$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft File: C7CDFA6BC067C7A495919AAD0E26180B86353954.mft (raw, json) Hash identifier: 3OqIHD68iuPj7pRYMGTxc1HgRWD7b1+Jom6ggytszrU= Subject key identifier: 1C:AF:82:02:7B:D3:04:6A:DE:0F:CF:68:AD:DF:0C:E7:AF:AE:AE:84 Authority key identifier: C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 Certificate issuer: /CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Certificate serial: 098F2A9A30EE7F8B623DE4ED0A7A5A69DE341517 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:28:51 +0000 Manifest this update: Tue 02 Jun 2026 15:23:51 +0000 Manifest next update: Wed 03 Jun 2026 15:56:51 +0000 Files and hashes: 1: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: 0iLOUhfmWoIB+lxiDVooYY80mjdqjMFktAq2sVeC4n8=) 2: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: pSVzT2vio9bf7LUyfGmLirM4hVE1PKigRBwf0BFNg8U=) 3: C7CDFA6BC067C7A495919AAD0E26180B86353954.crl (hash: oAkUZHm21UnL2vEpIJsCzf4am/aNUu13lkC7d2l7v/w=) 4: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: LgH9oXeBcuQFeopdycllX9ZwgANBmbEdowpLFMRb868=) 5: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: I79Q34o1f2vuvFl40hYKqigyJvsHaAMckuqi63LU5sQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8f:2a:9a:30:ee:7f:8b:62:3d:e4:ed:0a:7a:5a:69:de:34:15:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Validity Not Before: Jun 2 15:23:51 2026 GMT Not After : Jun 3 15:56:51 2026 GMT Subject: CN=1CAF82027BD3046ADE0FCF68ADDF0CE7AFAEAE84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:f7:2f:13:ee:77:b3:4d:e7:9a:03:f2:1c: 24:59:e8:bc:22:7e:e1:44:99:4a:25:35:75:08:08: 11:57:19:7e:2f:01:36:4d:f2:bf:6a:0d:ac:b4:83: 31:a7:39:84:15:df:7a:fb:c9:ca:d4:df:d2:17:5a: 56:dc:c6:9f:57:94:18:40:6f:d8:fb:4e:0d:45:c9: a3:d6:03:c5:16:eb:e6:ef:8a:43:68:07:b0:c7:68: 02:bd:d5:ae:3c:fa:58:d1:57:cb:c2:38:5e:be:18: 61:b8:59:a9:f7:1f:70:49:7b:c5:12:22:a6:64:d2: 06:fd:ab:d6:e3:33:ad:a4:ce:a5:78:67:eb:b8:dd: 8d:24:01:09:2a:22:87:bc:61:4c:a7:ab:a7:be:de: f6:d7:07:44:20:c1:45:b6:0c:de:5c:f7:db:32:70: 0b:ac:60:30:2c:71:48:c3:56:20:2e:81:42:6d:d4: 55:c5:0d:49:e4:58:ae:ab:87:30:f1:e8:91:7e:ba: 20:32:29:d0:0a:70:81:95:44:13:fc:eb:c1:54:4e: b2:22:d9:41:00:a0:8d:2b:d3:48:aa:12:fa:77:ec: bc:70:b2:ad:81:c3:a5:96:f8:04:a1:29:1b:c3:34: 2f:03:ce:f1:45:17:15:c5:a4:40:23:62:7a:49:35: 65:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AF:82:02:7B:D3:04:6A:DE:0F:CF:68:AD:DF:0C:E7:AF:AE:AE:84 X509v3 Authority Key Identifier: keyid:C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:eb:c8:9a:92:5a:e2:9a:a4:28:f6:63:da:ce:b3:f7:d7:ab: a3:b6:43:42:98:78:06:73:04:4f:87:14:e2:08:20:cd:eb:8a: 69:6e:fa:32:72:a3:75:95:3a:6c:f2:e1:2f:66:88:bc:95:85: 16:ea:31:41:95:74:55:b8:5a:bc:d8:d0:0b:9a:c6:01:20:0f: 28:e1:10:bc:bb:ca:05:39:ef:c2:94:79:9f:3c:2d:4c:05:6e: 5b:0f:ff:69:ee:07:0b:b0:33:a1:e4:56:c7:c2:cc:98:b5:3a: 9c:7e:61:e7:d4:8f:27:10:15:4f:dd:1c:66:91:92:53:19:64: a4:ab:cb:b0:96:34:b8:32:f4:6a:8e:63:02:67:29:d0:f8:fe: 17:79:aa:66:23:69:bd:67:46:dc:2d:60:d2:2a:4d:d6:23:64: fa:f0:3f:42:d0:da:0d:5b:37:5a:cf:78:d0:60:5b:00:99:0d: 9b:79:77:4a:d7:a0:33:fc:b7:2f:07:1a:8c:05:74:46:d1:8b: 61:2b:5b:f3:60:b4:0c:4d:72:32:b4:43:77:cb:88:95:03:93: c7:cc:c9:9b:76:46:f9:81:0e:fb:cf:5c:44:ce:35:d0:48:63: 31:41:d5:70:c5:97:b1:4e:ce:4b:66:8b:7f:e7:67:e1:53:cc: 85:73:e9:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCY8qmjDuf4tiPeTtCnpaad40FRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4 NjM1Mzk1NDAeFw0yNjA2MDIxNTIzNTFaFw0yNjA2MDMxNTU2NTFaMDMxMTAvBgNV BAMTKDFDQUY4MjAyN0JEMzA0NkFERTBGQ0Y2OEFEREYwQ0U3QUZBRUFFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYafcvE+53s03nmgPyHCRZ6Lwi fuFEmUolNXUICBFXGX4vATZN8r9qDay0gzGnOYQV33r7ycrU39IXWlbcxp9XlBhA b9j7Tg1FyaPWA8UW6+bvikNoB7DHaAK91a48+ljRV8vCOF6+GGG4Wan3H3BJe8US IqZk0gb9q9bjM62kzqV4Z+u43Y0kAQkqIoe8YUynq6e+3vbXB0QgwUW2DN5c99sy cAusYDAscUjDViAugUJt1FXFDUnkWK6rhzDx6JF+uiAyKdAKcIGVRBP868FUTrIi 2UEAoI0r00iqEvp37Lxwsq2Bw6WW+AShKRvDNC8DzvFFFxXFpEAjYnpJNWWZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHK+CAnvTBGreD89ord8M56+uroQwHwYDVR0j BBgwFoAUx836a8Bnx6SVkZqtDiYYC4Y1OVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ2NGJmNmEtNDMwMi00NjBmLTk2NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJD MDY3QzdBNDk1OTE5QUFEMEUyNjE4MEI4NjM1Mzk1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DN0NERkE2QkMwNjdDN0E0OTU5MTlBQUQwRTI2MTgwQjg2MzUz OTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvQzdDREZBNkJDMDY3QzdBNDk1OTE5QUFEMEUyNjE4 MEI4NjM1Mzk1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvryJqSWuKapCj2Y9rOs/fXq6O2Q0KYeAZz BE+HFOIIIM3rimlu+jJyo3WVOmzy4S9miLyVhRbqMUGVdFW4WrzY0AuaxgEgDyjh ELy7ygU578KUeZ88LUwFblsP/2nuBwuwM6HkVsfCzJi1Opx+YefUjycQFU/dHGaR klMZZKSry7CWNLgy9GqOYwJnKdD4/hd5qmYjab1nRtwtYNIqTdYjZPrwP0LQ2g1b N1rPeNBgWwCZDZt5d0rXoDP8ty8HGowFdEbRi2ErW/NgtAxNcjK0Q3fLiJUDk8fM yZt2RvmBDvvPXETONdBIYzFB1XDFl7FOzktmi3/nZ+FTzIVz6bY= -----END CERTIFICATE-----Generated at Wed Jun 3 03:54:12 2026 by rpki-client