$ rpki-client -vvf rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft File: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft (raw, json) Hash identifier: FxJFHq0cMV/HzhD5wgiLF19zWkIPVS+Ci2ku/ybnoYU= Subject key identifier: B2:DA:69:2E:81:36:BF:CB:29:4E:56:BF:F4:F4:8F:A6:57:7D:50:FF Authority key identifier: 7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 Certificate issuer: /CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Certificate serial: 23585676F3EAB4F4D0F9DF7FB33FB4E51E339BC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:23:30 +0000 Manifest this update: Tue 02 Jun 2026 19:18:30 +0000 Manifest next update: Wed 03 Jun 2026 19:56:30 +0000 Files and hashes: 1: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: gkNE1J8LS8bDAl/t8wn0B0ZHnNiDo1L7MzMb+7Q5ypo=) 2: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: ZPFkeP+nvfKboy4qow1VO85p4mUkgACDVOD+VqK2Ihg=) 3: 3131372e3130332e36362e302f32332d3234203d3e203435373138.roa (hash: 0DLK1MQIKbxqNmcpVPbZocMztN5rDbQk4zhYo8Bx8Cw=) 4: 7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl (hash: 6833iF3TQtfaKJjzXWa+P7OUI2Ubq+W90ClBhysxQhE=) 5: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: JJ0XYEWJnNqenm3YM5YcUAhKtM46eIeZHpKCM2PFMYk=) 6: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: Xr9AQJybUe2phNKjCk7EDVdTwzFlkvXIj8GjUYXwr90=) 7: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: lL0LNbFOb3ZMt/gKNiHtSDZhxYdsWPVmvyN1tdNUMJ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:58:56:76:f3:ea:b4:f4:d0:f9:df:7f:b3:3f:b4:e5:1e:33:9b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C9D38287AB4C0800F67E516DB04760454CBE9F1 Validity Not Before: Jun 2 19:18:30 2026 GMT Not After : Jun 3 19:56:30 2026 GMT Subject: CN=B2DA692E8136BFCB294E56BFF4F48FA6577D50FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:31:39:09:d5:a8:09:1d:dd:da:35:85:8e:51: 96:4b:01:f4:c7:cd:fb:d8:b9:3d:67:02:81:7d:91: 71:27:b6:8b:13:58:3b:f3:03:6c:53:61:f1:69:d9: 4f:8d:87:72:a3:e5:ba:cf:c0:cc:61:0f:87:ec:ee: f3:01:d5:3c:0a:b3:91:24:2a:62:c8:99:a7:0c:d9: dc:c9:4e:a4:dd:bb:5e:29:3f:72:59:3e:88:6c:09: 62:ba:50:9c:f7:50:d1:4e:c2:f1:6f:01:2f:e1:a3: 71:e2:d4:1d:07:5f:ad:e4:b8:1c:f6:83:89:b1:ee: 33:b3:99:e8:df:ad:9e:ec:4e:12:65:0c:ed:7a:55: 40:f0:88:62:a8:23:63:b5:b6:0a:bd:6b:27:55:e7: 22:fd:05:7a:48:2f:5b:8a:9a:2d:15:83:a9:b8:63: 1b:94:3d:1f:e0:ad:42:ac:f5:b6:84:11:5d:07:38: 8d:ec:63:e6:8b:91:b1:7b:d1:33:c6:59:92:47:6f: 91:d7:77:59:b5:37:28:2e:bc:8f:c5:ca:d4:e6:c0: 97:37:e8:be:3e:b5:5f:d7:73:e1:c1:0f:3b:e8:7c: d4:82:ba:34:48:80:83:cb:b9:9c:9e:65:94:44:c5: b5:62:04:9b:93:27:4c:d4:e7:5b:97:ee:43:4e:98: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DA:69:2E:81:36:BF:CB:29:4E:56:BF:F4:F4:8F:A6:57:7D:50:FF X509v3 Authority Key Identifier: keyid:7C:9D:38:28:7A:B4:C0:80:0F:67:E5:16:DB:04:76:04:54:CB:E9:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C9D38287AB4C0800F67E516DB04760454CBE9F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/7C9D38287AB4C0800F67E516DB04760454CBE9F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2f:7a:68:94:b2:9f:37:42:6b:25:88:80:d6:42:f2:49:5c: df:f4:9c:58:fc:01:58:b9:23:6c:5a:51:c0:e0:df:3f:17:10: 90:40:73:ae:0b:fb:91:ce:bb:34:93:b8:cf:35:23:55:39:d3: 01:98:19:1c:0f:d0:82:2d:e9:4b:df:28:0e:c4:d6:ad:18:90: 91:90:fc:a4:09:c6:0a:b1:0e:9c:5f:7e:04:ff:b1:7c:f2:3c: 4b:63:22:8b:99:d1:fa:ef:68:9d:0c:e5:ce:cb:bc:1e:cf:af: 1a:ba:88:85:44:f3:7f:c3:30:7e:2e:4d:a1:6d:42:4a:2c:27: 93:d1:d5:bf:00:86:4d:b3:2a:d7:14:64:73:9c:73:ed:49:31: 1e:82:b7:9a:81:1b:3a:51:bd:85:71:95:76:1d:6e:34:9e:16: dc:56:58:58:4e:c6:15:1b:ee:b3:f6:98:f1:73:fe:e2:fc:7c: 33:d0:dd:6f:9d:09:32:22:c9:de:ab:e2:c0:c7:d4:94:92:58: eb:c6:18:51:87:2a:6f:a2:3e:dc:d8:a5:14:3a:f3:e4:ec:98: 46:71:0a:b9:a2:c3:9a:e1:5d:10:4f:b9:8a:21:44:8a:df:99: 8b:82:fc:3b:06:46:8c:70:31:b3:4f:4f:d5:09:5a:b0:31:c0: 16:8b:2e:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI1hWdvPqtPTQ+d9/sz+05R4zm8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1 NENCRTlGMTAeFw0yNjA2MDIxOTE4MzBaFw0yNjA2MDMxOTU2MzBaMDMxMTAvBgNV BAMTKEIyREE2OTJFODEzNkJGQ0IyOTRFNTZCRkY0RjQ4RkE2NTc3RDUwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcMTkJ1agJHd3aNYWOUZZLAfTH zfvYuT1nAoF9kXEntosTWDvzA2xTYfFp2U+Nh3Kj5brPwMxhD4fs7vMB1TwKs5Ek KmLImacM2dzJTqTdu14pP3JZPohsCWK6UJz3UNFOwvFvAS/ho3Hi1B0HX63kuBz2 g4mx7jOzmejfrZ7sThJlDO16VUDwiGKoI2O1tgq9aydV5yL9BXpIL1uKmi0Vg6m4 YxuUPR/grUKs9baEEV0HOI3sY+aLkbF70TPGWZJHb5HXd1m1NyguvI/FytTmwJc3 6L4+tV/Xc+HBDzvofNSCujRIgIPLuZyeZZRExbViBJuTJ0zU51uX7kNOmIhtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUstppLoE2v8spTla/9PSPpld9UP8wHwYDVR0j BBgwFoAUfJ04KHq0wIAPZ+UW2wR2BFTL6fEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjA0OWMyMTAtZjM2NS00MzJmLWE3Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3 QUI0QzA4MDBGNjdFNTE2REIwNDc2MDQ1NENCRTlGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QzlEMzgyODdBQjRDMDgwMEY2N0U1MTZEQjA0NzYwNDU0Q0JF OUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvN0M5RDM4Mjg3QUI0QzA4MDBGNjdFNTE2REIwNDc2 MDQ1NENCRTlGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8vemiUsp83QmsliIDWQvJJXN/0nFj8AVi5 I2xaUcDg3z8XEJBAc64L+5HOuzSTuM81I1U50wGYGRwP0IIt6UvfKA7E1q0YkJGQ /KQJxgqxDpxffgT/sXzyPEtjIouZ0frvaJ0M5c7LvB7Prxq6iIVE83/DMH4uTaFt QkosJ5PR1b8Ahk2zKtcUZHOcc+1JMR6Ct5qBGzpRvYVxlXYdbjSeFtxWWFhOxhUb 7rP2mPFz/uL8fDPQ3W+dCTIiyd6r4sDH1JSSWOvGGFGHKm+iPtzYpRQ68+TsmEZx Crmiw5rhXRBPuYohRIrfmYuC/DsGRoxwMbNPT9UJWrAxwBaLLio= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:37 2026 by rpki-client