$ rpki-client -vvf rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft File: 1767C40EF953BF431D4947D499414812C8AB0D53.mft (raw, json) Hash identifier: QOmvWWvMGoUqnjzPyX9GXiu1bnFZgQX4A5LJf7QHSQs= Subject key identifier: C5:27:29:72:70:F6:D6:7E:6A:87:87:9B:98:6B:8D:24:EC:5F:02:09 Authority key identifier: 17:67:C4:0E:F9:53:BF:43:1D:49:47:D4:99:41:48:12:C8:AB:0D:53 Certificate issuer: /CN=1767C40EF953BF431D4947D499414812C8AB0D53 Certificate serial: 721EB59ED7FB2BDA4F8744AD943E22399D773A78 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1767C40EF953BF431D4947D499414812C8AB0D53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:43:04 +0000 Manifest this update: Tue 02 Jun 2026 14:38:04 +0000 Manifest next update: Wed 03 Jun 2026 16:18:04 +0000 Files and hashes: 1: 1767C40EF953BF431D4947D499414812C8AB0D53.crl (hash: 9LNQafT39RNSwlNlJdQ1ZcAcsK6KlM4pzGPBkBaPjg0=) 2: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: 3fUrcuhU6jaeFfZiNtVK08Yeh8OVEIRyrvEdhO9M9Ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.crl rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1767C40EF953BF431D4947D499414812C8AB0D53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1e:b5:9e:d7:fb:2b:da:4f:87:44:ad:94:3e:22:39:9d:77:3a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1767C40EF953BF431D4947D499414812C8AB0D53 Validity Not Before: Jun 2 14:38:04 2026 GMT Not After : Jun 3 16:18:04 2026 GMT Subject: CN=C527297270F6D67E6A87879B986B8D24EC5F0209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:78:59:6f:e5:12:90:9f:12:14:10:67:7f: c2:4d:41:c9:f3:ee:62:06:c4:47:2c:d6:74:74:25: 81:1a:06:91:43:8e:15:fd:8b:35:b7:f7:08:0a:7b: 11:1a:56:03:c7:6b:f6:b0:79:49:91:2c:cb:db:c2: a6:74:61:d3:9c:59:57:56:f5:ac:4c:86:b9:ea:e4: 98:33:bd:33:14:bd:95:c3:dd:31:a1:2a:0b:42:cc: 50:51:71:5d:92:a2:e7:83:a8:27:ab:e3:21:57:09: 61:3d:4c:80:f8:51:34:81:4e:3a:7c:94:2f:b0:0a: ae:aa:b3:8c:21:d4:0f:d9:1b:46:db:53:ee:e2:10: f3:33:4a:f9:36:a1:b3:8c:eb:31:8d:2f:a2:7b:5f: 2b:b8:1d:74:b7:04:c8:ff:6b:24:c3:f1:db:00:8d: 53:11:86:86:4e:d5:4b:85:cf:b1:8f:3c:ed:04:55: 08:0f:00:ef:96:4f:ec:1f:7d:a1:07:37:87:e0:c0: 48:04:e3:84:0a:4a:b3:f8:d9:ce:36:d0:b1:c0:13: 35:6e:4c:23:fa:b5:15:49:6e:93:f8:04:64:d9:05: 02:03:d1:77:65:05:f0:66:13:f9:ff:78:c5:41:c7: cd:6a:9e:8d:38:60:97:3a:23:a5:f8:ba:7b:e6:82: f0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:27:29:72:70:F6:D6:7E:6A:87:87:9B:98:6B:8D:24:EC:5F:02:09 X509v3 Authority Key Identifier: keyid:17:67:C4:0E:F9:53:BF:43:1D:49:47:D4:99:41:48:12:C8:AB:0D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1767C40EF953BF431D4947D499414812C8AB0D53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/1767C40EF953BF431D4947D499414812C8AB0D53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:bc:12:bd:ae:1b:5a:54:7b:3b:86:04:47:63:68:91:cf:05: 48:a7:1b:cd:a9:b4:0a:1b:8a:b3:6f:52:c0:d6:48:b7:a9:77: 29:cf:d5:ef:50:b7:f3:8e:4d:3f:19:7a:55:07:f7:05:37:6d: 6a:ce:e5:52:7d:48:90:6c:af:f2:f1:66:b9:a3:65:56:1b:5a: 80:ab:31:04:c5:c1:ce:92:90:46:1d:62:98:13:1f:b4:5c:17: f0:04:6a:96:a5:17:d6:b2:de:71:a4:c6:69:64:11:99:1d:22: 9d:98:11:11:d6:a9:9d:31:36:f5:df:af:da:a9:0e:46:2a:dd: 6c:75:f9:55:a0:41:b5:f1:b6:a5:13:9b:57:35:4f:5c:54:15: 69:bd:de:b7:a2:bd:44:a3:41:af:b3:fd:50:91:6c:1e:0d:e3: 6a:c2:35:4d:c2:25:af:b2:0a:bb:b4:98:36:c2:6e:e5:a5:14: a8:1c:a0:47:df:eb:ca:5a:ab:72:a8:ea:79:85:57:cf:66:e1: 1d:ae:2c:64:92:c5:25:d1:57:2a:79:e0:d0:6c:06:29:20:57: a7:85:60:51:7c:a9:31:4d:bf:67:d8:d0:60:09:29:5c:20:25: 70:00:d9:cc:fd:10:95:6b:dc:55:1d:b6:a0:35:43:17:87:ba: f9:c7:2d:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUch61ntf7K9pPh0StlD4iOZ13OngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc2N0M0MEVGOTUzQkY0MzFENDk0N0Q0OTk0MTQ4MTJD OEFCMEQ1MzAeFw0yNjA2MDIxNDM4MDRaFw0yNjA2MDMxNjE4MDRaMDMxMTAvBgNV BAMTKEM1MjcyOTcyNzBGNkQ2N0U2QTg3ODc5Qjk4NkI4RDI0RUM1RjAyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjSnhZb+USkJ8SFBBnf8JNQcnz 7mIGxEcs1nR0JYEaBpFDjhX9izW39wgKexEaVgPHa/aweUmRLMvbwqZ0YdOcWVdW 9axMhrnq5JgzvTMUvZXD3TGhKgtCzFBRcV2SoueDqCer4yFXCWE9TID4UTSBTjp8 lC+wCq6qs4wh1A/ZG0bbU+7iEPMzSvk2obOM6zGNL6J7Xyu4HXS3BMj/ayTD8dsA jVMRhoZO1UuFz7GPPO0EVQgPAO+WT+wffaEHN4fgwEgE44QKSrP42c420LHAEzVu TCP6tRVJbpP4BGTZBQID0XdlBfBmE/n/eMVBx81qno04YJc6I6X4unvmgvATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxScpcnD21n5qh4ebmGuNJOxfAgkwHwYDVR0j BBgwFoAUF2fEDvlTv0MdSUfUmUFIEsirDVMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQzZGI3ZDItYjNmZC00MjE0LWI2YTQtZDAxNjJmOTVlNzJlLzAvMTc2N0M0MEVG OTUzQkY0MzFENDk0N0Q0OTk0MTQ4MTJDOEFCMEQ1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNzY3QzQwRUY5NTNCRjQzMUQ0OTQ3RDQ5OTQxNDgxMkM4QUIw RDUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvMTc2N0M0MEVGOTUzQkY0MzFENDk0N0Q0OTk0MTQ4 MTJDOEFCMEQ1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAe8Er2uG1pUezuGBEdjaJHPBUinG82ptAob irNvUsDWSLepdynP1e9Qt/OOTT8ZelUH9wU3bWrO5VJ9SJBsr/LxZrmjZVYbWoCr MQTFwc6SkEYdYpgTH7RcF/AEapalF9ay3nGkxmlkEZkdIp2YERHWqZ0xNvXfr9qp DkYq3Wx1+VWgQbXxtqUTm1c1T1xUFWm93reivUSjQa+z/VCRbB4N42rCNU3CJa+y Cru0mDbCbuWlFKgcoEff68paq3Ko6nmFV89m4R2uLGSSxSXRVyp54NBsBikgV6eF YFF8qTFNv2fY0GAJKVwgJXAA2cz9EJVr3FUdtqA1QxeHuvnHLRU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:07 2026 by rpki-client