$ rpki-client -vvf rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft File: 8100B25D994714EDA24AA78389FB6369505FB6A1.mft (raw, json) Hash identifier: QVBOhOjl7VJXi23ddvuxMwQuVDlAzOQM4XYLuzdm2z0= Subject key identifier: 61:45:EB:C6:68:01:F9:52:C5:2A:F9:91:C9:E7:31:DB:0A:99:02:4D Authority key identifier: 81:00:B2:5D:99:47:14:ED:A2:4A:A7:83:89:FB:63:69:50:5F:B6:A1 Certificate issuer: /CN=8100B25D994714EDA24AA78389FB6369505FB6A1 Certificate serial: 529BDECAF56C866A6EC1057A5400E3CF19F5F011 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:47:09 +0000 Manifest this update: Tue 02 Jun 2026 21:42:09 +0000 Manifest next update: Thu 04 Jun 2026 00:45:09 +0000 Files and hashes: 1: 3135372e36362e32392e302f32342d3234203d3e203539323831.roa (hash: Lkb66D/b6HHbDg6MW2ra2IYcOlvwvMwBNjyaQ7Wpqq4=) 2: 8100B25D994714EDA24AA78389FB6369505FB6A1.crl (hash: jZLFtn8kdA3qAGQBHlyZUwULQ06pYrM/adylBVDVG0I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.crl rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 00:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9b:de:ca:f5:6c:86:6a:6e:c1:05:7a:54:00:e3:cf:19:f5:f0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8100B25D994714EDA24AA78389FB6369505FB6A1 Validity Not Before: Jun 2 21:42:09 2026 GMT Not After : Jun 4 00:45:09 2026 GMT Subject: CN=6145EBC66801F952C52AF991C9E731DB0A99024D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:85:09:e7:4c:0e:a9:c8:8b:ad:c6:ae:b0:3a: 56:66:59:a7:6f:db:74:2b:a4:3d:60:79:1b:77:2d: 6e:f0:f3:b8:2b:2f:c2:01:4a:83:28:2a:6d:10:c7: 94:90:12:5c:8f:4a:33:1e:e4:d6:98:8b:91:30:4f: 33:a8:53:91:f1:7f:0c:14:b5:dd:42:31:e2:17:6b: 86:63:d2:8a:f3:89:ac:3d:c2:52:3a:e0:8c:7e:0b: da:b5:d3:04:48:ae:12:08:3b:8c:3b:c9:e4:f7:17: e5:b2:24:70:be:aa:00:6c:ae:00:a2:5c:bc:06:f7: 56:8c:fd:f3:78:a0:c2:2d:5e:d2:b8:fe:a2:80:33: d0:7b:49:f6:97:5c:94:c6:0f:36:54:1e:3f:23:7f: 3e:64:04:e5:15:ce:74:7d:ad:0b:b7:36:74:dc:8d: 10:27:22:c7:cd:5c:c6:95:a9:a1:d3:a3:cd:4d:b5: 4a:73:dc:67:d0:7f:a3:5b:f8:58:4c:e5:df:eb:06: e8:6d:4c:81:a2:75:14:c5:b2:ce:54:e8:17:18:4a: 9d:46:1e:5e:8c:4d:a6:e5:7c:f0:fb:a5:53:6f:ac: ed:60:29:87:40:56:95:56:d1:e6:36:74:79:00:20: 87:aa:e4:48:40:3a:3c:ce:c1:0b:2c:93:b9:cf:61: e2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:45:EB:C6:68:01:F9:52:C5:2A:F9:91:C9:E7:31:DB:0A:99:02:4D X509v3 Authority Key Identifier: keyid:81:00:B2:5D:99:47:14:ED:A2:4A:A7:83:89:FB:63:69:50:5F:B6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:74:26:3a:c5:ff:83:2d:de:7a:75:9a:7c:f3:26:98:b5:19: 6a:0d:07:43:a4:ef:c2:2b:db:89:82:7b:6d:16:27:9a:69:ca: e5:75:94:9c:7b:7c:fd:7f:04:82:f2:08:ce:67:01:81:22:68: 7f:db:15:6a:52:a4:2d:1e:11:61:6f:c3:61:9e:ae:57:d1:62: d5:f6:13:a8:0f:8b:2e:c7:a5:cc:df:e4:fc:91:8a:01:86:9d: ac:9c:be:01:f1:a2:f5:12:50:39:7f:b1:9b:7c:e9:bf:18:b8: 8e:3a:91:28:fd:d1:cd:f0:06:19:39:ce:1d:54:37:bf:c8:53: ee:af:a9:24:74:34:29:f0:f7:eb:5f:34:73:09:94:31:17:77: 32:f9:d6:a0:a5:b9:da:1b:b3:ab:76:f4:9e:16:2e:97:2e:d3: 8b:6d:21:3a:bf:1b:d6:43:d0:a3:f7:fb:fa:9e:3e:f2:f4:77: f3:24:72:3b:db:ca:f7:3f:a8:61:de:50:cd:7f:3f:15:b5:66: b3:f9:67:e1:97:a0:4a:25:f9:91:88:85:b8:8a:7e:e9:1d:ce: 39:00:30:5f:ed:8c:a5:40:15:14:37:da:a9:33:7a:ad:15:a1: 7e:41:0a:ea:24:df:99:ae:01:00:2d:42:a6:b5:96:f7:b3:ab: 62:ba:19:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpveyvVshmpuwQV6VADjzxn18BEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwMEIyNUQ5OTQ3MTRFREEyNEFBNzgzODlGQjYzNjk1 MDVGQjZBMTAeFw0yNjA2MDIyMTQyMDlaFw0yNjA2MDQwMDQ1MDlaMDMxMTAvBgNV BAMTKDYxNDVFQkM2NjgwMUY5NTJDNTJBRjk5MUM5RTczMURCMEE5OTAyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZhQnnTA6pyIutxq6wOlZmWadv 23QrpD1geRt3LW7w87grL8IBSoMoKm0Qx5SQElyPSjMe5NaYi5EwTzOoU5HxfwwU td1CMeIXa4Zj0orziaw9wlI64Ix+C9q10wRIrhIIO4w7yeT3F+WyJHC+qgBsrgCi XLwG91aM/fN4oMItXtK4/qKAM9B7SfaXXJTGDzZUHj8jfz5kBOUVznR9rQu3NnTc jRAnIsfNXMaVqaHTo81NtUpz3GfQf6Nb+FhM5d/rBuhtTIGidRTFss5U6BcYSp1G Hl6MTablfPD7pVNvrO1gKYdAVpVW0eY2dHkAIIeq5EhAOjzOwQssk7nPYeKTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYUXrxmgB+VLFKvmRyecx2wqZAk0wHwYDVR0j BBgwFoAUgQCyXZlHFO2iSqeDiftjaVBftqEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFiNDMzYTUtNzJiMS00NjUzLTk5ZDMtOTQ2OWM4YjhiNzYyLzAvODEwMEIyNUQ5 OTQ3MTRFREEyNEFBNzgzODlGQjYzNjk1MDVGQjZBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MTAwQjI1RDk5NDcxNEVEQTI0QUE3ODM4OUZCNjM2OTUwNUZC NkExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFiNDMzYTUtNzJiMS00NjUzLTk5 ZDMtOTQ2OWM4YjhiNzYyLzAvODEwMEIyNUQ5OTQ3MTRFREEyNEFBNzgzODlGQjYz Njk1MDVGQjZBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEh0JjrF/4Mt3np1mnzzJpi1GWoNB0Ok78Ir 24mCe20WJ5ppyuV1lJx7fP1/BILyCM5nAYEiaH/bFWpSpC0eEWFvw2GerlfRYtX2 E6gPiy7Hpczf5PyRigGGnaycvgHxovUSUDl/sZt86b8YuI46kSj90c3wBhk5zh1U N7/IU+6vqSR0NCnw9+tfNHMJlDEXdzL51qCludobs6t29J4WLpcu04ttITq/G9ZD 0KP3+/qePvL0d/Mkcjvbyvc/qGHeUM1/PxW1ZrP5Z+GXoEol+ZGIhbiKfukdzjkA MF/tjKVAFRQ32qkzeq0VoX5BCuok35muAQAtQqa1lvezq2K6GcA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:06 2026 by rpki-client