$ rpki-client -vvf rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft File: 4887E721DA907B8223025FFDE0F11420EEFD8351.mft (raw, json) Hash identifier: O6r4x5Hge/kA5XRqBq/j+7YCSoIoglk5ZLXTgEmWw5c= Subject key identifier: F0:8B:BD:C7:37:52:BA:10:EC:17:16:D2:A4:1B:F8:8F:FA:AC:5B:42 Authority key identifier: 48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 Certificate issuer: /CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Certificate serial: 21D6D0DECEB9E1F43BDA2436EAA6A52B0093BC5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 06:38:18 +0000 Manifest this update: Tue 02 Jun 2026 06:33:18 +0000 Manifest next update: Wed 03 Jun 2026 10:23:18 +0000 Files and hashes: 1: 4887E721DA907B8223025FFDE0F11420EEFD8351.crl (hash: Ky9I48Wvtitv56GWmnyMgr+NIR2sq6E3PUucw2j73jg=) 2: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: 4n1fjzMSG2wHW3ycKcIEduoFrdhB7CHV6B09r5tY0kg=) 3: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: S7aZljmglE5xN0p6gxyZ/h445nngm6FqwRnmfuS0RS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d6:d0:de:ce:b9:e1:f4:3b:da:24:36:ea:a6:a5:2b:00:93:bc:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4887E721DA907B8223025FFDE0F11420EEFD8351 Validity Not Before: Jun 2 06:33:18 2026 GMT Not After : Jun 3 10:23:18 2026 GMT Subject: CN=F08BBDC73752BA10EC1716D2A41BF88FFAAC5B42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:88:41:55:f2:a3:7c:9e:3a:47:1e:8e:b8: 0b:c5:3a:2d:a7:e4:f5:9a:d3:2b:35:33:a3:c4:27: 9c:11:3b:75:6b:10:0c:4c:03:24:f6:00:e4:85:0b: 79:10:25:26:09:4e:0a:c2:33:81:1f:17:45:cc:00: 33:04:27:c8:9b:e9:f9:01:60:b4:3e:28:5d:b8:c0: 1e:21:49:0c:1b:4f:b9:47:f8:8d:83:ef:92:70:e4: 9d:4a:6a:4a:21:5b:b6:0e:35:a0:77:d3:23:22:9b: 06:25:76:42:92:80:16:d5:92:ad:87:ca:55:4c:37: 83:6c:69:53:d1:6b:fb:e5:77:3a:f2:f8:bf:58:79: 23:b9:90:f2:39:41:92:9b:5d:f1:8b:2d:ca:5c:43: 95:2f:7b:4b:6d:32:15:3f:74:7b:e9:28:06:8d:8f: 65:6c:93:c2:67:57:72:22:e2:86:3b:5f:e4:03:4a: 45:51:59:d1:b7:e1:47:16:64:58:79:61:f7:e7:0b: e0:ef:3c:4e:c5:95:8c:31:2d:85:b5:b9:6b:85:e7: de:35:dd:6e:b6:24:e8:c5:62:9e:d4:68:c4:7d:02: 97:aa:7c:19:43:bd:c2:d5:54:ec:e2:7f:49:2e:f6: 69:10:45:73:4e:6b:94:b3:0f:99:48:21:ed:a2:22: 7d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8B:BD:C7:37:52:BA:10:EC:17:16:D2:A4:1B:F8:8F:FA:AC:5B:42 X509v3 Authority Key Identifier: keyid:48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5a:6f:79:4f:dd:a1:32:bd:a0:9d:4b:e0:64:4c:be:a7:e7: 50:10:67:c2:87:a1:1a:9c:bc:bf:36:67:05:cd:d3:42:93:4c: c6:57:6b:65:30:b0:45:d9:95:23:c1:58:9c:9e:da:57:d7:69: 91:ba:08:8b:67:dc:5c:bb:5a:5c:a2:59:a9:17:1c:2f:22:0d: 58:5a:6f:a0:dd:d6:a2:36:a4:55:ee:1f:db:14:76:94:20:57: 88:ad:f4:4a:45:27:d7:06:66:83:55:14:6d:25:0c:bc:88:55: be:25:47:44:9b:8e:27:24:93:eb:e6:8b:75:f9:b0:36:1a:4a: 5c:95:fc:df:52:e2:e3:d7:e5:ef:ff:43:69:55:07:ce:93:b5: a0:90:b4:0e:74:1a:89:7e:9a:da:37:07:3b:b7:66:d1:ed:b2: 67:a7:55:18:a7:20:54:29:79:c5:aa:56:18:4b:28:f4:a1:72: 1e:e1:f3:23:31:78:24:47:e1:0d:d1:68:cb:99:62:1e:ba:a1: cd:b4:23:aa:e0:63:dd:0b:62:cc:86:82:bf:df:ef:33:21:47: 45:d4:84:45:38:6c:5e:e5:f8:5b:81:63:48:3a:f2:44:07:eb: 16:5d:95:6d:71:32:51:f0:5e:cf:16:f5:70:22:57:50:d0:f4: bf:d4:f1:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdbQ3s654fQ72iQ26qalKwCTvFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0MjBF RUZEODM1MTAeFw0yNjA2MDIwNjMzMThaFw0yNjA2MDMxMDIzMThaMDMxMTAvBgNV BAMTKEYwOEJCREM3Mzc1MkJBMTBFQzE3MTZEMkE0MUJGODhGRkFBQzVCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oIhBVfKjfJ46Rx6OuAvFOi2n 5PWa0ys1M6PEJ5wRO3VrEAxMAyT2AOSFC3kQJSYJTgrCM4EfF0XMADMEJ8ib6fkB YLQ+KF24wB4hSQwbT7lH+I2D75Jw5J1KakohW7YONaB30yMimwYldkKSgBbVkq2H ylVMN4NsaVPRa/vldzry+L9YeSO5kPI5QZKbXfGLLcpcQ5Uve0ttMhU/dHvpKAaN j2Vsk8JnV3Ii4oY7X+QDSkVRWdG34UcWZFh5YffnC+DvPE7FlYwxLYW1uWuF5941 3W62JOjFYp7UaMR9ApeqfBlDvcLVVOzif0ku9mkQRXNOa5SzD5lIIe2iIn3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Iu9xzdSuhDsFxbSpBv4j/qsW0IwHwYDVR0j BBgwFoAUSIfnIdqQe4IjAl/94PEUIO79g1EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM0MGRmMTMtYzRlOS00MjE4LWIxMTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFE QTkwN0I4MjIzMDI1RkZERTBGMTE0MjBFRUZEODM1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80ODg3RTcyMURBOTA3QjgyMjMwMjVGRkRFMEYxMTQyMEVFRkQ4 MzUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvNDg4N0U3MjFEQTkwN0I4MjIzMDI1RkZERTBGMTE0 MjBFRUZEODM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpab3lP3aEyvaCdS+BkTL6n51AQZ8KHoRqc vL82ZwXN00KTTMZXa2UwsEXZlSPBWJye2lfXaZG6CItn3Fy7WlyiWakXHC8iDVha b6Dd1qI2pFXuH9sUdpQgV4it9EpFJ9cGZoNVFG0lDLyIVb4lR0Sbjickk+vmi3X5 sDYaSlyV/N9S4uPX5e//Q2lVB86TtaCQtA50Gol+mto3Bzu3ZtHtsmenVRinIFQp ecWqVhhLKPShch7h8yMxeCRH4Q3RaMuZYh66oc20I6rgY90LYsyGgr/f7zMhR0XU hEU4bF7l+FuBY0g68kQH6xZdlW1xMlHwXs8W9XAiV1DQ9L/U8W4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:59 2026 by rpki-client