$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft File: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft (raw, json) Hash identifier: PnqI+hJXt44h2tcMVTnhjJ9PZCI/ncyZER1XYXQCUOI= Subject key identifier: 27:35:03:FD:C4:53:1F:E0:F4:02:49:25:1B:C9:7B:AA:52:C6:BA:39 Authority key identifier: 70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 Certificate issuer: /CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Certificate serial: 400071FAFCF7F97DF185EFDCC7C7730AD07033E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:59:13 +0000 Manifest this update: Tue 02 Jun 2026 19:54:13 +0000 Manifest next update: Wed 03 Jun 2026 22:13:13 +0000 Files and hashes: 1: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: UTfVl36IBhOzG0Z82kRsRWQYHXTuWdTZ5yU2IO9JgDg=) 2: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl (hash: Twi5z2HmwsedZYiKFLaoHjquUdUY4Wr4v1cqbHrjUZg=) 3: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: UMQrtxzU7bwTSmrEo5CM/EREbdAjBsi84Zf8mlGLlNk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:00:71:fa:fc:f7:f9:7d:f1:85:ef:dc:c7:c7:73:0a:d0:70:33:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Validity Not Before: Jun 2 19:54:13 2026 GMT Not After : Jun 3 22:13:13 2026 GMT Subject: CN=273503FDC4531FE0F40249251BC97BAA52C6BA39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:45:99:4b:6c:42:19:6f:e4:c7:6e:52:85:89: 08:61:97:9c:40:a7:29:2a:42:e4:d4:4a:f7:3d:9b: 54:cc:5e:95:a0:04:97:87:26:d3:f7:dc:52:c7:1b: ad:eb:da:8f:d0:67:9d:c3:2c:43:f3:c7:93:59:2b: 42:a2:27:3c:9b:bb:3a:32:72:ca:13:1c:51:92:e7: f9:7b:db:1f:19:be:7f:95:bd:d2:40:9d:22:80:5a: 5a:13:d3:21:67:91:2f:f2:11:8a:a1:33:96:c6:2d: f0:9b:3c:3d:8b:2c:6c:04:9d:0c:4b:02:c7:76:40: ee:91:23:89:fb:14:6f:ae:7d:34:50:7f:01:11:86: 08:2f:95:32:75:75:ec:e2:4b:f6:0d:7a:2f:a8:23: 9b:88:f2:a1:9d:01:d3:a4:b1:64:7f:de:62:7a:36: ca:3f:89:fb:c2:7d:af:22:fb:e6:db:00:af:29:c8: 2f:89:d2:cd:8a:09:ab:7f:c5:5d:19:66:be:5c:99: 6a:6c:13:b3:89:30:a9:a9:25:e3:91:56:ed:44:9b: 8b:a6:47:ec:a0:d9:8e:35:63:c0:6e:3a:58:ee:c2: 5f:97:f8:a8:18:c8:70:f4:bc:59:30:89:b4:55:b9: 58:4a:2a:9a:8d:07:b8:90:f2:36:92:11:f2:60:c7: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:35:03:FD:C4:53:1F:E0:F4:02:49:25:1B:C9:7B:AA:52:C6:BA:39 X509v3 Authority Key Identifier: keyid:70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a2:5a:1e:a7:b7:2e:20:51:01:28:ca:a6:49:28:14:a8:cd: 2f:bd:f8:65:e6:c3:52:a5:a3:c7:01:0e:35:68:1f:8e:e7:55: c2:e2:c2:bb:d1:d7:e5:59:11:6f:71:0d:11:80:ca:00:55:0b: 29:89:72:c4:8d:49:ef:3d:8a:73:e4:9e:7e:5b:a6:f4:78:e2: 1c:89:bc:91:69:1a:79:d9:4c:8f:cb:70:f7:b3:2e:d3:6e:48: 98:1c:f8:28:08:03:0f:7c:d4:6d:a0:1a:7c:4c:03:59:a9:21: af:1c:26:75:dc:12:26:b5:4c:82:f6:54:a5:95:75:12:78:a2: 54:df:f5:ce:68:ed:a9:79:25:e9:bd:db:a7:84:bc:2e:49:4a: f6:e4:37:b1:5c:0f:9c:f6:a4:e4:5a:cf:38:98:01:d5:ee:a7: 6f:f5:d0:80:79:90:35:8d:3c:aa:c1:ef:2b:5c:e1:e2:16:e9: 4e:e6:cd:0f:88:3e:f9:b4:25:7b:0b:d7:17:4e:8e:e3:d7:47: f1:d2:17:f1:ed:75:cc:e0:9f:55:61:49:45:78:91:13:dc:4b: 28:99:ee:3e:ca:98:32:4f:6b:64:f6:76:c0:0a:96:3a:53:2e: 8e:53:47:c5:c0:ef:ae:95:89:b4:77:fa:ce:e8:02:99:7c:bc: ef:8f:3a:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQABx+vz3+X3xhe/cx8dzCtBwM+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4QUFC NEE0RkI0MjAeFw0yNjA2MDIxOTU0MTNaFw0yNjA2MDMyMjEzMTNaMDMxMTAvBgNV BAMTKDI3MzUwM0ZEQzQ1MzFGRTBGNDAyNDkyNTFCQzk3QkFBNTJDNkJBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMRZlLbEIZb+THblKFiQhhl5xA pykqQuTUSvc9m1TMXpWgBJeHJtP33FLHG63r2o/QZ53DLEPzx5NZK0KiJzybuzoy csoTHFGS5/l72x8Zvn+VvdJAnSKAWloT0yFnkS/yEYqhM5bGLfCbPD2LLGwEnQxL Asd2QO6RI4n7FG+ufTRQfwERhggvlTJ1deziS/YNei+oI5uI8qGdAdOksWR/3mJ6 Nso/ifvCfa8i++bbAK8pyC+J0s2KCat/xV0ZZr5cmWpsE7OJMKmpJeORVu1Em4um R+yg2Y41Y8BuOljuwl+X+KgYyHD0vFkwibRVuVhKKpqNB7iQ8jaSEfJgx7SfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJzUD/cRTH+D0AkklG8l7qlLGujkwHwYDVR0j BBgwFoAUcDEQT/y04dBGNHZEW9/YqrSk+0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJiZTY4MTUtMzEwZS00MjA2LWE1MDAtNmJiOWQzMjYzYWJmLzAvNzAzMTEwNEZG Q0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4QUFCNEE0RkI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDMxMTA0RkZDQjRFMUQwNDYzNDc2NDQ1QkRGRDhBQUI0QTRG QjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4 QUFCNEE0RkI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOiWh6nty4gUQEoyqZJKBSozS+9+GXmw1Kl o8cBDjVoH47nVcLiwrvR1+VZEW9xDRGAygBVCymJcsSNSe89inPknn5bpvR44hyJ vJFpGnnZTI/LcPezLtNuSJgc+CgIAw981G2gGnxMA1mpIa8cJnXcEia1TIL2VKWV dRJ4olTf9c5o7al5Jem926eEvC5JSvbkN7FcD5z2pORazziYAdXup2/10IB5kDWN PKrB7ytc4eIW6U7mzQ+IPvm0JXsL1xdOjuPXR/HSF/Htdczgn1VhSUV4kRPcSyiZ 7j7KmDJPa2T2dsAKljpTLo5TR8XA766VibR3+s7oApl8vO+POqA= -----END CERTIFICATE-----Generated at Wed Jun 3 03:38:51 2026 by rpki-client