$ rpki-client -vvf rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft File: 872E319F800BA2C6B4EF39E67C02FA78A219796F.mft (raw, json) Hash identifier: ue45JhnS7+797ycnoFLaHfLo44dbNYfdS4fQ31VpMTM= Subject key identifier: E0:B2:B1:40:78:39:57:7A:D0:DE:E5:40:F6:77:B1:81:A5:2C:E4:38 Authority key identifier: 87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F Certificate issuer: /CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Certificate serial: 3A3B99B3F748AFB16C209C69E3A8E2ADAD2E6055 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:40:38 +0000 Manifest this update: Wed 03 Jun 2026 00:35:38 +0000 Manifest next update: Thu 04 Jun 2026 02:03:38 +0000 Files and hashes: 1: 872E319F800BA2C6B4EF39E67C02FA78A219796F.crl (hash: TRt81W8P6IwgUyxzYZNG8QlpXj+fsSzFcMVoiWCXz+4=) 2: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: PGq4Tr5WM4VAyh7qw47RLuSMNDSTpWd9mtnYf8tmUA0=) 3: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: OvRyOsYLEGBYlmYssyFcgvhpHbvbSdqAPtYyX5hS8EY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3b:99:b3:f7:48:af:b1:6c:20:9c:69:e3:a8:e2:ad:ad:2e:60:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Validity Not Before: Jun 3 00:35:38 2026 GMT Not After : Jun 4 02:03:38 2026 GMT Subject: CN=E0B2B1407839577AD0DEE540F677B181A52CE438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:79:e9:3b:89:e1:d8:71:0b:6a:ce:5c:da: 77:07:2e:94:f4:02:fc:43:da:3a:43:b9:dd:2a:99: 72:a3:b7:ef:08:9b:cd:4b:cd:50:55:bd:13:e7:ec: dc:d6:cb:13:78:72:a2:90:f2:f8:3b:ab:f4:22:25: 50:c2:01:66:d1:68:14:51:63:fc:58:2b:50:14:65: ee:2c:ab:db:da:15:82:e0:a2:65:40:00:9a:cf:d7: 49:cc:a8:dd:d6:e0:f9:41:a0:b2:e5:3a:aa:58:e1: 4b:76:d7:0b:4c:8a:13:c2:b6:c7:d6:c8:9d:0a:9a: 24:6d:4b:77:c5:e5:b2:98:03:01:33:8c:5d:22:e1: 0e:04:4d:40:f8:78:42:eb:b9:65:8f:21:7a:6e:07: 00:bf:6b:52:6a:70:52:1e:4e:96:af:a4:06:1e:26: 30:85:98:f1:f6:93:1b:41:be:7f:5b:4c:6e:08:8c: fe:03:97:ad:94:66:57:a6:d8:b4:ea:e6:b7:18:e9: d3:3c:8f:f3:ce:53:8f:18:fc:e9:fb:66:36:2d:96: 28:aa:66:37:25:9c:61:67:9e:1a:6e:32:a5:f6:3a: 5d:fb:94:ce:c1:36:77:4b:90:be:82:5c:cd:f8:dc: 1a:9a:b7:11:a8:4b:5e:06:1e:83:63:7b:2a:a2:66: 2c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B2:B1:40:78:39:57:7A:D0:DE:E5:40:F6:77:B1:81:A5:2C:E4:38 X509v3 Authority Key Identifier: keyid:87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:39:db:7a:42:37:ec:0d:2e:22:8e:83:43:af:66:33:dc:cc: f5:7c:e6:e0:06:2d:6f:b0:a1:a1:48:e0:56:f9:b2:c0:5b:d0: 0a:95:e0:17:59:40:2e:d1:3a:b5:27:f6:24:f7:9b:79:d0:91: 3e:ad:55:49:96:e3:74:f1:df:54:aa:bc:5a:51:82:bf:8e:d1: e2:f1:c0:39:28:9f:d0:5c:de:13:55:14:c0:92:9e:e1:1b:83: 6e:0e:6f:52:a9:7e:c2:a7:a5:49:de:49:b5:4b:33:f5:4f:55: 20:13:1d:e7:e1:e1:de:f6:2e:5a:5d:54:98:98:d9:d5:e7:88: 2c:24:e7:11:0f:f6:ad:b4:64:f9:8a:f3:3b:bf:dc:43:3d:16: a4:18:cf:62:b9:87:c4:59:db:4e:78:32:6a:ca:42:f6:51:e8: 7d:59:c5:d2:53:63:bf:43:34:32:5d:56:a1:fa:56:93:d9:9b: 82:53:9e:0c:76:43:16:01:04:d7:98:56:f8:84:8e:59:4a:1e: 35:3a:af:47:ee:d8:7c:5b:99:e4:f0:56:84:3a:67:d9:c6:38: 70:67:a2:34:86:eb:23:eb:90:62:06:b2:7d:f7:bd:41:97:d1: 68:35:35:8e:cb:bb:b3:cc:9a:bd:d8:68:37:90:49:ed:96:e4: 72:0e:1f:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOjuZs/dIr7FsIJxp46jira0uYFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhB MjE5Nzk2RjAeFw0yNjA2MDMwMDM1MzhaFw0yNjA2MDQwMjAzMzhaMDMxMTAvBgNV BAMTKEUwQjJCMTQwNzgzOTU3N0FEMERFRTU0MEY2NzdCMTgxQTUyQ0U0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvbXnpO4nh2HELas5c2ncHLpT0 AvxD2jpDud0qmXKjt+8Im81LzVBVvRPn7NzWyxN4cqKQ8vg7q/QiJVDCAWbRaBRR Y/xYK1AUZe4sq9vaFYLgomVAAJrP10nMqN3W4PlBoLLlOqpY4Ut21wtMihPCtsfW yJ0KmiRtS3fF5bKYAwEzjF0i4Q4ETUD4eELruWWPIXpuBwC/a1JqcFIeTpavpAYe JjCFmPH2kxtBvn9bTG4IjP4Dl62UZlem2LTq5rcY6dM8j/POU48Y/On7ZjYtliiq ZjclnGFnnhpuMqX2Ol37lM7BNndLkL6CXM343BqatxGoS14GHoNjeyqiZiylAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4LKxQHg5V3rQ3uVA9nexgaUs5DgwHwYDVR0j BBgwFoAUhy4xn4ALosa07znmfAL6eKIZeW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMwNWFiMzAtNTY1My00MmJjLTljM2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4 MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhBMjE5Nzk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzJFMzE5RjgwMEJBMkM2QjRFRjM5RTY3QzAyRkE3OEEyMTk3 OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZB NzhBMjE5Nzk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANQ523pCN+wNLiKOg0OvZjPczPV85uAGLW+w oaFI4Fb5ssBb0AqV4BdZQC7ROrUn9iT3m3nQkT6tVUmW43Tx31SqvFpRgr+O0eLx wDkon9Bc3hNVFMCSnuEbg24Ob1KpfsKnpUneSbVLM/VPVSATHefh4d72LlpdVJiY 2dXniCwk5xEP9q20ZPmK8zu/3EM9FqQYz2K5h8RZ2054MmrKQvZR6H1ZxdJTY79D NDJdVqH6VpPZm4JTngx2QxYBBNeYVviEjllKHjU6r0fu2HxbmeTwVoQ6Z9nGOHBn ojSG6yPrkGIGsn33vUGX0Wg1NY7Lu7PMmr3YaDeQSe2W5HIOH7Q= -----END CERTIFICATE-----Generated at Wed Jun 3 04:16:36 2026 by rpki-client