$ rpki-client -vvf rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.mft File: B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.mft (raw, json) Hash identifier: fF7QTfvjetIEKzAlIH0ggu01zR6ELGxYyXRvhwfg1k8= Subject key identifier: C8:86:B3:06:A5:A7:24:08:DF:32:E3:79:94:70:C2:0E:37:82:C0:37 Authority key identifier: B8:4C:63:BE:F8:B2:6A:45:95:EC:8A:50:0B:A5:15:4E:3A:6B:0F:60 Certificate issuer: /CN=B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60 Certificate serial: 4F4FFE333AC84C8721D6B2EA43DFC1CCB0BDB0F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:39:31 +0000 Manifest this update: Tue 02 Jun 2026 11:34:31 +0000 Manifest next update: Wed 03 Jun 2026 15:22:31 +0000 Files and hashes: 1: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: 6lqWNKAt2XmMr/8ZP7Y7ImCHg1Wbbj2dB1ROb8aS1r0=) 2: B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.crl (hash: vcy+E5OkII4PlOu9bfva6VD3U6asne4EMjY8elZaSSE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.crl rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:4f:fe:33:3a:c8:4c:87:21:d6:b2:ea:43:df:c1:cc:b0:bd:b0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60 Validity Not Before: Jun 2 11:34:31 2026 GMT Not After : Jun 3 15:22:31 2026 GMT Subject: CN=C886B306A5A72408DF32E3799470C20E3782C037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c9:be:aa:56:7c:d7:30:3d:60:0c:64:08:33: 4d:a5:1e:da:8a:8e:91:3b:17:7b:8b:71:23:69:b5: 47:d3:e6:15:e4:24:a2:db:64:f2:cb:11:25:65:32: 69:a2:9d:0a:88:54:b9:7f:0a:29:26:db:d5:74:83: c8:98:44:87:76:a5:5d:89:a8:b3:4e:e9:eb:f0:ae: 9c:65:1b:5b:49:44:5b:d1:7f:72:e8:97:76:41:d8: d9:29:fc:87:03:b1:7c:a0:31:84:97:59:8b:51:9d: 7c:8c:c1:d8:da:89:c5:f7:ce:e7:ed:48:cf:81:59: f2:51:8a:31:f6:33:76:25:06:27:a7:5c:2d:3b:6d: 8f:84:65:7a:20:64:6d:0b:cf:bb:26:9e:97:5e:df: 26:ff:55:98:58:3d:4a:f9:7f:90:10:16:0a:98:4c: 5f:b7:89:70:14:b7:4d:01:8a:bc:6b:f7:ec:36:b9: da:cb:ef:90:e9:08:6b:e8:a8:6d:b6:21:98:a4:c4: ef:42:8e:e4:1d:21:bd:71:5b:04:c3:a1:77:d0:e6: 83:43:c4:c5:21:06:62:be:95:31:5c:c7:f7:e6:2d: 10:b6:28:1b:be:bd:81:dc:fd:b8:b8:00:7c:13:dd: 74:72:ca:11:9c:43:1b:ed:ee:06:c1:bb:57:ed:53: 58:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:86:B3:06:A5:A7:24:08:DF:32:E3:79:94:70:C2:0E:37:82:C0:37 X509v3 Authority Key Identifier: keyid:B8:4C:63:BE:F8:B2:6A:45:95:EC:8A:50:0B:A5:15:4E:3A:6B:0F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f6:1e:0b:f5:61:eb:0c:2c:54:4b:f3:c1:1f:6e:44:b8:6e: ad:04:53:db:8b:5a:fe:ec:70:79:d1:8e:80:15:9d:d3:a6:39: 16:67:9c:5d:4c:40:ec:18:5c:9c:6c:37:31:41:e4:54:a5:8f: aa:71:75:67:8d:05:fd:9b:13:e5:6b:a1:76:28:e3:ee:fb:00: dd:ef:2f:f3:aa:c4:a3:c8:79:4b:cc:fa:6a:07:b6:d9:29:e6: 67:d8:ab:15:bf:27:78:c7:3a:6b:20:0f:37:39:51:c8:0f:f0: 74:ea:08:fb:8a:ba:aa:5a:ee:6e:33:33:78:05:bf:f0:61:2d: da:e2:27:f8:69:0d:1a:62:9a:b3:a4:5c:8c:3d:27:a0:d6:54: 9d:e1:0e:80:49:42:7d:96:41:6e:96:e0:b3:26:a5:2c:91:29: 32:bd:e8:83:e3:94:97:dc:2c:3a:46:bf:0b:a8:a2:42:d0:a8: 3c:fa:f3:44:42:1b:57:f9:ab:d1:e9:4a:90:1c:97:f2:21:c2: 87:b8:cc:c5:9b:e4:f7:80:2d:48:56:74:73:1a:6f:4a:50:0c: 36:96:76:1d:bf:d5:48:27:d1:c5:61:79:0f:1c:9f:5b:00:46: 93:2f:5d:0c:e3:05:c2:22:27:b8:47:04:73:ec:39:b7:8a:5e: 65:ca:8b:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT0/+MzrITIch1rLqQ9/BzLC9sPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0QzYzQkVGOEIyNkE0NTk1RUM4QTUwMEJBNTE1NEUz QTZCMEY2MDAeFw0yNjA2MDIxMTM0MzFaFw0yNjA2MDMxNTIyMzFaMDMxMTAvBgNV BAMTKEM4ODZCMzA2QTVBNzI0MDhERjMyRTM3OTk0NzBDMjBFMzc4MkMwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzyb6qVnzXMD1gDGQIM02lHtqK jpE7F3uLcSNptUfT5hXkJKLbZPLLESVlMmminQqIVLl/Cikm29V0g8iYRId2pV2J qLNO6evwrpxlG1tJRFvRf3Lol3ZB2Nkp/IcDsXygMYSXWYtRnXyMwdjaicX3zuft SM+BWfJRijH2M3YlBienXC07bY+EZXogZG0Lz7smnpde3yb/VZhYPUr5f5AQFgqY TF+3iXAUt00Birxr9+w2udrL75DpCGvoqG22IZikxO9CjuQdIb1xWwTDoXfQ5oND xMUhBmK+lTFcx/fmLRC2KBu+vYHc/bi4AHwT3XRyyhGcQxvt7gbBu1ftU1ijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyIazBqWnJAjfMuN5lHDCDjeCwDcwHwYDVR0j BBgwFoAUuExjvviyakWV7IpQC6UVTjprD2AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjU2NWExY2YtMjk1MC00N2RjLWEyMTItZjY1M2I4YzNmNWE5LzAvQjg0QzYzQkVG OEIyNkE0NTk1RUM4QTUwMEJBNTE1NEUzQTZCMEY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODRDNjNCRUY4QjI2QTQ1OTVFQzhBNTAwQkE1MTU0RTNBNkIw RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQjg0QzYzQkVGOEIyNkE0NTk1RUM4QTUwMEJBNTE1 NEUzQTZCMEY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ32Hgv1YesMLFRL88EfbkS4bq0EU9uLWv7s cHnRjoAVndOmORZnnF1MQOwYXJxsNzFB5FSlj6pxdWeNBf2bE+VroXYo4+77AN3v L/OqxKPIeUvM+moHttkp5mfYqxW/J3jHOmsgDzc5UcgP8HTqCPuKuqpa7m4zM3gF v/BhLdriJ/hpDRpimrOkXIw9J6DWVJ3hDoBJQn2WQW6W4LMmpSyRKTK96IPjlJfc LDpGvwuookLQqDz680RCG1f5q9HpSpAcl/Ihwoe4zMWb5PeALUhWdHMab0pQDDaW dh2/1Ugn0cVheQ8cn1sARpMvXQzjBcIiJ7hHBHPsObeKXmXKi7o= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:34 2026 by rpki-client