$ rpki-client -vvf rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft File: 284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft (raw, json) Hash identifier: H3RCgSm5Mdw8Sn/x9HnTH8yYtgXWEb6e/PEWbthYOGo= Subject key identifier: D9:6E:56:04:95:C8:81:1F:41:EC:4E:BE:F2:F8:25:FD:EC:D7:F5:E2 Authority key identifier: 28:41:32:D9:17:9D:6A:10:5A:D3:8E:8C:B4:7C:2E:2D:87:7E:8D:8B Certificate issuer: /CN=284132D9179D6A105AD38E8CB47C2E2D877E8D8B Certificate serial: 1B869B7CCFC8637B8B0250983109B1D393C95458 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 19:49:05 +0000 Manifest this update: Tue 02 Jun 2026 19:44:05 +0000 Manifest next update: Wed 03 Jun 2026 20:39:05 +0000 Files and hashes: 1: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: K06HluoUSneBunwOTMkxMJ0GcJy62PXja/IY39krYJE=) 2: 284132D9179D6A105AD38E8CB47C2E2D877E8D8B.crl (hash: ggKPeQKTq+JXsvALdoDUQ/vxvyzu1SZLToQoqT5BFig=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.crl rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 20:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:86:9b:7c:cf:c8:63:7b:8b:02:50:98:31:09:b1:d3:93:c9:54:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284132D9179D6A105AD38E8CB47C2E2D877E8D8B Validity Not Before: Jun 2 19:44:05 2026 GMT Not After : Jun 3 20:39:05 2026 GMT Subject: CN=D96E560495C8811F41EC4EBEF2F825FDECD7F5E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:29:7a:37:3a:2b:2d:7c:a9:3e:f1:ba:9d: 8e:72:32:99:e9:08:df:bd:98:d4:25:7f:c3:b3:78: 9c:3b:35:ad:01:0c:45:26:18:68:01:46:8e:2e:5b: bb:3d:a8:3d:68:fc:8a:1b:b0:62:b3:63:86:b9:23: 45:7a:ce:cb:49:d8:dd:d8:09:b1:7e:33:17:93:e7: bf:f0:6c:92:22:17:c8:2a:4d:57:11:0b:ab:9c:0c: fc:a4:51:45:ac:a3:76:48:29:97:dd:8d:27:67:08: de:d2:42:13:b3:e9:c6:88:ad:8e:a8:dc:5c:d0:35: 9d:df:da:95:a3:35:24:1f:ee:a7:86:b8:b7:83:38: a1:74:d4:bb:ec:5f:9c:9a:4b:6e:98:ed:e4:ad:cc: d0:fa:df:76:2b:f1:b6:4a:10:66:ff:b8:a7:8d:12: da:f5:99:3e:51:9a:e3:04:72:fb:c7:94:c1:85:be: 0e:d9:7c:e8:70:c6:55:60:39:b8:a9:0d:d9:93:46: 84:be:9b:2a:c6:eb:35:59:51:98:ac:3e:73:10:fb: 46:2d:ed:0f:d3:9c:82:50:f1:3e:2c:fc:2e:b2:13: 50:68:c3:79:34:9e:b3:63:3e:25:16:1b:fb:7e:31: 05:bf:80:99:bc:57:8f:ff:e4:47:e8:e3:eb:a2:d8: eb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6E:56:04:95:C8:81:1F:41:EC:4E:BE:F2:F8:25:FD:EC:D7:F5:E2 X509v3 Authority Key Identifier: keyid:28:41:32:D9:17:9D:6A:10:5A:D3:8E:8C:B4:7C:2E:2D:87:7E:8D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/284132D9179D6A105AD38E8CB47C2E2D877E8D8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:3e:9c:a0:9b:c7:f9:28:6a:bc:ab:5d:84:1c:63:29:90:d3: 4d:33:f4:dc:0d:e1:9f:55:d5:0d:28:95:6f:de:f0:1e:7e:bd: 0b:19:48:bd:a6:3f:18:a1:bc:1e:3e:46:2e:1f:1a:49:49:31: 74:81:e8:88:3f:50:0c:eb:34:3c:59:3c:dd:30:4b:a3:16:ea: 97:95:de:5a:b6:32:fc:5a:69:89:c1:6b:a4:0c:c5:2e:f9:76: ab:9a:d9:12:30:1e:01:db:36:ac:49:8a:da:16:6d:3a:2a:0e: fc:01:9f:74:ba:6a:d1:fc:fe:85:60:27:ad:d3:6c:11:cb:59: b0:1b:76:23:2e:90:4d:4a:ce:bf:03:22:0f:a0:12:3f:25:5f: a2:21:21:d3:66:0e:6e:7f:f1:23:a2:2b:43:e6:9b:e5:de:43: 3e:32:3d:f1:9e:c5:3a:a5:5d:8a:cb:f0:7e:21:70:d1:59:a1: ea:f0:b6:7e:de:e3:4c:33:1e:5b:77:24:4f:d6:3a:99:40:cb: b5:63:52:d6:75:86:ad:7c:90:ce:ed:e8:0b:18:3a:b1:5a:e0: b5:81:e5:d3:b0:80:77:a4:ac:5f:f4:42:7b:0c:61:fc:30:32: 84:46:1d:58:2c:00:ed:37:10:bb:33:19:10:cb:d2:f9:ab:98: e7:99:fc:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4abfM/IY3uLAlCYMQmx05PJVFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0MTMyRDkxNzlENkExMDVBRDM4RThDQjQ3QzJFMkQ4 NzdFOEQ4QjAeFw0yNjA2MDIxOTQ0MDVaFw0yNjA2MDMyMDM5MDVaMDMxMTAvBgNV BAMTKEQ5NkU1NjA0OTVDODgxMUY0MUVDNEVCRUYyRjgyNUZERUNEN0Y1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxISl6NzorLXypPvG6nY5yMpnp CN+9mNQlf8OzeJw7Na0BDEUmGGgBRo4uW7s9qD1o/IobsGKzY4a5I0V6zstJ2N3Y CbF+MxeT57/wbJIiF8gqTVcRC6ucDPykUUWso3ZIKZfdjSdnCN7SQhOz6caIrY6o 3FzQNZ3f2pWjNSQf7qeGuLeDOKF01LvsX5yaS26Y7eStzND633Yr8bZKEGb/uKeN Etr1mT5RmuMEcvvHlMGFvg7ZfOhwxlVgObipDdmTRoS+myrG6zVZUZisPnMQ+0Yt 7Q/TnIJQ8T4s/C6yE1Bow3k0nrNjPiUWG/t+MQW/gJm8V4//5Efo4+ui2OvRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2W5WBJXIgR9B7E6+8vgl/ezX9eIwHwYDVR0j BBgwFoAUKEEy2RedahBa046MtHwuLYd+jYswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmY5M2I4MTYtZTdiZS00NjRjLTg3ODUtNDk4YmY4NGQzNzM1LzAvMjg0MTMyRDkx NzlENkExMDVBRDM4RThDQjQ3QzJFMkQ4NzdFOEQ4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODQxMzJEOTE3OUQ2QTEwNUFEMzhFOENCNDdDMkUyRDg3N0U4 RDhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmY5M2I4MTYtZTdiZS00NjRjLTg3 ODUtNDk4YmY4NGQzNzM1LzAvMjg0MTMyRDkxNzlENkExMDVBRDM4RThDQjQ3QzJF MkQ4NzdFOEQ4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKo+nKCbx/koaryrXYQcYymQ000z9NwN4Z9V 1Q0olW/e8B5+vQsZSL2mPxihvB4+Ri4fGklJMXSB6Ig/UAzrNDxZPN0wS6MW6peV 3lq2MvxaaYnBa6QMxS75dqua2RIwHgHbNqxJitoWbToqDvwBn3S6atH8/oVgJ63T bBHLWbAbdiMukE1Kzr8DIg+gEj8lX6IhIdNmDm5/8SOiK0Pmm+XeQz4yPfGexTql XYrL8H4hcNFZoerwtn7e40wzHlt3JE/WOplAy7VjUtZ1hq18kM7t6AsYOrFa4LWB 5dOwgHekrF/0QnsMYfwwMoRGHVgsAO03ELszGRDL0vmrmOeZ/JY= -----END CERTIFICATE-----Generated at Wed Jun 3 04:44:57 2026 by rpki-client