$ rpki-client -vvf rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft File: B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft (raw, json) Hash identifier: JhOxXU9H8qYs/CLCfLLX/7gWQaN7HNXU6PIRlaZJ1MA= Subject key identifier: C5:D2:9E:CE:FD:C6:DD:F8:22:5A:D7:18:CF:6B:CE:25:FA:DE:A2:DB Authority key identifier: B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA Certificate issuer: /CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Certificate serial: 723A7BE2A91BB6C7F607134270903EEB0FF89A32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:38:16 +0000 Manifest this update: Tue 02 Jun 2026 22:33:16 +0000 Manifest next update: Wed 03 Jun 2026 22:55:16 +0000 Files and hashes: 1: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ZyMegzYLPmuWd/ikDAjq3H75TE6NMvhpUlSw0zwrA5M=) 2: B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl (hash: ajDfaTPC1rtKWAVJviMFaDb0PneasSIX45JoXJ/Wex8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:3a:7b:e2:a9:1b:b6:c7:f6:07:13:42:70:90:3e:eb:0f:f8:9a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Validity Not Before: Jun 2 22:33:16 2026 GMT Not After : Jun 3 22:55:16 2026 GMT Subject: CN=C5D29ECEFDC6DDF8225AD718CF6BCE25FADEA2DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:90:7c:05:7d:da:5a:02:b3:88:da:2f:1c: 17:e0:1b:34:8d:df:96:e5:df:f1:d8:8e:b3:8b:71: f3:9e:3c:2c:88:85:52:d8:26:c9:e5:92:b3:2c:01: 3d:fa:80:87:91:94:c9:c1:ab:6e:50:09:10:53:03: c0:88:f6:d3:eb:95:17:ab:28:98:0d:93:7e:52:70: 86:dd:73:7d:a1:e3:3b:6f:a9:dd:e9:b4:d2:b0:93: 95:c1:f8:5b:48:37:4f:0a:dc:2a:63:c3:ec:1a:5a: be:69:fe:bc:65:94:88:6c:a6:e7:1d:9c:8b:a4:21: 9b:0c:58:0f:55:ee:e4:e5:96:9d:fe:a2:92:c3:bd: c9:87:58:51:71:ec:b3:6d:a4:78:c8:bd:41:78:d2: ad:2d:65:2a:5d:36:97:6d:3c:7c:01:49:0b:e1:4d: 3d:88:e1:94:42:88:f1:84:04:ef:38:f8:51:3a:ec: 8b:fb:1e:0d:69:4c:eb:b1:e0:e9:42:00:3c:90:ab: ae:5f:9d:43:44:ac:95:77:0c:a2:42:b7:5a:7f:68: 15:08:f8:1f:0a:69:f8:b5:d1:8e:6b:bc:85:84:16: e3:76:b6:e7:0c:e8:72:8e:61:d8:8d:8c:cd:57:64: 38:53:82:44:62:16:4f:33:ac:4e:2b:47:c8:f5:0f: 5a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D2:9E:CE:FD:C6:DD:F8:22:5A:D7:18:CF:6B:CE:25:FA:DE:A2:DB X509v3 Authority Key Identifier: keyid:B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:6d:28:b9:f4:c0:3e:5b:a6:b6:9e:8f:a4:ac:43:f2:0e:b9: 62:07:ed:7c:19:67:d3:51:79:49:17:ca:a5:2d:0d:22:35:2d: f8:f2:d5:6e:e2:bc:93:8a:01:98:c7:eb:7a:15:5e:a3:86:20: e6:79:dc:d6:72:81:dc:0b:ac:6c:c4:9d:a4:27:de:2a:62:34: 30:07:7e:ca:c3:7f:94:50:b9:15:7d:a3:1d:06:ab:56:77:70: 42:88:9b:a9:29:70:c9:ce:b7:72:ae:a2:b9:ed:b2:c8:66:4f: 78:b9:d7:8e:89:9c:ce:94:46:0c:02:a2:92:c8:00:39:7f:ad: c7:43:69:af:67:59:51:6c:77:5d:31:c7:c4:2a:0f:19:f5:4f: 6f:c0:96:c2:d6:51:11:eb:3e:ac:57:69:66:27:02:ac:24:56: fe:f3:c3:57:3e:b4:51:b3:fb:df:94:e7:d2:a0:6a:9e:39:f3: 77:f6:35:fd:49:8d:fa:2c:3f:02:f2:c3:6e:a9:0c:2d:f0:6e: a3:e6:16:9e:79:77:e2:b2:4e:01:3f:41:68:d9:23:c9:6d:80: 1d:16:8e:4e:95:9f:cf:c6:4e:23:57:86:03:3d:20:07:e0:fb: f0:67:11:1c:02:49:1b:90:62:91:14:c0:a7:47:54:76:8c:fc: e6:93:b2:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcjp74qkbtsf2BxNCcJA+6w/4mjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIw MDQ5NUJGQTAeFw0yNjA2MDIyMjMzMTZaFw0yNjA2MDMyMjU1MTZaMDMxMTAvBgNV BAMTKEM1RDI5RUNFRkRDNkRERjgyMjVBRDcxOENGNkJDRTI1RkFERUEyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5pB8BX3aWgKziNovHBfgGzSN 35bl3/HYjrOLcfOePCyIhVLYJsnlkrMsAT36gIeRlMnBq25QCRBTA8CI9tPrlRer KJgNk35ScIbdc32h4ztvqd3ptNKwk5XB+FtIN08K3Cpjw+waWr5p/rxllIhspucd nIukIZsMWA9V7uTllp3+opLDvcmHWFFx7LNtpHjIvUF40q0tZSpdNpdtPHwBSQvh TT2I4ZRCiPGEBO84+FE67Iv7Hg1pTOux4OlCADyQq65fnUNErJV3DKJCt1p/aBUI +B8Kafi10Y5rvIWEFuN2tucM6HKOYdiNjM1XZDhTgkRiFk8zrE4rR8j1D1p1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxdKezv3G3fgiWtcYz2vOJfreotswHwYDVR0j BBgwFoAUs4mo0u4YHXU+l6jPXXQoSwBJW/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc5NGZmZDItNDU3Mi00NTUzLTlhMzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJF RTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIwMDQ5NUJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzg5QThEMkVFMTgxRDc1M0U5N0E4Q0Y1RDc0Mjg0QjAwNDk1 QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4 NEIwMDQ5NUJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMNtKLn0wD5bpraej6SsQ/IOuWIH7XwZZ9NR eUkXyqUtDSI1Lfjy1W7ivJOKAZjH63oVXqOGIOZ53NZygdwLrGzEnaQn3ipiNDAH fsrDf5RQuRV9ox0Gq1Z3cEKIm6kpcMnOt3KuorntsshmT3i5146JnM6URgwCopLI ADl/rcdDaa9nWVFsd10xx8QqDxn1T2/AlsLWURHrPqxXaWYnAqwkVv7zw1c+tFGz +9+U59Kgap4583f2Nf1JjfosPwLyw26pDC3wbqPmFp55d+KyTgE/QWjZI8ltgB0W jk6Vn8/GTiNXhgM9IAfg+/BnERwCSRuQYpEUwKdHVHaM/OaTsvk= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:38 2026 by rpki-client