$ rpki-client -vvf rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft File: 924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft (raw, json) Hash identifier: hR9an27F0/uU+kj+Q0o44QXrBC7XEQSESR0TY8sbgz0= Subject key identifier: F6:17:62:C7:8A:6B:AA:D3:15:11:C8:FE:F6:C4:45:5F:D8:8B:EB:67 Authority key identifier: 92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA Certificate issuer: /CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA Certificate serial: 28CB542A75AF3AD18D3AE96BDC4B0CF538CE3346 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:13:12 +0000 Manifest this update: Tue 02 Jun 2026 19:08:12 +0000 Manifest next update: Wed 03 Jun 2026 19:43:12 +0000 Files and hashes: 1: 924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl (hash: +/S5BYxai2An/uVlJGNTj7yhWIVCGw23Bh86CLXt74A=) 2: 3130332e3234332e31312e302f32342d3234203d3e203536323334.roa (hash: dTKCe4paU2IY2Oh+L5IqUZGGFO4TUfQMNiigaYInGe4=) 3: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: +bPIyCGaEGWvS82VlAv2EHMMfj7mjRKwJoRxD8Cvfm0=) 4: 3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (hash: iZLgBREB8douvHYZz9gauKXSkvDFXVOW+Mvm3xgORFU=) 5: 3131372e3130332e36392e302f32342d3234203d3e203536323334.roa (hash: wrUQ4EMVX+PJSZbONtjRtGC7+n3R84eMm7t/IYNPjw8=) 6: 3131372e3130332e37302e302f32342d3234203d3e203536323334.roa (hash: j5WFyDrMaI9n63JSzTSL6p6/2kiX350w7znF9gXn6oE=) 7: 3130332e3234332e31302e302f32342d3234203d3e203536323334.roa (hash: zufjgeZw/w05det8sEI0LnaWHbULyBgD0ra6w23cC5w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:cb:54:2a:75:af:3a:d1:8d:3a:e9:6b:dc:4b:0c:f5:38:ce:33:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA Validity Not Before: Jun 2 19:08:12 2026 GMT Not After : Jun 3 19:43:12 2026 GMT Subject: CN=F61762C78A6BAAD31511C8FEF6C4455FD88BEB67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:38:f3:02:cc:cc:dd:d6:ae:8c:5b:7d:66:37: db:59:09:ed:dc:1b:a6:7a:50:0a:e8:9b:4a:ff:95: 7c:65:48:c4:01:6d:ee:e0:53:52:2c:b2:45:33:7d: 8e:b5:f9:bf:af:9b:ae:36:74:e7:10:90:49:8d:b5: 28:bb:c9:37:5f:99:b2:b4:04:60:4f:c2:2e:49:4a: f8:57:1e:a2:f5:76:7a:57:5a:5b:a4:8e:ab:ed:65: d0:81:aa:20:ad:32:81:fa:b2:d0:a6:4c:23:1c:37: 8f:44:2a:45:80:09:aa:14:d5:89:f9:87:62:82:58: e3:2a:18:f5:00:7b:68:d3:8f:2c:30:dd:6d:e7:b2: f7:cf:67:49:af:d8:71:e3:b2:50:a5:db:b0:b7:45: 94:ea:6e:4d:ac:33:9a:56:e5:a4:5a:b9:44:01:64: 5a:4d:59:14:45:6a:4d:34:0c:36:8b:c1:a5:09:0c: 8f:01:7e:a1:57:76:da:37:ec:46:59:5b:c3:19:3c: d2:df:10:65:81:5c:14:87:f5:37:7f:ff:ec:fc:f4: 6d:85:24:47:83:c6:65:3c:6a:13:00:6a:be:b7:e1: d0:b6:70:9b:fc:61:bf:9c:84:af:32:28:81:cd:7d: 0a:60:7b:67:89:5a:5d:40:f9:9f:72:55:c4:66:34: 54:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:17:62:C7:8A:6B:AA:D3:15:11:C8:FE:F6:C4:45:5F:D8:8B:EB:67 X509v3 Authority Key Identifier: keyid:92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d6:19:e9:63:29:98:b1:82:9f:06:18:5d:c4:3c:73:c8:83: 8d:70:d0:77:64:d2:bc:af:31:f5:08:e1:7a:9d:47:3c:04:10: d2:c3:dc:77:3e:fe:20:99:63:bb:e3:94:55:20:2f:96:75:bb: 46:43:bd:b7:17:52:b8:25:a2:55:06:9e:90:92:a2:a3:72:41: eb:4f:a4:a5:53:b9:f5:17:e7:39:83:19:ec:db:19:62:e1:21: ad:5c:21:e6:a5:56:6f:e1:ad:3b:43:49:3c:49:c9:dd:d8:f3: 76:23:ac:bc:55:5a:4b:2e:40:f5:05:a1:5e:82:89:55:7f:11: 5c:1a:b8:6f:04:ae:78:82:d8:8f:7f:09:d1:34:ea:0f:12:0c: 74:7c:0e:17:50:89:12:ec:64:76:6c:31:81:17:9d:34:51:8d: 3f:88:a4:23:d6:52:0d:27:3b:a3:19:1f:30:46:0a:e0:bf:b7: d1:55:70:56:79:e4:bd:7c:2e:25:09:50:7a:62:04:35:b8:a7: 8b:9b:66:52:ab:94:fc:d3:b2:96:bd:0e:97:a5:a9:0a:32:b4: 07:f9:bd:7f:b3:38:0f:a9:93:6f:83:a0:32:e0:69:e1:96:84: 4e:13:59:c0:13:1c:f1:d4:b4:e5:91:be:d8:b0:76:d8:fc:91: 00:d0:e9:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMtUKnWvOtGNOulr3EsM9TjOM0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI0Mjc5OTA4QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5 RDRCNkFEQTAeFw0yNjA2MDIxOTA4MTJaFw0yNjA2MDMxOTQzMTJaMDMxMTAvBgNV BAMTKEY2MTc2MkM3OEE2QkFBRDMxNTExQzhGRUY2QzQ0NTVGRDg4QkVCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMOPMCzMzd1q6MW31mN9tZCe3c G6Z6UArom0r/lXxlSMQBbe7gU1IsskUzfY61+b+vm642dOcQkEmNtSi7yTdfmbK0 BGBPwi5JSvhXHqL1dnpXWlukjqvtZdCBqiCtMoH6stCmTCMcN49EKkWACaoU1Yn5 h2KCWOMqGPUAe2jTjyww3W3nsvfPZ0mv2HHjslCl27C3RZTqbk2sM5pW5aRauUQB ZFpNWRRFak00DDaLwaUJDI8BfqFXdto37EZZW8MZPNLfEGWBXBSH9Td//+z89G2F JEeDxmU8ahMAar634dC2cJv8Yb+chK8yKIHNfQpge2eJWl1A+Z9yVcRmNFSjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9hdix4prqtMVEcj+9sRFX9iL62cwHwYDVR0j BBgwFoAUkkJ5kIpHwQEbS2pUqgXHvZ1LatowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDJjN2RmZDQtZTUxMC00NzA3LTk4MTgtYTJiMWUyYzZiMjE2LzAvOTI0Mjc5OTA4 QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5RDRCNkFEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjQyNzk5MDhBNDdDMTAxMUI0QjZBNTRBQTA1QzdCRDlENEI2 QURBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4 MTgtYTJiMWUyYzZiMjE2LzAvOTI0Mjc5OTA4QTQ3QzEwMTFCNEI2QTU0QUEwNUM3 QkQ5RDRCNkFEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjWGeljKZixgp8GGF3EPHPIg41w0Hdk0ryv MfUI4XqdRzwEENLD3Hc+/iCZY7vjlFUgL5Z1u0ZDvbcXUrglolUGnpCSoqNyQetP pKVTufUX5zmDGezbGWLhIa1cIealVm/hrTtDSTxJyd3Y83YjrLxVWksuQPUFoV6C iVV/EVwauG8ErniC2I9/CdE06g8SDHR8DhdQiRLsZHZsMYEXnTRRjT+IpCPWUg0n O6MZHzBGCuC/t9FVcFZ55L18LiUJUHpiBDW4p4ubZlKrlPzTspa9DpelqQoytAf5 vX+zOA+pk2+DoDLgaeGWhE4TWcATHPHUtOWRvtiwdtj8kQDQ6d4= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:32 2026 by rpki-client