$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft File: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft (raw, json) Hash identifier: WWi6AecfokmAMlbN2kuOIhCrWzzs76AOehIjlYP/az4= Subject key identifier: AA:AB:FC:8A:B7:6D:7F:FC:A4:A0:9E:04:C3:65:32:86:5F:26:E2:78 Authority key identifier: 4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 Certificate issuer: /CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Certificate serial: 56F8DDD0DC1FAB05EA3DD8F4CAC9224F4F3C172C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:55:21 +0000 Manifest this update: Tue 02 Jun 2026 16:50:21 +0000 Manifest next update: Wed 03 Jun 2026 18:41:21 +0000 Files and hashes: 1: 4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl (hash: ARWwVbs7u6Sl+rg7A7wTCFEDQ/F6yx9SB1G0PKamQ2o=) 2: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 4GyYBNeN6eFsPcbI1361ngWI6JUq/EEA9jGEIXv0P9w=) 3: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: U4x7nHOIPSopo3seWvdUR/rW9/Lem7oTQ8rb2DjIll4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f8:dd:d0:dc:1f:ab:05:ea:3d:d8:f4:ca:c9:22:4f:4f:3c:17:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0 Validity Not Before: Jun 2 16:50:21 2026 GMT Not After : Jun 3 18:41:21 2026 GMT Subject: CN=AAABFC8AB76D7FFCA4A09E04C36532865F26E278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:ae:81:76:64:c9:f4:d2:60:0e:4f:fb:fe: 17:16:84:fa:44:94:a5:54:b6:c4:90:1d:19:c1:aa: 98:70:bc:31:7f:06:eb:a4:32:e1:24:72:5b:bb:16: f1:5c:68:db:ca:42:3c:c0:47:49:88:8c:f2:17:a5: e0:9f:b2:1a:c3:25:d2:b9:0f:7a:ab:a7:0e:70:82: 90:10:5b:27:dd:d0:6a:ca:40:6d:06:73:ec:54:63: 2e:cd:87:5b:f1:c3:64:21:e5:e2:44:39:63:1d:67: c2:c2:75:d2:90:3a:85:40:7b:3b:80:91:a5:4f:88: c4:e6:3c:1c:de:cb:68:e8:0c:1b:9d:76:36:b6:de: e1:a5:a0:2d:46:5b:33:4c:b2:ce:be:0b:29:e0:85: 73:d6:d4:0e:1a:2c:a9:ee:2d:62:79:14:86:00:e3: 6d:23:2c:d4:0f:e4:43:4e:b5:96:e7:89:74:44:93: 38:51:1b:22:30:eb:e6:1b:66:6d:9a:0b:14:0c:da: b3:d8:0e:f4:23:4f:db:c7:45:f0:4b:d2:ce:12:cc: a2:6e:a4:6a:20:0d:00:83:b7:ab:5b:83:5b:79:a7: fa:0b:84:1a:7f:ba:44:29:ae:d1:ee:b1:0f:47:2c: df:d3:0a:fd:02:f1:77:4c:fc:66:0c:e8:f8:93:dd: db:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AB:FC:8A:B7:6D:7F:FC:A4:A0:9E:04:C3:65:32:86:5F:26:E2:78 X509v3 Authority Key Identifier: keyid:4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0c:c1:66:c1:cb:47:e6:31:78:64:1a:80:91:8e:0e:aa:7d: 1d:e2:8e:d6:68:12:17:12:4e:33:e2:e7:05:28:eb:15:29:f5: b4:d8:39:86:c9:21:06:be:45:5d:c0:7e:5d:24:5a:bb:16:1f: 75:40:c3:a5:db:b6:b6:90:b0:e6:ae:79:5d:83:b4:75:eb:07: 4e:b4:b4:40:3f:5c:2b:00:50:7a:72:05:ed:29:37:41:80:ef: 26:6d:43:c0:7b:21:ac:a2:1d:d8:75:33:f9:86:66:6f:12:ac: 95:7e:ff:dc:2b:12:50:3d:2f:4a:e9:3a:5a:89:62:0e:da:17: e5:84:33:dc:47:d8:8e:0a:e1:16:31:8a:f8:9a:2a:f7:8c:82: d7:7a:ba:56:4e:40:50:32:13:58:de:c4:7a:80:29:ea:aa:e1: e2:f4:5a:09:be:df:64:83:68:74:91:c3:c6:07:09:03:1d:6e: 59:c7:70:43:b5:84:67:ec:57:a7:47:e3:f5:60:ff:d4:19:d3: fe:a0:34:50:3a:a4:61:ac:db:2b:27:4f:17:8b:2d:43:31:b9: 31:d5:30:c1:05:a0:45:cf:ba:c5:1b:87:d1:87:70:96:84:1d: c1:88:6b:98:f3:55:77:48:f4:f6:5c:c5:d3:67:06:11:82:97: 91:8b:cb:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvjd0NwfqwXqPdj0yskiT088FywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVB QjI5MDBFMDAeFw0yNjA2MDIxNjUwMjFaFw0yNjA2MDMxODQxMjFaMDMxMTAvBgNV BAMTKEFBQUJGQzhBQjc2RDdGRkNBNEEwOUUwNEMzNjUzMjg2NUYyNkUyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Jq6BdmTJ9NJgDk/7/hcWhPpE lKVUtsSQHRnBqphwvDF/BuukMuEkclu7FvFcaNvKQjzAR0mIjPIXpeCfshrDJdK5 D3qrpw5wgpAQWyfd0GrKQG0Gc+xUYy7Nh1vxw2Qh5eJEOWMdZ8LCddKQOoVAezuA kaVPiMTmPBzey2joDBuddja23uGloC1GWzNMss6+CynghXPW1A4aLKnuLWJ5FIYA 420jLNQP5ENOtZbniXREkzhRGyIw6+YbZm2aCxQM2rPYDvQjT9vHRfBL0s4SzKJu pGogDQCDt6tbg1t5p/oLhBp/ukQprtHusQ9HLN/TCv0C8XdM/GYM6PiT3dvtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqqv8irdtf/ykoJ4Ew2Uyhl8m4ngwHwYDVR0j BBgwFoAUSre9ihP4iprMFj7NsI7knqspAOAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ3NTA4OGUtNDlhZi00NzJiLTliNjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEEx M0Y4OEE5QUNDMTYzRUNEQjA4RUU0OUVBQjI5MDBFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QUI3QkQ4QTEzRjg4QTlBQ0MxNjNFQ0RCMDhFRTQ5RUFCMjkw MEUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvNEFCN0JEOEExM0Y4OEE5QUNDMTYzRUNEQjA4RUU0 OUVBQjI5MDBFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsMwWbBy0fmMXhkGoCRjg6qfR3ijtZoEhcS TjPi5wUo6xUp9bTYOYbJIQa+RV3Afl0kWrsWH3VAw6XbtraQsOaueV2DtHXrB060 tEA/XCsAUHpyBe0pN0GA7yZtQ8B7IayiHdh1M/mGZm8SrJV+/9wrElA9L0rpOlqJ Yg7aF+WEM9xH2I4K4RYxiviaKveMgtd6ulZOQFAyE1jexHqAKeqq4eL0Wgm+32SD aHSRw8YHCQMdblnHcEO1hGfsV6dH4/Vg/9QZ0/6gNFA6pGGs2ysnTxeLLUMxuTHV MMEFoEXPusUbh9GHcJaEHcGIa5jzVXdI9PZcxdNnBhGCl5GLy/8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:50 2026 by rpki-client