$ rpki-client -vvf rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.mft File: 721B7A4BF48265E289B51932234579B2D9D38CF7.mft (raw, json) Hash identifier: gFNkJs7ufYe57uwFZ6YAS+XV7y4iOKr84H8M6uLipZg= Subject key identifier: CA:B8:0A:FA:DC:B1:0E:0B:7E:2B:06:DE:0E:43:B1:75:09:7C:94:84 Authority key identifier: 72:1B:7A:4B:F4:82:65:E2:89:B5:19:32:23:45:79:B2:D9:D3:8C:F7 Certificate issuer: /CN=721B7A4BF48265E289B51932234579B2D9D38CF7 Certificate serial: 084FF3B1A16F682815AF43801B9783EE7BAC2CBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/721B7A4BF48265E289B51932234579B2D9D38CF7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:36:40 +0000 Manifest this update: Wed 03 Jun 2026 01:31:40 +0000 Manifest next update: Thu 04 Jun 2026 04:28:40 +0000 Files and hashes: 1: 3130332e35362e37302e302f32342d3234203d3e20313333383235.roa (hash: JLbpK2d50OThZ/uHUQbD7meiPhgU3JckSJnTiY2q/0s=) 2: 721B7A4BF48265E289B51932234579B2D9D38CF7.crl (hash: lFuWLabjuz4IdUkmOfm9QniANqjMKKYOF9AiGe0K5Ys=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.crl rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/721B7A4BF48265E289B51932234579B2D9D38CF7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 04:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4f:f3:b1:a1:6f:68:28:15:af:43:80:1b:97:83:ee:7b:ac:2c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=721B7A4BF48265E289B51932234579B2D9D38CF7 Validity Not Before: Jun 3 01:31:40 2026 GMT Not After : Jun 4 04:28:40 2026 GMT Subject: CN=CAB80AFADCB10E0B7E2B06DE0E43B175097C9484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ac:b9:4d:a0:5e:4b:ec:a1:19:05:19:f9:8f: bc:e0:f9:50:f4:2d:f7:15:b1:d9:c2:46:4b:bb:29: af:91:0e:01:b0:6f:63:9d:2d:23:94:f4:62:61:8f: cf:51:68:24:b4:c7:68:a5:bb:f0:ff:fa:8b:f6:fe: c8:ad:e4:57:84:8e:bf:c5:21:81:a5:64:f6:b8:d6: ee:78:43:99:e1:41:43:1f:c8:80:8e:91:a9:96:c4: 86:72:9e:35:96:a7:43:30:e1:63:a8:50:fb:91:cf: 99:1c:f4:04:84:ee:f3:f7:26:08:35:24:c1:00:df: 78:81:79:37:34:a6:e3:a4:f8:14:c6:d3:d0:fe:0c: 2e:d9:78:7c:0b:8d:84:33:b3:9c:d4:40:bf:ae:e0: d8:3b:ed:3e:97:1f:2e:4b:55:35:53:cc:fe:5b:88: f2:ac:82:dc:55:82:99:36:72:a5:35:26:10:1a:0c: f7:2d:4f:f1:bb:1a:6c:c9:4a:cb:62:02:04:ad:95: ea:c7:3c:50:66:e0:6d:8b:5a:07:42:80:1b:a4:80: 64:32:0d:b2:40:9c:41:cb:ce:44:b6:f6:18:23:f8: 09:35:c0:13:9b:af:79:a0:0c:30:5d:1a:b6:07:05: 8d:3d:13:af:6d:a5:de:c0:79:54:f9:1b:5d:11:4d: 38:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B8:0A:FA:DC:B1:0E:0B:7E:2B:06:DE:0E:43:B1:75:09:7C:94:84 X509v3 Authority Key Identifier: keyid:72:1B:7A:4B:F4:82:65:E2:89:B5:19:32:23:45:79:B2:D9:D3:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/721B7A4BF48265E289B51932234579B2D9D38CF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:09:a7:d6:58:ac:d1:55:0c:62:e5:46:89:17:86:7d:75:9c: 16:2a:3c:dd:6e:53:25:a4:50:af:3e:23:71:b0:78:18:48:31: 74:59:55:c9:9f:e5:2e:eb:ba:56:ef:ec:39:b6:e2:93:d6:1d: c0:e7:21:e2:50:ad:f7:d4:02:47:6e:fd:23:31:40:b8:e3:3b: 2d:72:ca:15:66:95:dc:d1:f7:bb:07:f5:eb:ab:0b:04:4e:60: 5f:73:d0:13:3a:75:94:8a:70:b2:ee:37:c9:45:ad:d0:fc:17: 3e:37:18:2c:b2:95:cb:5e:ec:36:f4:54:a0:56:3c:37:db:a7: 6e:d2:1f:41:04:71:df:37:ed:16:24:2f:7f:49:2d:d8:54:84: 8d:cc:72:6f:cc:18:d3:81:d2:f8:3f:fe:d5:84:ac:02:8b:9a: be:36:3e:14:d1:4c:4d:7c:7e:5c:5a:69:72:66:07:f8:54:63: 64:7a:fa:8c:6f:cf:4e:72:f6:56:72:85:04:7f:0b:1f:51:39: 1a:83:57:ef:cc:6d:bb:5a:58:75:8b:c6:e9:3d:8c:d9:1a:db: 75:6f:e9:37:38:6d:a9:65:df:d2:2a:ca:49:54:00:46:92:a7: 84:2e:b1:49:ee:d9:c4:d6:ec:e7:de:09:b3:bc:50:51:d8:53: d8:67:28:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCE/zsaFvaCgVr0OAG5eD7nusLLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIxQjdBNEJGNDgyNjVFMjg5QjUxOTMyMjM0NTc5QjJE OUQzOENGNzAeFw0yNjA2MDMwMTMxNDBaFw0yNjA2MDQwNDI4NDBaMDMxMTAvBgNV BAMTKENBQjgwQUZBRENCMTBFMEI3RTJCMDZERTBFNDNCMTc1MDk3Qzk0ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtrLlNoF5L7KEZBRn5j7zg+VD0 LfcVsdnCRku7Ka+RDgGwb2OdLSOU9GJhj89RaCS0x2ilu/D/+ov2/sit5FeEjr/F IYGlZPa41u54Q5nhQUMfyICOkamWxIZynjWWp0Mw4WOoUPuRz5kc9ASE7vP3Jgg1 JMEA33iBeTc0puOk+BTG09D+DC7ZeHwLjYQzs5zUQL+u4Ng77T6XHy5LVTVTzP5b iPKsgtxVgpk2cqU1JhAaDPctT/G7GmzJSstiAgStlerHPFBm4G2LWgdCgBukgGQy DbJAnEHLzkS29hgj+Ak1wBObr3mgDDBdGrYHBY09E69tpd7AeVT5G10RTTg3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyrgK+tyxDgt+KwbeDkOxdQl8lIQwHwYDVR0j BBgwFoAUcht6S/SCZeKJtRkyI0V5stnTjPcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjE4N2Q4NGUtZjFiOS00YTEzLWI3NzMtODkxOTE0YjZiNGE0LzAvNzIxQjdBNEJG NDgyNjVFMjg5QjUxOTMyMjM0NTc5QjJEOUQzOENGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjFCN0E0QkY0ODI2NUUyODlCNTE5MzIyMzQ1NzlCMkQ5RDM4 Q0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjE4N2Q4NGUtZjFiOS00YTEzLWI3 NzMtODkxOTE0YjZiNGE0LzAvNzIxQjdBNEJGNDgyNjVFMjg5QjUxOTMyMjM0NTc5 QjJEOUQzOENGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsJp9ZYrNFVDGLlRokXhn11nBYqPN1uUyWk UK8+I3GweBhIMXRZVcmf5S7rulbv7Dm24pPWHcDnIeJQrffUAkdu/SMxQLjjOy1y yhVmldzR97sH9eurCwROYF9z0BM6dZSKcLLuN8lFrdD8Fz43GCyylcte7Db0VKBW PDfbp27SH0EEcd837RYkL39JLdhUhI3Mcm/MGNOB0vg//tWErAKLmr42PhTRTE18 flxaaXJmB/hUY2R6+oxvz05y9lZyhQR/Cx9RORqDV+/MbbtaWHWLxuk9jNka23Vv 6Tc4ball39IqyklUAEaSp4QusUnu2cTW7OfeCbO8UFHYU9hnKOc= -----END CERTIFICATE-----Generated at Wed Jun 3 03:58:19 2026 by rpki-client