$ rpki-client -vvf rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft File: 1587930E115B02B61F9967A961669E9C2E5D3155.mft (raw, json) Hash identifier: KpJSSZzd33qsKMNM7H9KP3CmkRkMKDVXOYowjC/aur4= Subject key identifier: 79:59:71:16:77:B5:65:CA:8B:D1:A8:66:09:84:41:40:71:EA:D9:A2 Authority key identifier: 15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 Certificate issuer: /CN=1587930E115B02B61F9967A961669E9C2E5D3155 Certificate serial: 35641F5E782238A84CC718CC9A3C04A82D707D3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:10:04 +0000 Manifest this update: Wed 03 Jun 2026 00:05:04 +0000 Manifest next update: Thu 04 Jun 2026 01:25:04 +0000 Files and hashes: 1: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: jclNRlrhqL+AfaCj+qvPSgX0Z4Wtr2IefaNqa2LPL2c=) 2: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: UOVDSlhXigw/Uz77MSYpnkR4v33gbqMyBOUU19NWXlU=) 3: 1587930E115B02B61F9967A961669E9C2E5D3155.crl (hash: N7n75fJlxprB3NQKLK4Ff6oEQhRd5BtkPXN2ejGFGcE=) 4: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: bWoZrHRRCMJiRa1MlW6R+wP7Q96czuFPoxQnXJiuOos=) 5: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: WdT499tVpG8NeV+SEnNVp+8I6jVjAbHrv0KbxNWN8RU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 01:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:64:1f:5e:78:22:38:a8:4c:c7:18:cc:9a:3c:04:a8:2d:70:7d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1587930E115B02B61F9967A961669E9C2E5D3155 Validity Not Before: Jun 3 00:05:04 2026 GMT Not After : Jun 4 01:25:04 2026 GMT Subject: CN=7959711677B565CA8BD1A8660984414071EAD9A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:bc:73:f1:d7:de:77:b6:58:a4:a2:0f:b5: 58:aa:0b:d4:e9:6a:7f:11:b2:be:64:d0:5e:f1:35: 07:b5:02:1b:69:f0:f1:11:3c:aa:c2:4b:5b:d0:38: 9e:f4:09:ca:bb:dd:2b:52:86:a1:3b:3e:60:b1:15: f5:4c:b1:7f:7b:b2:fe:bb:53:2e:91:ae:f6:dd:b4: e5:c8:a0:a5:b1:a1:66:6b:81:88:b2:2e:51:17:53: 24:e0:7f:9c:eb:30:af:90:20:34:60:3b:e1:db:3a: a5:d1:4b:0d:ca:32:ce:d3:4e:46:64:58:53:9f:38: d9:ec:09:ca:78:47:29:03:06:ac:12:2e:c8:4e:55: 92:df:7b:4f:0e:c4:73:3e:a1:33:a7:9e:5c:08:ba: a1:7a:32:08:db:e1:23:9a:15:60:85:de:f0:c8:dc: 61:b1:ce:e4:ea:60:86:2a:09:95:bd:3a:5c:cc:a3: 2b:c4:1b:1d:9d:ad:87:9f:28:0d:13:c6:a9:2c:62: 4a:4d:cb:97:d3:e6:08:94:ed:c5:ed:6a:3a:32:e8: e4:60:4b:85:04:c2:a1:a3:7f:0b:a0:e6:2f:b0:7c: f2:f7:ce:0d:ca:c7:0b:a6:8d:c5:4b:c8:61:f1:6d: 23:99:dc:1e:ec:f6:fd:2f:88:6f:67:f6:45:ae:7e: cb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:59:71:16:77:B5:65:CA:8B:D1:A8:66:09:84:41:40:71:EA:D9:A2 X509v3 Authority Key Identifier: keyid:15:87:93:0E:11:5B:02:B6:1F:99:67:A9:61:66:9E:9C:2E:5D:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1587930E115B02B61F9967A961669E9C2E5D3155.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/1587930E115B02B61F9967A961669E9C2E5D3155.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:be:f8:b3:cf:fe:d8:0c:fd:39:09:7f:48:fc:a5:32:51:fc: 32:87:c3:e1:c8:4d:bd:23:b4:18:12:0f:64:73:21:d9:42:66: 2a:26:31:91:58:81:77:00:62:49:22:c9:b2:aa:79:3d:cc:88: 24:34:12:84:e9:30:fa:a6:46:e1:29:5e:85:d5:b0:44:69:47: 77:82:0a:f5:8d:82:4f:6c:3e:19:44:1f:6f:9d:06:44:90:d0: f9:a1:49:b0:8f:ce:fe:74:34:19:ae:93:fb:98:d0:cc:4f:c6: 5b:62:db:43:1c:c1:71:11:18:7d:91:83:ed:57:58:ed:f7:77: ff:f1:19:a5:1d:e2:f1:a7:b5:c7:b1:95:4d:52:7d:f7:a1:ed: 38:07:cc:db:2e:60:cc:0e:42:96:1e:c4:89:a5:0c:44:d2:83: ed:6d:63:e4:05:31:7c:2b:fe:af:62:f4:b2:57:17:61:6c:45: 65:f4:a4:8e:63:50:2e:60:e9:58:7c:7f:85:e5:28:15:37:50: db:17:9d:6b:bf:42:0b:c8:05:c8:be:16:87:48:d3:9a:ea:7f: c7:90:df:30:e8:c3:49:3c:e8:20:37:6c:e2:4a:d2:20:52:cd: 24:9f:8c:2e:5e:7e:2f:b8:f9:a8:2e:5c:6b:5c:bb:78:b3:c0: c4:0c:1c:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNWQfXngiOKhMxxjMmjwEqC1wfTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMy RTVEMzE1NTAeFw0yNjA2MDMwMDA1MDRaFw0yNjA2MDQwMTI1MDRaMDMxMTAvBgNV BAMTKDc5NTk3MTE2NzdCNTY1Q0E4QkQxQTg2NjA5ODQ0MTQwNzFFQUQ5QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFr7xz8dfed7ZYpKIPtViqC9Tp an8Rsr5k0F7xNQe1Ahtp8PERPKrCS1vQOJ70Ccq73StShqE7PmCxFfVMsX97sv67 Uy6RrvbdtOXIoKWxoWZrgYiyLlEXUyTgf5zrMK+QIDRgO+HbOqXRSw3KMs7TTkZk WFOfONnsCcp4RykDBqwSLshOVZLfe08OxHM+oTOnnlwIuqF6Mgjb4SOaFWCF3vDI 3GGxzuTqYIYqCZW9OlzMoyvEGx2drYefKA0TxqksYkpNy5fT5giU7cXtajoy6ORg S4UEwqGjfwug5i+wfPL3zg3KxwumjcVLyGHxbSOZ3B7s9v0viG9n9kWufssNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeVlxFne1ZcqL0ahmCYRBQHHq2aIwHwYDVR0j BBgwFoAUFYeTDhFbArYfmWepYWaenC5dMVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQxMGZhNDMtMGJlMy00NzFhLTljMjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUx MTVCMDJCNjFGOTk2N0E5NjE2NjlFOUMyRTVEMzE1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTg3OTMwRTExNUIwMkI2MUY5OTY3QTk2MTY2OUU5QzJFNUQz MTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvMTU4NzkzMEUxMTVCMDJCNjFGOTk2N0E5NjE2NjlF OUMyRTVEMzE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACK++LPP/tgM/TkJf0j8pTJR/DKHw+HITb0j tBgSD2RzIdlCZiomMZFYgXcAYkkiybKqeT3MiCQ0EoTpMPqmRuEpXoXVsERpR3eC CvWNgk9sPhlEH2+dBkSQ0PmhSbCPzv50NBmuk/uY0MxPxlti20McwXERGH2Rg+1X WO33d//xGaUd4vGntcexlU1Sffeh7TgHzNsuYMwOQpYexImlDETSg+1tY+QFMXwr /q9i9LJXF2FsRWX0pI5jUC5g6Vh8f4XlKBU3UNsXnWu/QgvIBci+FodI05rqf8eQ 3zDow0k86CA3bOJK0iBSzSSfjC5efi+4+aguXGtcu3izwMQMHD4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:20 2026 by rpki-client