$ rpki-client -vvf rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft File: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft (raw, json) Hash identifier: A/8D7iYYAzduAejOjtFu+UKUvvXLzrbkpc6FvmJdgeg= Subject key identifier: C4:87:D9:83:75:B9:C4:C3:F0:E3:5D:70:A4:03:0A:6A:4E:E4:E1:4A Authority key identifier: DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4 Certificate issuer: /CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4 Certificate serial: 7C0D6B9FB3AFEB71E17F16ECEDAC4DE2BCD07AA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:25:58 +0000 Manifest this update: Tue 02 Jun 2026 21:20:58 +0000 Manifest next update: Wed 03 Jun 2026 21:52:58 +0000 Files and hashes: 1: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl (hash: YVyblkCEc9gznVaS6+2xXf8g45SkT73wX29/eqnxuNo=) 2: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: e4+bi848oD/+O01Mx0cjiGiYFl4mEZMFhTrqMTZt/js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 21:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:0d:6b:9f:b3:af:eb:71:e1:7f:16:ec:ed:ac:4d:e2:bc:d0:7a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4 Validity Not Before: Jun 2 21:20:58 2026 GMT Not After : Jun 3 21:52:58 2026 GMT Subject: CN=C487D98375B9C4C3F0E35D70A4030A6A4EE4E14A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:de:aa:46:8a:b6:bd:49:93:50:af:ae:fc: 9d:50:c5:83:37:df:3c:e7:96:cc:78:0b:2e:1c:1f: 48:8c:84:17:93:ff:da:40:e7:b9:36:d4:72:63:ee: 42:c5:52:b6:6c:56:36:6a:3e:fb:4f:c9:0f:78:5e: c0:9e:5d:37:8a:d5:f9:64:19:99:bd:61:5e:ef:50: d5:65:a4:9f:0a:ea:33:ab:9f:4b:ce:c0:47:8b:6f: ee:cf:8b:7c:c8:0f:19:39:71:71:26:ea:5b:fa:00: 40:9b:b8:6c:65:5d:97:39:c8:71:a6:fa:85:74:35: b7:74:70:7e:33:55:e1:ec:05:18:a7:65:64:ad:7c: bc:7f:06:49:29:6f:de:6e:03:d4:3e:c0:81:22:29: 13:93:dd:5c:27:4a:46:70:7c:80:b1:0b:1f:73:38: 07:73:18:b4:35:8f:53:6a:f7:15:19:6e:0e:9d:4b: 17:d8:e0:ad:91:d5:bc:33:4d:e1:ab:42:08:a6:73: 5d:b3:fd:30:3e:1b:f7:b1:56:ec:ac:fe:23:04:c9: 24:ab:f4:18:a4:dc:66:da:67:3a:2d:72:4b:2e:f3: d6:51:eb:58:7f:da:37:93:d0:2f:50:6d:53:41:cb: b0:3f:16:49:cd:78:06:96:ab:46:7e:8c:33:19:da: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:87:D9:83:75:B9:C4:C3:F0:E3:5D:70:A4:03:0A:6A:4E:E4:E1:4A X509v3 Authority Key Identifier: keyid:DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:2d:eb:8a:cf:ab:42:63:33:c7:86:2a:bc:a4:3b:f0:9e:7e: c3:c8:56:b8:cd:12:21:be:b3:7f:bc:41:31:35:39:e7:f0:dd: 7c:14:30:44:f6:c5:0f:77:49:ab:75:69:93:ba:84:f9:7d:f1: 52:a0:22:61:8d:bd:e9:4d:2f:9c:6a:97:d6:cb:01:ff:01:4d: 75:af:48:73:28:3e:48:9e:6f:2f:cf:a5:b0:60:bf:24:53:f3: 83:fb:b0:f7:1e:5b:89:ba:4f:48:7f:95:4d:a0:5e:d4:c7:e1: 5c:9f:65:0e:3a:f6:30:f5:06:8f:5b:15:fe:c5:ed:11:80:6b: 68:67:c0:b3:1e:af:9d:93:60:16:fb:c4:ec:6d:f4:f7:1a:45: 66:27:83:a9:3a:f4:02:5a:c9:20:17:16:82:04:43:96:a6:d1: eb:75:b8:05:a3:d2:41:bb:16:fb:0c:c2:1e:b3:b5:00:73:26: d1:a7:20:b2:d6:1e:4a:6d:dd:2d:54:0f:1f:5c:90:5a:03:50: cc:b1:f3:bb:42:f9:de:0e:97:7c:0a:90:36:48:1a:e7:87:2e: f6:ab:d1:a3:a4:dd:0c:3e:de:11:da:28:2a:98:71:26:22:db: 49:65:f3:dc:50:29:fd:2f:79:34:52:80:9e:4f:3b:94:c4:d7: 1b:a7:46:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfA1rn7Ov63Hhfxbs7axN4rzQeqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFQkUyNjMwQ0MwQTQ0NTMwQTU0NDIxMjQ0RDRCOENF RDJDOEFDNDAeFw0yNjA2MDIyMTIwNThaFw0yNjA2MDMyMTUyNThaMDMxMTAvBgNV BAMTKEM0ODdEOTgzNzVCOUM0QzNGMEUzNUQ3MEE0MDMwQTZBNEVFNEUxNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3t6qRoq2vUmTUK+u/J1QxYM3 3zznlsx4Cy4cH0iMhBeT/9pA57k21HJj7kLFUrZsVjZqPvtPyQ94XsCeXTeK1flk GZm9YV7vUNVlpJ8K6jOrn0vOwEeLb+7Pi3zIDxk5cXEm6lv6AECbuGxlXZc5yHGm +oV0Nbd0cH4zVeHsBRinZWStfLx/Bkkpb95uA9Q+wIEiKROT3VwnSkZwfICxCx9z OAdzGLQ1j1Nq9xUZbg6dSxfY4K2R1bwzTeGrQgimc12z/TA+G/exVuys/iMEySSr 9Bik3GbaZzotcksu89ZR61h/2jeT0C9QbVNBy7A/FknNeAaWq0Z+jDMZ2qxZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxIfZg3W5xMPw411wpAMKak7k4UowHwYDVR0j BBgwFoAU3+viYwzApEUwpUQhJE1LjO0sisQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmJmYTQyNjUtYmI1OC00NmUyLTgzMDktM2FkMzk4MWEzNTE2LzAvREZFQkUyNjMw Q0MwQTQ0NTMwQTU0NDIxMjQ0RDRCOENFRDJDOEFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ERkVCRTI2MzBDQzBBNDQ1MzBBNTQ0MjEyNDRENEI4Q0VEMkM4 QUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvREZFQkUyNjMwQ0MwQTQ0NTMwQTU0NDIxMjQ0RDRC OENFRDJDOEFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgt64rPq0JjM8eGKrykO/CefsPIVrjNEiG+ s3+8QTE1Oefw3XwUMET2xQ93Sat1aZO6hPl98VKgImGNvelNL5xql9bLAf8BTXWv SHMoPkieby/PpbBgvyRT84P7sPceW4m6T0h/lU2gXtTH4VyfZQ469jD1Bo9bFf7F 7RGAa2hnwLMer52TYBb7xOxt9PcaRWYng6k69AJaySAXFoIEQ5am0et1uAWj0kG7 FvsMwh6ztQBzJtGnILLWHkpt3S1UDx9ckFoDUMyx87tC+d4Ol3wKkDZIGueHLvar 0aOk3Qw+3hHaKCqYcSYi20ll89xQKf0veTRSgJ5PO5TE1xunRuE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:07 2026 by rpki-client