$ rpki-client -vvf rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft File: D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft (raw, json) Hash identifier: 6IYWhXAPv15X+1k6+LnY6pwPUvaNEbdR04G7fGF96vs= Subject key identifier: D7:A4:7D:9B:A4:01:FA:DB:E1:2D:51:60:6D:75:82:23:EE:AF:86:14 Authority key identifier: D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 Certificate issuer: /CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Certificate serial: 4BA91612346426F8929E5273AA846F2954A8CD0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 02:17:30 +0000 Manifest this update: Wed 03 Jun 2026 02:12:30 +0000 Manifest next update: Thu 04 Jun 2026 05:42:30 +0000 Files and hashes: 1: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: AqPDvu5wMH9hSXVjD2VnKUqfXyX3eZeH2kklyZn/LgU=) 2: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: JR5WOntI+i6T1zRjrN8zT02s0LTFAvw0fmSCSLj0TTI=) 3: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: P8+4V5z096Waggp484U08aSEWnvYMzfn2QuEGNZcw6k=) 4: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: UDtR/bmcoGQ4Qjq+Iq2hw3T7b2QXxyjMcOZO/xAMlNY=) 5: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: E6tR5JFlnt4a2SDzp1URSec/UvlgqLYhcsF8yth51R4=) 6: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: dQq3t9CHCoAGrdXvawfKbXrrABW3jl6jI9yPO4Api+E=) 7: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: jPAnnqmUSZKCOHdAErpqklofojiM1qCv7SQs+xi8fCw=) 8: D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl (hash: U9GC6Qq9aM2g8cWpGOSdm3vbTDWSGmyS8wrSm2WE1+8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 04:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a9:16:12:34:64:26:f8:92:9e:52:73:aa:84:6f:29:54:a8:cd:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9 Validity Not Before: Jun 3 02:12:30 2026 GMT Not After : Jun 4 05:42:30 2026 GMT Subject: CN=D7A47D9BA401FADBE12D51606D758223EEAF8614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:42:cd:02:fc:9c:e7:2d:b1:05:2d:e1:03: 39:7d:00:89:8d:3e:ee:74:eb:d9:f9:a7:a6:ce:ee: 16:3b:75:78:54:d5:e9:e6:56:d2:6e:c3:cc:81:11: bd:0c:59:15:d3:ce:06:14:2a:80:ac:63:e3:91:54: 81:41:1f:5e:92:33:f2:aa:f6:ee:ba:09:97:b2:7f: 63:32:f3:2d:43:11:39:cf:8c:11:5d:b3:47:30:50: fe:2a:c4:e2:47:14:ba:cd:a3:b6:7b:4a:ad:dd:6a: 79:9c:f9:52:c0:6c:50:b8:b7:2b:f2:93:51:bd:51: 72:cf:78:13:81:2f:3e:79:93:d8:a5:54:48:6b:b4: 83:73:44:2d:07:32:65:10:bb:4e:ac:03:78:ae:e0: c7:19:07:54:4d:26:5b:b5:1c:66:d6:c9:9f:3f:5c: ac:f3:57:98:b4:da:44:89:88:64:b6:48:a3:85:dd: 2c:23:43:03:0c:2a:2d:d0:60:cd:ae:15:f0:da:05: 87:fd:88:f4:0b:1f:12:f7:3c:b1:02:79:33:87:8a: fa:57:f1:62:2e:11:c5:19:c8:ab:4f:0b:e9:9b:dd: 63:94:6c:d9:54:61:56:5c:2e:22:78:08:36:ff:fc: 33:f7:69:82:9c:75:a4:70:60:f3:c3:d6:bd:19:cf: 2a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A4:7D:9B:A4:01:FA:DB:E1:2D:51:60:6D:75:82:23:EE:AF:86:14 X509v3 Authority Key Identifier: keyid:D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ce:c3:0a:fd:58:39:8b:04:54:86:cc:49:f0:c1:52:db:2e: 5e:46:12:2e:5d:10:fc:5d:ef:1b:f9:f2:1f:01:3f:96:25:0b: df:cb:82:dd:2a:e0:62:b2:90:a2:cc:0b:82:86:23:f2:4f:e5: 78:db:60:6c:d3:1c:3b:fa:ae:14:f8:62:0b:a2:79:ab:e0:83: 86:9f:0f:bf:12:dd:fa:ea:bb:45:32:11:20:8a:d5:d1:d1:68: a4:40:f7:49:9d:bb:77:d3:da:ff:ba:7d:7a:d4:15:b6:a9:ab: 91:d1:b8:b9:32:49:bf:03:2e:cf:ae:da:af:e5:b4:a4:94:5a: a4:0c:2b:20:8b:2c:1d:10:3e:1d:c7:23:c3:e5:b1:9f:af:3f: cc:e5:11:5f:4d:9e:b3:42:eb:70:ca:3b:a4:65:ce:7c:88:52: 6b:30:e9:a7:aa:36:44:aa:9c:27:5c:d7:78:9f:1e:3d:5a:d7: 63:ae:a1:f6:58:e2:0c:49:c9:5b:42:fb:51:dd:ad:fd:17:de: 04:a4:40:78:6c:5c:2d:84:45:c2:49:c2:d1:68:a7:38:98:df: 38:53:4f:25:a4:59:4e:f6:b2:b6:62:11:94:88:cd:a9:98:dd: b2:0c:92:de:a5:25:09:00:4b:5b:74:13:45:d9:31:17:06:70: a7:4f:f2:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6kWEjRkJviSnlJzqoRvKVSozQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0 NjFFMUJGOTAeFw0yNjA2MDMwMjEyMzBaFw0yNjA2MDQwNTQyMzBaMDMxMTAvBgNV BAMTKEQ3QTQ3RDlCQTQwMUZBREJFMTJENTE2MDZENzU4MjIzRUVBRjg2MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FELNAvyc5y2xBS3hAzl9AImN Pu5069n5p6bO7hY7dXhU1enmVtJuw8yBEb0MWRXTzgYUKoCsY+ORVIFBH16SM/Kq 9u66CZeyf2My8y1DETnPjBFds0cwUP4qxOJHFLrNo7Z7Sq3danmc+VLAbFC4tyvy k1G9UXLPeBOBLz55k9ilVEhrtINzRC0HMmUQu06sA3iu4McZB1RNJlu1HGbWyZ8/ XKzzV5i02kSJiGS2SKOF3SwjQwMMKi3QYM2uFfDaBYf9iPQLHxL3PLECeTOHivpX 8WIuEcUZyKtPC+mb3WOUbNlUYVZcLiJ4CDb//DP3aYKcdaRwYPPD1r0ZzyrXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU16R9m6QB+tvhLVFgbXWCI+6vhhQwHwYDVR0j BBgwFoAU2D1uOjRJYNkeEIhKoc7jo0YeG/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDlkYTdiNmEtNGUxYS00MWZmLWI4ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0Ez NDQ5NjBEOTFFMTA4ODRBQTFDRUUzQTM0NjFFMUJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODNENkUzQTM0NDk2MEQ5MUUxMDg4NEFBMUNFRTNBMzQ2MUUx QkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvRDgzRDZFM0EzNDQ5NjBEOTFFMTA4ODRBQTFDRUUz QTM0NjFFMUJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXOwwr9WDmLBFSGzEnwwVLbLl5GEi5dEPxd 7xv58h8BP5YlC9/Lgt0q4GKykKLMC4KGI/JP5XjbYGzTHDv6rhT4Yguieavgg4af D78S3frqu0UyESCK1dHRaKRA90mdu3fT2v+6fXrUFbapq5HRuLkySb8DLs+u2q/l tKSUWqQMKyCLLB0QPh3HI8PlsZ+vP8zlEV9NnrNC63DKO6RlznyIUmsw6aeqNkSq nCdc13ifHj1a12OuofZY4gxJyVtC+1Hdrf0X3gSkQHhsXC2ERcJJwtFopziY3zhT TyWkWU72srZiEZSIzamY3bIMkt6lJQkAS1t0E0XZMRcGcKdP8q4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:41:10 2026 by rpki-client