$ rpki-client -vvf rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft File: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft (raw, json) Hash identifier: ek+KiRNnl4ip1AHUXwa/PV/1nWvmMaaW2uPY9U3/k2w= Subject key identifier: F8:A9:65:6F:8C:5A:D5:7C:61:EF:8D:68:39:F6:74:8C:10:C8:8D:AD Authority key identifier: 48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 Certificate issuer: /CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Certificate serial: 6BEFA13B687237D592E7546E3828C186BA576E43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:01:07 +0000 Manifest this update: Tue 02 Jun 2026 08:56:07 +0000 Manifest next update: Wed 03 Jun 2026 12:57:07 +0000 Files and hashes: 1: 485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl (hash: YCncXAqiwtWteVKUgQ3UWoOmPzNctqEN6KhszZexhis=) 2: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: MWYhiIEDGx9DoNFz51QvtMWf3c6h+IW6waBKdCBpOXk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ef:a1:3b:68:72:37:d5:92:e7:54:6e:38:28:c1:86:ba:57:6e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485C95EAB969D6A48B4E079F7EAF2F1A43D576E5 Validity Not Before: Jun 2 08:56:07 2026 GMT Not After : Jun 3 12:57:07 2026 GMT Subject: CN=F8A9656F8C5AD57C61EF8D6839F6748C10C88DAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:58:ba:8d:ff:b9:91:df:b4:42:0c:2a:9e: 04:36:a9:04:12:97:fe:e7:15:c1:19:b9:26:5d:9d: f0:72:67:e2:dd:5d:e6:23:3a:5f:e4:41:e1:4d:84: be:cd:48:9a:94:90:73:a2:cd:83:02:ae:54:eb:0e: 7c:df:93:82:7c:bc:d8:ab:9a:e1:57:38:36:5c:da: 96:73:4c:56:0a:7d:e2:f6:5c:6d:4f:a2:0c:d1:30: cf:06:e6:49:d6:04:83:97:cb:c9:cf:68:7a:5a:26: b7:b8:26:a2:11:88:fb:e7:34:65:e4:96:cc:12:69: d1:33:b9:f9:9a:50:74:1c:47:f6:08:85:c9:50:cd: b9:ba:60:bc:02:1e:c3:64:97:1c:c6:2d:8c:73:1d: e8:00:e2:4f:b8:a0:0a:1e:95:70:5f:b4:77:dc:de: bf:91:89:fb:84:2d:f6:75:a8:8f:68:4e:f9:19:aa: be:80:13:30:4b:f8:62:8d:95:dd:ea:66:df:da:2b: c3:27:30:26:b1:2b:da:76:f0:04:15:2f:af:89:11: bd:9b:6f:6d:5d:dc:53:1b:c9:c1:58:59:e3:84:a4: 68:f0:09:1d:a2:5e:17:b7:b6:eb:2a:f0:64:c1:e0: e8:3f:3a:40:93:83:d6:03:a1:fc:7b:85:f8:80:4d: ff:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A9:65:6F:8C:5A:D5:7C:61:EF:8D:68:39:F6:74:8C:10:C8:8D:AD X509v3 Authority Key Identifier: keyid:48:5C:95:EA:B9:69:D6:A4:8B:4E:07:9F:7E:AF:2F:1A:43:D5:76:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/485C95EAB969D6A48B4E079F7EAF2F1A43D576E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7e:a9:6d:5e:b7:ac:d3:8a:28:b0:6b:dd:54:f3:df:d8:2e: 39:a0:62:eb:1e:3b:1b:8e:1f:69:bf:04:e8:91:d7:f4:01:f3: a6:12:75:bc:49:14:10:ad:d9:d9:71:89:f1:23:c8:88:6d:3c: 47:06:44:85:3a:77:5a:f3:83:e0:eb:39:f8:d6:0b:7d:b9:4e: 2c:c6:29:37:fb:bd:cc:1c:16:15:3b:36:3d:8e:c2:e6:55:9f: fc:23:de:21:d4:b1:0f:d3:86:d1:ed:14:bf:40:16:71:9c:36: 1d:50:55:f7:5c:bd:8e:e0:0d:44:18:75:7f:8d:ae:09:b2:dd: c6:3c:21:3b:53:90:c7:3b:ec:43:98:dc:d9:b7:21:9d:0f:b0: 8c:a4:4d:74:18:c5:62:b1:ce:6f:a3:34:0d:c3:5d:bf:6f:82: 04:5f:e3:1b:f1:83:ef:a1:e8:9e:87:2b:76:75:85:ec:cb:1c: 56:38:d3:4c:4e:e7:74:94:90:5d:aa:3d:23:fd:a3:8a:f2:cb: 1d:c0:e5:ac:c0:11:cf:13:bd:05:47:e7:0e:b6:d3:49:cd:47: 0e:61:0c:a6:af:44:a2:00:ff:0b:c8:88:fd:8e:90:57:68:51: bf:5e:0d:bd:3d:a2:cf:53:53:32:14:f6:af:3e:97:ce:7e:f5: 12:75:14:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa++hO2hyN9WS51RuOCjBhrpXbkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0 M0Q1NzZFNTAeFw0yNjA2MDIwODU2MDdaFw0yNjA2MDMxMjU3MDdaMDMxMTAvBgNV BAMTKEY4QTk2NTZGOEM1QUQ1N0M2MUVGOEQ2ODM5RjY3NDhDMTBDODhEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0dFi6jf+5kd+0QgwqngQ2qQQS l/7nFcEZuSZdnfByZ+LdXeYjOl/kQeFNhL7NSJqUkHOizYMCrlTrDnzfk4J8vNir muFXODZc2pZzTFYKfeL2XG1PogzRMM8G5knWBIOXy8nPaHpaJre4JqIRiPvnNGXk lswSadEzufmaUHQcR/YIhclQzbm6YLwCHsNklxzGLYxzHegA4k+4oAoelXBftHfc 3r+RifuELfZ1qI9oTvkZqr6AEzBL+GKNld3qZt/aK8MnMCaxK9p28AQVL6+JEb2b b21d3FMbycFYWeOEpGjwCR2iXhe3tusq8GTB4Og/OkCTg9YDofx7hfiATf8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Kllb4xa1Xxh741oOfZ0jBDIja0wHwYDVR0j BBgwFoAUSFyV6rlp1qSLTgeffq8vGkPVduUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjNiYTAyNGItODdmMi00ZWRkLTg5ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFC OTY5RDZBNDhCNEUwNzlGN0VBRjJGMUE0M0Q1NzZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODVDOTVFQUI5NjlENkE0OEI0RTA3OUY3RUFGMkYxQTQzRDU3 NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvNDg1Qzk1RUFCOTY5RDZBNDhCNEUwNzlGN0VBRjJG MUE0M0Q1NzZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIB+qW1et6zTiiiwa91U89/YLjmgYuseOxuO H2m/BOiR1/QB86YSdbxJFBCt2dlxifEjyIhtPEcGRIU6d1rzg+DrOfjWC325TizG KTf7vcwcFhU7Nj2OwuZVn/wj3iHUsQ/ThtHtFL9AFnGcNh1QVfdcvY7gDUQYdX+N rgmy3cY8ITtTkMc77EOY3Nm3IZ0PsIykTXQYxWKxzm+jNA3DXb9vggRf4xvxg++h 6J6HK3Z1hezLHFY400xO53SUkF2qPSP9o4ryyx3A5azAEc8TvQVH5w6200nNRw5h DKavRKIA/wvIiP2OkFdoUb9eDb09os9TUzIU9q8+l85+9RJ1FCY= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:55 2026 by rpki-client