$ rpki-client -vvf rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft File: 933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft (raw, json) Hash identifier: ceXhmCcSjqENsOiHTZcRHtOW+s6c6z2LUru2ELFT+j8= Subject key identifier: 11:F7:C7:91:64:E6:6F:05:D7:7D:31:72:EF:C1:0B:0B:73:82:2A:0E Authority key identifier: 93:35:48:F0:87:67:77:5D:7B:02:8B:D1:D8:A8:C0:B6:B7:D8:6E:93 Certificate issuer: /CN=933548F08767775D7B028BD1D8A8C0B6B7D86E93 Certificate serial: 5B7B8010121B690216C34B2E50B0E9758F60C483 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:40:42 +0000 Manifest this update: Tue 02 Jun 2026 12:35:42 +0000 Manifest next update: Wed 03 Jun 2026 13:11:42 +0000 Files and hashes: 1: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: 95qI5TTOif1MY2iIjk3ZkvKBiCiEWOUsXhE4Y/1tZsk=) 2: 933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl (hash: Ua/wygp+/H+FtUOBdZJCM+vbHE1u+bVDcsujz5SClzk=) 3: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: Y8+QftugPZbHwSkPpvPN8/JuYMkdCrQIqoTMc5y/xEM=) 4: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: zoDD4RhxLX2w3djQTafSQhXib0k+dFwrPjaxCZF6N3M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7b:80:10:12:1b:69:02:16:c3:4b:2e:50:b0:e9:75:8f:60:c4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=933548F08767775D7B028BD1D8A8C0B6B7D86E93 Validity Not Before: Jun 2 12:35:42 2026 GMT Not After : Jun 3 13:11:42 2026 GMT Subject: CN=11F7C79164E66F05D77D3172EFC10B0B73822A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:7d:ad:67:d5:94:d8:81:34:2d:86:b7:5a: d3:5b:29:3b:97:67:f2:4f:95:a1:eb:de:77:c1:61: 69:30:43:f3:dc:a6:46:76:8f:d2:4d:bf:a7:7f:bc: 51:46:af:59:e4:06:b8:48:3e:34:0b:a5:6f:b8:4b: 5d:25:e3:27:c0:a3:5a:11:8d:33:12:14:7d:05:f0: b2:47:69:ee:76:1a:47:7a:71:1a:6b:bd:3b:36:a6: ff:ae:b9:4e:a3:f8:80:09:9e:a9:64:ea:93:e1:06: 67:eb:7f:73:dc:d1:e2:28:84:2d:c6:dd:bb:79:d9: c1:78:59:0b:cd:1e:cb:3d:8d:81:18:e9:87:08:ea: 4d:71:93:1d:12:a2:a3:f1:aa:bd:1b:f9:ec:8e:19: c9:d9:75:70:34:27:59:59:14:6a:8d:b7:a7:96:c3: 9f:04:d7:1f:75:a0:d6:7b:6a:ea:f6:1b:97:5d:b3: 97:96:fe:63:3a:dd:65:c2:77:46:22:64:94:a8:7e: 39:fa:87:a7:ca:68:b0:0d:fd:45:59:16:05:f9:ab: 3d:23:1e:fa:07:22:5d:0b:ce:5e:eb:58:a3:65:21: d8:4f:d6:1f:13:c0:17:ac:05:2b:af:a9:e5:69:29: 5f:0c:c8:46:b3:9b:b2:fb:fd:41:73:df:c1:a2:60: 89:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F7:C7:91:64:E6:6F:05:D7:7D:31:72:EF:C1:0B:0B:73:82:2A:0E X509v3 Authority Key Identifier: keyid:93:35:48:F0:87:67:77:5D:7B:02:8B:D1:D8:A8:C0:B6:B7:D8:6E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/933548F08767775D7B028BD1D8A8C0B6B7D86E93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/933548F08767775D7B028BD1D8A8C0B6B7D86E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:73:ba:b2:b1:9a:0f:5d:4d:b9:ee:57:9b:c5:e5:50:3a:9c: 3c:f5:fb:b1:d7:ee:79:c2:95:2d:9f:55:77:69:96:a6:c3:b3: a6:67:0e:6b:41:3c:53:d9:8b:94:4a:44:3e:e4:2c:db:5d:d1: 2d:2d:66:ae:b2:bd:89:e2:61:00:64:af:bb:ea:82:b6:73:a9: 6c:27:48:56:5e:a4:89:14:aa:f5:dd:56:45:0c:f4:c6:e2:c4: de:21:3a:f4:1e:8e:dc:e6:90:3d:16:7b:53:07:be:28:d0:da: 45:da:5b:31:48:0f:d2:54:c0:7a:d3:1f:89:fd:fc:85:62:cc: bb:8f:21:d6:3a:9f:1a:5b:9f:8a:09:5d:74:26:77:6f:2c:d3: 79:34:75:4e:9f:87:07:86:23:aa:a7:98:59:6e:ee:b4:ab:e4: 22:eb:26:0a:9b:71:24:81:30:bf:28:4e:36:8e:dd:0c:a7:45: a3:e3:82:6a:65:0c:bd:b5:14:aa:87:82:08:27:ac:9c:37:56: c5:ad:2f:9a:45:8a:12:4b:f6:52:e0:9f:d9:d7:43:1c:c8:03: 52:27:b7:26:c8:f4:df:99:17:3a:0b:27:9f:02:3d:e2:8a:39: 00:2e:2b:90:fe:88:71:16:77:b9:ef:d7:37:4a:e0:00:9f:2b: 0e:7d:ff:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW3uAEBIbaQIWw0suULDpdY9gxIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMzNTQ4RjA4NzY3Nzc1RDdCMDI4QkQxRDhBOEMwQjZC N0Q4NkU5MzAeFw0yNjA2MDIxMjM1NDJaFw0yNjA2MDMxMzExNDJaMDMxMTAvBgNV BAMTKDExRjdDNzkxNjRFNjZGMDVENzdEMzE3MkVGQzEwQjBCNzM4MjJBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2oH2tZ9WU2IE0LYa3WtNbKTuX Z/JPlaHr3nfBYWkwQ/PcpkZ2j9JNv6d/vFFGr1nkBrhIPjQLpW+4S10l4yfAo1oR jTMSFH0F8LJHae52Gkd6cRprvTs2pv+uuU6j+IAJnqlk6pPhBmfrf3Pc0eIohC3G 3bt52cF4WQvNHss9jYEY6YcI6k1xkx0SoqPxqr0b+eyOGcnZdXA0J1lZFGqNt6eW w58E1x91oNZ7aur2G5dds5eW/mM63WXCd0YiZJSofjn6h6fKaLAN/UVZFgX5qz0j HvoHIl0Lzl7rWKNlIdhP1h8TwBesBSuvqeVpKV8MyEazm7L7/UFz38GiYIkDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEffHkWTmbwXXfTFy78ELC3OCKg4wHwYDVR0j BBgwFoAUkzVI8Idnd117AovR2KjAtrfYbpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdjZDUxMWYtYWZmZi00ZmVjLTg3MjQtZDQxMTlmODkxZGYyLzAvOTMzNTQ4RjA4 NzY3Nzc1RDdCMDI4QkQxRDhBOEMwQjZCN0Q4NkU5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzM1NDhGMDg3Njc3NzVEN0IwMjhCRDFEOEE4QzBCNkI3RDg2 RTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvOTMzNTQ4RjA4NzY3Nzc1RDdCMDI4QkQxRDhBOEMw QjZCN0Q4NkU5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJzurKxmg9dTbnuV5vF5VA6nDz1+7HX7nnC lS2fVXdplqbDs6ZnDmtBPFPZi5RKRD7kLNtd0S0tZq6yvYniYQBkr7vqgrZzqWwn SFZepIkUqvXdVkUM9MbixN4hOvQejtzmkD0We1MHvijQ2kXaWzFID9JUwHrTH4n9 /IVizLuPIdY6nxpbn4oJXXQmd28s03k0dU6fhweGI6qnmFlu7rSr5CLrJgqbcSSB ML8oTjaO3QynRaPjgmplDL21FKqHgggnrJw3VsWtL5pFihJL9lLgn9nXQxzIA1In tybI9N+ZFzoLJ58CPeKKOQAuK5D+iHEWd7nv1zdK4ACfKw59/8A= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:39 2026 by rpki-client