$ rpki-client -vvf rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft File: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft (raw, json) Hash identifier: wtdMEK6coCdwzGYiba+81EKaPRnplXG1t85jo+NsAO8= Subject key identifier: D6:E2:49:40:CE:4D:FB:92:54:60:0E:23:25:A1:AA:C1:50:90:03:12 Authority key identifier: D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 Certificate issuer: /CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Certificate serial: 47A14B0AB8BD2AF67D28F733CD1A6F6F143073CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:36:43 +0000 Manifest this update: Wed 03 Jun 2026 01:31:43 +0000 Manifest next update: Thu 04 Jun 2026 02:09:43 +0000 Files and hashes: 1: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl (hash: Lr2Ldn7YdagPFzixrj30GbeUlYjQ85aEqOaUaUjh5kI=) 2: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: nTkoyc0s6mnt2tkKBJEFQNLgWGbaxLyUZAhyR5bx0jE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a1:4b:0a:b8:bd:2a:f6:7d:28:f7:33:cd:1a:6f:6f:14:30:73:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Validity Not Before: Jun 3 01:31:43 2026 GMT Not After : Jun 4 02:09:43 2026 GMT Subject: CN=D6E24940CE4DFB9254600E2325A1AAC150900312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2f:fa:77:f4:36:86:77:95:bc:e2:2d:38:e9: 5a:46:9f:fa:63:9e:18:24:22:c0:1a:31:ab:0c:93: 56:a8:12:3c:2a:2b:03:e9:b9:68:89:18:ab:aa:41: 5d:c5:11:fc:5f:45:1b:be:f6:c1:ee:aa:7b:3f:4e: d6:72:21:45:21:67:6b:e5:bb:7e:4f:fe:46:8e:2e: a6:f3:c5:44:3e:a3:fc:69:f3:43:4c:6d:4b:30:1c: 03:a4:27:e8:c5:38:12:1b:0e:e5:94:8f:70:c9:53: e8:0d:ea:b0:b4:a8:fb:4c:ac:f7:6f:5e:6d:5a:04: eb:7e:44:f8:85:a8:d8:94:fe:ef:9c:3a:b5:08:99: c8:c2:52:5b:74:d2:17:86:0f:25:d8:74:b9:2f:31: 68:a3:84:36:f4:ff:03:af:7d:cf:c3:d9:2d:22:9c: 4e:4e:87:c0:2f:27:bd:01:2a:4e:30:b4:e4:bf:23: 05:c9:a3:4e:a7:42:c7:25:4b:00:d1:bb:42:af:3b: 66:61:bb:f1:85:26:44:f7:9e:7e:d3:f5:a5:9a:85: 5d:e1:dc:0d:ef:09:0c:a3:6e:ff:12:f4:d5:f0:3a: 52:2c:66:41:01:72:c9:16:58:10:d0:0d:1f:02:f6: b8:c9:ae:f1:08:29:c9:ba:d4:9f:ac:ae:37:50:15: 24:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E2:49:40:CE:4D:FB:92:54:60:0E:23:25:A1:AA:C1:50:90:03:12 X509v3 Authority Key Identifier: keyid:D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:00:37:7b:07:4c:4a:e8:d6:bf:ef:1b:71:1a:f5:1d:f1:93: 1e:20:b9:7b:ab:c8:54:db:51:1d:5a:5e:ba:86:93:2a:d6:0d: 01:30:e2:ba:f7:c2:02:16:29:38:9b:62:78:68:05:ad:ac:33: 56:c0:43:60:35:a3:f6:31:6e:c6:26:99:d1:f5:c7:7c:ae:b2: 0e:8a:10:1e:1a:46:b1:1b:9c:3d:a6:d7:40:c2:c1:66:2c:79: 54:31:91:16:8f:7c:b4:0e:60:22:4d:b2:5e:d7:ee:f2:6c:32: b3:90:8f:2f:43:6e:71:8d:90:77:8e:f7:d5:d8:f6:37:2c:9e: 76:08:df:58:62:c5:0d:c2:9a:6a:4c:03:73:95:a0:74:40:44: f5:13:de:44:4d:c3:7d:da:0d:58:9f:10:1f:fe:99:2d:86:9f: ed:09:bf:71:36:97:5c:20:c1:de:69:b9:27:6a:19:fe:3f:f3: 26:59:9d:eb:26:41:33:bb:aa:27:4d:48:24:8c:bb:5b:d3:7e: 5c:e4:92:5e:ec:40:7d:a0:5e:4f:9e:5a:85:5e:95:c3:f3:3a: 01:84:86:4c:03:d0:f2:a5:6d:b2:1b:a2:41:0f:46:b5:61:e6: a7:60:54:7d:90:3a:22:44:1f:84:01:9c:34:fe:37:2b:5a:c4: bc:3b:8b:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR6FLCri9KvZ9KPczzRpvbxQwc88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwMEYxOTkwRjMyNEU4QkZGOEU2QUI0RjZBRjAwNjYy RUY0QTE4MTAeFw0yNjA2MDMwMTMxNDNaFw0yNjA2MDQwMjA5NDNaMDMxMTAvBgNV BAMTKEQ2RTI0OTQwQ0U0REZCOTI1NDYwMEUyMzI1QTFBQUMxNTA5MDAzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmL/p39DaGd5W84i046VpGn/pj nhgkIsAaMasMk1aoEjwqKwPpuWiJGKuqQV3FEfxfRRu+9sHuqns/TtZyIUUhZ2vl u35P/kaOLqbzxUQ+o/xp80NMbUswHAOkJ+jFOBIbDuWUj3DJU+gN6rC0qPtMrPdv Xm1aBOt+RPiFqNiU/u+cOrUImcjCUlt00heGDyXYdLkvMWijhDb0/wOvfc/D2S0i nE5Oh8AvJ70BKk4wtOS/IwXJo06nQsclSwDRu0KvO2Zhu/GFJkT3nn7T9aWahV3h 3A3vCQyjbv8S9NXwOlIsZkEBcskWWBDQDR8C9rjJrvEIKcm61J+srjdQFSRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1uJJQM5N+5JUYA4jJaGqwVCQAxIwHwYDVR0j BBgwFoAU2QDxmQ8yTov/jmq09q8AZi70oYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU4OWY2NDMtMzdiYy00ZmZiLTk1MjktNDAxZTRiNmVmNjc1LzAvRDkwMEYxOTkw RjMyNEU4QkZGOEU2QUI0RjZBRjAwNjYyRUY0QTE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOTAwRjE5OTBGMzI0RThCRkY4RTZBQjRGNkFGMDA2NjJFRjRB MTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU4OWY2NDMtMzdiYy00ZmZiLTk1 MjktNDAxZTRiNmVmNjc1LzAvRDkwMEYxOTkwRjMyNEU4QkZGOEU2QUI0RjZBRjAw NjYyRUY0QTE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsAN3sHTEro1r/vG3Ea9R3xkx4guXuryFTb UR1aXrqGkyrWDQEw4rr3wgIWKTibYnhoBa2sM1bAQ2A1o/YxbsYmmdH1x3yusg6K EB4aRrEbnD2m10DCwWYseVQxkRaPfLQOYCJNsl7X7vJsMrOQjy9DbnGNkHeO99XY 9jcsnnYI31hixQ3CmmpMA3OVoHRARPUT3kRNw33aDVifEB/+mS2Gn+0Jv3E2l1wg wd5puSdqGf4/8yZZnesmQTO7qidNSCSMu1vTflzkkl7sQH2gXk+eWoVelcPzOgGE hkwD0PKlbbIbokEPRrVh5qdgVH2QOiJEH4QBnDT+NytaxLw7i0s= -----END CERTIFICATE-----Generated at Wed Jun 3 04:05:11 2026 by rpki-client