$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft File: B625426C356E15C795153BAD3E2215D65F219A5E.mft (raw, json) Hash identifier: HfVECDjzMR1Spg9JWx3E3Rj3MBkBf/NeeSJfU+CcKFg= Subject key identifier: 43:23:A5:06:C2:73:BF:7E:73:B9:EC:09:9E:B0:8E:1A:F1:6E:F7:99 Authority key identifier: B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E Certificate issuer: /CN=B625426C356E15C795153BAD3E2215D65F219A5E Certificate serial: 7414D0110E129C5CA637321143D5CD1A6DEE8D63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:42:36 +0000 Manifest this update: Tue 02 Jun 2026 18:37:36 +0000 Manifest next update: Wed 03 Jun 2026 18:55:36 +0000 Files and hashes: 1: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: yogWy6TCKxhBmgshrPe2hKjITHvdTQkqQBDI5rFuoa0=) 2: B625426C356E15C795153BAD3E2215D65F219A5E.crl (hash: qCcZ4IMqMH2j5Sz88mnbp69lVnM/ZkEXfo6hHqbd6WE=) 3: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: qLUNvDfC3gbWxd/hHt1Guse9AQpSMZBZKKbyAr0FqSU=) 4: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: 072PpS8RwhWZ6AW17W786YITh/wBQoWhhmI5PRB/Rfg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:14:d0:11:0e:12:9c:5c:a6:37:32:11:43:d5:cd:1a:6d:ee:8d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B625426C356E15C795153BAD3E2215D65F219A5E Validity Not Before: Jun 2 18:37:36 2026 GMT Not After : Jun 3 18:55:36 2026 GMT Subject: CN=4323A506C273BF7E73B9EC099EB08E1AF16EF799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:f8:21:af:5f:0b:cd:b5:99:59:a6:e3:dd: 33:54:d6:ab:51:fb:f5:27:a6:3e:ec:62:9a:22:13: c4:2f:ad:c3:7c:7f:9b:37:c2:f3:6c:42:e8:a3:07: 48:41:69:e6:82:d7:6c:21:f5:c7:2e:4e:21:80:c3: 66:42:31:c1:2e:8a:ce:a3:6d:22:45:70:4a:bd:d6: 92:3a:93:20:0c:d9:f6:fd:9e:9f:5c:ae:17:ef:f2: 7e:4a:e8:80:13:c2:6f:22:ff:1f:83:04:11:04:21: f2:c2:4d:15:e7:34:a1:32:21:8b:4a:a9:27:5a:54: 0e:5a:b3:76:f9:41:e1:b4:c0:f9:93:62:12:d3:0c: 20:d6:06:19:08:b7:a2:cf:ba:c1:67:39:92:f7:7f: 00:47:41:5f:a5:77:3b:60:eb:df:27:9f:dc:83:d6: 4c:b3:a1:66:bb:39:23:00:a5:80:bd:78:d2:4d:f5: 04:36:79:14:b4:6e:9a:a1:16:2d:eb:34:95:97:c6: 0e:cf:ad:07:35:0f:d9:d7:78:01:8d:dd:92:e2:60: 53:45:73:1d:51:1d:47:76:ee:15:2e:84:00:39:20: e3:70:94:53:0b:26:b6:ef:b7:59:62:0f:15:e8:1c: b0:f3:14:9c:fd:08:0b:a8:6f:3d:ee:e1:f1:01:a7: 85:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:23:A5:06:C2:73:BF:7E:73:B9:EC:09:9E:B0:8E:1A:F1:6E:F7:99 X509v3 Authority Key Identifier: keyid:B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9c:21:09:b3:69:09:ee:dd:1a:c2:70:8c:b9:e5:38:fc:ff: 82:f8:cf:79:b1:6b:7d:f3:1a:f5:e0:f4:13:48:d0:45:f3:f4: 6a:af:74:69:0a:b0:a7:b7:4b:29:7a:8d:3c:d9:c4:68:1c:29: c7:37:2b:df:77:f6:f8:f9:6b:1e:99:c5:ac:3e:d4:61:56:ce: 25:5c:d3:81:ad:e1:b3:5d:3e:73:b1:c9:9e:52:bd:91:2c:03: d9:48:47:2c:e0:9a:d4:c2:2d:b1:4d:de:1e:c7:67:dc:0d:f8: 19:35:11:36:d5:89:4f:55:d3:a1:3a:a5:74:67:a7:8c:3e:aa: 65:ce:d4:6c:e5:56:c9:35:bf:4a:da:aa:8f:30:14:ff:30:1b: ba:e7:bc:76:f5:ca:49:42:6c:55:71:cf:fd:0f:73:7b:68:9b: 42:e0:c6:10:ec:31:56:23:d1:d4:47:27:0b:51:83:9a:03:bc: 78:68:dc:bd:fd:17:fa:67:ff:86:4a:7c:96:38:20:5f:92:a5: 2a:34:5e:4c:3a:e7:ad:29:f4:23:ab:2b:16:95:40:f9:24:53: c6:34:ed:a3:33:32:ec:3e:55:94:7c:f5:05:d3:35:7c:48:10: 1d:1c:ba:76:84:60:ab:0a:11:de:98:c5:cc:33:c7:67:30:18: ec:55:d8:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdBTQEQ4SnFymNzIRQ9XNGm3ujWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1 RjIxOUE1RTAeFw0yNjA2MDIxODM3MzZaFw0yNjA2MDMxODU1MzZaMDMxMTAvBgNV BAMTKDQzMjNBNTA2QzI3M0JGN0U3M0I5RUMwOTlFQjA4RTFBRjE2RUY3OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZPghr18LzbWZWabj3TNU1qtR +/Unpj7sYpoiE8QvrcN8f5s3wvNsQuijB0hBaeaC12wh9ccuTiGAw2ZCMcEuis6j bSJFcEq91pI6kyAM2fb9np9crhfv8n5K6IATwm8i/x+DBBEEIfLCTRXnNKEyIYtK qSdaVA5as3b5QeG0wPmTYhLTDCDWBhkIt6LPusFnOZL3fwBHQV+ldztg698nn9yD 1kyzoWa7OSMApYC9eNJN9QQ2eRS0bpqhFi3rNJWXxg7PrQc1D9nXeAGN3ZLiYFNF cx1RHUd27hUuhAA5IONwlFMLJrbvt1liDxXoHLDzFJz9CAuobz3u4fEBp4VVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQyOlBsJzv35zuewJnrCOGvFu95kwHwYDVR0j BBgwFoAUtiVCbDVuFceVFTutPiIV1l8hml4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIwNDgwNjQtODdkZS00ZGU3LWIwYmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMz NTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1RjIxOUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjI1NDI2QzM1NkUxNUM3OTUxNTNCQUQzRTIyMTVENjVGMjE5 QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1 RDY1RjIxOUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJucIQmzaQnu3RrCcIy55Tj8/4L4z3mxa33z GvXg9BNI0EXz9GqvdGkKsKe3Syl6jTzZxGgcKcc3K9939vj5ax6Zxaw+1GFWziVc 04Gt4bNdPnOxyZ5SvZEsA9lIRyzgmtTCLbFN3h7HZ9wN+Bk1ETbViU9V06E6pXRn p4w+qmXO1GzlVsk1v0raqo8wFP8wG7rnvHb1yklCbFVxz/0Pc3tom0LgxhDsMVYj 0dRHJwtRg5oDvHho3L39F/pn/4ZKfJY4IF+SpSo0Xkw6560p9COrKxaVQPkkU8Y0 7aMzMuw+VZR89QXTNXxIEB0cunaEYKsKEd6Yxcwzx2cwGOxV2NE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:01 2026 by rpki-client