$ rpki-client -vvf rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft File: 218F42D6775F39C04AD2042E61C557053D4A69FE.mft (raw, json) Hash identifier: bCwUaDjuNv7kEPwVDT2fwianowUiZS0yZQTNVggEpAI= Subject key identifier: D9:EC:F6:23:78:AD:68:98:CF:BB:1A:90:D2:44:25:3C:CD:14:BC:DC Authority key identifier: 21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE Certificate issuer: /CN=218F42D6775F39C04AD2042E61C557053D4A69FE Certificate serial: 7BBF0AE9F0505314C781A37B7CDEF1E7A304996B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:17:49 +0000 Manifest this update: Tue 02 Jun 2026 22:12:49 +0000 Manifest next update: Thu 04 Jun 2026 01:49:49 +0000 Files and hashes: 1: 218F42D6775F39C04AD2042E61C557053D4A69FE.crl (hash: 8DsJj3g2300jsyHgo0xoOMGHgTUFrwxSEC5sBa/l4Ds=) 2: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: umbo3UO1surjjSvNZv8AZicuTRNi2hpCJFPh1PPiOEw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:bf:0a:e9:f0:50:53:14:c7:81:a3:7b:7c:de:f1:e7:a3:04:99:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218F42D6775F39C04AD2042E61C557053D4A69FE Validity Not Before: Jun 2 22:12:49 2026 GMT Not After : Jun 4 01:49:49 2026 GMT Subject: CN=D9ECF62378AD6898CFBB1A90D244253CCD14BCDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:95:03:ea:23:04:84:39:a4:6c:32:01:53: f3:1b:17:d5:02:53:75:40:94:5e:bc:89:71:d2:f3: c2:14:af:ed:a8:3d:ab:d9:ba:49:17:69:74:85:81: 37:4d:f3:47:52:a6:85:9a:0f:a8:01:0d:f4:45:43: 82:8a:c3:66:5e:ac:dd:ee:84:b1:7b:8f:71:06:d6: c4:f4:a8:94:91:0f:cb:ef:76:84:16:0e:1d:6f:47: 9d:aa:86:07:0a:d5:19:c1:d8:50:10:c3:b9:24:20: f2:40:fe:1b:3d:45:25:a4:ad:29:8e:33:e3:43:e0: 21:4a:e1:c3:95:b8:29:3e:f6:81:8c:6f:c6:ac:6d: dc:c3:83:d9:6f:b6:00:1c:66:56:18:ed:7c:36:b3: 6e:bf:2e:5e:49:d8:ec:dc:18:62:69:df:51:5d:8c: 0a:7a:a7:19:33:73:a5:24:35:b2:96:a7:da:e6:f7: 7d:2f:a3:54:40:bb:40:b3:76:8a:92:1c:32:94:ae: c8:f4:6c:b1:5d:65:3e:38:fc:33:8a:a9:04:65:0a: fc:82:4d:5f:ef:76:2a:62:1b:0a:96:93:97:6b:cd: 02:70:9d:a9:76:bf:a1:2f:f9:c1:24:3f:c7:03:c5: 96:08:d1:86:da:b7:11:64:a4:b0:4c:19:40:a6:98: 0f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EC:F6:23:78:AD:68:98:CF:BB:1A:90:D2:44:25:3C:CD:14:BC:DC X509v3 Authority Key Identifier: keyid:21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:48:18:5e:d0:a6:8b:33:ba:fe:8b:99:03:0e:04:e2:71:f7: 03:73:35:d7:49:e8:2e:42:99:7a:f9:11:e5:6d:05:08:c9:61: 8d:87:12:53:a7:67:2a:ec:f2:34:fb:01:1b:53:e8:40:32:63: 4b:55:20:d5:e7:e4:a3:70:4e:91:9e:c3:86:bc:e2:26:59:4f: 9a:7f:61:9c:81:b1:50:e6:ce:40:eb:0c:b8:bb:6f:15:06:54: c9:28:2c:73:a0:6d:cb:1c:32:40:1a:f7:a4:b6:b4:07:7d:a1: 99:f8:b2:5f:ec:9e:db:23:1a:ec:47:ee:f6:3d:fd:59:81:63: fa:15:69:54:7f:12:a7:2f:fe:1d:70:c7:e9:a9:88:77:37:4b: 9e:48:42:84:7e:f5:57:c5:59:5b:5d:2e:16:c1:9b:9a:4d:91: 7b:f0:20:e3:08:09:6d:8a:30:a4:4d:63:36:fc:2d:e4:61:42: 10:25:fd:fd:db:f7:41:b1:d8:2f:57:ac:51:ef:a3:21:d3:d6: 35:63:89:1a:b3:be:75:9b:da:89:4d:4b:bb:32:c4:a5:92:55: de:dc:d9:5d:27:69:2f:0d:99:30:42:be:b6:6c:7d:1d:a7:db: 9c:31:28:35:ab:e9:de:1c:00:af:8d:ab:8c:12:97:0d:47:a1: 16:6e:98:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe78K6fBQUxTHgaN7fN7x56MEmWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4RjQyRDY3NzVGMzlDMDRBRDIwNDJFNjFDNTU3MDUz RDRBNjlGRTAeFw0yNjA2MDIyMjEyNDlaFw0yNjA2MDQwMTQ5NDlaMDMxMTAvBgNV BAMTKEQ5RUNGNjIzNzhBRDY4OThDRkJCMUE5MEQyNDQyNTNDQ0QxNEJDREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zJUD6iMEhDmkbDIBU/MbF9UC U3VAlF68iXHS88IUr+2oPavZukkXaXSFgTdN80dSpoWaD6gBDfRFQ4KKw2ZerN3u hLF7j3EG1sT0qJSRD8vvdoQWDh1vR52qhgcK1RnB2FAQw7kkIPJA/hs9RSWkrSmO M+ND4CFK4cOVuCk+9oGMb8asbdzDg9lvtgAcZlYY7Xw2s26/Ll5J2OzcGGJp31Fd jAp6pxkzc6UkNbKWp9rm930vo1RAu0CzdoqSHDKUrsj0bLFdZT44/DOKqQRlCvyC TV/vdipiGwqWk5drzQJwnal2v6Ev+cEkP8cDxZYI0YbatxFkpLBMGUCmmA+5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ez2I3itaJjPuxqQ0kQlPM0UvNwwHwYDVR0j BBgwFoAUIY9C1ndfOcBK0gQuYcVXBT1Kaf4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZjYzQ3MzQtYmViNi00ZTMzLTliMWMtNDZkY2QxNjQyNWExLzAvMjE4RjQyRDY3 NzVGMzlDMDRBRDIwNDJFNjFDNTU3MDUzRDRBNjlGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMThGNDJENjc3NUYzOUMwNEFEMjA0MkU2MUM1NTcwNTNENEE2 OUZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMjE4RjQyRDY3NzVGMzlDMDRBRDIwNDJFNjFDNTU3 MDUzRDRBNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxIGF7Qposzuv6LmQMOBOJx9wNzNddJ6C5C mXr5EeVtBQjJYY2HElOnZyrs8jT7ARtT6EAyY0tVINXn5KNwTpGew4a84iZZT5p/ YZyBsVDmzkDrDLi7bxUGVMkoLHOgbcscMkAa96S2tAd9oZn4sl/sntsjGuxH7vY9 /VmBY/oVaVR/Eqcv/h1wx+mpiHc3S55IQoR+9VfFWVtdLhbBm5pNkXvwIOMICW2K MKRNYzb8LeRhQhAl/f3b90Gx2C9XrFHvoyHT1jVjiRqzvnWb2olNS7syxKWSVd7c 2V0naS8NmTBCvrZsfR2n25wxKDWr6d4cAK+Nq4wSlw1HoRZumDM= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:44 2026 by rpki-client