$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft File: F92C9917A30302FCE264D46D8FE65A1CEA194138.mft (raw, json) Hash identifier: hEE/icMHc6KmLk9bzKQmB05wvzIfVD1w4spiyx0muR4= Subject key identifier: 40:DC:DC:2C:B8:2C:9A:07:2E:E5:A5:61:05:74:17:B8:98:D4:14:18 Authority key identifier: F9:2C:99:17:A3:03:02:FC:E2:64:D4:6D:8F:E6:5A:1C:EA:19:41:38 Certificate issuer: /CN=F92C9917A30302FCE264D46D8FE65A1CEA194138 Certificate serial: 7B53E57A822D8093CFD128AAFC3032A1F4FC1054 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:22:36 +0000 Manifest this update: Tue 02 Jun 2026 14:17:36 +0000 Manifest next update: Wed 03 Jun 2026 15:14:36 +0000 Files and hashes: 1: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: 8ED3fpYlNYrY20dW5dy2FIrzIf47HrbQ0fyQ3uLjegk=) 2: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: VwexXBl+Y3+ndbZIMN+60ZESaBQjfihLPdMwB+vbCec=) 3: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: nJnlMgxQpBrYqZycvGCzonJXiZwDsWr34U7o3OPt3ps=) 4: F92C9917A30302FCE264D46D8FE65A1CEA194138.crl (hash: sj2S+NUHsVeDE8s+px39BkaPYM2ljQ1xl27H+XFZsco=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.crl rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 15:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:53:e5:7a:82:2d:80:93:cf:d1:28:aa:fc:30:32:a1:f4:fc:10:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F92C9917A30302FCE264D46D8FE65A1CEA194138 Validity Not Before: Jun 2 14:17:36 2026 GMT Not After : Jun 3 15:14:36 2026 GMT Subject: CN=40DCDC2CB82C9A072EE5A561057417B898D41418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:44:c8:39:17:e3:69:26:0d:93:27:40:41: 55:c9:0e:f2:56:4c:d8:2f:7f:01:70:f3:2b:6b:bc: 7b:c6:20:07:13:bf:d6:11:17:99:de:21:9c:cd:2a: 38:68:a1:d5:48:0d:90:1c:3f:9b:d5:a2:76:2f:64: 53:e1:83:64:28:51:54:e8:a9:8e:5b:d4:6a:b7:f7: f0:41:83:0c:39:d5:36:11:84:0a:19:90:9c:e9:c8: 33:9f:5c:b6:dc:06:b0:f1:7d:f7:33:af:18:7d:b4: 2b:73:a1:36:a8:87:6b:cd:8b:03:52:7f:b9:62:8d: 78:b2:5f:18:e8:a4:38:55:0e:b5:31:10:a5:42:bb: ec:08:8f:e7:ca:81:67:8a:33:02:9f:82:e2:df:54: 2f:98:15:f1:88:1b:59:83:69:3d:61:ce:57:00:88: c2:0a:97:ff:69:04:68:ed:a1:b0:32:f3:23:d7:45: 30:7e:0c:49:ff:58:d8:be:c9:03:8c:de:fa:0e:a5: bf:31:34:45:66:41:9f:ef:0a:0a:6a:88:33:2f:72: be:be:7c:63:04:4e:60:44:1f:47:d4:87:c7:0f:5b: 4d:af:c2:76:0b:25:45:43:00:df:a0:7a:0a:b9:c2: f5:56:7d:2a:1c:2b:20:5e:aa:db:bf:a1:b5:71:4f: 7a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DC:DC:2C:B8:2C:9A:07:2E:E5:A5:61:05:74:17:B8:98:D4:14:18 X509v3 Authority Key Identifier: keyid:F9:2C:99:17:A3:03:02:FC:E2:64:D4:6D:8F:E6:5A:1C:EA:19:41:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F92C9917A30302FCE264D46D8FE65A1CEA194138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/F92C9917A30302FCE264D46D8FE65A1CEA194138.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:82:dd:87:d5:28:0f:8d:30:c1:77:36:8a:ba:69:8f:db:df: e5:74:04:86:a4:9c:d6:5c:4d:f9:c5:a9:ee:b1:39:30:06:aa: 66:e4:4a:57:13:c7:46:8d:d9:38:b4:f6:e3:e6:11:40:e2:f1: b5:92:7c:06:fe:33:d9:9c:87:ae:bc:b0:e1:14:7e:fe:8c:6a: 9e:67:7c:a0:1b:80:a6:09:eb:9a:6f:02:ac:c1:52:1f:db:be: cd:6f:78:2f:17:1d:34:97:f1:34:c5:a2:24:d5:1b:ac:7e:96: e2:22:39:81:c5:58:81:3b:de:7a:6d:32:b6:1f:a8:66:fa:f0: 12:94:0f:0a:66:a8:c7:1f:49:da:e2:27:08:c3:c1:19:67:17: b4:18:a7:ea:4f:71:c6:35:8f:e0:8a:ef:53:5a:ec:7f:c4:4b: c8:fd:f0:83:89:bb:63:32:81:31:d2:9a:68:19:e4:d1:ce:b6: 2c:6a:f4:cd:50:2e:f8:d7:10:b3:bf:83:93:a7:de:30:23:8c: f3:79:55:3b:e9:e4:52:f1:1a:65:b6:6f:3a:77:a4:69:14:ca: cb:d6:7b:5a:fb:fd:fa:c6:42:64:d3:5c:0e:ae:4c:98:c4:24: 8b:e6:ca:9c:4f:5f:cb:40:d7:e7:37:da:a5:82:11:ab:17:e8: 25:44:dc:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe1PleoItgJPP0Siq/DAyofT8EFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkyQzk5MTdBMzAzMDJGQ0UyNjRENDZEOEZFNjVBMUNF QTE5NDEzODAeFw0yNjA2MDIxNDE3MzZaFw0yNjA2MDMxNTE0MzZaMDMxMTAvBgNV BAMTKDQwRENEQzJDQjgyQzlBMDcyRUU1QTU2MTA1NzQxN0I4OThENDE0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJWUTIORfjaSYNkydAQVXJDvJW TNgvfwFw8ytrvHvGIAcTv9YRF5neIZzNKjhoodVIDZAcP5vVonYvZFPhg2QoUVTo qY5b1Gq39/BBgww51TYRhAoZkJzpyDOfXLbcBrDxffczrxh9tCtzoTaoh2vNiwNS f7lijXiyXxjopDhVDrUxEKVCu+wIj+fKgWeKMwKfguLfVC+YFfGIG1mDaT1hzlcA iMIKl/9pBGjtobAy8yPXRTB+DEn/WNi+yQOM3voOpb8xNEVmQZ/vCgpqiDMvcr6+ fGMETmBEH0fUh8cPW02vwnYLJUVDAN+gegq5wvVWfSocKyBeqtu/obVxT3opAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQNzcLLgsmgcu5aVhBXQXuJjUFBgwHwYDVR0j BBgwFoAU+SyZF6MDAvziZNRtj+ZaHOoZQTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIwZTdmOGUtYzI5Zi00ZTZiLWFkMGEtOTk1N2ZiZDU2OTUzLzAvRjkyQzk5MTdB MzAzMDJGQ0UyNjRENDZEOEZFNjVBMUNFQTE5NDEzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTJDOTkxN0EzMDMwMkZDRTI2NEQ0NkQ4RkU2NUExQ0VBMTk0 MTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvRjkyQzk5MTdBMzAzMDJGQ0UyNjRENDZEOEZFNjVB MUNFQTE5NDEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiC3YfVKA+NMMF3Noq6aY/b3+V0BIaknNZc TfnFqe6xOTAGqmbkSlcTx0aN2Ti09uPmEUDi8bWSfAb+M9mch668sOEUfv6Map5n fKAbgKYJ65pvAqzBUh/bvs1veC8XHTSX8TTFoiTVG6x+luIiOYHFWIE73nptMrYf qGb68BKUDwpmqMcfSdriJwjDwRlnF7QYp+pPccY1j+CK71Na7H/ES8j98IOJu2My gTHSmmgZ5NHOtixq9M1QLvjXELO/g5On3jAjjPN5VTvp5FLxGmW2bzp3pGkUysvW e1r7/frGQmTTXA6uTJjEJIvmypxPX8tA1+c32qWCEasX6CVE3JQ= -----END CERTIFICATE-----Generated at Wed Jun 3 04:29:44 2026 by rpki-client