$ rpki-client -vvf rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft File: D5B392E916885394AA1C2B31FE082DC317BCE686.mft (raw, json) Hash identifier: vrQ+9PBZSTcox/IKVwgIT/DPrrRYjcsT8O4E1PWI5Mo= Subject key identifier: 51:D1:D4:2E:01:11:1B:A0:B7:3E:8B:33:C0:17:B6:D5:5F:D5:DF:51 Authority key identifier: D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86 Certificate issuer: /CN=D5B392E916885394AA1C2B31FE082DC317BCE686 Certificate serial: 07EF21D6EDAEFE15227F29241359928D4DFF1321 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 14:17:33 +0000 Manifest this update: Tue 02 Jun 2026 14:12:33 +0000 Manifest next update: Wed 03 Jun 2026 16:30:33 +0000 Files and hashes: 1: D5B392E916885394AA1C2B31FE082DC317BCE686.crl (hash: aiZyCCBh3iYGk1lKMG96d0g+3VNASgZguHcFF1Lrzfc=) 2: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: n/anw1j/p698bFcxqqm49V4G12x2QBboMMl4JYNKkrU=) 3: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: AcnbfkvX1w/c7v0ssG/zc+baC3z+ryz2Lyxv+skns7o=) 4: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: 72ltkdAz77XwydUIwwc3kpnQIFXbCRX8QiK7JdJ6abI=) 5: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: Mij6gjlboJz168uvi1+veD3ghjYsq0hmKTYOHdpJFfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ef:21:d6:ed:ae:fe:15:22:7f:29:24:13:59:92:8d:4d:ff:13:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5B392E916885394AA1C2B31FE082DC317BCE686 Validity Not Before: Jun 2 14:12:33 2026 GMT Not After : Jun 3 16:30:33 2026 GMT Subject: CN=51D1D42E01111BA0B73E8B33C017B6D55FD5DF51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b7:6f:1d:08:77:74:72:f3:07:b5:03:f0:5d: 11:ff:2c:22:e1:e1:93:8c:93:af:63:48:04:54:52: 37:82:2c:b0:b8:96:c4:33:9f:07:fa:c0:92:a7:64: 24:55:d9:ac:5b:bd:0a:36:0c:c2:20:a9:30:de:55: c2:08:88:64:58:07:12:df:1e:b3:91:2e:7b:e2:f7: b7:f8:f7:69:1d:31:65:95:55:e7:f7:2d:63:86:62: a7:03:9c:99:24:7e:62:33:4a:3c:6e:14:c8:0b:1d: 68:71:e7:bb:91:b1:7b:61:e1:da:a1:3f:0e:6e:79: c7:57:dd:2b:1b:cc:1c:3a:9e:6f:83:80:4b:fb:92: ce:6d:bf:9c:42:d2:41:b2:82:8c:0c:fd:85:dc:c3: a8:ed:8d:07:34:3d:86:3f:5e:63:1e:c2:37:7c:81: 01:ec:3d:d2:83:9a:ea:ec:0c:dc:65:1d:0f:49:ec: fc:54:dd:3a:ca:d9:8a:25:ac:72:ad:c1:61:9b:7a: ae:c5:bf:9a:53:96:b2:b8:24:2f:61:5f:a6:16:53: 2a:4f:af:14:1d:d5:2c:d2:8c:7a:6f:ec:6a:ca:a8: 5a:c1:45:34:8a:2e:ed:06:ec:12:1c:cb:cf:48:11: 06:d2:67:0d:fe:04:b3:45:32:dd:9e:0c:a2:98:b0: 20:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D1:D4:2E:01:11:1B:A0:B7:3E:8B:33:C0:17:B6:D5:5F:D5:DF:51 X509v3 Authority Key Identifier: keyid:D5:B3:92:E9:16:88:53:94:AA:1C:2B:31:FE:08:2D:C3:17:BC:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5B392E916885394AA1C2B31FE082DC317BCE686.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/D5B392E916885394AA1C2B31FE082DC317BCE686.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:98:60:0e:fc:25:82:bb:6f:15:25:a9:e2:4b:67:7b:a3:fa: bd:75:28:73:9d:42:d0:b3:33:04:3c:10:6d:e2:36:b0:68:6a: 10:33:45:51:f0:31:7c:cd:b4:34:72:f3:ff:1f:78:f1:c3:49: ed:61:74:1a:3b:7e:90:86:b7:e6:b4:4b:f1:9b:43:a0:01:a5: 74:d4:bc:05:74:c9:73:02:37:5a:34:46:eb:00:12:ad:99:db: c3:f7:22:4f:3b:94:ee:9b:77:86:68:c6:6b:98:30:bf:2a:0e: fb:7e:b9:a4:7c:b6:b3:98:6a:d5:03:d2:b3:f1:3d:37:69:10: 7e:b4:ee:1c:bf:05:2d:42:22:90:b8:18:47:6f:85:59:e4:fd: 70:3f:ca:23:ca:5e:1a:73:e4:f8:4f:b2:19:c3:fa:c7:7a:4e: ce:aa:b9:96:f8:ac:e6:b4:48:6d:c4:aa:9f:51:c2:6a:27:b5: f1:09:82:73:76:c1:df:94:b0:dd:1b:b7:e8:9d:7d:bd:05:9a: 22:03:86:5c:f1:e5:f1:ff:ab:bd:56:e7:b2:a2:a7:25:6f:ed: 23:5f:66:94:1d:09:ee:da:04:52:95:d2:b1:e8:8f:4f:3c:55: 90:33:68:0e:6a:39:5f:af:3f:75:ca:cb:b5:61:3a:51:f7:fa: cc:b8:dd:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+8h1u2u/hUifykkE1mSjU3/EyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVCMzkyRTkxNjg4NTM5NEFBMUMyQjMxRkUwODJEQzMx N0JDRTY4NjAeFw0yNjA2MDIxNDEyMzNaFw0yNjA2MDMxNjMwMzNaMDMxMTAvBgNV BAMTKDUxRDFENDJFMDExMTFCQTBCNzNFOEIzM0MwMTdCNkQ1NUZENURGNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUt28dCHd0cvMHtQPwXRH/LCLh 4ZOMk69jSARUUjeCLLC4lsQznwf6wJKnZCRV2axbvQo2DMIgqTDeVcIIiGRYBxLf HrORLnvi97f492kdMWWVVef3LWOGYqcDnJkkfmIzSjxuFMgLHWhx57uRsXth4dqh Pw5uecdX3SsbzBw6nm+DgEv7ks5tv5xC0kGygowM/YXcw6jtjQc0PYY/XmMewjd8 gQHsPdKDmursDNxlHQ9J7PxU3TrK2YolrHKtwWGbeq7Fv5pTlrK4JC9hX6YWUypP rxQd1SzSjHpv7GrKqFrBRTSKLu0G7BIcy89IEQbSZw3+BLNFMt2eDKKYsCBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUdHULgERG6C3PoszwBe21V/V31EwHwYDVR0j BBgwFoAU1bOS6RaIU5SqHCsx/ggtwxe85oYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ2ZjMzZjItZjA2ZS00ZWI2LWFlNjEtNTUyOWJjYTFjZGNkLzAvRDVCMzkyRTkx Njg4NTM5NEFBMUMyQjMxRkUwODJEQzMxN0JDRTY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENUIzOTJFOTE2ODg1Mzk0QUExQzJCMzFGRTA4MkRDMzE3QkNF Njg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ2ZjMzZjItZjA2ZS00ZWI2LWFl NjEtNTUyOWJjYTFjZGNkLzAvRDVCMzkyRTkxNjg4NTM5NEFBMUMyQjMxRkUwODJE QzMxN0JDRTY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaYYA78JYK7bxUlqeJLZ3uj+r11KHOdQtCz MwQ8EG3iNrBoahAzRVHwMXzNtDRy8/8fePHDSe1hdBo7fpCGt+a0S/GbQ6ABpXTU vAV0yXMCN1o0RusAEq2Z28P3Ik87lO6bd4ZoxmuYML8qDvt+uaR8trOYatUD0rPx PTdpEH607hy/BS1CIpC4GEdvhVnk/XA/yiPKXhpz5PhPshnD+sd6Ts6quZb4rOa0 SG3Eqp9RwmontfEJgnN2wd+UsN0bt+idfb0FmiIDhlzx5fH/q71W57KipyVv7SNf ZpQdCe7aBFKV0rHoj088VZAzaA5qOV+vP3XKy7VhOlH3+sy43d8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:05:04 2026 by rpki-client