$ rpki-client -vvf rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft File: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft (raw, json) Hash identifier: CdBxFOudGtWn/c5WnNWYyNtoM666flwP1MvWEdJdfJo= Subject key identifier: E9:1E:0A:46:1F:0A:90:4E:6C:3D:76:73:91:6F:9B:A8:51:79:9E:F7 Authority key identifier: 12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4 Certificate issuer: /CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4 Certificate serial: 574E859847F8E252BC5D9AB052A7EF147F753A81 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:42:06 +0000 Manifest this update: Tue 02 Jun 2026 09:37:06 +0000 Manifest next update: Wed 03 Jun 2026 10:46:06 +0000 Files and hashes: 1: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pD8AAJGfek8X+gmcTJvavhY6u1lO1X5RIEZ8T14MLvE=) 2: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl (hash: HesZMV+7/JZkN5CVL/KUxViCJS6a9qTbTKoFEYJqYwM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4e:85:98:47:f8:e2:52:bc:5d:9a:b0:52:a7:ef:14:7f:75:3a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4 Validity Not Before: Jun 2 09:37:06 2026 GMT Not After : Jun 3 10:46:06 2026 GMT Subject: CN=E91E0A461F0A904E6C3D7673916F9BA851799EF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:42:c9:0d:2c:47:b2:9d:d3:77:95:d9:4b:36: e9:f3:1e:40:7d:40:5c:9f:db:b3:8a:ba:15:46:85: 54:3c:b3:6b:09:af:0b:8d:28:77:3c:49:01:69:9c: 04:40:b5:97:2e:df:56:3c:0a:8e:e3:4e:4b:ac:91: a0:2d:d4:d2:89:ca:ae:4c:f4:83:02:72:b4:f6:54: b5:43:02:46:b1:5f:67:b0:9a:cd:53:54:f9:b3:9c: 9e:00:c8:75:0d:c7:35:01:33:c0:42:7f:87:66:64: 8c:fe:ef:dd:a7:49:f0:b0:cf:b4:f3:0f:d5:1a:88: fe:71:b9:71:d8:bc:b6:50:a7:26:af:a1:be:f3:01: 49:92:c8:20:8b:0f:5b:4a:61:87:43:f0:8a:9b:09: d2:b5:cc:98:61:6c:ab:d2:ea:68:b6:da:b5:18:43: c9:7c:bf:40:b9:b4:1d:f5:70:bd:7d:21:9f:cd:21: ec:ff:d7:d6:e2:39:53:09:81:ff:fe:16:1b:d2:50: 38:d0:77:b7:6e:db:12:a3:b0:33:8c:91:dc:b2:57: 11:54:33:45:b2:95:87:d4:94:c6:f7:e5:d1:5b:f0: 02:28:b4:e7:04:4c:74:97:95:20:99:36:7b:0f:b7: 24:31:73:42:f0:3c:d2:96:c6:98:54:ab:3e:65:64: 77:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1E:0A:46:1F:0A:90:4E:6C:3D:76:73:91:6F:9B:A8:51:79:9E:F7 X509v3 Authority Key Identifier: keyid:12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:72:16:03:1d:35:22:4a:5c:9c:f7:c7:c7:8d:d1:8a:22:5a: 26:e4:6d:00:07:63:db:84:8c:a3:c6:1e:1a:16:94:46:88:81: fc:dd:78:6e:7b:4a:6b:c8:d9:8d:7d:68:87:37:0c:24:8d:7b: b6:f2:2c:11:09:59:45:bb:b1:ad:78:45:0e:ee:d6:22:2d:ae: 96:67:12:bf:01:86:1f:6f:0b:71:01:ea:c3:01:d0:74:be:9c: 5f:54:b6:07:31:2b:50:75:11:ff:82:c6:f5:92:df:38:f3:85: 6c:25:3c:9f:16:eb:64:0b:c3:a8:a6:56:4a:f6:3c:11:5f:39: e0:7d:b5:ae:80:10:09:14:e4:f5:52:75:a8:9e:c9:b0:44:4e: af:92:6e:fb:0c:5c:87:b6:e2:93:39:6f:ae:81:c4:41:c1:0a: 6c:fa:ad:dd:de:c6:81:87:11:c8:26:9f:f8:d0:b4:16:37:4e: 5a:a1:cf:1b:2f:fc:86:44:22:a1:b0:ec:f2:63:27:7a:e4:4e: 51:b7:e0:75:d4:ff:79:b0:5a:11:f3:7b:6f:22:ae:ab:a7:c1: 4a:2a:25:77:e4:f3:12:1c:eb:b7:e8:c8:88:fc:eb:8b:ab:ec: 6c:00:63:e2:ee:ac:00:94:7f:13:c5:8d:73:97:b0:a2:cb:47: b7:87:86:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV06FmEf44lK8XZqwUqfvFH91OoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1MURF NUVFRTFDNDAeFw0yNjA2MDIwOTM3MDZaFw0yNjA2MDMxMDQ2MDZaMDMxMTAvBgNV BAMTKEU5MUUwQTQ2MUYwQTkwNEU2QzNENzY3MzkxNkY5QkE4NTE3OTlFRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQskNLEeyndN3ldlLNunzHkB9 QFyf27OKuhVGhVQ8s2sJrwuNKHc8SQFpnARAtZcu31Y8Co7jTkuskaAt1NKJyq5M 9IMCcrT2VLVDAkaxX2ewms1TVPmznJ4AyHUNxzUBM8BCf4dmZIz+792nSfCwz7Tz D9UaiP5xuXHYvLZQpyavob7zAUmSyCCLD1tKYYdD8IqbCdK1zJhhbKvS6mi22rUY Q8l8v0C5tB31cL19IZ/NIez/19biOVMJgf/+FhvSUDjQd7du2xKjsDOMkdyyVxFU M0WylYfUlMb35dFb8AIotOcETHSXlSCZNnsPtyQxc0LwPNKWxphUqz5lZHcLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6R4KRh8KkE5sPXZzkW+bqFF5nvcwHwYDVR0j BBgwFoAUElMx6ODNcZfH7oT1CHh1HeXu4cQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI1OGRjZWEtYjM4My00NDMyLWFkMDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThF MENENzE5N0M3RUU4NEY1MDg3ODc1MURFNUVFRTFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjUzMzFFOEUwQ0Q3MTk3QzdFRTg0RjUwODc4NzUxREU1RUVF MUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1 MURFNUVFRTFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVyFgMdNSJKXJz3x8eN0YoiWibkbQAHY9uE jKPGHhoWlEaIgfzdeG57SmvI2Y19aIc3DCSNe7byLBEJWUW7sa14RQ7u1iItrpZn Er8Bhh9vC3EB6sMB0HS+nF9UtgcxK1B1Ef+CxvWS3zjzhWwlPJ8W62QLw6imVkr2 PBFfOeB9ta6AEAkU5PVSdaieybBETq+SbvsMXIe24pM5b66BxEHBCmz6rd3exoGH Ecgmn/jQtBY3Tlqhzxsv/IZEIqGw7PJjJ3rkTlG34HXU/3mwWhHze28irqunwUoq JXfk8xIc67foyIj864ur7GwAY+LurACUfxPFjXOXsKLLR7eHhp4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:41 2026 by rpki-client