$ rpki-client -vvf rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft File: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft (raw, json) Hash identifier: ablQQAcKKV5NP9a8UyaYuEp8/kGCp0H5lamaQjVcs9Y= Subject key identifier: AF:39:2E:86:4F:0A:4C:EC:3E:E0:9A:79:9D:43:D6:95:70:11:78:5B Authority key identifier: A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC Certificate issuer: /CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Certificate serial: 37C95DFB96B1065F6A5EE8B24324CF7A6498778E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:10:38 +0000 Manifest this update: Tue 02 Jun 2026 21:05:38 +0000 Manifest next update: Wed 03 Jun 2026 22:15:38 +0000 Files and hashes: 1: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: b8kZYL8oI1P/7ClfsU26nDRuP+nZXNyKDNgSZ4R1ACk=) 2: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: 1g2WZIx9KqbiuQj/CWy92fVr9rJvVDZ62oh+oM6NT5Y=) 3: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl (hash: r9oF+WavpM2lKm8y0t3MfQs7ebN+vvAVtwTCUE/hAgU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c9:5d:fb:96:b1:06:5f:6a:5e:e8:b2:43:24:cf:7a:64:98:77:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Validity Not Before: Jun 2 21:05:38 2026 GMT Not After : Jun 3 22:15:38 2026 GMT Subject: CN=AF392E864F0A4CEC3EE09A799D43D6957011785B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e4:9b:83:61:a9:49:90:f0:e3:58:18:a5:04: f7:1d:53:c0:be:a6:cc:6a:43:0a:08:94:6a:8f:cc: 6e:73:1d:2f:e9:d1:c0:ba:62:b5:5f:52:88:1b:26: a3:41:0b:f8:a4:b3:65:80:1c:a8:dd:1e:09:2c:f6: 41:16:77:81:35:66:ee:b2:59:ba:8c:a7:4b:a7:12: 37:d0:34:c8:78:9e:74:54:26:f3:5b:b2:4e:2a:8e: b2:32:dd:40:36:28:68:b7:0c:2b:de:19:12:99:b0: 60:9c:b4:1c:94:1d:ba:81:cf:8f:9c:4b:93:a7:35: 88:23:b7:2d:1a:e2:05:85:64:ce:21:ec:e7:b5:9e: 17:9c:79:0e:3d:94:e4:0e:73:f6:a2:a2:1d:25:69: c4:5f:9e:6e:d3:87:91:d3:3f:f5:90:e6:80:06:91: 5e:08:65:51:56:8a:dc:46:42:95:11:ca:10:5e:f5: b4:44:88:9c:18:32:70:50:60:11:20:15:83:66:4f: f3:e6:fe:3f:f2:6f:b2:83:b1:a5:4c:f6:cd:4c:fc: e4:ec:04:ee:b4:0e:61:b9:0c:fc:58:4c:3c:12:23: fb:db:a5:44:00:d7:39:d0:f2:f8:45:49:0e:98:7c: d1:e3:bd:c7:c2:f8:14:a0:ba:09:01:b1:a2:35:f9: ed:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:39:2E:86:4F:0A:4C:EC:3E:E0:9A:79:9D:43:D6:95:70:11:78:5B X509v3 Authority Key Identifier: keyid:A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:82:b3:37:4b:c5:e7:60:b1:c8:7c:18:b6:74:db:22:c0:a0: 14:61:b0:4f:55:75:75:69:1a:f9:17:a8:c7:8e:c2:bf:4b:1a: 93:80:5f:1b:4b:64:89:a7:32:6a:a5:20:b7:fb:bf:d7:69:20: 62:99:9f:ab:45:4c:f3:e4:08:59:e3:5b:85:a2:0f:f9:ad:4c: f5:68:c0:7e:16:80:73:e6:d0:35:71:8a:84:d4:b3:e0:ed:e5: 73:e0:26:40:38:0f:57:23:71:83:cc:f7:da:1b:e1:1b:b3:a6: a9:92:d6:d0:e2:d8:a5:b5:32:25:55:45:8e:f7:4e:50:b3:ff: a2:e6:6d:b5:78:b0:94:cd:9d:d4:67:90:25:24:25:11:d1:7b: de:47:56:29:79:04:c3:d7:88:ed:5a:87:80:0b:cb:63:b1:b5: 0c:77:58:e9:6d:b1:fd:11:55:c5:2d:56:92:e9:a5:fd:6e:0f: 19:33:2d:b1:69:4a:39:7f:c0:7c:40:d0:bd:bc:5b:bc:e1:18: 8f:8e:9b:25:a4:2b:b3:56:69:23:b9:d8:d6:22:84:e0:13:60: 51:60:e9:45:49:09:81:45:b3:25:89:3e:de:bc:e5:8f:ea:c3: 8a:0c:a5:7d:f9:e9:bf:58:4e:d6:35:30:f1:4c:c0:cd:aa:23: 0f:94:c2:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN8ld+5axBl9qXuiyQyTPemSYd44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5QzcyNjRE QTFFMjNCQzAeFw0yNjA2MDIyMTA1MzhaFw0yNjA2MDMyMjE1MzhaMDMxMTAvBgNV BAMTKEFGMzkyRTg2NEYwQTRDRUMzRUUwOUE3OTlENDNENjk1NzAxMTc4NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw5JuDYalJkPDjWBilBPcdU8C+ psxqQwoIlGqPzG5zHS/p0cC6YrVfUogbJqNBC/iks2WAHKjdHgks9kEWd4E1Zu6y WbqMp0unEjfQNMh4nnRUJvNbsk4qjrIy3UA2KGi3DCveGRKZsGCctByUHbqBz4+c S5OnNYgjty0a4gWFZM4h7Oe1nheceQ49lOQOc/aioh0lacRfnm7Th5HTP/WQ5oAG kV4IZVFWitxGQpURyhBe9bREiJwYMnBQYBEgFYNmT/Pm/j/yb7KDsaVM9s1M/OTs BO60DmG5DPxYTDwSI/vbpUQA1znQ8vhFSQ6YfNHjvcfC+BSgugkBsaI1+e0FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrzkuhk8KTOw+4Jp5nUPWlXAReFswHwYDVR0j BBgwFoAUo5AH8+Kii458C3qpJZxyZNoeI7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNlNDE3N2QtODA5My00NDdjLTg3YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNF MkEyOEI4RTdDMEI3QUE5MjU5QzcyNjREQTFFMjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzkwMDdGM0UyQTI4QjhFN0MwQjdBQTkyNTlDNzI2NERBMUUy M0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5Qzcy NjREQTFFMjNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWCszdLxedgsch8GLZ02yLAoBRhsE9VdXVp GvkXqMeOwr9LGpOAXxtLZImnMmqlILf7v9dpIGKZn6tFTPPkCFnjW4WiD/mtTPVo wH4WgHPm0DVxioTUs+Dt5XPgJkA4D1cjcYPM99ob4RuzpqmS1tDi2KW1MiVVRY73 TlCz/6LmbbV4sJTNndRnkCUkJRHRe95HVil5BMPXiO1ah4ALy2OxtQx3WOltsf0R VcUtVpLppf1uDxkzLbFpSjl/wHxA0L28W7zhGI+OmyWkK7NWaSO52NYihOATYFFg 6UVJCYFFsyWJPt685Y/qw4oMpX356b9YTtY1MPFMwM2qIw+Uwlc= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:50 2026 by rpki-client