$ rpki-client -vvf rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft File: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft (raw, json) Hash identifier: qpdoEbDtzZp7FQ2WWRVDD1Q8OLgL6QX0gZBlGC+n670= Subject key identifier: 4A:B0:F5:D4:05:28:C7:B4:3C:5A:EA:24:F9:AD:D6:8A:3A:1C:49:29 Authority key identifier: DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87 Certificate issuer: /CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887 Certificate serial: 1EA66DB1D562C87148E42EE3D1A40AE966E5E2D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:57:21 +0000 Manifest this update: Tue 02 Jun 2026 21:52:21 +0000 Manifest next update: Thu 04 Jun 2026 00:09:21 +0000 Files and hashes: 1: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: BbljfPMaDaoCXmfqlX766e2gOwStRy9KRMwBeVYrNRA=) 2: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: swMIglkDWca6bTykcQAlBI8mPZmObmBmI7XJvNSgNmI=) 3: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: ogZJ6AIvbYZ3rfPWkAwkD+wUu9pRc9HcU7kgCnHTVek=) 4: DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl (hash: gyj2K9c0X4WelbkgXi2PGAsG1l5j/7SJn4ZW1mUO9WY=) 5: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: b9ucf82rqvNvVvSo4KylGCCzRBHVOTbyEMd9uIlhwkk=) 6: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: 2hrlUfalWGLJAAgURvT2UIB10iFx48ljh0wmwwAeiOQ=) 7: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: 7vL8y9qGcwGlBHTlp7W2DDNh7nh9ZG6pUOsZTFcC5m8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 00:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a6:6d:b1:d5:62:c8:71:48:e4:2e:e3:d1:a4:0a:e9:66:e5:e2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887 Validity Not Before: Jun 2 21:52:21 2026 GMT Not After : Jun 4 00:09:21 2026 GMT Subject: CN=4AB0F5D40528C7B43C5AEA24F9ADD68A3A1C4929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:35:48:95:63:0e:26:b7:1b:6a:80:52:a3: d2:0d:7c:0e:44:a7:e1:c2:d5:40:f6:57:cf:b8:f4: 09:63:db:75:14:e0:6a:d2:4c:df:58:d5:51:0f:93: bb:d9:53:a8:96:9b:34:3c:4e:14:db:81:09:42:49: 6e:a1:ba:43:cf:96:ae:24:22:fd:d7:83:29:67:c8: 6e:0f:d0:de:ed:5d:4e:8d:c8:ec:02:f9:23:6a:a9: a2:02:e3:50:52:98:5a:2d:69:22:69:a0:23:82:45: f0:6e:6c:b8:57:8f:50:da:9a:f7:46:55:c4:e9:4c: 2e:32:cf:d4:1a:14:6c:da:65:7b:55:6e:61:db:26: 3b:4f:f3:ea:79:ef:4e:33:10:0a:c7:84:08:6f:38: 87:e7:ab:da:cb:71:fb:29:d2:20:f1:dd:47:f7:79: 60:4e:af:88:99:28:b9:d4:f9:31:67:49:8f:6e:86: e2:96:73:39:c1:33:dd:6a:ec:69:32:23:4f:87:7c: 3f:26:d3:0a:7f:7a:04:ba:80:5c:51:5a:5d:60:ee: 1d:fe:46:a5:a5:cd:74:8c:f5:8d:90:a7:c4:6e:f0: 3b:e9:fa:8e:a8:d1:37:9f:39:1c:c3:e6:c3:f5:8b: 72:13:ac:ab:7d:27:6d:fd:99:a2:7c:9d:d0:2a:51: c8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B0:F5:D4:05:28:C7:B4:3C:5A:EA:24:F9:AD:D6:8A:3A:1C:49:29 X509v3 Authority Key Identifier: keyid:DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3a:e9:2e:e7:6f:e8:88:fc:87:76:ce:8d:84:2a:9e:95:fc: ff:8c:c2:d9:05:ab:c7:a9:be:61:97:ef:ca:be:67:7d:77:07: 70:bd:02:12:cb:0f:ed:63:7f:a1:5c:d7:83:db:4d:2e:1f:42: 2b:db:93:bc:7c:42:8f:2d:c7:e2:81:c9:b9:42:cf:d2:09:88: 97:dd:e9:84:c8:66:c3:e2:2c:8c:61:b1:c6:08:87:73:06:ff: df:5d:97:41:be:3e:30:cd:21:f7:27:6b:1d:9c:02:c7:07:a4: 29:5a:bb:4d:2d:40:19:6c:66:4b:43:34:39:85:92:d0:7c:7b: 2c:02:46:3a:e4:c6:a4:86:9c:0d:1c:70:af:1d:26:c0:8a:3f: 60:42:81:e6:71:dc:0b:43:a5:c0:6b:b1:42:0a:91:9d:e5:0c: cd:95:83:86:99:2e:2a:9b:e5:95:3e:fa:8c:d3:50:44:f1:2d: e8:47:6e:27:2d:a5:02:00:ea:bd:d6:6b:1e:50:f4:52:71:45: 27:75:fc:a6:0f:4e:c3:3b:36:89:14:2b:62:f9:81:77:8d:03: 38:c6:4d:15:55:9e:24:52:7c:da:1a:40:86:01:43:3f:ee:2e: db:86:d0:49:cd:1d:ce:09:50:2e:ee:bd:46:75:80:68:32:90: 8a:33:a7:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqZtsdViyHFI5C7j0aQK6Wbl4tAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBM0M4RjhFODJDRDRGOUUyRjhGOUFFQzg5MEJDMURC MDk4QTg4NzAeFw0yNjA2MDIyMTUyMjFaFw0yNjA2MDQwMDA5MjFaMDMxMTAvBgNV BAMTKDRBQjBGNUQ0MDUyOEM3QjQzQzVBRUEyNEY5QURENjhBM0ExQzQ5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn0zVIlWMOJrcbaoBSo9INfA5E p+HC1UD2V8+49Alj23UU4GrSTN9Y1VEPk7vZU6iWmzQ8ThTbgQlCSW6hukPPlq4k Iv3XgylnyG4P0N7tXU6NyOwC+SNqqaIC41BSmFotaSJpoCOCRfBubLhXj1DamvdG VcTpTC4yz9QaFGzaZXtVbmHbJjtP8+p5704zEArHhAhvOIfnq9rLcfsp0iDx3Uf3 eWBOr4iZKLnU+TFnSY9uhuKWcznBM91q7GkyI0+HfD8m0wp/egS6gFxRWl1g7h3+ RqWlzXSM9Y2Qp8Ru8Dvp+o6o0TefORzD5sP1i3ITrKt9J239maJ8ndAqUcgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSrD11AUox7Q8Wuok+a3WijocSSkwHwYDVR0j BBgwFoAU3KPI+Ogs1Pni+PmuyJC8HbCYqIcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBjNzczYzgtZmI1Ni00NDlmLTg2NDktMTEyZDZlMTY4NmIzLzAvRENBM0M4RjhF ODJDRDRGOUUyRjhGOUFFQzg5MEJDMURCMDk4QTg4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0EzQzhGOEU4MkNENEY5RTJGOEY5QUVDODkwQkMxREIwOThB ODg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBjNzczYzgtZmI1Ni00NDlmLTg2 NDktMTEyZDZlMTY4NmIzLzAvRENBM0M4RjhFODJDRDRGOUUyRjhGOUFFQzg5MEJD MURCMDk4QTg4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH066S7nb+iI/Id2zo2EKp6V/P+MwtkFq8ep vmGX78q+Z313B3C9AhLLD+1jf6Fc14PbTS4fQivbk7x8Qo8tx+KByblCz9IJiJfd 6YTIZsPiLIxhscYIh3MG/99dl0G+PjDNIfcnax2cAscHpClau00tQBlsZktDNDmF ktB8eywCRjrkxqSGnA0ccK8dJsCKP2BCgeZx3AtDpcBrsUIKkZ3lDM2Vg4aZLiqb 5ZU++ozTUETxLehHbictpQIA6r3Wax5Q9FJxRSd1/KYPTsM7NokUK2L5gXeNAzjG TRVVniRSfNoaQIYBQz/uLtuG0EnNHc4JUC7uvUZ1gGgykIozpzg= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:00 2026 by rpki-client