$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft File: 88505636AC2C683A0A15AF1041DEF625BB5D7643.mft (raw, json) Hash identifier: T2ZOOuFSoOegRK85ojIjYnKnPFIpT6g0JBm3KtVAeiM= Subject key identifier: 0A:D5:13:2B:87:8D:EB:EC:D0:D2:9B:6C:FF:25:B6:81:DB:BD:67:EA Authority key identifier: 88:50:56:36:AC:2C:68:3A:0A:15:AF:10:41:DE:F6:25:BB:5D:76:43 Certificate issuer: /CN=88505636AC2C683A0A15AF1041DEF625BB5D7643 Certificate serial: 4B2395511D228DA4649E9FE91528DCA6957F960A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 21:10:41 +0000 Manifest this update: Tue 02 Jun 2026 21:05:41 +0000 Manifest next update: Wed 03 Jun 2026 21:55:41 +0000 Files and hashes: 1: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: dgjaOdjpIeK7j+dAUIzTx198JF2memFCrb9q8a6+v0c=) 2: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: EBf2wSQkajGGPJlM2meU3WwUz7lzn4ofe8fel+KfemQ=) 3: 88505636AC2C683A0A15AF1041DEF625BB5D7643.crl (hash: Aqvay3ohjlB3qaet6p8K0VHiol8bNglu/YCSu+bB2Hg=) 4: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: ev2m6+xbvR7mwpXdtEeo7OjxoqRgr494Tm2SeygBLMQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.crl rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:23:95:51:1d:22:8d:a4:64:9e:9f:e9:15:28:dc:a6:95:7f:96:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88505636AC2C683A0A15AF1041DEF625BB5D7643 Validity Not Before: Jun 2 21:05:41 2026 GMT Not After : Jun 3 21:55:41 2026 GMT Subject: CN=0AD5132B878DEBECD0D29B6CFF25B681DBBD67EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:67:da:d5:b1:4e:25:74:f4:ab:93:44:72: d3:a5:8f:b8:76:cd:32:7b:0b:53:64:dc:c6:d8:d4: a5:a7:58:1f:bd:5e:b7:79:ec:02:73:a9:f3:49:f9: 1c:34:37:52:7a:17:0c:d9:a0:99:cc:f1:0c:a6:03: 96:b2:16:3f:43:7b:03:be:9b:98:56:ca:1b:1b:f0: 39:5a:26:2b:a4:16:69:d8:13:95:bb:b7:7a:8f:ab: 9a:08:80:72:21:09:bc:11:80:81:1a:f8:ba:10:b2: e3:ea:47:5e:16:a5:8a:c6:2a:8d:d8:67:4f:6e:b0: c0:2c:24:f5:fe:71:0d:e9:db:a6:b4:be:7a:db:dc: 22:62:18:94:91:0a:28:4c:96:2b:a8:36:11:3c:18: 10:26:cf:eb:c4:a6:21:de:49:c1:cc:55:07:30:3d: 05:d8:5e:1f:ee:e0:64:c9:98:01:0d:ca:3e:5b:a1: 9f:b9:32:82:69:bc:60:61:07:c2:a7:9b:5e:d6:5e: 4d:ec:be:45:06:e4:2e:bc:cc:ea:e5:71:30:ee:05: e0:de:ca:c2:c5:19:bb:9e:38:17:71:91:7c:7a:6c: 25:48:7c:81:fb:60:d5:c8:98:81:0a:a1:49:80:95: de:24:7e:9b:21:3d:20:d7:91:b2:39:07:13:4b:a3: 15:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D5:13:2B:87:8D:EB:EC:D0:D2:9B:6C:FF:25:B6:81:DB:BD:67:EA X509v3 Authority Key Identifier: keyid:88:50:56:36:AC:2C:68:3A:0A:15:AF:10:41:DE:F6:25:BB:5D:76:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c3:4a:37:0b:91:cd:79:45:46:96:2b:da:e6:7a:96:7e:c5: fd:59:8e:6b:81:01:d9:9f:89:59:45:58:74:6d:ea:3d:d4:8f: 89:a9:34:51:ff:09:6f:50:4d:6c:08:01:52:07:02:7e:75:e5: ae:d7:fd:d7:df:42:26:4f:da:b5:cd:40:92:c5:6f:6c:67:da: b0:d4:d2:a5:45:b5:4b:73:50:13:a7:21:7e:4b:b3:6f:d5:ec: dd:e5:f2:32:7a:fa:a2:f2:2d:24:b3:44:0a:c1:15:0e:55:46: 0f:cf:1c:44:64:a0:bf:5f:03:2e:d9:25:b4:f5:b4:ef:dc:15: 1a:f2:13:df:2d:f9:64:5e:24:f6:8d:e8:83:fa:ea:17:3d:e0: 94:e8:d3:29:88:db:07:69:75:66:38:a5:5a:64:68:d4:c5:60: b4:d8:4a:71:26:8b:d4:dc:ef:a2:f6:66:b5:98:4a:b7:85:09: f1:73:dc:09:7d:55:9e:6e:2d:95:57:c1:2f:a5:46:3a:f6:b2: 14:8e:38:9c:db:f6:c7:fb:11:d4:17:f2:2b:e0:84:67:42:8b: 81:97:7f:42:7a:06:94:df:f7:8f:c5:60:94:f9:f7:4d:90:6d: 99:b6:ea:bc:02:ba:8e:58:7e:54:e1:0a:85:f0:c9:26:78:54: 9a:22:1b:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyOVUR0ijaRknp/pFSjcppV/lgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg1MDU2MzZBQzJDNjgzQTBBMTVBRjEwNDFERUY2MjVC QjVENzY0MzAeFw0yNjA2MDIyMTA1NDFaFw0yNjA2MDMyMTU1NDFaMDMxMTAvBgNV BAMTKDBBRDUxMzJCODc4REVCRUNEMEQyOUI2Q0ZGMjVCNjgxREJCRDY3RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEi2fa1bFOJXT0q5NEctOlj7h2 zTJ7C1Nk3MbY1KWnWB+9Xrd57AJzqfNJ+Rw0N1J6FwzZoJnM8QymA5ayFj9DewO+ m5hWyhsb8DlaJiukFmnYE5W7t3qPq5oIgHIhCbwRgIEa+LoQsuPqR14WpYrGKo3Y Z09usMAsJPX+cQ3p26a0vnrb3CJiGJSRCihMliuoNhE8GBAmz+vEpiHeScHMVQcw PQXYXh/u4GTJmAENyj5boZ+5MoJpvGBhB8Knm17WXk3svkUG5C68zOrlcTDuBeDe ysLFGbueOBdxkXx6bCVIfIH7YNXImIEKoUmAld4kfpshPSDXkbI5BxNLoxUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCtUTK4eN6+zQ0pts/yW2gdu9Z+owHwYDVR0j BBgwFoAUiFBWNqwsaDoKFa8QQd72JbtddkMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmU1ZmRmNmMtMGQwMS00OTJiLTgwMDQtYTQ4ZWU1YTEyNDc0LzAvODg1MDU2MzZB QzJDNjgzQTBBMTVBRjEwNDFERUY2MjVCQjVENzY0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODUwNTYzNkFDMkM2ODNBMEExNUFGMTA0MURFRjYyNUJCNUQ3 NjQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvODg1MDU2MzZBQzJDNjgzQTBBMTVBRjEwNDFERUY2 MjVCQjVENzY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXDSjcLkc15RUaWK9rmepZ+xf1ZjmuBAdmf iVlFWHRt6j3Uj4mpNFH/CW9QTWwIAVIHAn515a7X/dffQiZP2rXNQJLFb2xn2rDU 0qVFtUtzUBOnIX5Ls2/V7N3l8jJ6+qLyLSSzRArBFQ5VRg/PHERkoL9fAy7ZJbT1 tO/cFRryE98t+WReJPaN6IP66hc94JTo0ymI2wdpdWY4pVpkaNTFYLTYSnEmi9Tc 76L2ZrWYSreFCfFz3Al9VZ5uLZVXwS+lRjr2shSOOJzb9sf7EdQX8ivghGdCi4GX f0J6BpTf94/FYJT5902QbZm26rwCuo5YflThCoXwySZ4VJoiGxA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:05 2026 by rpki-client