$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft File: 872439399C3ADEB5FD342E7B6286CED219899CA2.mft (raw, json) Hash identifier: BRnQfWWVXu/HbzkX01Do10qhxOs8FXESxt5ZcyPyNGU= Subject key identifier: 44:FE:E8:DB:A0:A1:C1:37:9A:98:BB:4B:90:AB:85:39:80:3C:D0:E3 Authority key identifier: 87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 Certificate issuer: /CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Certificate serial: 569D3EAEFA613D69EC9516587C2DDBC529C0A4CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:57:22 +0000 Manifest this update: Tue 02 Jun 2026 09:52:22 +0000 Manifest next update: Wed 03 Jun 2026 12:26:22 +0000 Files and hashes: 1: 872439399C3ADEB5FD342E7B6286CED219899CA2.crl (hash: 4s1292vybWnsIA8nlEFxbvUNz1MnAn9Yc54Yh7pDSYk=) 2: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: adl429vFkP0oWDwTvPnmag7OFx0zxihqimWJrrJGrRE=) 3: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: NKC5Np3Ag/+a1x7nhQql2VpKY7CAeiWtD4pS8O2fPAg=) 4: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: yjf0/JJFQABhzT0gnDsCQ/oag0HSQ3URmpUm4ciNYx4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:9d:3e:ae:fa:61:3d:69:ec:95:16:58:7c:2d:db:c5:29:c0:a4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Validity Not Before: Jun 2 09:52:22 2026 GMT Not After : Jun 3 12:26:22 2026 GMT Subject: CN=44FEE8DBA0A1C1379A98BB4B90AB8539803CD0E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:9b:ce:3f:f1:b0:69:95:62:db:c7:5f:c9: 25:3d:c0:ce:cb:2f:d2:72:3c:5e:c5:6d:f5:05:47: 20:05:59:cf:d2:b4:ec:9d:f5:99:74:ba:15:d3:80: 0b:45:57:2b:46:77:20:91:fe:91:39:24:ff:f7:f3: 5d:55:11:7f:af:60:d6:8d:54:f7:80:2c:a1:b2:23: 65:ba:6f:da:4d:90:e4:d5:79:c7:d1:dc:72:e6:8a: 7f:c5:7c:2c:5e:70:9f:8e:18:fc:2b:79:15:7d:60: 3d:37:b5:34:93:7a:52:63:6e:8e:4f:de:0f:76:dc: 2e:6a:45:6c:47:57:b3:77:fd:77:c1:08:23:0b:0f: 2a:0a:50:ed:7d:06:db:23:32:77:c8:b8:70:92:61: ce:5c:eb:c0:dc:8d:28:cf:2d:c1:99:e2:cf:1f:09: 29:94:23:fd:16:94:46:c7:aa:62:db:aa:1f:88:36: bd:c7:a7:cd:f8:f4:b4:8a:d4:8e:d1:09:dd:19:c0: 9e:dc:b7:70:30:93:21:6c:a6:1b:9d:c1:6e:c4:a0: 22:0f:ea:7a:4f:cf:72:79:de:61:bf:16:ad:70:f1: 7b:58:22:fd:68:c1:ba:f8:ca:4b:bd:7f:a3:0d:18: 02:b6:c6:88:40:10:e8:37:a5:3f:27:74:0e:80:bf: 7c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FE:E8:DB:A0:A1:C1:37:9A:98:BB:4B:90:AB:85:39:80:3C:D0:E3 X509v3 Authority Key Identifier: keyid:87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:59:37:99:7f:54:a5:c5:75:1e:0f:96:36:84:f5:db:49:10: 0f:b1:fa:8c:15:c6:43:99:92:23:b1:f4:dc:68:de:7d:92:0a: a9:5c:c8:bc:c7:4a:6c:26:54:2d:58:8b:48:1d:4d:8e:72:5a: 63:15:af:e3:9c:1f:35:b7:0e:32:e3:7b:57:19:8d:eb:c4:16: ed:8f:9c:70:05:cc:65:a0:ec:97:fb:bd:6f:45:e5:ca:a6:99: 74:3a:c1:93:73:5f:82:50:d4:48:a1:75:a6:3e:be:d1:ba:9d: 48:fb:73:b3:d9:ca:ab:c5:33:ea:8c:d0:86:13:69:99:16:4c: f6:42:b4:50:44:85:a4:be:d1:19:05:a5:cd:2a:c2:89:d3:b0: 9c:dd:a7:fb:91:44:c6:33:5a:38:86:65:d3:cb:db:8d:f9:27: 8f:e2:d4:a2:d0:67:ae:fd:c1:75:01:77:e5:3b:7f:34:c2:27: 93:93:8c:7e:d6:4c:b1:c1:0d:ea:95:f5:be:9f:a6:52:58:66: 20:30:2a:43:f6:06:93:69:c0:f7:61:e5:74:9f:39:48:a9:49: a6:2d:ab:13:93:ec:3f:f6:ba:a4:5f:d4:08:05:5c:81:af:da: f6:e4:8e:bc:6d:10:13:d8:ea:85:96:8c:b8:3e:31:38:31:57: a8:ba:f4:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVp0+rvphPWnslRZYfC3bxSnApMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIx OTg5OUNBMjAeFw0yNjA2MDIwOTUyMjJaFw0yNjA2MDMxMjI2MjJaMDMxMTAvBgNV BAMTKDQ0RkVFOERCQTBBMUMxMzc5QTk4QkI0QjkwQUI4NTM5ODAzQ0QwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk75vOP/GwaZVi28dfySU9wM7L L9JyPF7FbfUFRyAFWc/StOyd9Zl0uhXTgAtFVytGdyCR/pE5JP/3811VEX+vYNaN VPeALKGyI2W6b9pNkOTVecfR3HLmin/FfCxecJ+OGPwreRV9YD03tTSTelJjbo5P 3g923C5qRWxHV7N3/XfBCCMLDyoKUO19BtsjMnfIuHCSYc5c68DcjSjPLcGZ4s8f CSmUI/0WlEbHqmLbqh+INr3Hp8349LSK1I7RCd0ZwJ7ct3AwkyFsphudwW7EoCIP 6npPz3J53mG/Fq1w8XtYIv1owbr4yku9f6MNGAK2xohAEOg3pT8ndA6Av3yFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURP7o26ChwTeamLtLkKuFOYA80OMwHwYDVR0j BBgwFoAUhyQ5OZw63rX9NC57YobO0hmJnKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM3ZDNjYmYtMjRkNi00YjFjLTg2Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5 QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIxOTg5OUNBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzI0MzkzOTlDM0FERUI1RkQzNDJFN0I2Mjg2Q0VEMjE5ODk5 Q0EyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNF RDIxOTg5OUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhZN5l/VKXFdR4PljaE9dtJEA+x+owVxkOZ kiOx9Nxo3n2SCqlcyLzHSmwmVC1Yi0gdTY5yWmMVr+OcHzW3DjLje1cZjevEFu2P nHAFzGWg7Jf7vW9F5cqmmXQ6wZNzX4JQ1EihdaY+vtG6nUj7c7PZyqvFM+qM0IYT aZkWTPZCtFBEhaS+0RkFpc0qwonTsJzdp/uRRMYzWjiGZdPL2435J4/i1KLQZ679 wXUBd+U7fzTCJ5OTjH7WTLHBDeqV9b6fplJYZiAwKkP2BpNpwPdh5XSfOUipSaYt qxOT7D/2uqRf1AgFXIGv2vbkjrxtEBPY6oWWjLg+MTgxV6i69Ac= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:22 2026 by rpki-client