$ rpki-client -vvf rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft File: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft (raw, json) Hash identifier: Oc+IyxGYxYaqEXnKJGbKsKWqPp0g0ow5ouUi4Yzu8As= Subject key identifier: 0D:93:E7:85:BB:83:D7:91:08:29:6E:76:FE:AE:03:DB:F1:EF:CA:FA Authority key identifier: 1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD Certificate issuer: /CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Certificate serial: 6C4CB617FF3B37F97086037EA2827D9B0AC35A55 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:34:25 +0000 Manifest this update: Tue 02 Jun 2026 23:29:25 +0000 Manifest next update: Thu 04 Jun 2026 02:32:25 +0000 Files and hashes: 1: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl (hash: q60Ikb0SIVGGdeGiXNhH57b68v/a5fx5bgjhG9Yvvm4=) 2: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: pW3XBmKi6nT+DFL99ofR2D1BtLS4+aP/u1rjwoOPDjI=) 3: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: 3u+krw4MaugdVPNW0321aXdI9rwWYGxYt6HAFFT4OAw=) 4: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: uLEgNCgaAjsQjxP4KxUR5P3CjpsSxN+zwR1ag08fAfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4c:b6:17:ff:3b:37:f9:70:86:03:7e:a2:82:7d:9b:0a:c3:5a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Validity Not Before: Jun 2 23:29:25 2026 GMT Not After : Jun 4 02:32:25 2026 GMT Subject: CN=0D93E785BB83D79108296E76FEAE03DBF1EFCAFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9d:43:d7:2b:ca:71:8f:42:9b:30:a3:58:f1: 75:c1:19:bb:0b:c8:40:b4:37:48:4b:d7:18:29:51: 74:32:1c:a1:ff:19:a2:22:e0:53:c3:3f:c5:19:9b: eb:3d:e0:82:dc:8d:35:e9:d3:00:57:52:e7:c4:ab: 9e:45:7e:81:9a:44:73:55:ce:50:1c:96:60:08:e8: 61:fb:81:2d:21:93:cb:7f:9e:c8:30:82:14:bd:16: 7d:b2:ae:9c:02:97:26:b4:c5:d1:d9:2b:7e:bc:e9: 87:39:3a:7e:8a:79:1c:d4:9e:2d:8e:6d:72:d2:a3: 94:27:fc:51:2d:4c:6c:ea:54:51:ca:73:2e:de:1f: 7c:3e:f6:90:e6:ca:74:8a:ff:d2:6b:0e:ff:ea:74: ea:22:07:ee:9a:4d:88:ee:63:7f:73:83:15:91:04: 88:06:76:e3:b3:a6:ad:31:df:30:64:42:fe:4d:67: da:c5:c7:66:ed:17:52:a9:cb:a5:73:40:a5:ac:6e: 54:fb:fc:9c:7c:05:6d:e6:01:1f:1b:59:70:bb:1c: ab:12:74:e6:b6:c1:3f:2e:24:84:88:63:23:75:8e: 50:4d:51:39:79:e2:4a:e8:28:b3:99:a9:49:c8:42: 44:1b:e5:95:82:10:cc:17:cd:be:d9:19:79:c0:0a: 64:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:93:E7:85:BB:83:D7:91:08:29:6E:76:FE:AE:03:DB:F1:EF:CA:FA X509v3 Authority Key Identifier: keyid:1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:21:f7:c7:98:1c:41:2f:fe:9c:fb:08:13:d1:31:c0:3a:3f: 8d:95:bc:f7:64:f7:8f:3a:7c:44:4f:24:e7:ce:95:22:a9:e1: a5:34:63:5d:8d:f4:43:ea:ce:87:ad:11:43:3a:bb:eb:a9:43: c8:42:b2:71:b4:5a:92:05:bc:65:4f:39:4a:15:93:95:24:97: fb:b0:9e:bd:36:26:e3:b0:4d:e6:6f:d2:57:3f:1b:c3:d3:d1: 83:54:e9:8d:8d:17:c5:a3:8a:00:6f:84:d7:15:4a:43:4b:95: 24:2e:d4:0e:4e:b4:31:eb:cc:61:17:a2:e7:5f:60:82:ec:42: d2:4e:f3:92:89:43:30:94:de:49:78:a7:f4:23:5f:64:d1:cf: 33:05:d6:51:5b:ff:fd:70:5c:25:0a:c8:51:86:dc:fc:fe:3a: 1a:3a:c1:46:9d:6d:cc:c3:71:60:94:fb:60:0c:f2:02:26:19: 57:79:b2:0b:1c:66:2e:5c:ea:b5:e5:a8:ea:b2:8e:11:da:cb: 6a:32:8a:56:06:15:93:58:c8:b2:6e:f6:43:52:9f:a2:07:80: b2:a0:33:19:03:56:86:a3:41:be:fe:7d:41:5f:a7:9a:e3:e8: 5f:da:68:2a:77:16:ff:f3:19:90:2b:a5:35:6d:e9:50:54:73: d1:db:1f:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEy2F/87N/lwhgN+ooJ9mwrDWlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERC Rjc5ODNBRDAeFw0yNjA2MDIyMzI5MjVaFw0yNjA2MDQwMjMyMjVaMDMxMTAvBgNV BAMTKDBEOTNFNzg1QkI4M0Q3OTEwODI5NkU3NkZFQUUwM0RCRjFFRkNBRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmnUPXK8pxj0KbMKNY8XXBGbsL yEC0N0hL1xgpUXQyHKH/GaIi4FPDP8UZm+s94ILcjTXp0wBXUufEq55FfoGaRHNV zlAclmAI6GH7gS0hk8t/nsgwghS9Fn2yrpwClya0xdHZK3686Yc5On6KeRzUni2O bXLSo5Qn/FEtTGzqVFHKcy7eH3w+9pDmynSK/9JrDv/qdOoiB+6aTYjuY39zgxWR BIgGduOzpq0x3zBkQv5NZ9rFx2btF1Kpy6VzQKWsblT7/Jx8BW3mAR8bWXC7HKsS dOa2wT8uJISIYyN1jlBNUTl54kroKLOZqUnIQkQb5ZWCEMwXzb7ZGXnACmSlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDZPnhbuD15EIKW52/q4D2/HvyvowHwYDVR0j BBgwFoAUHTmw2RdICoXLs7DZ0J4iDb95g60wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJiZmFiMDktYzFlOS00NGQ4LTgxOWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkx NzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERCRjc5ODNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDM5QjBEOTE3NDgwQTg1Q0JCM0IwRDlEMDlFMjIwREJGNzk4 M0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIy MERCRjc5ODNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0h98eYHEEv/pz7CBPRMcA6P42VvPdk9486 fERPJOfOlSKp4aU0Y12N9EPqzoetEUM6u+upQ8hCsnG0WpIFvGVPOUoVk5Ukl/uw nr02JuOwTeZv0lc/G8PT0YNU6Y2NF8WjigBvhNcVSkNLlSQu1A5OtDHrzGEXoudf YILsQtJO85KJQzCU3kl4p/QjX2TRzzMF1lFb//1wXCUKyFGG3Pz+Oho6wUadbczD cWCU+2AM8gImGVd5sgscZi5c6rXlqOqyjhHay2oyilYGFZNYyLJu9kNSn6IHgLKg MxkDVoajQb7+fUFfp5rj6F/aaCp3Fv/zGZArpTVt6VBUc9HbH/w= -----END CERTIFICATE-----Generated at Wed Jun 3 04:20:59 2026 by rpki-client