUFCQjE5QTNFOERB OEVEQTNERTAeFw0yNjA2MDIxMDQ4MjhaFw0yNjA2MDMxMjI5MjhaMDMxMTAvBgNV BAMTKEM3NjhGMjA2MTgzMjBFMzQ0ODVCQzgzODAzMDM4QkZCNzFEQkJGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsma1Jnhc6L+AwAeOvOcT/K2q8 7IpPVMnkTJvhQq7LTYs2zZyUZZgwY2A5/qSY1Hy4+0d9fQKBuR7ihZPAXjxL9mMK Wk26aFooQYLjGcL+h3H+0A8kMui1pQeFhZB4ChROKKI6XdCKBamZCG89e27itQEg kXOLkgajqP3cIxN7+802+FnOilvDQ/so0UD12LxW7zem9pXujtsS+oreblHFvOrR H+ywZ9hr9akWqo6ACc35NREwDU9DJnI8pkLlOXtcVvm91OGeafawPPOtBvT8ONoP 88bASMJN+yUBGtDszvV0N99aP5FotzLEedYzCp9hHOTv2qneUt6fANqV8fcVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx2jyBhgyDjRIW8g4AwOL+3Hbv4cwHwYDVR0j BBgwFoAU1bK8tNfNRJhuDN6rsZo+jajto94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQxYTAyZTYtMjE3MS00N2M5LTg2YzktZDVkODBmNDU4ODM2LzAvRDVCMkJDQjRE N0NENDQ5ODZFMENERUFCQjE5QTNFOERBOEVEQTNERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUIyQkNCNEQ3Q0Q0NDk4NkUwQ0RFQUJCMTlBM0U4REE4RURB M0RFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvRDVCMkJDQjREN0NENDQ5ODZFMENERUFCQjE5QTNF OERBOEVEQTNERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAMAAmqST0FhhKq+QSICrkSz0h1Ilg668J/ KEnGXjJFHL7/GkZ7z0zu9xmoAdXhlPtC84LcfghbLItP8oIHlXOJqCrouJ4z/KIl klef1MGhMMUavJcyWwp53gejbRJvzaiIbFJ2bGvHI+K0qI3gDB3Z/MZ+eq/K8249 XscHXyoyPpBCWK5SdvwYepbibwYvwLsD8lM0MofO43zeuwM35tagdbk/gn1Bp7Oc eG/dQHHbAiqh5CJiaSKHMfLQFUJIlv6RvZY++xJv886zbbLvvF5e8D/oj1Ljhf+/ 3Myf63UW/wVeiFj+lWertVbO7HxGRjODrL27LHK3OlEga90CZE4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:37:51 2026 by rpki-client