$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft File: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft (raw, json) Hash identifier: OTj/URYD2eS0E5DoO73Rh3W5P+Tfa8i3AQouT2R2y3I= Subject key identifier: D1:02:D2:5A:8D:B9:71:31:94:09:93:16:35:74:AD:A0:60:31:27:E2 Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 Certificate issuer: /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Certificate serial: 7336E56C7E7702CC6B974777BD23A1105E4295F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 08:30:30 +0000 Manifest this update: Tue 02 Jun 2026 08:25:30 +0000 Manifest next update: Wed 03 Jun 2026 11:35:30 +0000 Files and hashes: 1: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl (hash: pnflKg/YlYROcNQAPrMAc1BFs/kW3AXu+VgfFoflBLs=) 2: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: 4e1qd57hMv+OkXmKRzkE4lf5ZpRQjvmNHhGL7MHMPZQ=) 3: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: ABGORh4lWt4WpXDSQFC2AfJLsKMZzwquOOsUkRU5KZw=) 4: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: MdXlPd40mbCtjh7iBEjKVSFA2qec8G7HYFT+dNSNEB4=) 5: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: 0kmlYn3U9dmyxdriKnU2KVYL6nRWvq4iRJ06VUJD99I=) 6: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: p8zNdOn26qSx4BGXz+vWlqG1YbrlG0OsNQVGyFkCQnw=) 7: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: OJi67+qUPfc5UtqMYAV/z7dfCJOkcVNQkK5jTXZKwTQ=) 8: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: ZkDRUzZF2wR3zLgrv+xtI4hjJvx2gIYYCb4LSNtWkmg=) 9: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: QKq/ZGAbqKpUm7CoKZ+QT0ihf4BxzPyawZc6Ixihqm0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:36:e5:6c:7e:77:02:cc:6b:97:47:77:bd:23:a1:10:5e:42:95:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Validity Not Before: Jun 2 08:25:30 2026 GMT Not After : Jun 3 11:35:30 2026 GMT Subject: CN=D102D25A8DB97131940993163574ADA0603127E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fa:80:56:c9:4e:b3:14:02:b4:ff:2a:bd:c2: bb:36:58:c1:30:d5:b8:f1:be:ed:02:c9:e8:8a:62: b9:37:a6:e1:f4:72:c7:45:b7:22:e2:c5:79:4f:38: 4d:a2:76:5a:69:0d:d5:14:34:c8:32:6a:77:13:90: 69:ba:f8:c8:97:c2:7a:29:d4:21:ef:6d:83:00:95: 64:ce:f8:7f:00:09:90:25:c3:0f:3a:4b:49:02:f2: 65:d5:b8:92:e1:65:e6:a4:8c:63:9f:91:f6:9d:b1: d1:33:6b:06:38:49:72:53:5f:39:28:fa:1a:59:55: 3a:3b:8d:b4:6d:09:97:60:d9:98:c1:4a:1f:0c:1c: 6c:63:78:7b:5c:69:56:ce:58:a0:53:fe:21:10:c0: 9c:cf:24:04:4a:01:02:51:17:26:9e:88:51:0d:4e: e8:c5:c2:64:b3:84:75:6d:77:d6:cf:37:5c:de:d1: 32:e7:51:e9:2b:dc:d5:09:31:9c:6c:bb:a7:24:36: 6f:7f:a4:61:b2:02:43:59:8f:20:69:cc:9a:d5:af: 78:8f:73:ad:fa:52:1f:c8:fc:7b:24:be:34:86:b0: 87:8c:7e:84:10:95:4f:a9:18:b3:1d:67:cf:2b:6b: 01:b6:d0:33:81:31:fa:85:cf:a8:dd:4f:18:25:d5: bf:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:02:D2:5A:8D:B9:71:31:94:09:93:16:35:74:AD:A0:60:31:27:E2 X509v3 Authority Key Identifier: keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a4:45:3a:36:a0:f1:f8:c1:4c:94:9c:49:b1:6c:1e:e1:0b: b0:3c:16:65:60:c9:ad:6b:0f:0e:b6:fa:a1:86:25:d8:31:ca: c9:29:71:0e:7e:f1:94:22:96:cf:d1:68:99:07:47:64:b2:8d: 4e:d2:f5:18:0f:14:7b:0e:ed:b1:0d:24:9f:be:5e:8d:d4:14: 7f:39:15:8d:41:a9:04:98:9e:1d:62:b9:59:32:ec:8f:8c:69: c6:38:8c:00:0b:57:a1:e7:18:1f:dc:db:89:aa:ae:08:5e:f6: 96:11:12:19:7f:05:f3:b2:53:60:40:1a:12:e3:04:9b:52:bd: ba:22:63:0a:33:c3:62:19:f0:92:f1:11:0c:36:fc:d4:23:1e: ae:b5:f5:5d:91:6b:73:9d:52:18:3f:aa:c7:72:d5:6a:58:19: 63:f3:a3:24:e8:1e:56:0c:17:06:6e:4f:5f:e2:4b:cd:6b:7f: d2:d2:9d:8c:c7:47:fd:c9:1b:8c:1a:ac:57:fb:2a:50:7a:3f: 38:3a:ec:45:5a:29:bc:42:23:b8:1e:f2:70:b3:e1:3a:89:2f: a2:55:e8:88:b4:78:ef:d8:5e:f8:4f:c7:76:b5:c2:39:72:74: d8:de:7a:93:bd:c6:3c:91:04:b3:35:6c:eb:64:92:69:b0:7f: 3e:29:6d:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUczblbH53Asxrl0d3vSOhEF5ClfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExMDU3MENFNTVEODUxMkZDQkRGMDI4MTlGQjhBMEQz QkFEMUY5NDAeFw0yNjA2MDIwODI1MzBaFw0yNjA2MDMxMTM1MzBaMDMxMTAvBgNV BAMTKEQxMDJEMjVBOERCOTcxMzE5NDA5OTMxNjM1NzRBREEwNjAzMTI3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ+oBWyU6zFAK0/yq9wrs2WMEw 1bjxvu0CyeiKYrk3puH0csdFtyLixXlPOE2idlppDdUUNMgyancTkGm6+MiXwnop 1CHvbYMAlWTO+H8ACZAlww86S0kC8mXVuJLhZeakjGOfkfadsdEzawY4SXJTXzko +hpZVTo7jbRtCZdg2ZjBSh8MHGxjeHtcaVbOWKBT/iEQwJzPJARKAQJRFyaeiFEN TujFwmSzhHVtd9bPN1ze0TLnUekr3NUJMZxsu6ckNm9/pGGyAkNZjyBpzJrVr3iP c636Uh/I/HskvjSGsIeMfoQQlU+pGLMdZ88rawG20DOBMfqFz6jdTxgl1b8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0QLSWo25cTGUCZMWNXStoGAxJ+IwHwYDVR0j BBgwFoAUgRBXDOVdhRL8vfAoGfuKDTutH5QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE0OTYwODItYTBhYS00ODM2LWI1ODctOTczZGQ3ZTI5N2FmLzAvODExMDU3MENF NTVEODUxMkZDQkRGMDI4MTlGQjhBMEQzQkFEMUY5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTEwNTcwQ0U1NUQ4NTEyRkNCREYwMjgxOUZCOEEwRDNCQUQx Rjk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODExMDU3MENFNTVEODUxMkZDQkRGMDI4MTlGQjhB MEQzQkFEMUY5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2kRTo2oPH4wUyUnEmxbB7hC7A8FmVgya1r Dw62+qGGJdgxyskpcQ5+8ZQils/RaJkHR2SyjU7S9RgPFHsO7bENJJ++Xo3UFH85 FY1BqQSYnh1iuVky7I+MacY4jAALV6HnGB/c24mqrghe9pYREhl/BfOyU2BAGhLj BJtSvboiYwozw2IZ8JLxEQw2/NQjHq619V2Ra3OdUhg/qsdy1WpYGWPzoyToHlYM FwZuT1/iS81rf9LSnYzHR/3JG4warFf7KlB6Pzg67EVaKbxCI7ge8nCz4TqJL6JV 6Ii0eO/YXvhPx3a1wjlydNjeepO9xjyRBLM1bOtkkmmwfz4pbco= -----END CERTIFICATE-----Generated at Wed Jun 3 03:49:51 2026 by rpki-client