$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft File: D522456371D4AC1AABD94B54197F5014F8E929A5.mft (raw, json) Hash identifier: RWJ5qB2SqRltw/gDNE8nwKjbJJKyr7PvMubHOSChmSs= Subject key identifier: 23:CF:65:A5:D5:C6:B4:C9:41:48:F5:F8:4B:66:B3:BD:75:49:B6:6C Authority key identifier: D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 Certificate issuer: /CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Certificate serial: 6D3D29C3205D8A429D7B3F42A590969CA11B8FCB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:26:29 +0000 Manifest this update: Wed 03 Jun 2026 01:21:29 +0000 Manifest next update: Thu 04 Jun 2026 04:56:29 +0000 Files and hashes: 1: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: OUIoLLo/dAdijxG7HgPy+7u0dGo5YCKdHwzzHlzGJYU=) 2: D522456371D4AC1AABD94B54197F5014F8E929A5.crl (hash: qEooXE79EMQ7OudliXoGU6A6P8a6Ka/wkv5iWmzqDgs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3d:29:c3:20:5d:8a:42:9d:7b:3f:42:a5:90:96:9c:a1:1b:8f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D522456371D4AC1AABD94B54197F5014F8E929A5 Validity Not Before: Jun 3 01:21:29 2026 GMT Not After : Jun 4 04:56:29 2026 GMT Subject: CN=23CF65A5D5C6B4C94148F5F84B66B3BD7549B66C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:f7:b1:6b:a0:7a:19:b6:24:f3:99:8d:66: e5:8a:3f:c2:b6:8e:5e:99:b4:43:16:2d:47:9b:26: 5d:5f:97:8c:b9:80:72:a1:70:76:bf:7e:43:97:a7: 7b:e6:84:ef:3f:f6:17:84:06:d0:f7:50:f7:29:f5: 18:ae:c9:8c:ad:f5:c0:a5:13:2a:0d:f2:d9:e1:c8: 05:50:7d:73:cc:17:cb:4b:d4:00:e4:44:49:bc:63: ad:73:a0:2f:c7:dc:57:b4:fd:bf:ff:05:bb:e6:4a: 86:f6:86:2c:60:27:4c:33:99:c4:c7:ef:6c:2c:19: 07:4c:ad:86:55:d7:9f:d6:0f:06:a6:3c:c4:f7:33: 3b:71:7d:b1:21:59:5f:a9:75:6e:9a:72:f0:96:e4: cc:7e:da:8b:70:94:a9:28:96:68:5d:55:38:d5:10: 3d:b7:87:4a:d0:d8:18:ef:19:cb:b7:e4:37:4e:51: f6:f1:76:61:0d:05:63:5d:a6:ef:c0:6c:c3:99:78: bb:59:40:2f:a5:3c:ad:3f:7e:8c:8e:3c:38:36:75: e7:86:e0:cd:db:42:8d:2a:86:30:39:d4:4f:45:c8: b0:50:7f:dd:78:f3:db:5e:2b:c1:7f:ec:9e:f0:e9: aa:38:38:4e:7a:27:8b:32:3e:21:a8:dd:a5:63:5a: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CF:65:A5:D5:C6:B4:C9:41:48:F5:F8:4B:66:B3:BD:75:49:B6:6C X509v3 Authority Key Identifier: keyid:D5:22:45:63:71:D4:AC:1A:AB:D9:4B:54:19:7F:50:14:F8:E9:29:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D522456371D4AC1AABD94B54197F5014F8E929A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/D522456371D4AC1AABD94B54197F5014F8E929A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3c:04:2b:7a:d8:48:15:9f:f5:ca:23:45:ff:10:4e:3f:d2: 91:34:83:35:34:03:75:a5:17:b1:4f:9d:9b:36:86:b3:7e:41: 94:3e:90:f0:6c:c1:42:b3:c6:51:f5:cf:7c:16:68:2b:e3:61: f3:f6:6d:4d:0e:50:d5:b6:71:27:0c:5f:c5:6f:c0:38:64:76: 46:2c:8d:7d:d7:7b:d2:4b:bf:47:8d:f3:8f:0d:80:b0:fe:30: cb:8d:2d:c0:9e:77:4a:c4:93:90:4b:d0:13:f0:4a:61:72:b6: 50:8a:6a:9f:91:d4:22:e3:ca:5a:02:db:ef:d3:00:5c:24:c6: e0:fe:47:4b:c9:84:ab:1d:a1:27:54:3e:84:ef:48:b3:6e:94: 9f:cd:93:cb:f9:8b:b0:e9:15:f9:7e:84:47:0c:31:c4:94:3f: 74:31:11:19:e8:93:7e:d0:a9:2f:00:96:2f:1d:58:7d:8a:e0: c8:11:aa:f6:15:e3:70:39:73:f1:c9:2c:9a:2e:69:6b:81:72: 15:e5:b8:bc:22:c4:ee:fb:3d:4c:7e:d0:6e:99:37:b7:c0:47: ba:f9:cf:67:ab:8c:0d:38:3a:37:8c:c7:82:b4:ca:ab:d2:85: e5:f6:41:79:36:3c:f3:3b:37:1f:f7:c0:c7:fc:c5:54:04:94: 57:fb:dd:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbT0pwyBdikKdez9CpZCWnKEbj8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRG OEU5MjlBNTAeFw0yNjA2MDMwMTIxMjlaFw0yNjA2MDQwNDU2MjlaMDMxMTAvBgNV BAMTKDIzQ0Y2NUE1RDVDNkI0Qzk0MTQ4RjVGODRCNjZCM0JENzU0OUI2NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tfexa6B6GbYk85mNZuWKP8K2 jl6ZtEMWLUebJl1fl4y5gHKhcHa/fkOXp3vmhO8/9heEBtD3UPcp9RiuyYyt9cCl EyoN8tnhyAVQfXPMF8tL1ADkREm8Y61zoC/H3Fe0/b//BbvmSob2hixgJ0wzmcTH 72wsGQdMrYZV15/WDwamPMT3MztxfbEhWV+pdW6acvCW5Mx+2otwlKkolmhdVTjV ED23h0rQ2BjvGcu35DdOUfbxdmENBWNdpu/AbMOZeLtZQC+lPK0/foyOPDg2deeG 4M3bQo0qhjA51E9FyLBQf91489teK8F/7J7w6ao4OE56J4syPiGo3aVjWj0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI89lpdXGtMlBSPX4S2azvXVJtmwwHwYDVR0j BBgwFoAU1SJFY3HUrBqr2UtUGX9QFPjpKaUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ4MGIzMjEtYWEzMS00MzE3LTlkMzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3 MUQ0QUMxQUFCRDk0QjU0MTk3RjUwMTRGOEU5MjlBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTIyNDU2MzcxRDRBQzFBQUJEOTRCNTQxOTdGNTAxNEY4RTky OUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvRDUyMjQ1NjM3MUQ0QUMxQUFCRDk0QjU0MTk3RjUw MTRGOEU5MjlBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY8BCt62EgVn/XKI0X/EE4/0pE0gzU0A3Wl F7FPnZs2hrN+QZQ+kPBswUKzxlH1z3wWaCvjYfP2bU0OUNW2cScMX8VvwDhkdkYs jX3Xe9JLv0eN848NgLD+MMuNLcCed0rEk5BL0BPwSmFytlCKap+R1CLjyloC2+/T AFwkxuD+R0vJhKsdoSdUPoTvSLNulJ/Nk8v5i7DpFfl+hEcMMcSUP3QxERnok37Q qS8Ali8dWH2K4MgRqvYV43A5c/HJLJouaWuBchXluLwixO77PUx+0G6ZN7fAR7r5 z2erjA04OjeMx4K0yqvSheX2QXk2PPM7Nx/3wMf8xVQElFf73Yk= -----END CERTIFICATE-----Generated at Wed Jun 3 03:20:57 2026 by rpki-client