$ rpki-client -vvf rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft File: 08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft (raw, json) Hash identifier: h+QgG1ZPKD+y8eck9wTa2wsk7hKjIn3HWw2R7BOBZXY= Subject key identifier: 4D:4A:0E:00:24:13:F6:9B:33:8B:C9:21:A4:5B:85:B8:7F:75:5C:3A Authority key identifier: 08:46:5F:A1:5C:F4:94:2C:9C:4C:E0:9B:FD:3D:A0:43:8F:ED:BB:38 Certificate issuer: /CN=08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38 Certificate serial: 4F7E0AD6CBF3102B815AC61A1DEB6D5861AD0156 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:28:40 +0000 Manifest this update: Tue 02 Jun 2026 19:23:40 +0000 Manifest next update: Wed 03 Jun 2026 21:45:40 +0000 Files and hashes: 1: 08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.crl (hash: e2vD71ByM7ZJ0biDz8AznGMT1oZxaAUu39wWKz+SF7Y=) 2: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (hash: 5A4dPtUK7PjCIyvsgm0TeACgqogT7kOhSEqkeVa0xLI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.crl rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 21:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7e:0a:d6:cb:f3:10:2b:81:5a:c6:1a:1d:eb:6d:58:61:ad:01:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38 Validity Not Before: Jun 2 19:23:40 2026 GMT Not After : Jun 3 21:45:40 2026 GMT Subject: CN=4D4A0E002413F69B338BC921A45B85B87F755C3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ec:d3:0e:89:ae:a3:e0:b8:20:cc:46:1e:22: a6:45:47:b5:f8:0a:88:0f:6f:86:85:3f:2b:a1:16: 13:01:80:13:21:c7:f5:fa:1b:9c:20:c2:52:98:ee: d0:1f:d0:08:4b:13:7c:90:64:de:0a:6a:a3:67:82: e9:c3:91:1b:43:40:d1:05:fe:42:3f:2f:b6:1d:06: c6:35:75:e9:95:ad:05:a4:c7:e5:84:b6:fc:3f:2c: 93:3f:ca:0f:36:cb:d4:6c:98:84:70:92:11:3b:5a: 31:5f:b1:7e:37:a4:59:8e:d4:b9:95:eb:4c:1d:09: 5a:65:84:ad:2e:db:19:f8:0f:cf:50:28:53:a1:fd: 3c:e4:d7:1e:87:1d:f5:cb:7e:69:0c:dc:c9:99:7d: f8:d2:23:75:9e:c8:ff:26:96:05:82:26:1b:c7:1a: 37:db:61:2f:bc:30:28:18:2f:93:52:15:ad:13:aa: 19:2b:21:8d:52:b6:fc:8f:16:e2:bf:3d:17:6e:d5: 15:7b:2f:b0:99:87:01:27:ec:54:e2:f2:1b:de:98: 81:20:13:7b:a4:91:41:bd:28:35:c3:0c:5e:71:7b: 8b:d9:53:1c:72:53:60:8f:0b:ba:ab:72:7f:4f:f3: 3b:8a:25:7a:4f:8b:33:2b:dd:58:47:56:89:a6:c2: b9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4A:0E:00:24:13:F6:9B:33:8B:C9:21:A4:5B:85:B8:7F:75:5C:3A X509v3 Authority Key Identifier: keyid:08:46:5F:A1:5C:F4:94:2C:9C:4C:E0:9B:FD:3D:A0:43:8F:ED:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:7f:33:1c:c6:25:9e:30:32:e0:8b:12:d4:39:67:ce:d8:ae: fd:f8:56:9f:d6:59:df:b1:2a:1d:bb:ce:75:73:0b:d5:a5:a3: 17:2c:5d:b9:0c:50:32:20:e9:91:07:73:51:36:28:91:9d:32: 36:07:d8:a5:83:36:8a:7d:70:fb:ac:67:fa:29:70:6d:e5:48: b2:59:ea:9e:fe:85:d3:c6:33:04:92:83:3e:f2:41:a0:3b:6c: a3:c3:35:ba:69:b5:95:e7:17:91:bb:cf:fe:89:6b:de:f6:a1: 22:8b:6c:93:50:db:14:f7:47:62:5d:ac:73:70:a5:35:ad:b5: 00:6a:d4:74:e8:35:c6:a5:f3:63:bc:88:ed:ef:5e:6f:f4:38: cc:33:88:8d:3f:7f:4d:5d:64:4b:1b:35:b3:5c:61:2f:1f:69: 40:53:40:3d:34:43:07:0b:bd:27:b0:ea:35:f8:99:65:bb:61: 85:15:c4:30:4f:0e:78:57:56:cb:ce:f5:cd:e8:d1:1f:86:9b: 0c:d9:f4:4c:ca:bf:8a:c2:74:4b:d8:33:b7:2a:98:41:1b:37: 0f:ef:ca:7d:78:81:2e:5d:40:bf:09:cb:09:e1:11:09:48:ec: aa:72:df:bd:be:e9:f9:cd:bf:23:bf:5e:c9:95:38:a3:d6:a6: d9:00:c5:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT34K1svzECuBWsYaHettWGGtAVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0NjVGQTE1Q0Y0OTQyQzlDNENFMDlCRkQzREEwNDM4 RkVEQkIzODAeFw0yNjA2MDIxOTIzNDBaFw0yNjA2MDMyMTQ1NDBaMDMxMTAvBgNV BAMTKDRENEEwRTAwMjQxM0Y2OUIzMzhCQzkyMUE0NUI4NUI4N0Y3NTVDM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN7NMOia6j4LggzEYeIqZFR7X4 CogPb4aFPyuhFhMBgBMhx/X6G5wgwlKY7tAf0AhLE3yQZN4KaqNngunDkRtDQNEF /kI/L7YdBsY1demVrQWkx+WEtvw/LJM/yg82y9RsmIRwkhE7WjFfsX43pFmO1LmV 60wdCVplhK0u2xn4D89QKFOh/Tzk1x6HHfXLfmkM3MmZffjSI3WeyP8mlgWCJhvH GjfbYS+8MCgYL5NSFa0TqhkrIY1StvyPFuK/PRdu1RV7L7CZhwEn7FTi8hvemIEg E3ukkUG9KDXDDF5xe4vZUxxyU2CPC7qrcn9P8zuKJXpPizMr3VhHVommwrmfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTUoOACQT9pszi8khpFuFuH91XDowHwYDVR0j BBgwFoAUCEZfoVz0lCycTOCb/T2gQ4/tuzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzJjMDBmNzktNDllYi00NTI1LTkwMjYtYTIzOGZmNDQ4MDcwLzAvMDg0NjVGQTE1 Q0Y0OTQyQzlDNENFMDlCRkQzREEwNDM4RkVEQkIzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODQ2NUZBMTVDRjQ5NDJDOUM0Q0UwOUJGRDNEQTA0MzhGRURC QjM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzJjMDBmNzktNDllYi00NTI1LTkw MjYtYTIzOGZmNDQ4MDcwLzAvMDg0NjVGQTE1Q0Y0OTQyQzlDNENFMDlCRkQzREEw NDM4RkVEQkIzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZ/MxzGJZ4wMuCLEtQ5Z87Yrv34Vp/WWd+x Kh27znVzC9WloxcsXbkMUDIg6ZEHc1E2KJGdMjYH2KWDNop9cPusZ/opcG3lSLJZ 6p7+hdPGMwSSgz7yQaA7bKPDNbpptZXnF5G7z/6Ja972oSKLbJNQ2xT3R2JdrHNw pTWttQBq1HToNcal82O8iO3vXm/0OMwziI0/f01dZEsbNbNcYS8faUBTQD00QwcL vSew6jX4mWW7YYUVxDBPDnhXVsvO9c3o0R+GmwzZ9EzKv4rCdEvYM7cqmEEbNw/v yn14gS5dQL8JywnhEQlI7Kpy372+6fnNvyO/XsmVOKPWptkAxcQ= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:41 2026 by rpki-client