$ rpki-client -vvf rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft File: A655C14C173A3BE852B5A2C52C501937C4340242.mft (raw, json) Hash identifier: Yy7H13sxmynNYNoDzuGO1BCgqgDmd94/tvqOt0q+mqs= Subject key identifier: 37:1A:F8:70:37:34:84:F3:E4:5C:F4:E2:E7:CF:F6:0F:EE:88:93:02 Authority key identifier: A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42 Certificate issuer: /CN=A655C14C173A3BE852B5A2C52C501937C4340242 Certificate serial: 768AAAC582E02A9A0C75571F564A8D93C7BDB23A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:37:00 +0000 Manifest this update: Tue 02 Jun 2026 09:32:00 +0000 Manifest next update: Wed 03 Jun 2026 13:15:00 +0000 Files and hashes: 1: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: VTw+tu3SsLrqMi7jJgKUunIG386oKhLKeizx0PYXC2g=) 2: A655C14C173A3BE852B5A2C52C501937C4340242.crl (hash: h+D8qA/TKPzXKUki3orVC6PJWrn/bNvoeMGq0aHs3Dw=) 3: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: St+whbiWn8DuDZzEPL2qqiXyvmUfCd91hjaKC3vJifA=) 4: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: qkm6D0klaQyvN59pQnarOTQhutzEDT+u+1JdsHBl/VQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8a:aa:c5:82:e0:2a:9a:0c:75:57:1f:56:4a:8d:93:c7:bd:b2:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A655C14C173A3BE852B5A2C52C501937C4340242 Validity Not Before: Jun 2 09:32:00 2026 GMT Not After : Jun 3 13:15:00 2026 GMT Subject: CN=371AF870373484F3E45CF4E2E7CFF60FEE889302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:4c:7e:93:2c:62:a2:07:07:9e:1d:4a:80: 9b:57:05:4f:fa:be:33:5e:1b:d5:40:20:4d:c9:29: 5b:f2:81:ba:cf:5b:d2:1a:df:3c:dc:04:76:3c:b2: 65:c3:db:01:ed:4a:9f:77:b1:ec:87:2b:5e:5f:0e: de:e4:88:3a:6d:d0:7d:78:c8:55:97:a4:7c:b4:74: fc:c9:0a:fc:7e:44:3c:45:3e:2d:86:49:bb:95:f1: fd:cc:6a:2b:95:ed:2c:ad:90:31:1a:c4:5b:34:66: ae:92:70:f1:4d:0b:eb:e8:af:ec:e6:76:b1:cc:8e: 02:61:a2:02:86:bd:11:73:13:a9:1b:09:b0:bc:77: e8:31:f9:a2:23:17:0f:6f:5e:57:e5:a3:7c:7c:10: 7e:27:71:30:64:db:76:41:af:a0:f2:d0:aa:2d:6c: 1f:68:46:2e:c8:70:b8:69:be:d2:f9:83:c3:a0:03: 87:79:42:67:ba:32:ae:a0:ee:89:6f:2d:3d:4c:38: 65:c2:10:04:fb:2a:90:d8:73:a3:a7:a8:43:d0:d4: 43:da:55:73:c8:81:e5:cb:c8:fd:b6:c5:6c:6a:2a: 09:07:be:86:a1:6d:99:17:fa:1b:34:aa:0b:e3:53: a2:66:eb:3c:45:d9:8a:45:97:10:28:34:f2:9d:08: 7d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1A:F8:70:37:34:84:F3:E4:5C:F4:E2:E7:CF:F6:0F:EE:88:93:02 X509v3 Authority Key Identifier: keyid:A6:55:C1:4C:17:3A:3B:E8:52:B5:A2:C5:2C:50:19:37:C4:34:02:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A655C14C173A3BE852B5A2C52C501937C4340242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/A655C14C173A3BE852B5A2C52C501937C4340242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ab:b4:93:e4:35:1d:55:4a:9d:a3:21:1e:51:58:1a:46:29: 70:b3:01:69:68:da:76:1d:f7:bd:3c:a5:a2:d4:cf:b9:f3:ba: b6:ae:04:df:ce:c0:d9:17:9d:bf:98:ed:7e:1e:69:14:17:4a: 50:ef:d2:95:2c:cb:1c:65:70:d7:9f:57:72:29:1b:29:9b:13: 59:dd:04:4a:b2:e9:ac:13:03:75:ed:48:83:06:17:84:35:2a: ed:1e:e1:b4:4a:fa:51:56:60:99:01:d6:3b:d7:5c:31:fb:6f: e3:2a:05:b2:51:8e:aa:4c:50:9e:4d:2c:98:08:09:ba:74:1c: 72:d8:32:40:4f:bd:26:4a:ab:07:ce:77:9f:06:b0:e1:4f:eb: cb:8b:d5:1a:52:c9:db:63:9f:5b:41:44:23:5f:6d:27:f4:12: 69:18:a5:6c:42:7c:1d:ef:30:4a:7d:c8:4a:e4:7e:42:9a:4c: 57:3c:1f:62:29:39:fd:86:d6:95:24:d6:87:1d:f3:d0:44:3e: 42:da:fc:a7:39:4f:40:10:a7:a3:02:b8:a2:e9:ac:af:bc:8e: ba:c1:1d:f4:85:01:b0:fd:03:71:86:a6:e9:d6:19:fb:97:11: e6:74:45:6f:49:f1:c4:68:57:95:40:0a:b9:2d:7a:46:6a:36: f1:89:bd:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdoqqxYLgKpoMdVcfVkqNk8e9sjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1NUMxNEMxNzNBM0JFODUyQjVBMkM1MkM1MDE5MzdD NDM0MDI0MjAeFw0yNjA2MDIwOTMyMDBaFw0yNjA2MDMxMzE1MDBaMDMxMTAvBgNV BAMTKDM3MUFGODcwMzczNDg0RjNFNDVDRjRFMkU3Q0ZGNjBGRUU4ODkzMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3Ux+kyxiogcHnh1KgJtXBU/6 vjNeG9VAIE3JKVvygbrPW9Ia3zzcBHY8smXD2wHtSp93seyHK15fDt7kiDpt0H14 yFWXpHy0dPzJCvx+RDxFPi2GSbuV8f3MaiuV7SytkDEaxFs0Zq6ScPFNC+vor+zm drHMjgJhogKGvRFzE6kbCbC8d+gx+aIjFw9vXlflo3x8EH4ncTBk23ZBr6Dy0Kot bB9oRi7IcLhpvtL5g8OgA4d5Qme6Mq6g7olvLT1MOGXCEAT7KpDYc6OnqEPQ1EPa VXPIgeXLyP22xWxqKgkHvoahbZkX+hs0qgvjU6Jm6zxF2YpFlxAoNPKdCH0DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNxr4cDc0hPPkXPTi58/2D+6IkwIwHwYDVR0j BBgwFoAUplXBTBc6O+hStaLFLFAZN8Q0AkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTgxMjc0YWYtN2NkMC00MGFmLWEzMjEtNjc2ODk4ZDU4ZGI4LzAvQTY1NUMxNEMx NzNBM0JFODUyQjVBMkM1MkM1MDE5MzdDNDM0MDI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNjU1QzE0QzE3M0EzQkU4NTJCNUEyQzUyQzUwMTkzN0M0MzQw MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvQTY1NUMxNEMxNzNBM0JFODUyQjVBMkM1MkM1MDE5 MzdDNDM0MDI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACertJPkNR1VSp2jIR5RWBpGKXCzAWlo2nYd 9708paLUz7nzurauBN/OwNkXnb+Y7X4eaRQXSlDv0pUsyxxlcNefV3IpGymbE1nd BEqy6awTA3XtSIMGF4Q1Ku0e4bRK+lFWYJkB1jvXXDH7b+MqBbJRjqpMUJ5NLJgI Cbp0HHLYMkBPvSZKqwfOd58GsOFP68uL1RpSydtjn1tBRCNfbSf0EmkYpWxCfB3v MEp9yErkfkKaTFc8H2IpOf2G1pUk1ocd89BEPkLa/Kc5T0AQp6MCuKLprK+8jrrB HfSFAbD9A3GGpunWGfuXEeZ0RW9J8cRoV5VACrktekZqNvGJvXA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:16:43 2026 by rpki-client