$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft File: 883B1118323CCC5736EA818FCCFAFAA5F6346633.mft (raw, json) Hash identifier: c4V0SmVJdKyDe+jZzRkDYZCf25JIjkLOUZsYGL5YbK8= Subject key identifier: 1F:9C:70:51:A5:15:89:88:33:90:48:E7:B6:C2:92:D2:B1:3F:9B:33 Authority key identifier: 88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 Certificate issuer: /CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Certificate serial: 02FF0E571641D111189F76B08B185DA5E3E99003 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:49:45 +0000 Manifest this update: Tue 02 Jun 2026 11:44:45 +0000 Manifest next update: Wed 03 Jun 2026 13:22:45 +0000 Files and hashes: 1: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: bFOzzHMeNiibUnZ6L+hq8KLmZQjQupaRQAA5Pf20Elk=) 2: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: mn881aCiRGLWWEDnawAxEXshps2FtIWZ7qkAUnFIOiE=) 3: 883B1118323CCC5736EA818FCCFAFAA5F6346633.crl (hash: bqjC9JyaAwx40pWlm7xuB5e/cyv6BYBtgaN7O386wXE=) 4: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: XRMjBNqHnY6+jz0gyEQDgptcLtfFhiyGtn8MtQxlV6s=) 5: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: cz+80lMPAlEnAUax/7iLVTXO0rUokGVs+fLA4W5hxnM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ff:0e:57:16:41:d1:11:18:9f:76:b0:8b:18:5d:a5:e3:e9:90:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Validity Not Before: Jun 2 11:44:45 2026 GMT Not After : Jun 3 13:22:45 2026 GMT Subject: CN=1F9C7051A5158988339048E7B6C292D2B13F9B33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b8:08:4e:e8:f9:92:ca:59:25:35:c5:d7:c8: 99:af:16:21:47:8b:f0:f6:1f:99:e0:c8:a3:d8:5e: 25:0f:58:1e:36:03:b6:20:f7:ba:8e:d3:05:16:f4: 23:a0:1b:36:24:94:21:01:71:af:ed:14:c0:b7:7f: af:af:b0:22:ac:0d:77:bf:be:97:01:50:ed:84:73: dc:64:66:ec:c6:b8:aa:6f:da:da:1d:ef:4e:13:ec: 50:a7:d4:84:d8:90:b2:55:23:80:38:62:44:27:02: 1b:33:54:11:35:3c:24:ef:66:39:26:e3:0d:c4:bf: ee:e4:d5:9f:b9:64:63:e1:fb:8d:49:50:52:b5:e7: 68:fa:74:51:85:7c:6f:11:81:dc:91:5e:e6:e5:73: 05:27:01:c9:73:c7:ae:f8:d5:f0:78:d8:ce:a9:d5: 13:4b:5e:87:67:2b:b1:c3:ed:9a:a2:66:ec:d2:81: 43:6d:bb:8d:f0:af:ff:7a:7c:c1:14:20:a5:47:ef: 62:23:df:19:03:9e:f5:5f:cb:72:2e:2d:96:f7:96: 74:07:2c:16:a2:af:fb:b7:6e:b3:fc:02:58:5f:44: 68:93:18:5f:1f:19:b9:23:95:85:52:b7:5e:c6:7a: 4c:b6:41:8e:84:7a:64:f3:af:ac:37:42:a0:4f:86: b4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9C:70:51:A5:15:89:88:33:90:48:E7:B6:C2:92:D2:B1:3F:9B:33 X509v3 Authority Key Identifier: keyid:88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b3:18:97:4c:a2:68:2a:5f:a9:66:6e:09:c3:26:31:68:f1: 79:dd:98:b9:ab:a1:56:0e:e7:c1:26:4c:52:a9:67:17:85:ce: 8c:73:36:54:64:cd:ef:c2:2e:7b:66:86:46:1d:5f:b3:14:bf: 8c:a4:21:8b:dd:20:50:82:92:08:fd:c7:4c:9c:51:11:f0:6e: 39:3e:6f:7b:94:ce:64:f4:e5:a4:4e:66:c5:92:34:89:c4:e7: 63:56:98:12:00:89:69:f7:11:74:bd:0b:bf:e7:2e:18:45:38: 59:4c:39:11:e4:df:f6:cc:4e:ee:9a:49:e6:b2:60:af:df:d6: ff:e6:f6:5c:bc:87:4f:7f:69:66:84:d3:34:c9:a0:ad:b1:f0: 68:d7:0f:19:93:b1:d2:4d:40:06:97:52:27:4d:12:e6:ff:60: 2e:87:f3:76:e7:1c:8a:7c:ab:48:3c:fd:bc:68:c9:38:93:22: b5:97:02:6d:33:bd:a8:c8:8c:5a:94:93:08:0f:53:64:8e:9a: fd:33:f9:c0:be:c2:66:4b:a2:b1:55:21:59:69:63:07:87:51: 15:94:27:f4:be:8d:70:d0:e1:1f:5c:6a:ab:58:d5:2a:b8:ff: fb:6f:a3:0e:dc:ad:69:89:f2:1e:85:8c:51:42:46:07:81:27: 94:d0:bf:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAv8OVxZB0REYn3awixhdpePpkAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzQjExMTgzMjNDQ0M1NzM2RUE4MThGQ0NGQUZBQTVG NjM0NjYzMzAeFw0yNjA2MDIxMTQ0NDVaFw0yNjA2MDMxMzIyNDVaMDMxMTAvBgNV BAMTKDFGOUM3MDUxQTUxNTg5ODgzMzkwNDhFN0I2QzI5MkQyQjEzRjlCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHuAhO6PmSylklNcXXyJmvFiFH i/D2H5ngyKPYXiUPWB42A7Yg97qO0wUW9COgGzYklCEBca/tFMC3f6+vsCKsDXe/ vpcBUO2Ec9xkZuzGuKpv2tod704T7FCn1ITYkLJVI4A4YkQnAhszVBE1PCTvZjkm 4w3Ev+7k1Z+5ZGPh+41JUFK152j6dFGFfG8RgdyRXublcwUnAclzx6741fB42M6p 1RNLXodnK7HD7ZqiZuzSgUNtu43wr/96fMEUIKVH72Ij3xkDnvVfy3IuLZb3lnQH LBair/u3brP8AlhfRGiTGF8fGbkjlYVSt17Geky2QY6EemTzr6w3QqBPhrSjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH5xwUaUViYgzkEjntsKS0rE/mzMwHwYDVR0j BBgwFoAUiDsRGDI8zFc26oGPzPr6pfY0ZjMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhMzI5NjctZDU1OC00YTM0LWJlOGUtNjRlZjRjZmMwNGUzLzAvODgzQjExMTgz MjNDQ0M1NzM2RUE4MThGQ0NGQUZBQTVGNjM0NjYzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODNCMTExODMyM0NDQzU3MzZFQTgxOEZDQ0ZBRkFBNUY2MzQ2 NjMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvODgzQjExMTgzMjNDQ0M1NzM2RUE4MThGQ0NGQUZB QTVGNjM0NjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHizGJdMomgqX6lmbgnDJjFo8XndmLmroVYO 58EmTFKpZxeFzoxzNlRkze/CLntmhkYdX7MUv4ykIYvdIFCCkgj9x0ycURHwbjk+ b3uUzmT05aROZsWSNInE52NWmBIAiWn3EXS9C7/nLhhFOFlMORHk3/bMTu6aSeay YK/f1v/m9ly8h09/aWaE0zTJoK2x8GjXDxmTsdJNQAaXUidNEub/YC6H83bnHIp8 q0g8/bxoyTiTIrWXAm0zvajIjFqUkwgPU2SOmv0z+cC+wmZLorFVIVlpYweHURWU J/S+jXDQ4R9caqtY1Sq4//tvow7crWmJ8h6FjFFCRgeBJ5TQv2I= -----END CERTIFICATE-----Generated at Wed Jun 3 04:07:50 2026 by rpki-client