$ rpki-client -vvf rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft File: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft (raw, json) Hash identifier: MWzcePY5LYQGfXUiwcl9d8cM64yGb6Gz4iMTostVybg= Subject key identifier: F2:A4:E4:2F:12:E2:E4:01:08:5D:31:52:51:17:8C:99:61:DD:64:F5 Authority key identifier: 47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6 Certificate issuer: /CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6 Certificate serial: 74537E9ED991EF1C660C4F2CCEED7A422C2A8608 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:15:45 +0000 Manifest this update: Tue 02 Jun 2026 17:10:45 +0000 Manifest next update: Wed 03 Jun 2026 19:44:45 +0000 Files and hashes: 1: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl (hash: IRqIY2iYXkOEePP/vfdCAw3MCnRoCT+dMU3i8gWpi20=) 2: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: Cw+u02HjQBz4UCjHcubQmRW6z/LpqGrri/10Si/nkow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:53:7e:9e:d9:91:ef:1c:66:0c:4f:2c:ce:ed:7a:42:2c:2a:86:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6 Validity Not Before: Jun 2 17:10:45 2026 GMT Not After : Jun 3 19:44:45 2026 GMT Subject: CN=F2A4E42F12E2E401085D315251178C9961DD64F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:3f:00:d5:dd:83:45:dc:7b:38:06:c3:f2: 86:f5:fd:ab:6c:e7:68:b8:7a:2b:b6:b1:fc:10:db: e9:15:2e:95:f2:e8:79:27:d8:78:76:ae:81:bf:f8: 6f:0b:af:7c:a6:cd:2d:dc:b7:8a:55:32:4a:9c:c5: 11:eb:9a:ba:dd:bb:82:6b:24:7f:71:3a:ff:5f:5b: 0e:c9:c2:e0:f1:e1:9a:27:a5:79:d4:f2:86:ab:51: 0c:64:b4:9f:0f:4e:d7:5e:1d:e1:64:c2:f7:63:a4: da:cc:d7:28:53:26:d2:d7:2c:fa:41:d2:8b:1b:c3: b2:a2:e2:02:b3:b4:99:9e:43:fa:01:e2:ba:8b:1e: 5c:3e:04:6e:25:20:13:ef:dc:61:0c:a2:32:9f:1d: 11:63:a6:fe:a9:ee:7c:96:71:0e:f8:f7:0c:15:2f: a9:bc:18:b4:aa:b7:5c:37:52:b1:b4:fa:6c:56:9c: c8:1f:08:cf:4b:23:58:b7:b6:f6:b0:6d:ac:95:83: ce:cd:c5:24:b7:9a:10:a4:2f:02:c0:9e:24:ed:9d: 26:52:48:91:6e:d6:f6:c4:3f:39:fc:c9:ce:53:da: fd:5c:a4:46:88:2f:aa:77:32:e6:94:a2:78:4c:7f: c8:2a:4a:99:13:5b:83:17:d3:6e:5d:14:d7:8e:c6: ca:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A4:E4:2F:12:E2:E4:01:08:5D:31:52:51:17:8C:99:61:DD:64:F5 X509v3 Authority Key Identifier: keyid:47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f8:4b:68:96:8c:f5:ae:06:a5:18:17:3f:f2:6a:06:8e:ef: e3:1d:d2:45:4d:ff:54:c3:06:6d:15:8a:a9:49:cd:3b:58:8e: c5:d9:23:a9:61:e2:49:c6:f4:85:ea:6b:e1:ba:d9:60:f9:51: 47:e2:d6:c8:bb:7c:0d:d9:49:c6:b3:58:25:91:ff:b0:b2:cf: bc:62:6d:a3:f1:2f:9a:55:98:50:04:99:9c:91:60:12:8c:4a: 05:03:54:90:5a:69:ea:46:87:82:a2:f6:37:6b:04:0b:b7:b8: d9:20:1a:df:f1:a7:8e:f0:9b:62:3e:15:d8:18:d3:d5:4d:e5: 74:88:5f:cf:8a:f4:aa:d1:47:bf:33:73:a6:68:ff:6f:8b:31: 47:8d:dc:f9:ad:ca:f4:ac:4b:1f:85:92:ec:8e:f0:3c:aa:47: d7:6c:23:8d:22:c2:e1:3c:36:1a:ad:39:7d:e0:1b:e5:b5:81: bf:bd:1d:3a:0c:f8:b9:c5:e9:c5:da:44:bc:6d:c5:da:b3:bf: fd:34:22:ca:0d:ff:bb:d3:d5:9b:af:16:91:3d:3b:73:3b:68: 75:94:2c:0f:4c:9b:24:12:0e:02:4b:17:32:db:1a:f7:3c:6e: 8e:2e:0c:1d:61:c9:bd:cb:80:04:04:23:9b:9b:76:2e:4c:df: ca:48:25:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdFN+ntmR7xxmDE8szu16QiwqhggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc5QjkyOERCRUU5MDAxQjk5QjIxRkMzQ0EwQkE1RjM3 RDEwQ0NBNjAeFw0yNjA2MDIxNzEwNDVaFw0yNjA2MDMxOTQ0NDVaMDMxMTAvBgNV BAMTKEYyQTRFNDJGMTJFMkU0MDEwODVEMzE1MjUxMTc4Qzk5NjFERDY0RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDz8A1d2DRdx7OAbD8ob1/ats 52i4eiu2sfwQ2+kVLpXy6Hkn2Hh2roG/+G8Lr3ymzS3ct4pVMkqcxRHrmrrdu4Jr JH9xOv9fWw7JwuDx4ZonpXnU8oarUQxktJ8PTtdeHeFkwvdjpNrM1yhTJtLXLPpB 0osbw7Ki4gKztJmeQ/oB4rqLHlw+BG4lIBPv3GEMojKfHRFjpv6p7nyWcQ749wwV L6m8GLSqt1w3UrG0+mxWnMgfCM9LI1i3tvawbayVg87NxSS3mhCkLwLAniTtnSZS SJFu1vbEPzn8yc5T2v1cpEaIL6p3MuaUonhMf8gqSpkTW4MX025dFNeOxsolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8qTkLxLi5AEIXTFSUReMmWHdZPUwHwYDVR0j BBgwFoAUR5uSjb7pABuZsh/Dygul830QzKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQzZjI5ZWEtODc0YS00ZDFhLWFiY2MtNzUyOTNjYjUxYTZkLzAvNDc5QjkyOERC RUU5MDAxQjk5QjIxRkMzQ0EwQkE1RjM3RDEwQ0NBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NzlCOTI4REJFRTkwMDFCOTlCMjFGQzNDQTBCQTVGMzdEMTBD Q0E2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvNDc5QjkyOERCRUU5MDAxQjk5QjIxRkMzQ0EwQkE1 RjM3RDEwQ0NBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/4S2iWjPWuBqUYFz/yagaO7+Md0kVN/1TD Bm0ViqlJzTtYjsXZI6lh4knG9IXqa+G62WD5UUfi1si7fA3ZScazWCWR/7Cyz7xi baPxL5pVmFAEmZyRYBKMSgUDVJBaaepGh4Ki9jdrBAu3uNkgGt/xp47wm2I+FdgY 09VN5XSIX8+K9KrRR78zc6Zo/2+LMUeN3PmtyvSsSx+FkuyO8DyqR9dsI40iwuE8 NhqtOX3gG+W1gb+9HToM+LnF6cXaRLxtxdqzv/00IsoN/7vT1ZuvFpE9O3M7aHWU LA9MmyQSDgJLFzLbGvc8bo4uDB1hyb3LgAQEI5ubdi5M38pIJYc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:53 2026 by rpki-client