$ rpki-client -vvf rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft File: 8828D395B775E6267ED1C496B6DA870C9DA36235.mft (raw, json) Hash identifier: JsJNkAOJIA7AvzrNGEyk3yaT/eYRSTwWqCaBCOdBx6E= Subject key identifier: 1E:08:35:D5:3B:7B:83:BD:FB:3D:C5:F4:23:FD:20:6C:4E:62:7F:42 Authority key identifier: 88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 Certificate issuer: /CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Certificate serial: 4BB3900F3A34D30E16B69E5A0B9CB31F91A25B19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:10:40 +0000 Manifest this update: Tue 02 Jun 2026 17:05:40 +0000 Manifest next update: Wed 03 Jun 2026 18:36:40 +0000 Files and hashes: 1: 8828D395B775E6267ED1C496B6DA870C9DA36235.crl (hash: RUITIonrmq3mkqtc8tyTs+8DuSMgdFSyn1Fvr8eeQdI=) 2: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: KKSmfUNkqalCLO37YcNIo/DR91Odj11Ccmn9dQDHPBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b3:90:0f:3a:34:d3:0e:16:b6:9e:5a:0b:9c:b3:1f:91:a2:5b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Validity Not Before: Jun 2 17:05:40 2026 GMT Not After : Jun 3 18:36:40 2026 GMT Subject: CN=1E0835D53B7B83BDFB3DC5F423FD206C4E627F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:54:3e:ef:27:75:81:3e:65:26:73:33:cd: f3:d1:4c:5f:26:fa:7c:22:df:30:bb:07:13:f9:c7: ee:92:ff:6e:7b:dc:cf:9f:70:7f:21:c4:7e:02:4e: c8:99:f8:ca:8c:e5:be:c1:91:e1:12:06:41:aa:5e: 7c:f0:66:20:90:03:68:32:17:87:73:48:e8:3a:da: b1:21:6f:93:58:47:00:1f:42:74:a7:2e:42:16:75: 9a:49:77:3d:e3:8b:87:5d:7a:3f:49:de:59:70:10: e2:32:39:d2:0a:c6:5f:de:33:db:84:3f:50:e3:e1: cb:31:ad:13:f8:39:0f:ce:e0:bc:24:10:42:95:2e: 33:3d:4f:9f:aa:0b:57:b9:58:8c:13:7f:b9:ff:0a: 96:e1:d9:8c:ae:7d:bf:c1:d6:00:ce:03:8d:8a:4e: be:cb:43:45:83:4c:d0:ae:d7:1a:fa:b1:f9:76:06: 63:4d:5b:46:d0:88:63:92:cb:be:85:38:89:d7:69: b8:0c:e2:98:3b:64:26:18:d5:e1:05:61:86:bd:15: 90:aa:74:84:28:bb:03:44:02:78:95:26:a9:df:cf: ac:4f:e8:04:69:d4:31:98:56:1b:ed:db:c5:10:35: 29:30:f6:e7:3b:f1:ef:69:be:8d:10:25:ab:88:66: e0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:08:35:D5:3B:7B:83:BD:FB:3D:C5:F4:23:FD:20:6C:4E:62:7F:42 X509v3 Authority Key Identifier: keyid:88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:15:68:e4:8c:a3:48:05:ed:78:10:02:02:10:2e:3f:04:df: 7b:e2:a2:42:a6:e7:15:06:f8:75:f1:13:06:cd:43:46:e1:2c: 81:05:5a:35:ce:c9:8a:c5:0c:91:f9:87:9d:68:9c:c7:52:3b: d7:91:9e:d5:c6:3d:62:dd:32:93:b9:e1:47:bf:06:a8:5f:ce: c0:ca:92:9f:a6:cc:cf:45:cd:d6:e9:29:11:98:38:41:f6:48: cf:d7:4d:d3:bc:9e:5f:9a:b9:dc:63:2b:66:d5:fe:62:88:2f: 4c:7d:63:4c:06:f9:dc:1f:fe:9d:c8:10:ce:db:7a:18:bf:81: c7:16:8b:5f:d9:0a:7e:77:3e:90:79:54:b8:3e:71:63:a5:c7: ec:7a:00:a1:15:ca:01:d1:cc:a5:13:ac:f5:d0:c5:60:4c:b3: d7:91:10:e1:f1:38:26:a0:e4:ef:a1:15:44:28:3e:b9:72:9b: b1:93:21:6d:fd:7f:15:ee:0a:29:4c:3c:66:93:ba:d1:bd:9d: aa:34:df:8d:14:2b:a3:3a:44:d8:2e:01:78:97:6a:88:81:01: 78:ce:d2:21:76:3d:aa:c8:00:07:e5:24:14:ff:36:ea:20:ea: ee:bc:6f:b0:bb:82:bd:59:8a:0f:57:5f:d2:51:ea:01:32:f6: 8a:f7:5a:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7OQDzo00w4Wtp5aC5yzH5GiWxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyOEQzOTVCNzc1RTYyNjdFRDFDNDk2QjZEQTg3MEM5 REEzNjIzNTAeFw0yNjA2MDIxNzA1NDBaFw0yNjA2MDMxODM2NDBaMDMxMTAvBgNV BAMTKDFFMDgzNUQ1M0I3QjgzQkRGQjNEQzVGNDIzRkQyMDZDNEU2MjdGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24FQ+7yd1gT5lJnMzzfPRTF8m +nwi3zC7BxP5x+6S/2573M+fcH8hxH4CTsiZ+MqM5b7BkeESBkGqXnzwZiCQA2gy F4dzSOg62rEhb5NYRwAfQnSnLkIWdZpJdz3ji4ddej9J3llwEOIyOdIKxl/eM9uE P1Dj4csxrRP4OQ/O4LwkEEKVLjM9T5+qC1e5WIwTf7n/Cpbh2Yyufb/B1gDOA42K Tr7LQ0WDTNCu1xr6sfl2BmNNW0bQiGOSy76FOInXabgM4pg7ZCYY1eEFYYa9FZCq dIQouwNEAniVJqnfz6xP6ARp1DGYVhvt28UQNSkw9uc78e9pvo0QJauIZuC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHgg11Tt7g737PcX0I/0gbE5if0IwHwYDVR0j BBgwFoAUiCjTlbd15iZ+0cSWttqHDJ2jYjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTljMjc2MjEtZTI5Ny00MTAwLTk3MWEtMWM2OTY3YzUyYjFiLzAvODgyOEQzOTVC Nzc1RTYyNjdFRDFDNDk2QjZEQTg3MEM5REEzNjIzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODI4RDM5NUI3NzVFNjI2N0VEMUM0OTZCNkRBODcwQzlEQTM2 MjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvODgyOEQzOTVCNzc1RTYyNjdFRDFDNDk2QjZEQTg3 MEM5REEzNjIzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYVaOSMo0gF7XgQAgIQLj8E33viokKm5xUG +HXxEwbNQ0bhLIEFWjXOyYrFDJH5h51onMdSO9eRntXGPWLdMpO54Ue/BqhfzsDK kp+mzM9FzdbpKRGYOEH2SM/XTdO8nl+audxjK2bV/mKIL0x9Y0wG+dwf/p3IEM7b ehi/gccWi1/ZCn53PpB5VLg+cWOlx+x6AKEVygHRzKUTrPXQxWBMs9eREOHxOCag 5O+hFUQoPrlym7GTIW39fxXuCilMPGaTutG9nao0340UK6M6RNguAXiXaoiBAXjO 0iF2ParIAAflJBT/Nuog6u68b7C7gr1Zig9XX9JR6gEy9or3WrI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:37:31 2026 by rpki-client