$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft File: C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft (raw, json) Hash identifier: 9MyIorZIK9RCIbHXfG5MwHA438U0n7oDzRO4aUVV9M8= Subject key identifier: 76:5A:AD:C0:C1:B9:D4:98:77:CE:4C:28:6C:BC:CC:AF:07:B7:CE:21 Authority key identifier: C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B Certificate issuer: /CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B Certificate serial: 0DECDAD0197DF2B569F8AEDFBA70A6202E71DEEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 17:51:29 +0000 Manifest this update: Tue 02 Jun 2026 17:46:29 +0000 Manifest next update: Wed 03 Jun 2026 21:29:29 +0000 Files and hashes: 1: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: fWxyuXffWj1jqvHAsWNRbofSjd5DXyF8+uTLX0AR1zI=) 2: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: XztwHCHvbhSLiUv5Dcefs2qJFPWKrlIiunIE1+CwfUw=) 3: C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl (hash: yP5oF5BJNnaOK04EZQwNT2V1mDONJT4lVMUstHPdcnY=) 4: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: q3yJjhYDYiQshTjZtvHBXc0EumicuvHb+zQLM8AeoEQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ec:da:d0:19:7d:f2:b5:69:f8:ae:df:ba:70:a6:20:2e:71:de:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C858999BCD42FDA190703525FA3DB0036EF8DC4B Validity Not Before: Jun 2 17:46:29 2026 GMT Not After : Jun 3 21:29:29 2026 GMT Subject: CN=765AADC0C1B9D49877CE4C286CBCCCAF07B7CE21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:88:98:0c:2d:69:54:06:de:c4:d8:e1:c0: 42:9f:2f:b5:c3:6d:5e:06:a3:fc:86:cd:52:28:b7: 50:c9:c9:f3:8a:e1:af:63:46:98:17:fa:34:b6:00: 37:58:86:96:25:66:a0:ea:ed:07:5b:c5:0e:14:d6: 4c:aa:36:4d:bf:ad:a1:73:df:fb:05:ab:81:d8:22: 01:27:26:c8:b0:54:93:8b:05:9b:16:fb:82:86:e1: 7c:2a:05:55:87:88:f8:48:14:37:cd:01:ce:97:1c: 56:82:44:15:64:66:3f:28:5c:ab:3e:c6:7d:13:bb: ae:5a:4d:eb:a0:54:30:ff:6c:2b:d2:3a:33:b2:74: 4d:2b:b4:9d:20:1e:46:88:51:bb:be:53:4c:bc:c0: 91:f9:ce:bd:49:17:cd:00:29:79:f2:c3:ae:6b:66: 1a:58:f3:46:17:fa:8e:4b:01:9e:f0:b0:ed:42:e3: f9:48:27:4e:ee:7a:b6:b9:fa:93:3e:2e:b9:fb:80: 65:e9:af:c4:88:e4:2b:81:80:8d:62:14:e1:e5:bc: 98:cf:8f:01:be:84:5e:16:8e:b7:16:e0:24:2e:41: af:03:5f:13:cc:05:51:d5:56:e7:00:a9:62:37:03: 61:33:62:08:45:2c:d7:d1:af:84:ca:12:8a:c2:64: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5A:AD:C0:C1:B9:D4:98:77:CE:4C:28:6C:BC:CC:AF:07:B7:CE:21 X509v3 Authority Key Identifier: keyid:C8:58:99:9B:CD:42:FD:A1:90:70:35:25:FA:3D:B0:03:6E:F8:DC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C858999BCD42FDA190703525FA3DB0036EF8DC4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/C858999BCD42FDA190703525FA3DB0036EF8DC4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3e:45:ca:bb:e9:44:56:3b:ce:9a:2e:6e:9e:b1:e6:52:05: 24:59:c3:66:37:3c:41:17:33:6b:3e:d3:75:39:0f:26:bb:b0: 01:e0:46:81:35:d5:32:50:03:cc:7c:67:db:16:2c:fb:4c:80: 54:42:1f:08:f1:a1:29:77:74:6b:81:86:11:0b:f4:84:79:84: 42:87:e8:c9:d7:75:6d:a8:36:51:3e:c4:43:54:64:f6:97:77: b7:e7:b2:5e:0f:f9:18:f4:28:01:38:4a:8b:a4:2d:9f:6a:ca: 0b:48:92:84:90:45:21:2a:d0:17:e3:e4:e1:ef:93:2e:c2:2b: 55:9b:f7:61:1b:f8:9e:cf:88:7e:f9:15:ad:c4:db:84:89:88: 71:29:0e:67:2f:d9:11:a4:74:7b:53:4c:9a:41:b4:6d:98:04: e8:01:35:00:20:f1:29:15:a7:cf:b7:f3:d2:00:f9:d8:af:12: 8d:c8:8a:20:bc:49:c3:11:ad:17:6a:84:1a:5e:0a:d8:16:ce: 84:1d:ba:55:3b:ea:71:98:2d:d1:77:3e:cc:fd:01:6d:1f:9f: 96:39:d7:cf:ac:cf:3d:ce:7d:2e:60:be:9c:de:db:a3:53:e1: 93:dd:99:af:64:f1:10:58:54:1b:2e:25:90:b5:81:40:ea:12: d5:fc:82:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDeza0Bl98rVp+K7funCmIC5x3u8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1ODk5OUJDRDQyRkRBMTkwNzAzNTI1RkEzREIwMDM2 RUY4REM0QjAeFw0yNjA2MDIxNzQ2MjlaFw0yNjA2MDMyMTI5MjlaMDMxMTAvBgNV BAMTKDc2NUFBREMwQzFCOUQ0OTg3N0NFNEMyODZDQkNDQ0FGMDdCN0NFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCirIiYDC1pVAbexNjhwEKfL7XD bV4Go/yGzVIot1DJyfOK4a9jRpgX+jS2ADdYhpYlZqDq7QdbxQ4U1kyqNk2/raFz 3/sFq4HYIgEnJsiwVJOLBZsW+4KG4XwqBVWHiPhIFDfNAc6XHFaCRBVkZj8oXKs+ xn0Tu65aTeugVDD/bCvSOjOydE0rtJ0gHkaIUbu+U0y8wJH5zr1JF80AKXnyw65r ZhpY80YX+o5LAZ7wsO1C4/lIJ07uera5+pM+Lrn7gGXpr8SI5CuBgI1iFOHlvJjP jwG+hF4WjrcW4CQuQa8DXxPMBVHVVucAqWI3A2EzYghFLNfRr4TKEorCZGVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdlqtwMG51Jh3zkwobLzMrwe3ziEwHwYDVR0j BBgwFoAUyFiZm81C/aGQcDUl+j2wA2743EswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQwOTRkM2UtMDg5Yy00YzY4LTgwYTItNTZiNWNiZmMxMDNkLzAvQzg1ODk5OUJD RDQyRkRBMTkwNzAzNTI1RkEzREIwMDM2RUY4REM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODU4OTk5QkNENDJGREExOTA3MDM1MjVGQTNEQjAwMzZFRjhE QzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQzg1ODk5OUJDRDQyRkRBMTkwNzAzNTI1RkEzREIw MDM2RUY4REM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8+Rcq76URWO86aLm6eseZSBSRZw2Y3PEEX M2s+03U5Dya7sAHgRoE11TJQA8x8Z9sWLPtMgFRCHwjxoSl3dGuBhhEL9IR5hEKH 6MnXdW2oNlE+xENUZPaXd7fnsl4P+Rj0KAE4SoukLZ9qygtIkoSQRSEq0Bfj5OHv ky7CK1Wb92Eb+J7PiH75Fa3E24SJiHEpDmcv2RGkdHtTTJpBtG2YBOgBNQAg8SkV p8+389IA+divEo3IiiC8ScMRrRdqhBpeCtgWzoQdulU76nGYLdF3Psz9AW0fn5Y5 18+szz3OfS5gvpze26NT4ZPdma9k8RBYVBsuJZC1gUDqEtX8goo= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:50 2026 by rpki-client