$ rpki-client -vvf rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft File: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft (raw, json) Hash identifier: d6PdoVjqxVk2iBgx0WZSxgen1L+ppj9O1O8F/8wWCTs= Subject key identifier: BB:B6:A5:98:21:E4:A7:7C:50:18:A5:76:28:5F:5A:E2:1D:1F:B2:00 Authority key identifier: DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 Certificate issuer: /CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Certificate serial: 2D1FBCCE0F1910C11660DC7FFFF413B479E8A5F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:13:17 +0000 Manifest this update: Tue 02 Jun 2026 19:08:17 +0000 Manifest next update: Wed 03 Jun 2026 22:05:17 +0000 Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: FP5pxHLBZtIDduyXGtgh7O/QJiYCmUVEXRSY7J06kQM=) 2: DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl (hash: xs2+dbr5M5dX2IcSaxv3IWP96NfQUfUA7nchX7nDLKc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:1f:bc:ce:0f:19:10:c1:16:60:dc:7f:ff:f4:13:b4:79:e8:a5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5 Validity Not Before: Jun 2 19:08:17 2026 GMT Not After : Jun 3 22:05:17 2026 GMT Subject: CN=BBB6A59821E4A77C5018A576285F5AE21D1FB200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8a:bd:b7:3a:42:1a:89:ce:90:70:90:97:d3: df:d8:3c:43:77:81:85:69:7e:32:ba:d1:56:46:5e: a3:bb:98:ee:d4:7a:d3:0d:fb:d7:a0:8d:44:35:12: a1:6f:1c:a1:de:9c:4e:62:89:d7:14:75:8c:e1:67: 3c:d5:00:0f:2d:5d:c9:37:aa:33:8a:f3:a1:7d:a0: 55:4a:7d:27:47:8c:dc:7c:0b:1b:1d:ba:8c:f1:fc: 2f:43:87:f4:3d:47:4c:90:c5:a2:d4:95:6a:ad:e4: fb:4c:ba:bf:68:1b:ae:e7:31:1a:24:c9:5b:38:51: e0:ff:a6:d6:a8:a1:ee:8f:02:d9:84:e8:8a:84:57: 30:b8:87:0a:06:7b:9f:a7:90:a5:5a:c6:67:57:a2: 8a:64:fd:6f:43:4e:e6:9f:88:44:21:ed:96:3e:c3: 4d:e4:e8:cb:0b:0d:2e:8c:42:4d:fd:b7:c4:65:0d: 5a:fa:f1:23:f8:97:d4:8a:c5:96:f9:8a:ad:e3:8b: 3c:ab:51:e2:82:cb:8e:b4:ae:82:f7:fa:23:c9:60: c6:a5:33:43:c8:e6:2a:ac:eb:56:11:27:85:36:e0: 66:2c:84:c8:9e:00:11:e0:fa:99:e8:62:52:7c:b3: 77:31:97:e6:63:ea:6a:98:2a:5f:de:34:41:59:4f: b4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B6:A5:98:21:E4:A7:7C:50:18:A5:76:28:5F:5A:E2:1D:1F:B2:00 X509v3 Authority Key Identifier: keyid:DE:17:2F:4C:F0:CE:42:30:A5:10:6C:D6:AC:0C:25:A6:3A:72:C4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/DE172F4CF0CE4230A5106CD6AC0C25A63A72C4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:5c:05:5f:b4:f1:58:15:1a:03:e9:0e:93:b4:17:53:0e:47: f4:0c:fa:b1:93:81:5a:70:b0:2b:43:be:31:61:68:e9:0d:28: fd:a3:d8:3e:9b:81:f3:ae:64:6c:d5:f5:df:b8:20:40:32:5e: 52:a2:2e:af:1f:be:ad:df:74:39:96:01:02:94:e3:d2:27:e5: ab:c1:9b:aa:a1:bb:6b:c2:4b:cb:a6:47:2e:82:72:cc:03:82: 6f:e9:e7:ae:5e:e2:d0:84:ac:a0:41:7f:9b:7c:da:69:6c:8d: 51:33:c4:33:7b:46:e1:0e:02:36:9f:f1:2a:ae:35:24:cd:95: 0e:a6:23:74:09:57:f5:90:f0:db:4f:77:84:a2:09:36:36:a4: 13:09:8e:63:20:b3:3c:34:78:2c:a1:01:91:be:80:b4:27:2d: 5a:23:f5:d5:6c:fd:83:58:41:8f:9c:f6:ae:6e:30:6b:b9:22: 3f:79:c3:c4:a3:c2:e7:8c:c1:ba:75:5d:0f:48:45:1b:72:ad: fd:b0:4c:13:9b:e5:35:66:b2:97:11:b6:76:1e:b2:1c:72:83: 3a:55:16:9a:f3:2a:2e:e2:c4:15:ac:11:96:1b:e8:99:a8:4e: f8:70:50:47:fd:38:1a:08:e9:3e:39:83:99:16:05:ca:7c:1e: 1c:aa:84:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULR+8zg8ZEMEWYNx///QTtHnopfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYz QTcyQzRBNTAeFw0yNjA2MDIxOTA4MTdaFw0yNjA2MDMyMjA1MTdaMDMxMTAvBgNV BAMTKEJCQjZBNTk4MjFFNEE3N0M1MDE4QTU3NjI4NUY1QUUyMUQxRkIyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSir23OkIaic6QcJCX09/YPEN3 gYVpfjK60VZGXqO7mO7UetMN+9egjUQ1EqFvHKHenE5iidcUdYzhZzzVAA8tXck3 qjOK86F9oFVKfSdHjNx8Cxsduozx/C9Dh/Q9R0yQxaLUlWqt5PtMur9oG67nMRok yVs4UeD/ptaooe6PAtmE6IqEVzC4hwoGe5+nkKVaxmdXoopk/W9DTuafiEQh7ZY+ w03k6MsLDS6MQk39t8RlDVr68SP4l9SKxZb5iq3jizyrUeKCy460roL3+iPJYMal M0PI5iqs61YRJ4U24GYshMieABHg+pnoYlJ8s3cxl+Zj6mqYKl/eNEFZT7RLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu7almCHkp3xQGKV2KF9a4h0fsgAwHwYDVR0j BBgwFoAU3hcvTPDOQjClEGzWrAwlpjpyxKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQyYzFmMzItODFhYy00MTE4LWJlMmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENG MENFNDIzMEE1MTA2Q0Q2QUMwQzI1QTYzQTcyQzRBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERTE3MkY0Q0YwQ0U0MjMwQTUxMDZDRDZBQzBDMjVBNjNBNzJD NEE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvREUxNzJGNENGMENFNDIzMEE1MTA2Q0Q2QUMwQzI1 QTYzQTcyQzRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNcBV+08VgVGgPpDpO0F1MOR/QM+rGTgVpw sCtDvjFhaOkNKP2j2D6bgfOuZGzV9d+4IEAyXlKiLq8fvq3fdDmWAQKU49In5avB m6qhu2vCS8umRy6CcswDgm/p565e4tCErKBBf5t82mlsjVEzxDN7RuEOAjaf8Squ NSTNlQ6mI3QJV/WQ8NtPd4SiCTY2pBMJjmMgszw0eCyhAZG+gLQnLVoj9dVs/YNY QY+c9q5uMGu5Ij95w8SjwueMwbp1XQ9IRRtyrf2wTBOb5TVmspcRtnYeshxygzpV FprzKi7ixBWsEZYb6JmoTvhwUEf9OBoI6T45g5kWBcp8HhyqhEw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:45 2026 by rpki-client