$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft File: 793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft (raw, json) Hash identifier: PwSwyzrmmnkUr5kCiWfFdt6PQVpzu4JM+TtaEVMt9vo= Subject key identifier: B9:29:B9:CE:5F:68:A2:3C:12:89:3E:B8:B8:DE:1A:05:62:28:78:D0 Authority key identifier: 79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5 Certificate issuer: /CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5 Certificate serial: 1241C24F08560D37CE0B1FA75A7A5C9F3F0C5B31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:22:37 +0000 Manifest this update: Tue 02 Jun 2026 14:17:37 +0000 Manifest next update: Wed 03 Jun 2026 17:00:37 +0000 Files and hashes: 1: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: CYcQtk6Q2BGiqIh55Kes8nmVzVHDPahaB/OUEW8nJ4s=) 2: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: m8ctD+xav7ZeI0n+/CZUY0lL5X8THNniko/PGJK1gwE=) 3: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: 0QGECZtZ4NpVwUmkTwNZiQAD/nvM6N9DYMd+ulfiukw=) 4: 793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl (hash: qMSUmtFT05H6ZRVxbd47g48czClPoI4gso2+uc01KCM=) 5: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: 1ZSbqejAXASSMS+yiCaDvvpugHjgj1M6wD3m+4/7wrE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:41:c2:4f:08:56:0d:37:ce:0b:1f:a7:5a:7a:5c:9f:3f:0c:5b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5 Validity Not Before: Jun 2 14:17:37 2026 GMT Not After : Jun 3 17:00:37 2026 GMT Subject: CN=B929B9CE5F68A23C12893EB8B8DE1A05622878D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:5d:0b:70:c6:3d:f9:f7:7e:58:06:f5:8b: a1:fb:a3:f5:86:05:a9:a1:69:8c:92:1f:09:05:66: 98:14:00:33:65:44:f3:44:48:c3:85:90:bd:13:8f: 79:49:46:c2:50:2b:95:db:4b:8b:b2:dc:18:fc:b5: 05:de:93:cf:f5:88:80:8e:43:d3:61:32:2f:30:7d: 64:7c:ac:56:09:d2:37:85:33:cd:9b:34:d6:55:2c: 86:e2:45:34:d2:fd:1d:6f:11:4c:31:25:e6:1e:59: ed:a0:ae:5a:4e:a3:5b:62:a3:7e:99:6d:b7:47:7a: 28:89:32:45:9c:d7:eb:c5:56:b8:d0:36:5e:1c:01: 1f:42:c3:af:3e:c4:d2:1c:3e:56:b4:ab:bf:20:f0: 6a:85:a9:b0:2c:f3:f4:4b:a4:14:f2:95:7c:3a:be: 9d:eb:10:4c:71:14:f8:f3:08:cc:85:23:4b:ba:b1: 5b:0f:40:0a:82:61:16:5d:0b:40:1d:0e:3e:48:0a: d4:a4:5c:02:73:05:c9:05:9c:5b:84:ab:8d:27:2e: 77:bf:1d:cc:a0:8e:ac:ce:08:4a:eb:1a:de:d9:b1: cb:1a:ad:bc:22:91:c3:8d:ca:b9:2c:fc:ba:7b:16: f6:e4:a1:87:3f:01:91:32:7d:cc:09:78:6c:e9:a3: 4f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:29:B9:CE:5F:68:A2:3C:12:89:3E:B8:B8:DE:1A:05:62:28:78:D0 X509v3 Authority Key Identifier: keyid:79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:59:92:9e:a7:fb:8e:50:23:55:73:b8:b6:fd:38:e9:c0:f9: a5:f7:84:0b:c3:25:b0:b1:21:2d:c1:79:9b:aa:d4:22:f6:df: 55:7d:a9:8f:8f:0b:13:8c:6d:d2:ed:06:dd:01:0d:91:a4:44: b4:28:8d:f8:13:3e:78:fe:84:15:a4:ce:07:05:c6:97:01:34: 40:07:a2:5c:49:bd:a7:d0:4d:65:d3:82:c7:1d:1d:b4:a0:c8: b0:bd:05:39:12:ee:ce:e3:01:c5:e2:36:23:65:fb:52:ec:64: 29:28:93:18:d1:ae:21:35:da:3e:99:6d:93:f3:6c:ad:be:40: 9d:44:24:23:28:c5:99:1b:2b:7d:41:a2:00:1f:4d:a6:56:da: d6:08:50:3c:02:9d:77:b0:6a:20:8a:55:5a:37:de:06:f2:1b: 14:91:b2:72:10:b6:e2:57:0f:40:ca:a4:76:6c:e0:5a:46:88: f9:cd:b4:60:df:9b:c0:15:3e:ef:02:fc:aa:89:8e:c0:50:23: 9e:e0:8c:45:d1:5d:1d:b3:ad:c3:ca:33:84:aa:f2:3d:85:66: ee:88:69:50:db:86:3b:fc:03:5d:34:55:5d:bd:db:2e:d9:d9: 1b:97:ec:7b:8e:30:74:44:5a:dd:68:9a:e0:88:eb:b1:0f:7b: 9b:2c:60:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkHCTwhWDTfOCx+nWnpcnz8MWzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkzMjkwRTdFQzE1NUZGNzFDNDREQjY0NjhDRUQ3OTg1 Q0JGMkRGNTAeFw0yNjA2MDIxNDE3MzdaFw0yNjA2MDMxNzAwMzdaMDMxMTAvBgNV BAMTKEI5MjlCOUNFNUY2OEEyM0MxMjg5M0VCOEI4REUxQTA1NjIyODc4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeOF0LcMY9+fd+WAb1i6H7o/WG BamhaYySHwkFZpgUADNlRPNESMOFkL0Tj3lJRsJQK5XbS4uy3Bj8tQXek8/1iICO Q9NhMi8wfWR8rFYJ0jeFM82bNNZVLIbiRTTS/R1vEUwxJeYeWe2grlpOo1tio36Z bbdHeiiJMkWc1+vFVrjQNl4cAR9Cw68+xNIcPla0q78g8GqFqbAs8/RLpBTylXw6 vp3rEExxFPjzCMyFI0u6sVsPQAqCYRZdC0AdDj5ICtSkXAJzBckFnFuEq40nLne/ HcygjqzOCErrGt7ZscsarbwikcONyrks/Lp7FvbkoYc/AZEyfcwJeGzpo09/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuSm5zl9oojwSiT64uN4aBWIoeNAwHwYDVR0j BBgwFoAUeTKQ5+wVX/ccRNtkaM7XmFy/LfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGU5OGIzYmQtMjg0ZC00YTdkLTlmMjctY2I1ODdlOWRkODQxLzAvNzkzMjkwRTdF QzE1NUZGNzFDNDREQjY0NjhDRUQ3OTg1Q0JGMkRGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OTMyOTBFN0VDMTU1RkY3MUM0NERCNjQ2OENFRDc5ODVDQkYy REY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvNzkzMjkwRTdFQzE1NUZGNzFDNDREQjY0NjhDRUQ3 OTg1Q0JGMkRGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVZkp6n+45QI1VzuLb9OOnA+aX3hAvDJbCx IS3BeZuq1CL231V9qY+PCxOMbdLtBt0BDZGkRLQojfgTPnj+hBWkzgcFxpcBNEAH olxJvafQTWXTgscdHbSgyLC9BTkS7s7jAcXiNiNl+1LsZCkokxjRriE12j6ZbZPz bK2+QJ1EJCMoxZkbK31BogAfTaZW2tYIUDwCnXewaiCKVVo33gbyGxSRsnIQtuJX D0DKpHZs4FpGiPnNtGDfm8AVPu8C/KqJjsBQI57gjEXRXR2zrcPKM4Sq8j2FZu6I aVDbhjv8A100VV292y7Z2RuX7HuOMHREWt1omuCI67EPe5ssYD4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:18:53 2026 by rpki-client