$ rpki-client -vvf rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft File: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft (raw, json) Hash identifier: 7x1MQUZITCGqf8Yb2ZYg3xCWdkTqoIiqxosty8iaDqM= Subject key identifier: 57:0B:AC:2D:F3:C1:5A:D0:61:AF:F1:66:4F:E0:11:74:A7:31:19:8E Authority key identifier: 11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 Certificate issuer: /CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Certificate serial: 0DAC305E7ED1D2750AEE9C5EE9FF3DC91FC4C9AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:08:55 +0000 Manifest this update: Tue 02 Jun 2026 23:03:55 +0000 Manifest next update: Wed 03 Jun 2026 23:31:55 +0000 Files and hashes: 1: 1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl (hash: lMchm2DZm5PSpjxZc2ztt9fE8Jkj9VUK+Yh6kRWoWKw=) 2: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: oHCuH/wfD5uofyH9qDQzuSNonMRnW2BjZEpAbHvRcj0=) 3: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: Zk2C8S3MwM5h7vXomg1WGWoihsk+uAiRDgp6DvLkrYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ac:30:5e:7e:d1:d2:75:0a:ee:9c:5e:e9:ff:3d:c9:1f:c4:c9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133578221407DA4E6D6E1F7DDBD402AD17142D1 Validity Not Before: Jun 2 23:03:55 2026 GMT Not After : Jun 3 23:31:55 2026 GMT Subject: CN=570BAC2DF3C15AD061AFF1664FE01174A731198E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:10:88:0a:c6:f6:df:7c:76:68:54:aa:99:e8: 4b:4a:48:0a:e0:43:ba:fc:69:89:d1:75:ba:0c:ee: f5:5e:ba:b2:05:91:92:60:ae:2f:db:67:3a:19:c8: 05:59:90:aa:4b:dd:96:a2:e5:d4:60:88:f8:bc:4c: 71:8e:bf:a0:a1:01:d0:b6:67:83:28:74:5d:17:89: 44:3b:f0:3c:47:d2:ac:ec:8e:51:52:1f:d9:ac:c8: af:d0:68:ad:46:80:d4:39:aa:dd:b3:f0:3b:fd:c8: 60:92:28:45:57:ed:24:01:d3:64:30:10:22:1c:c4: 38:a6:7a:36:91:8d:05:34:ec:23:a8:ee:b0:b2:55: 28:e6:3d:c3:f4:04:17:a3:dc:27:fd:95:31:0b:af: a8:c5:74:88:28:4a:2e:c2:0d:f4:d6:1d:15:af:04: 71:b5:72:62:d8:52:7c:be:98:8e:12:6f:a2:e7:87: af:2b:c3:a5:00:ed:b7:e7:d8:7f:9d:4f:03:b8:9b: 44:29:94:61:39:05:56:0d:88:fb:e1:0c:41:36:fe: 60:87:63:5a:d9:cd:49:76:74:ab:80:1c:31:67:40: 62:06:a3:b4:d7:b5:08:ae:e4:1f:b4:f1:a6:b9:df: d2:b1:3a:c7:e2:5f:25:ca:25:34:c8:2f:75:ad:94: 04:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0B:AC:2D:F3:C1:5A:D0:61:AF:F1:66:4F:E0:11:74:A7:31:19:8E X509v3 Authority Key Identifier: keyid:11:33:57:82:21:40:7D:A4:E6:D6:E1:F7:DD:BD:40:2A:D1:71:42:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1133578221407DA4E6D6E1F7DDBD402AD17142D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/1133578221407DA4E6D6E1F7DDBD402AD17142D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:9a:a0:61:91:5e:76:9e:66:37:4b:b1:a5:8e:d5:83:50:df: 7b:41:9c:49:88:5d:0a:b6:20:0e:ab:09:94:d3:d2:a1:02:0a: 29:32:01:f2:43:d9:a9:b2:6a:07:7d:98:4c:34:9f:a8:29:47: 83:ee:e0:1f:87:1c:f9:b9:6d:8e:63:5c:83:39:8f:23:02:66: 28:62:88:07:a7:58:9c:0f:f6:8f:3a:15:ec:3a:fb:86:cd:59: aa:9c:55:80:5d:25:83:02:ba:e4:d9:6c:30:d5:e4:3f:68:67: 59:5c:10:d2:a6:9a:af:18:31:81:35:c1:16:a5:7a:54:4b:ca: 32:ef:9e:55:e3:34:af:4b:49:97:05:a1:9c:c8:f6:7c:52:10: 2c:91:af:10:f1:3b:2d:35:d8:1d:52:98:b8:24:33:b5:62:01: cf:78:de:cb:47:fd:55:01:98:1f:62:fd:e2:8b:d3:70:77:33: d7:19:fe:5b:79:7a:4f:20:1e:67:94:e6:7c:f2:15:49:69:56: 88:4d:2c:4a:56:68:18:7e:fb:aa:d8:ef:f2:86:55:77:f5:7c: da:d2:5f:5e:2a:e9:86:69:05:62:f7:ac:e7:70:f3:71:86:d3: cb:d6:61:ce:12:90:16:3b:15:b9:3c:b8:b5:0c:9d:1d:92:73: 1c:b9:86:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDawwXn7R0nUK7pxe6f89yR/Eya4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzU3ODIyMTQwN0RBNEU2RDZFMUY3RERCRDQwMkFE MTcxNDJEMTAeFw0yNjA2MDIyMzAzNTVaFw0yNjA2MDMyMzMxNTVaMDMxMTAvBgNV BAMTKDU3MEJBQzJERjNDMTVBRDA2MUFGRjE2NjRGRTAxMTc0QTczMTE5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkEIgKxvbffHZoVKqZ6EtKSArg Q7r8aYnRdboM7vVeurIFkZJgri/bZzoZyAVZkKpL3Zai5dRgiPi8THGOv6ChAdC2 Z4ModF0XiUQ78DxH0qzsjlFSH9msyK/QaK1GgNQ5qt2z8Dv9yGCSKEVX7SQB02Qw ECIcxDimejaRjQU07COo7rCyVSjmPcP0BBej3Cf9lTELr6jFdIgoSi7CDfTWHRWv BHG1cmLYUny+mI4Sb6Lnh68rw6UA7bfn2H+dTwO4m0QplGE5BVYNiPvhDEE2/mCH Y1rZzUl2dKuAHDFnQGIGo7TXtQiu5B+08aa539KxOsfiXyXKJTTIL3WtlAR/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVwusLfPBWtBhr/FmT+ARdKcxGY4wHwYDVR0j BBgwFoAUETNXgiFAfaTm1uH33b1AKtFxQtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZjMWY1MWEtODY0NS00ZWIxLWEyZmYtZTI3YzI0YzhlMGM4LzAvMTEzMzU3ODIy MTQwN0RBNEU2RDZFMUY3RERCRDQwMkFEMTcxNDJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTMzNTc4MjIxNDA3REE0RTZENkUxRjdEREJENDAyQUQxNzE0 MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvMTEzMzU3ODIyMTQwN0RBNEU2RDZFMUY3RERCRDQw MkFEMTcxNDJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiaoGGRXnaeZjdLsaWO1YNQ33tBnEmIXQq2 IA6rCZTT0qECCikyAfJD2amyagd9mEw0n6gpR4Pu4B+HHPm5bY5jXIM5jyMCZihi iAenWJwP9o86Few6+4bNWaqcVYBdJYMCuuTZbDDV5D9oZ1lcENKmmq8YMYE1wRal elRLyjLvnlXjNK9LSZcFoZzI9nxSECyRrxDxOy012B1SmLgkM7ViAc943stH/VUB mB9i/eKL03B3M9cZ/lt5ek8gHmeU5nzyFUlpVohNLEpWaBh++6rY7/KGVXf1fNrS X14q6YZpBWL3rOdw83GG08vWYc4SkBY7Fbk8uLUMnR2Scxy5hj8= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:04 2026 by rpki-client