$ rpki-client -vvf rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft File: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft (raw, json) Hash identifier: /d4Zl5d2YCpnIg1KK8XCdSKaB4AQR6PTZMB9qcty0lI= Subject key identifier: 6E:FD:9C:49:2D:3A:66:DC:E5:90:1F:1E:E0:69:31:AF:C1:D8:95:AB Authority key identifier: 7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A Certificate issuer: /CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A Certificate serial: 561C1BACC7FC32A055CCF946B4396A1AC68172C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:04:59 +0000 Manifest this update: Tue 02 Jun 2026 23:59:59 +0000 Manifest next update: Thu 04 Jun 2026 00:23:59 +0000 Files and hashes: 1: 3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (hash: MUH5KpDAgVdYYC+MwQ+aBkJnISkDkljbuMC7PbGyf/c=) 2: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl (hash: cPxD4OHcaMA/2vdRBH4PilqpjNl7Ea6foaDyeYpJRbM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1c:1b:ac:c7:fc:32:a0:55:cc:f9:46:b4:39:6a:1a:c6:81:72:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A Validity Not Before: Jun 2 23:59:59 2026 GMT Not After : Jun 4 00:23:59 2026 GMT Subject: CN=6EFD9C492D3A66DCE5901F1EE06931AFC1D895AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:9c:ed:6c:17:cd:9c:14:f1:f5:58:35:fb: 27:c9:2a:bc:13:65:42:02:3f:6e:e5:b0:92:10:51: 6f:52:81:f8:fd:c8:53:9b:7c:b1:7d:2e:6c:e9:99: 2f:ca:99:df:d6:cc:a1:1f:b7:72:74:da:81:f8:bc: d2:41:01:35:f6:ab:ef:8e:a9:84:31:13:11:62:62: cf:3b:24:ac:90:c8:5a:d9:a1:85:78:ea:b8:50:44: 9b:bc:ef:b4:3a:9d:99:8d:c0:f7:2a:d5:5a:96:5d: a3:76:3d:9a:88:e8:b7:4d:8a:61:bb:b6:93:75:79: ec:64:4c:32:cd:cc:8e:05:37:8d:0b:5b:bc:99:4c: 1b:90:e4:1e:7b:53:b5:88:56:25:b8:09:26:11:a6: f1:1a:6d:bf:b9:36:07:33:1f:e3:4d:75:47:bb:3e: 0a:ae:3e:73:23:b3:f7:6b:b8:75:0c:4e:6f:46:59: 8b:ad:19:e1:88:91:ab:c7:40:2d:73:10:49:70:0e: 89:a6:fe:fb:3f:7b:ca:fd:f3:af:9b:73:a5:81:dd: a7:9a:14:64:36:9d:8a:0a:c9:2f:b3:b2:89:13:e2: f0:bf:3c:d0:a3:f2:92:c9:54:35:52:23:d9:a4:8a: cd:87:30:55:3e:86:ca:63:5e:38:86:00:8a:92:a1: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FD:9C:49:2D:3A:66:DC:E5:90:1F:1E:E0:69:31:AF:C1:D8:95:AB X509v3 Authority Key Identifier: keyid:7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:13:d9:9c:f0:98:fd:61:9f:82:92:e7:fb:3e:41:cc:33:27: 31:06:10:41:ab:84:99:e6:72:25:9d:ef:32:0e:aa:c1:cc:60: 4b:cb:3a:43:2e:19:cf:cb:31:06:09:b9:d4:38:43:36:93:bd: d9:04:94:98:c2:fd:dc:f3:32:46:03:49:6b:dc:b2:48:e4:0a: 1f:1c:5f:7a:89:f3:9e:ce:b6:97:86:b1:1a:e0:dd:4d:5e:88: 26:bf:09:f9:11:28:ba:32:00:b5:85:0f:9f:2d:90:59:d0:ed: c9:3b:1c:11:b5:ff:d3:c7:d9:ee:a1:52:05:93:16:e7:e8:8c: 15:68:e0:82:04:e5:d2:9a:e3:9a:22:4d:c0:fb:a7:4a:4d:31: b5:fe:59:4b:b1:8f:a4:33:56:74:52:a1:6a:fc:03:18:7b:be: 04:22:1e:8c:82:b7:2f:32:f3:8f:3d:c5:32:ed:7b:83:60:89: 34:d3:7c:9c:10:df:b9:f1:1f:ad:1a:3a:09:9e:27:a2:7b:ca: 91:42:9a:8a:6a:4f:77:a0:3b:8f:24:7a:56:0b:21:b0:2e:38: 02:a8:3e:21:fe:64:db:ff:a3:37:42:69:b8:b9:66:c8:c8:ed: 9c:d1:80:9a:91:ea:d4:de:bd:f2:9d:1b:45:fc:da:58:4e:ea: 4f:b6:69:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhwbrMf8MqBVzPlGtDlqGsaBcsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNC QkExRUMwQTAeFw0yNjA2MDIyMzU5NTlaFw0yNjA2MDQwMDIzNTlaMDMxMTAvBgNV BAMTKDZFRkQ5QzQ5MkQzQTY2RENFNTkwMUYxRUUwNjkzMUFGQzFEODk1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yJztbBfNnBTx9Vg1+yfJKrwT ZUICP27lsJIQUW9Sgfj9yFObfLF9LmzpmS/Kmd/WzKEft3J02oH4vNJBATX2q++O qYQxExFiYs87JKyQyFrZoYV46rhQRJu877Q6nZmNwPcq1VqWXaN2PZqI6LdNimG7 tpN1eexkTDLNzI4FN40LW7yZTBuQ5B57U7WIViW4CSYRpvEabb+5NgczH+NNdUe7 PgquPnMjs/druHUMTm9GWYutGeGIkavHQC1zEElwDomm/vs/e8r986+bc6WB3aea FGQ2nYoKyS+zsokT4vC/PNCj8pLJVDVSI9mkis2HMFU+hspjXjiGAIqSocA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbv2cSS06ZtzlkB8e4Gkxr8HYlaswHwYDVR0j BBgwFoAUey2eAIzGNRkIZexk/YKbM7uh7AowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDU0NGU5NTEtM2QwOC00NThhLWE0NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4 Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNCQkExRUMwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83QjJEOUUwMDhDQzYzNTE5MDg2NUVDNjRGRDgyOUIzM0JCQTFF QzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDU0NGU5NTEtM2QwOC00NThhLWE0 NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlC MzNCQkExRUMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0T2ZzwmP1hn4KS5/s+QcwzJzEGEEGrhJnm ciWd7zIOqsHMYEvLOkMuGc/LMQYJudQ4QzaTvdkElJjC/dzzMkYDSWvcskjkCh8c X3qJ857OtpeGsRrg3U1eiCa/CfkRKLoyALWFD58tkFnQ7ck7HBG1/9PH2e6hUgWT FufojBVo4IIE5dKa45oiTcD7p0pNMbX+WUuxj6QzVnRSoWr8Axh7vgQiHoyCty8y 8489xTLte4NgiTTTfJwQ37nxH60aOgmeJ6J7ypFCmopqT3egO48kelYLIbAuOAKo PiH+ZNv/ozdCabi5ZsjI7ZzRgJqR6tTevfKdG0X82lhO6k+2aVw= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:00 2026 by rpki-client