$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft File: 1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft (raw, json) Hash identifier: MoO0/QxhQdCo2ERZ9kcNz09ZvU1j+pmiIArqwlFy9ns= Subject key identifier: 85:2F:4A:24:D3:A4:7E:71:81:91:23:1D:63:A6:C4:7A:21:43:51:03 Authority key identifier: 1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD Certificate issuer: /CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD Certificate serial: 3FE79C459320693EFD810A8A53CE74E3E7F8DE7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:00:30 +0000 Manifest this update: Tue 02 Jun 2026 20:55:30 +0000 Manifest next update: Thu 04 Jun 2026 00:55:30 +0000 Files and hashes: 1: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: Iyu6UGXh6K6YUKWK1Cw0yY2+2dIgfvoG18aCPpAU41Y=) 2: 1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl (hash: z38Iuwoo2MVzG6ScenwX9Fkmg3CNjpf+rp+B/U7ZKlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 00:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e7:9c:45:93:20:69:3e:fd:81:0a:8a:53:ce:74:e3:e7:f8:de:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD Validity Not Before: Jun 2 20:55:30 2026 GMT Not After : Jun 4 00:55:30 2026 GMT Subject: CN=852F4A24D3A47E718191231D63A6C47A21435103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:93:a8:02:4d:67:16:ff:a6:e5:a0:ed:87: a1:35:cc:a8:b1:91:b7:cd:f2:23:96:ec:6c:e6:d0: 01:3b:16:8e:e0:90:62:cc:b2:23:73:7c:2b:93:cb: 55:a2:35:fd:b0:51:3a:cc:a0:84:50:9c:45:13:ce: 18:b2:c5:1a:b1:19:74:b3:c2:22:9b:80:bf:79:e1: 25:21:7c:70:47:15:69:47:6b:fc:3f:ce:59:53:30: 58:ad:5f:bf:f0:14:99:da:16:eb:89:6d:df:20:5b: a9:94:4d:b0:bc:f5:1e:5d:83:c0:98:de:1a:70:0e: ca:4d:5a:1a:7a:ae:bf:d2:89:65:9a:d3:41:dc:91: 92:7a:b2:13:6a:70:d5:db:3a:ff:7b:58:e5:c9:5d: a4:bd:1e:49:c0:d8:24:55:0a:c5:4f:29:f7:64:55: 55:7f:b5:69:79:1c:73:a1:9a:62:3e:65:0e:ee:1e: 22:41:a0:82:a7:7e:be:a4:b7:7b:b6:cd:ac:eb:2e: a2:44:df:08:31:7f:df:14:5f:77:79:06:6e:c3:cd: a8:d4:c2:1c:39:66:ee:b8:6f:87:42:60:1e:9a:82: 1a:6e:8a:0c:8c:ff:30:1c:1f:92:98:6c:ca:1f:33: a8:7c:9d:a6:7c:eb:b7:8c:28:98:f1:a5:9a:40:44: 0f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2F:4A:24:D3:A4:7E:71:81:91:23:1D:63:A6:C4:7A:21:43:51:03 X509v3 Authority Key Identifier: keyid:1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ea:84:71:5c:82:24:55:7f:25:31:b7:5c:19:3d:32:4a:e8: 20:26:39:a9:52:e7:c4:51:99:f5:c7:9e:b7:3b:f4:1e:0e:3b: 90:77:b8:59:c9:44:9c:77:91:d8:1f:a8:e6:67:40:a5:d1:3b: 69:32:7f:27:f6:f7:62:ca:e9:2a:8f:0f:8c:2f:8e:34:2c:aa: 26:bb:18:96:91:ca:58:d9:31:4d:ac:ca:1c:75:f5:f3:a7:11: 1a:e8:8c:7b:fc:3d:f4:6a:89:e2:9d:6c:31:1c:19:5f:4c:43: 34:de:ff:4c:0a:31:6c:d8:bb:70:06:ee:3c:14:aa:46:69:b0: 47:93:ab:36:7e:36:7c:2d:aa:15:b0:df:71:47:fb:e9:5e:e0: a9:8f:3e:57:a2:1f:bc:ad:8c:8a:d5:ac:54:67:12:ba:db:b2: 31:2e:61:55:71:2a:8a:56:98:f7:ec:df:0b:fd:84:ed:e2:af: 42:58:a7:57:18:4b:66:5f:8d:ee:d2:94:5b:76:eb:dc:a0:0c: f2:55:89:08:e2:ca:87:c4:10:4a:ac:77:f2:3a:8c:17:ba:b8: 0e:a2:b5:a8:d2:0c:b5:26:d6:de:fa:a8:ba:c8:17:d5:52:d8: 05:74:46:9d:a6:7d:b2:7a:43:c2:5e:44:c4:28:42:6f:a5:e9: 35:98:78:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+ecRZMgaT79gQqKU8504+f43nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyOEE2RTIxRjI4MTI5RDQ5NTJBMDA4RkZGOEVFOUZC M0Y3OThGRDAeFw0yNjA2MDIyMDU1MzBaFw0yNjA2MDQwMDU1MzBaMDMxMTAvBgNV BAMTKDg1MkY0QTI0RDNBNDdFNzE4MTkxMjMxRDYzQTZDNDdBMjE0MzUxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvZOoAk1nFv+m5aDth6E1zKix kbfN8iOW7Gzm0AE7Fo7gkGLMsiNzfCuTy1WiNf2wUTrMoIRQnEUTzhiyxRqxGXSz wiKbgL954SUhfHBHFWlHa/w/zllTMFitX7/wFJnaFuuJbd8gW6mUTbC89R5dg8CY 3hpwDspNWhp6rr/SiWWa00HckZJ6shNqcNXbOv97WOXJXaS9HknA2CRVCsVPKfdk VVV/tWl5HHOhmmI+ZQ7uHiJBoIKnfr6kt3u2zazrLqJE3wgxf98UX3d5Bm7DzajU whw5Zu64b4dCYB6aghpuigyM/zAcH5KYbMofM6h8naZ867eMKJjxpZpARA+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhS9KJNOkfnGBkSMdY6bEeiFDUQMwHwYDVR0j BBgwFoAUHSim4h8oEp1JUqAI//jun7P3mP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFkMzk0NTAtNDU4NC00ODgyLWI1YTctMmNiYzBlNTc3NDc0LzAvMUQyOEE2RTIx RjI4MTI5RDQ5NTJBMDA4RkZGOEVFOUZCM0Y3OThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDI4QTZFMjFGMjgxMjlENDk1MkEwMDhGRkY4RUU5RkIzRjc5 OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMUQyOEE2RTIxRjI4MTI5RDQ5NTJBMDA4RkZGOEVF OUZCM0Y3OThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfqhHFcgiRVfyUxt1wZPTJK6CAmOalS58RR mfXHnrc79B4OO5B3uFnJRJx3kdgfqOZnQKXRO2kyfyf292LK6SqPD4wvjjQsqia7 GJaRyljZMU2syhx19fOnERrojHv8PfRqieKdbDEcGV9MQzTe/0wKMWzYu3AG7jwU qkZpsEeTqzZ+NnwtqhWw33FH++le4KmPPleiH7ytjIrVrFRnErrbsjEuYVVxKopW mPfs3wv9hO3ir0JYp1cYS2Zfje7SlFt269ygDPJViQjiyofEEEqsd/I6jBe6uA6i tajSDLUm1t76qLrIF9VS2AV0Rp2mfbJ6Q8JeRMQoQm+l6TWYeLM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:20:59 2026 by rpki-client