$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft File: D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft (raw, json) Hash identifier: idDtmsNQCBq3i7+D8oUHjb4+LJtVVJ/+HzaBdVYq+co= Subject key identifier: 62:57:64:9B:4E:AC:8F:F8:4B:53:6A:10:E9:A7:43:14:B5:37:D3:5A Authority key identifier: D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B Certificate issuer: /CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Certificate serial: 09C1D6C852D4C80A31526F4BCB7F29C47D81EFE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:41:15 +0000 Manifest this update: Tue 02 Jun 2026 17:36:15 +0000 Manifest next update: Wed 03 Jun 2026 18:00:15 +0000 Files and hashes: 1: 3130332e3232392e31342e302f32332d3233203d3e20313530313936.roa (hash: qvAhwO/EjrHouy1t9oPOe/Yp+kgXSnzORPmVIxEb76o=) 2: D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl (hash: qFwticsvN7VGbaik0sXM8yhefSoh5b4ncm2QlwL3PwE=) 3: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (hash: O9b/sE0cgUl/rxVhhp6cIJikTp6ysHnQzs5JN33UOjQ=) 4: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (hash: pHpItOVKv8esoRGqC1921wkOWFNotJS3YzPQt+5pees=) 5: 3130332e3232392e31352e302f32342d3234203d3e20313530313936.roa (hash: zY+TCMFw7rqEprfDm4KpW3QZwoOVJC4HoqlrpBLXEfI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c1:d6:c8:52:d4:c8:0a:31:52:6f:4b:cb:7f:29:c4:7d:81:ef:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84B02092CD9FAF487B7FFE8A3CE245E1532817B Validity Not Before: Jun 2 17:36:15 2026 GMT Not After : Jun 3 18:00:15 2026 GMT Subject: CN=6257649B4EAC8FF84B536A10E9A74314B537D35A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:b7:05:58:3c:69:d1:1e:ad:e2:a3:7a:ca: 07:c4:ef:ce:57:4e:f8:ec:13:7d:90:0e:b6:b9:7a: 1a:c3:b2:df:a1:4c:9b:39:9f:27:c2:43:13:9c:61: 8e:1a:46:f6:6b:bf:56:be:39:c4:30:e4:49:cc:e4: eb:47:6f:1d:0d:92:f1:3a:ae:13:aa:af:c7:30:f0: 56:21:74:8f:f0:35:30:9a:27:8a:07:84:60:11:c9: 51:fb:ea:fb:cd:be:0c:95:89:52:e9:70:fb:0d:c5: 80:af:b9:a8:68:fd:8e:cd:8c:4f:59:37:14:73:04: d0:bc:62:91:dc:5e:9b:e2:36:a9:dc:70:28:e8:c9: 29:2e:8d:a1:f3:38:1d:a9:4a:b5:8e:89:52:1d:32: eb:66:cf:fc:2c:4b:bd:75:fe:66:3c:46:4d:a2:28: d4:28:42:e9:00:f4:09:78:11:d8:d0:f8:c7:2a:0d: 5d:c5:ec:2c:bb:92:85:ec:f5:94:92:fa:87:74:50: 7c:e3:f2:fd:1c:d1:10:70:14:7c:a5:f6:df:ed:2a: 57:cd:3c:72:5c:c9:26:b2:86:1e:9d:e3:70:f5:67: b9:49:9f:83:43:38:b4:e3:e3:bf:2c:c3:7e:53:06: ef:13:63:d5:10:eb:a7:c2:41:7e:71:28:3a:5b:bd: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:57:64:9B:4E:AC:8F:F8:4B:53:6A:10:E9:A7:43:14:B5:37:D3:5A X509v3 Authority Key Identifier: keyid:D8:4B:02:09:2C:D9:FA:F4:87:B7:FF:E8:A3:CE:24:5E:15:32:81:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/D84B02092CD9FAF487B7FFE8A3CE245E1532817B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:91:3f:69:ff:7a:c0:ab:e3:1c:04:47:e9:74:ef:02:52:95: 92:f8:92:a3:5b:f6:27:10:bb:e2:09:ad:b4:0a:cf:df:2f:fd: 40:9a:ec:e3:3a:6e:be:71:c5:08:7f:e5:21:9e:bc:d9:88:f3: c4:6f:99:22:59:46:a5:c5:fa:3f:94:85:88:c9:f7:9b:e9:71: 9a:33:5d:f7:ed:48:5c:69:a4:17:ef:3c:15:05:0b:b5:80:6d: 85:24:e0:e7:f1:45:2f:b5:bf:a6:be:bf:26:5f:bb:a5:9f:79: 2b:8b:ee:fc:7d:13:70:df:df:4b:64:e4:08:84:63:e7:87:52: 1a:f8:e1:78:29:a7:17:29:a3:b1:19:6b:38:bf:05:f1:b5:e9: 28:da:f0:53:58:31:ec:33:9d:6b:24:b6:53:88:28:e6:fe:ae: 0d:de:37:a8:ff:69:64:34:20:0f:07:26:81:45:cb:02:2a:27: d5:6f:55:46:f7:1e:e2:2c:f0:8f:cc:1d:71:53:f4:42:3e:bd: 3a:08:f1:d7:d6:91:7d:fb:1f:63:e4:6f:95:3d:70:6e:b2:c2: a5:4b:a3:12:65:3d:f0:25:68:6f:7e:1f:35:9c:fc:6e:38:a0: ed:3c:62:50:c7:e6:23:f1:f3:49:46:e0:ed:8d:5b:40:5b:ee: 6a:74:78:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCcHWyFLUyAoxUm9Ly38pxH2B7+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUx NTMyODE3QjAeFw0yNjA2MDIxNzM2MTVaFw0yNjA2MDMxODAwMTVaMDMxMTAvBgNV BAMTKDYyNTc2NDlCNEVBQzhGRjg0QjUzNkExMEU5QTc0MzE0QjUzN0QzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCO7cFWDxp0R6t4qN6ygfE785X TvjsE32QDra5ehrDst+hTJs5nyfCQxOcYY4aRvZrv1a+OcQw5EnM5OtHbx0NkvE6 rhOqr8cw8FYhdI/wNTCaJ4oHhGARyVH76vvNvgyViVLpcPsNxYCvuaho/Y7NjE9Z NxRzBNC8YpHcXpviNqnccCjoySkujaHzOB2pSrWOiVIdMutmz/wsS711/mY8Rk2i KNQoQukA9Al4EdjQ+McqDV3F7Cy7koXs9ZSS+od0UHzj8v0c0RBwFHyl9t/tKlfN PHJcySayhh6d43D1Z7lJn4NDOLTj478sw35TBu8TY9UQ66fCQX5xKDpbvdhHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYldkm06sj/hLU2oQ6adDFLU301owHwYDVR0j BBgwFoAU2EsCCSzZ+vSHt//oo84kXhUygXswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I3NWJmZDAtYTg2Yy00YmViLTlmOTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDky Q0Q5RkFGNDg3QjdGRkU4QTNDRTI0NUUxNTMyODE3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODRCMDIwOTJDRDlGQUY0ODdCN0ZGRThBM0NFMjQ1RTE1MzI4 MTdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I3NWJmZDAtYTg2Yy00YmViLTlm OTktYWFjMzNmYjVlNDlmLzAvRDg0QjAyMDkyQ0Q5RkFGNDg3QjdGRkU4QTNDRTI0 NUUxNTMyODE3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKRP2n/esCr4xwER+l07wJSlZL4kqNb9icQ u+IJrbQKz98v/UCa7OM6br5xxQh/5SGevNmI88RvmSJZRqXF+j+UhYjJ95vpcZoz XfftSFxppBfvPBUFC7WAbYUk4OfxRS+1v6a+vyZfu6WfeSuL7vx9E3Df30tk5AiE Y+eHUhr44Xgppxcpo7EZazi/BfG16Sja8FNYMewznWsktlOIKOb+rg3eN6j/aWQ0 IA8HJoFFywIqJ9VvVUb3HuIs8I/MHXFT9EI+vToI8dfWkX37H2Pkb5U9cG6ywqVL oxJlPfAlaG9+HzWc/G44oO08YlDH5iPx80lG4O2NW0Bb7mp0eFk= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:05 2026 by rpki-client