$ rpki-client -vvf rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft File: 00095019ECFE138568A45C973E2550DDCDFE24F9.mft (raw, json) Hash identifier: Jy2GyaM2NZgVSZr/Vv0mb3OhliDiDXcNhqV113qbJPE= Subject key identifier: 29:B6:A1:0F:AD:93:90:CD:58:70:9D:BF:1B:FD:6B:B5:07:1B:E7:52 Authority key identifier: 00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9 Certificate issuer: /CN=00095019ECFE138568A45C973E2550DDCDFE24F9 Certificate serial: 6035EFC0E75C28B095E7C9186B840A1B096846EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 02:38:01 +0000 Manifest this update: Wed 03 Jun 2026 02:33:01 +0000 Manifest next update: Thu 04 Jun 2026 05:54:01 +0000 Files and hashes: 1: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: 9NjGQraMtFt8WFleFmys2JeiEGfDbejk4iig/XaEVZ4=) 2: 00095019ECFE138568A45C973E2550DDCDFE24F9.crl (hash: xx+juY1LvFbUU5xHrbngsDTkjjBjR/41HHMltm2QqrQ=) 3: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: QD46OeSAEEYRUHA+p9YKqowoXvSQlWoPfMsfotiNmwI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 04:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:35:ef:c0:e7:5c:28:b0:95:e7:c9:18:6b:84:0a:1b:09:68:46:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00095019ECFE138568A45C973E2550DDCDFE24F9 Validity Not Before: Jun 3 02:33:01 2026 GMT Not After : Jun 4 05:54:01 2026 GMT Subject: CN=29B6A10FAD9390CD58709DBF1BFD6BB5071BE752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:ad:05:2a:f5:fb:9f:c6:c6:5a:b2:cb:7f: c6:09:ec:4b:d2:f2:c0:c9:06:a1:89:85:eb:d6:c6: b6:f9:e4:71:b6:2d:0f:6f:66:5e:b1:af:02:3e:c5: ec:1e:46:8c:5c:cf:46:bd:f3:5c:e7:1d:36:95:b0: 63:f0:a5:5e:3e:7d:f4:9e:6f:16:5c:9a:52:e6:07: 2f:f5:29:cb:0b:e5:8f:18:73:28:48:31:94:06:71: c4:ba:25:42:ab:ca:a1:89:a9:7e:ed:e7:a5:52:07: 01:fb:5e:45:b7:ee:53:9f:99:51:e6:3b:a7:87:20: 60:bb:c1:d4:a9:ad:1e:21:a1:cf:e7:66:7d:e3:e5: d7:2f:e8:57:cc:a3:4c:3d:31:1d:1b:90:8f:b6:f5: 61:73:01:e0:50:05:f6:b2:f7:ef:7b:b8:1e:62:53: e1:1d:e4:c6:2b:6b:de:28:5c:53:64:78:d9:cf:00: c9:00:b7:92:b0:10:35:c1:b1:e2:93:b4:88:4d:04: 88:ca:7f:b0:83:92:9d:e9:d3:ad:e2:e3:38:d1:26: 03:51:f3:06:b5:de:3c:84:f4:c8:95:af:91:87:24: de:f7:24:31:b9:fd:21:e6:90:23:20:b8:90:43:b5: c2:69:fb:38:99:f7:21:e8:29:46:08:62:c4:77:12: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B6:A1:0F:AD:93:90:CD:58:70:9D:BF:1B:FD:6B:B5:07:1B:E7:52 X509v3 Authority Key Identifier: keyid:00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:0d:4e:ce:db:7f:ab:e8:c5:3b:c2:dc:e9:3b:0a:95:4e:c5: 86:c3:55:1e:fb:de:85:8b:e9:0c:1a:dc:01:14:0e:63:d8:5b: d7:79:8f:61:37:59:9b:6a:d9:68:f5:ff:57:c3:d5:94:df:ed: 38:4c:da:d5:ca:63:91:75:3f:92:c7:1b:8a:dd:38:29:22:76: ff:c9:5d:30:42:4d:af:a2:4a:be:f6:20:bb:3e:89:6d:ff:65: 6b:6e:ff:45:b1:04:1a:7f:cc:0f:7f:bc:f8:03:e0:74:7e:77: 26:49:db:a9:68:47:1f:b9:c2:3f:cb:7e:68:b1:24:65:4c:4e: 21:80:8c:3e:7a:66:0b:52:c6:73:3f:62:59:85:7d:c8:46:5e: 1b:df:23:66:05:cd:c3:1d:e5:5c:17:cd:92:1e:ba:84:6a:0e: 7b:a5:ed:3f:40:38:e0:ce:90:0f:d1:3f:bd:b4:b2:00:be:ce: e1:fb:98:b2:b3:94:9f:d7:b9:be:f7:ef:f5:f3:37:1d:23:45: 05:9e:72:34:5b:ea:cf:a8:13:93:47:b6:2d:c3:1b:0c:62:8c: 73:53:db:b8:06:c5:4d:40:e7:00:d1:a6:c9:ec:1e:4a:6b:95: fc:a5:a1:d7:e7:f7:6f:90:f2:4e:1e:86:34:d0:2a:db:c5:df: dc:5e:d4:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDXvwOdcKLCV58kYa4QKGwloRu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERD REZFMjRGOTAeFw0yNjA2MDMwMjMzMDFaFw0yNjA2MDQwNTU0MDFaMDMxMTAvBgNV BAMTKDI5QjZBMTBGQUQ5MzkwQ0Q1ODcwOURCRjFCRkQ2QkI1MDcxQkU3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4a0FKvX7n8bGWrLLf8YJ7EvS 8sDJBqGJhevWxrb55HG2LQ9vZl6xrwI+xeweRoxcz0a981znHTaVsGPwpV4+ffSe bxZcmlLmBy/1KcsL5Y8YcyhIMZQGccS6JUKryqGJqX7t56VSBwH7XkW37lOfmVHm O6eHIGC7wdSprR4hoc/nZn3j5dcv6FfMo0w9MR0bkI+29WFzAeBQBfay9+97uB5i U+Ed5MYra94oXFNkeNnPAMkAt5KwEDXBseKTtIhNBIjKf7CDkp3p063i4zjRJgNR 8wa13jyE9MiVr5GHJN73JDG5/SHmkCMguJBDtcJp+ziZ9yHoKUYIYsR3EgHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKbahD62TkM1YcJ2/G/1rtQcb51IwHwYDVR0j BBgwFoAUAAlQGez+E4VopFyXPiVQ3c3+JPkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZmMWViNGItNDhkYy00ZWVhLTkxODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlF Q0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERDREZFMjRGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDA5NTAxOUVDRkUxMzg1NjhBNDVDOTczRTI1NTBERENERkUy NEY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUw RERDREZFMjRGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUNTs7bf6voxTvC3Ok7CpVOxYbDVR773oWL 6Qwa3AEUDmPYW9d5j2E3WZtq2Wj1/1fD1ZTf7ThM2tXKY5F1P5LHG4rdOCkidv/J XTBCTa+iSr72ILs+iW3/ZWtu/0WxBBp/zA9/vPgD4HR+dyZJ26loRx+5wj/Lfmix JGVMTiGAjD56ZgtSxnM/YlmFfchGXhvfI2YFzcMd5VwXzZIeuoRqDnul7T9AOODO kA/RP720sgC+zuH7mLKzlJ/Xub737/XzNx0jRQWecjRb6s+oE5NHti3DGwxijHNT 27gGxU1A5wDRpsnsHkprlfylodfn92+Q8k4ehjTQKtvF39xe1Eg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:29:53 2026 by rpki-client