$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft File: 1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft (raw, json) Hash identifier: mHYq9i77KZsY9WDeJg/KtXYz1VcYCiGc+Wpt3BripBQ= Subject key identifier: C3:A4:15:DE:82:E9:21:EE:95:9D:DB:36:71:96:EF:1A:52:1E:39:61 Authority key identifier: 1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6 Certificate issuer: /CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6 Certificate serial: 56A75367F3D2CF45FBF9059FA651A2744C010053 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:52:19 +0000 Manifest this update: Tue 02 Jun 2026 21:47:19 +0000 Manifest next update: Wed 03 Jun 2026 22:42:19 +0000 Files and hashes: 1: 1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl (hash: x6S9LFS2pLpeYjZswvaJBceZO3j6qUW9BkpUE++iI+E=) 2: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: Zn62f1fBkgDvG3W52DfKvheKU31p9VTPEEMoYm0lHJA=) 3: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: 38bOTSe4cTdefI8PO7GN8RWELwk4anfmyd09536sUts=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a7:53:67:f3:d2:cf:45:fb:f9:05:9f:a6:51:a2:74:4c:01:00:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6 Validity Not Before: Jun 2 21:47:19 2026 GMT Not After : Jun 3 22:42:19 2026 GMT Subject: CN=C3A415DE82E921EE959DDB367196EF1A521E3961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:39:d6:81:28:0b:8b:b8:17:fc:2a:76:79:9c: 83:b1:39:2f:cd:0e:e0:6c:dd:62:1e:92:c9:b7:d9: ad:39:2f:c9:99:27:01:45:c8:73:b3:f0:a4:23:e4: 96:e1:ff:d2:8e:3d:77:a1:b8:7a:0a:93:a0:68:ad: 6a:ec:55:5c:38:70:3d:67:b1:d6:5e:36:9d:60:1f: 48:26:1d:fd:58:c9:53:aa:ca:3c:9c:ee:6e:ba:55: dd:b9:47:e2:8c:96:24:dc:d2:72:57:8e:f1:27:86: b9:71:ee:7c:5d:1a:bf:69:49:97:bb:db:db:0e:94: f7:f0:91:58:6f:c1:c8:18:19:51:73:d8:9d:d1:eb: fc:ee:de:60:b6:98:de:77:79:56:6c:4e:e1:5d:bc: 5d:32:46:86:0a:15:90:d7:76:c3:c5:e1:0d:e6:76: bd:05:73:da:a4:89:83:39:a7:6d:05:50:01:62:a7: a6:77:56:75:ba:8c:fb:76:f8:82:e7:3c:8a:f3:0a: c3:4a:a8:34:d6:33:77:3a:d6:e6:6e:57:c2:06:ac: 11:06:82:2a:b7:f8:21:17:a1:59:f5:59:66:69:b8: 34:70:18:a8:08:1d:1d:e4:d8:c6:59:6b:55:01:8e: fb:46:c7:40:1a:0d:9c:26:bd:48:06:a5:07:db:43: 64:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A4:15:DE:82:E9:21:EE:95:9D:DB:36:71:96:EF:1A:52:1E:39:61 X509v3 Authority Key Identifier: keyid:1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:44:1e:2e:3d:06:eb:9e:01:18:67:7c:9e:32:8c:ee:0d:37: e4:ae:25:f9:e5:68:aa:2b:0e:69:a6:a2:5e:61:86:e9:ce:bc: 7e:eb:df:8e:df:71:19:27:1c:d0:0e:9c:a2:f9:87:c7:e9:e8: 74:de:fc:4f:fb:f1:5d:1b:24:df:54:11:86:f8:2b:03:4c:4e: af:28:71:17:39:91:35:da:30:52:24:7c:11:07:1f:0b:7c:04: 2f:f2:f5:c6:4a:56:42:a0:1f:28:8e:cf:44:23:87:52:7f:6e: 58:69:b9:5f:99:d6:5b:1e:51:3a:b1:f4:e3:8d:30:4d:67:e7: 30:45:4b:ea:dc:1f:50:9c:ff:3a:f8:d5:65:21:82:1a:87:b7: b9:fa:76:f4:52:7e:d0:b6:6e:fe:bf:da:af:82:dd:06:42:1f: 71:ab:5b:0b:f2:97:6e:75:d1:8d:96:5c:a6:19:8d:13:0b:f1: f0:f8:b5:a2:75:73:d6:ac:3a:63:34:25:cb:08:e6:31:18:31: 96:52:a0:84:7d:35:0f:92:1f:d5:74:69:ea:dc:83:3e:4a:b4: f7:41:47:fd:f9:e6:da:e8:e1:8f:1b:79:22:d3:69:49:0a:93: b7:91:00:e2:c1:eb:99:24:45:74:5b:57:38:ba:0c:3c:0f:24: bf:a1:12:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqdTZ/PSz0X7+QWfplGidEwBAFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVERDFCNDJENDQzNjdFM0ZDREQxNjQ4RjY2QTEwNzZD OTUxMDVBNjAeFw0yNjA2MDIyMTQ3MTlaFw0yNjA2MDMyMjQyMTlaMDMxMTAvBgNV BAMTKEMzQTQxNURFODJFOTIxRUU5NTlEREIzNjcxOTZFRjFBNTIxRTM5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeOdaBKAuLuBf8KnZ5nIOxOS/N DuBs3WIeksm32a05L8mZJwFFyHOz8KQj5Jbh/9KOPXehuHoKk6BorWrsVVw4cD1n sdZeNp1gH0gmHf1YyVOqyjyc7m66Vd25R+KMliTc0nJXjvEnhrlx7nxdGr9pSZe7 29sOlPfwkVhvwcgYGVFz2J3R6/zu3mC2mN53eVZsTuFdvF0yRoYKFZDXdsPF4Q3m dr0Fc9qkiYM5p20FUAFip6Z3VnW6jPt2+ILnPIrzCsNKqDTWM3c61uZuV8IGrBEG giq3+CEXoVn1WWZpuDRwGKgIHR3k2MZZa1UBjvtGx0AaDZwmvUgGpQfbQ2RDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw6QV3oLpIe6Vnds2cZbvGlIeOWEwHwYDVR0j BBgwFoAUHt0bQtRDZ+P83RZI9moQdslRBaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZiZDdjZjYtZjU1YS00Yjc4LWE1ODgtZDkyNjFmMTVmNzYzLzAvMUVERDFCNDJE NDQzNjdFM0ZDREQxNjQ4RjY2QTEwNzZDOTUxMDVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUREMUI0MkQ0NDM2N0UzRkNERDE2NDhGNjZBMTA3NkM5NTEw NUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1 ODgtZDkyNjFmMTVmNzYzLzAvMUVERDFCNDJENDQzNjdFM0ZDREQxNjQ4RjY2QTEw NzZDOTUxMDVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMlEHi49BuueARhnfJ4yjO4NN+SuJfnlaKor Dmmmol5hhunOvH7r347fcRknHNAOnKL5h8fp6HTe/E/78V0bJN9UEYb4KwNMTq8o cRc5kTXaMFIkfBEHHwt8BC/y9cZKVkKgHyiOz0Qjh1J/blhpuV+Z1lseUTqx9OON ME1n5zBFS+rcH1Cc/zr41WUhghqHt7n6dvRSftC2bv6/2q+C3QZCH3GrWwvyl251 0Y2WXKYZjRML8fD4taJ1c9asOmM0JcsI5jEYMZZSoIR9NQ+SH9V0aercgz5KtPdB R/355tro4Y8beSLTaUkKk7eRAOLB65kkRXRbVzi6DDwPJL+hEvI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:01 2026 by rpki-client