$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft File: 7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft (raw, json) Hash identifier: sIw9Vjhak5JDntaM9U8LLvTbVR3hm7SUhjYG/Wrjh0M= Subject key identifier: C5:01:47:B5:63:7F:10:06:A5:0F:75:94:4A:0D:1D:29:18:61:BE:C6 Authority key identifier: 7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 Certificate issuer: /CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Certificate serial: 43CBC10AD6EDBC262CD74277012C6006E595E40C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:11:11 +0000 Manifest this update: Wed 03 Jun 2026 01:06:11 +0000 Manifest next update: Thu 04 Jun 2026 01:58:11 +0000 Files and hashes: 1: 7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl (hash: ZS0nW+k5bbj2GO3UXtqPGUL5hmdP5Ewgd36UiurP3Fc=) 2: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: zpN+ZUQARf85utjXtSfFSa/KkTvAdeU606KS8jCMD5U=) 3: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: Gp5/rWdRIu6ScqVU154gXkTtG4fAxGJvRR3MmRVopqg=) 4: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: XAlXWmMjaTIgPpDDe6g4p0/8EhTXLUGxpCwgLN6Nis0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 01:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cb:c1:0a:d6:ed:bc:26:2c:d7:42:77:01:2c:60:06:e5:95:e4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4 Validity Not Before: Jun 3 01:06:11 2026 GMT Not After : Jun 4 01:58:11 2026 GMT Subject: CN=C50147B5637F1006A50F75944A0D1D291861BEC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:09:95:ef:60:ef:d8:5a:79:f2:e1:d9:bf:4d: 35:67:4b:6b:e2:46:3f:fb:0f:62:03:6a:af:80:2f: 8d:5e:1f:69:a2:84:d9:9e:29:bc:5b:f4:9c:77:85: eb:e1:b0:4e:8d:37:62:e3:81:d4:c2:9a:cc:f0:b6: d2:b9:b1:ab:5a:90:ba:6a:3b:27:3b:0a:14:e9:b2: eb:d2:e1:9b:3f:ed:01:30:10:9f:93:62:e1:a3:c5: 79:90:e6:71:88:d0:6c:11:f5:93:32:67:2b:05:b5: 38:35:af:15:a6:0c:5c:89:1c:49:88:67:6d:db:87: 56:34:33:de:3f:9d:de:75:ac:81:8f:a8:51:17:ba: 3e:54:01:93:b9:67:65:76:c1:51:b7:fd:b0:c0:0e: 27:e0:b0:48:6e:8c:c7:ae:7a:af:e5:1d:0e:8f:05: 27:ae:11:a0:a3:5b:d2:93:b3:b4:85:22:7b:37:c3: e7:7a:ae:88:05:30:c5:50:f6:82:df:3b:8b:c0:22: 51:3b:20:fe:48:b9:f8:6f:e4:5d:8b:18:ab:42:ed: 30:55:c8:47:75:6b:43:b8:9c:d0:b7:7e:e7:4c:e0: ba:b0:7a:48:23:17:14:9a:d9:09:cb:93:af:c9:b9: 81:b2:46:44:3c:9c:a5:05:a7:1c:c6:53:81:e0:d5: 86:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:01:47:B5:63:7F:10:06:A5:0F:75:94:4A:0D:1D:29:18:61:BE:C6 X509v3 Authority Key Identifier: keyid:7A:BD:2B:E2:09:FC:E2:A3:6F:A3:E5:CD:86:4B:F7:0F:6B:C6:5E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/7ABD2BE209FCE2A36FA3E5CD864BF70F6BC65EE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:10:d5:69:57:44:9b:93:40:e8:2a:27:b4:66:3d:80:a4:8a: f4:04:87:c0:90:73:4d:2b:55:9a:39:10:28:cf:3f:9d:ce:e5: 59:4e:ef:ce:e8:1e:be:7e:13:1c:70:d7:e2:6f:c4:4b:1a:0c: 31:c8:c5:aa:fe:ad:52:98:24:dd:32:32:3f:7b:eb:e0:26:31: 88:b5:95:26:cf:da:ef:77:1e:fa:a5:bd:4e:0c:2d:aa:5e:f6: d7:68:6f:bf:e0:7a:a4:93:e7:f9:b1:61:74:f3:11:16:fb:e7: 32:74:bb:4a:1a:29:e6:f2:43:09:32:e7:d0:d3:65:fc:0d:3d: b6:af:e8:2f:a3:3a:9c:68:b2:c0:3c:ff:41:5c:29:ad:2b:b7: 7d:8f:0a:e5:e4:91:a6:bb:1f:d0:22:d8:af:d4:71:ef:c8:54: ee:d2:7b:c1:18:9f:96:f3:af:49:96:9b:e6:8d:8f:ac:e7:b1: f8:8b:f9:fc:26:b1:0d:4a:6f:de:d9:4a:c5:1b:7c:0f:28:b7: f0:2d:3e:e0:5e:ff:1d:38:5e:16:a0:fd:3c:af:08:cf:72:a9: 87:2d:2f:de:e9:81:6e:80:3c:31:09:7f:b5:77:22:ec:7d:c2: 10:27:dd:e4:7c:04:cc:d7:d8:89:80:82:5f:82:39:fb:d7:a3: 0c:b9:bb:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ8vBCtbtvCYs10J3ASxgBuWV5AwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2 QkM2NUVFNDAeFw0yNjA2MDMwMTA2MTFaFw0yNjA2MDQwMTU4MTFaMDMxMTAvBgNV BAMTKEM1MDE0N0I1NjM3RjEwMDZBNTBGNzU5NDRBMEQxRDI5MTg2MUJFQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCZXvYO/YWnny4dm/TTVnS2vi Rj/7D2IDaq+AL41eH2mihNmeKbxb9Jx3hevhsE6NN2LjgdTCmszwttK5satakLpq Oyc7ChTpsuvS4Zs/7QEwEJ+TYuGjxXmQ5nGI0GwR9ZMyZysFtTg1rxWmDFyJHEmI Z23bh1Y0M94/nd51rIGPqFEXuj5UAZO5Z2V2wVG3/bDADifgsEhujMeueq/lHQ6P BSeuEaCjW9KTs7SFIns3w+d6rogFMMVQ9oLfO4vAIlE7IP5Iufhv5F2LGKtC7TBV yEd1a0O4nNC3fudM4LqwekgjFxSa2QnLk6/JuYGyRkQ8nKUFpxzGU4Hg1YY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxQFHtWN/EAalD3WUSg0dKRhhvsYwHwYDVR0j BBgwFoAUer0r4gn84qNvo+XNhkv3D2vGXuQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M0N2VmNWMtNWJiYS00Y2QxLThkYzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIw OUZDRTJBMzZGQTNFNUNEODY0QkY3MEY2QkM2NUVFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QUJEMkJFMjA5RkNFMkEzNkZBM0U1Q0Q4NjRCRjcwRjZCQzY1 RUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvN0FCRDJCRTIwOUZDRTJBMzZGQTNFNUNEODY0QkY3 MEY2QkM2NUVFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANsQ1WlXRJuTQOgqJ7RmPYCkivQEh8CQc00r VZo5ECjPP53O5VlO787oHr5+Exxw1+JvxEsaDDHIxar+rVKYJN0yMj976+AmMYi1 lSbP2u93HvqlvU4MLape9tdob7/geqST5/mxYXTzERb75zJ0u0oaKebyQwky59DT ZfwNPbav6C+jOpxossA8/0FcKa0rt32PCuXkkaa7H9Ai2K/Uce/IVO7Se8EYn5bz r0mWm+aNj6znsfiL+fwmsQ1Kb97ZSsUbfA8ot/AtPuBe/x04Xhag/TyvCM9yqYct L97pgW6APDEJf7V3Iux9whAn3eR8BMzX2ImAgl+COfvXowy5u1o= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:16 2026 by rpki-client