$ rpki-client -vvf rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft File: 03B040ED202D246E438A73DEA26426FBECEBB10D.mft (raw, json) Hash identifier: rcyBEPWlN0Qy+a/DvvXppExWsGzryS6L6443o7tnPas= Subject key identifier: 71:A2:4B:40:AC:A0:2C:3D:BF:51:B7:69:6F:8B:DF:96:84:6E:36:4E Authority key identifier: 03:B0:40:ED:20:2D:24:6E:43:8A:73:DE:A2:64:26:FB:EC:EB:B1:0D Certificate issuer: /CN=03B040ED202D246E438A73DEA26426FBECEBB10D Certificate serial: 7FC4A2EF64B4F790F198D39E18804A462306E578 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B040ED202D246E438A73DEA26426FBECEBB10D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:19:02 +0000 Manifest this update: Tue 02 Jun 2026 23:14:02 +0000 Manifest next update: Thu 04 Jun 2026 00:47:02 +0000 Files and hashes: 1: 03B040ED202D246E438A73DEA26426FBECEBB10D.crl (hash: EkEYB1QM04GfEVv5mdhBtuZUE+bT1SDBQx/xcGMmE6I=) 2: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: C5jQrGNmSHPl6nz+o4/GVoDQQPjQAT8dJlkaOBni5mA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.crl rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B040ED202D246E438A73DEA26426FBECEBB10D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c4:a2:ef:64:b4:f7:90:f1:98:d3:9e:18:80:4a:46:23:06:e5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03B040ED202D246E438A73DEA26426FBECEBB10D Validity Not Before: Jun 2 23:14:02 2026 GMT Not After : Jun 4 00:47:02 2026 GMT Subject: CN=71A24B40ACA02C3DBF51B7696F8BDF96846E364E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:42:37:63:c1:49:99:9b:89:80:3d:57:a0: 3e:23:72:85:40:94:ee:af:2d:98:0b:65:f0:4f:5f: 85:3b:5a:b6:ec:b2:be:9d:92:14:c0:8a:fe:aa:a2: e0:46:6f:be:eb:d3:a8:26:9f:35:86:f2:de:ee:7f: 56:2f:64:9e:39:63:7d:0a:5e:e2:44:87:7d:8b:87: 9a:ee:a4:dd:d2:fd:a9:de:57:06:b2:5a:15:71:5f: 75:ef:c0:a7:d0:00:86:f0:8d:7f:80:bc:9c:07:06: 0b:99:99:99:d5:30:12:8e:d2:af:2c:a4:ec:fc:c1: 20:4e:72:87:8e:e4:2a:53:09:d8:00:d5:11:e2:0e: 4d:9d:c2:3f:df:bd:95:c5:bf:ef:ce:ee:68:37:47: 10:71:01:06:cd:ee:e1:89:77:a2:53:ab:eb:c9:8e: 8a:62:e6:fd:cc:39:45:79:05:ae:73:0a:29:a9:2c: b5:a1:2b:b5:24:54:aa:1e:90:c9:3e:32:ec:38:3f: e0:b5:5c:81:79:f6:4c:27:1e:95:92:a4:55:b4:75: 81:7f:54:86:33:2f:73:81:8f:a5:13:85:c3:56:01: c8:e2:14:76:0b:5e:41:19:99:53:0f:77:94:20:4b: a9:53:d6:b9:f1:2d:81:48:a6:75:20:af:ba:0f:40: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A2:4B:40:AC:A0:2C:3D:BF:51:B7:69:6F:8B:DF:96:84:6E:36:4E X509v3 Authority Key Identifier: keyid:03:B0:40:ED:20:2D:24:6E:43:8A:73:DE:A2:64:26:FB:EC:EB:B1:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03B040ED202D246E438A73DEA26426FBECEBB10D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/03B040ED202D246E438A73DEA26426FBECEBB10D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0d:be:4f:08:ae:21:8b:86:4f:9e:b7:d4:e2:4b:89:da:5b: 77:08:a0:71:8a:98:5b:b8:bb:dc:f6:57:a7:da:b7:4b:31:3d: f1:ab:3c:dc:d6:cd:0e:68:ce:c3:bb:d0:30:0d:fb:1c:91:6c: b8:ee:5d:b8:0b:cf:5c:7b:f7:ec:79:b7:a3:9d:32:ab:38:09: 78:1e:3a:8f:a4:31:f6:f4:d6:86:59:7b:36:aa:4b:e6:46:82: 4b:99:3d:9f:ab:a1:d3:13:61:91:52:aa:21:29:b5:93:13:2b: a9:be:27:1f:c4:4c:94:59:18:8b:80:d2:b4:b0:6e:f6:39:43: 81:a1:f9:47:ff:8e:38:ce:c5:61:55:3e:b0:7a:1a:4c:0a:93: a0:07:f9:28:58:5c:9c:8c:58:2f:b1:00:2d:1f:91:2e:c0:9f: b5:bb:f1:f6:ee:7a:a6:5e:04:dc:5b:6b:ca:8d:97:9d:90:7a: cd:ae:e6:15:16:22:77:69:52:e7:35:d1:a7:50:31:a9:e8:6a: 0b:98:eb:07:62:48:38:84:ef:4f:a3:d2:1e:f8:3e:ff:67:f2: a8:a3:ab:3f:ce:51:9f:ba:69:6d:8b:e7:90:c0:c5:f9:1f:31: 3c:8b:e5:45:99:16:ba:b0:1e:cf:6e:e2:01:9e:dc:8a:b1:6b: ff:e1:8d:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf8Si72S095DxmNOeGIBKRiMG5XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNCMDQwRUQyMDJEMjQ2RTQzOEE3M0RFQTI2NDI2RkJF Q0VCQjEwRDAeFw0yNjA2MDIyMzE0MDJaFw0yNjA2MDQwMDQ3MDJaMDMxMTAvBgNV BAMTKDcxQTI0QjQwQUNBMDJDM0RCRjUxQjc2OTZGOEJERjk2ODQ2RTM2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDGkI3Y8FJmZuJgD1XoD4jcoVA lO6vLZgLZfBPX4U7Wrbssr6dkhTAiv6qouBGb77r06gmnzWG8t7uf1YvZJ45Y30K XuJEh32Lh5rupN3S/aneVwayWhVxX3XvwKfQAIbwjX+AvJwHBguZmZnVMBKO0q8s pOz8wSBOcoeO5CpTCdgA1RHiDk2dwj/fvZXFv+/O7mg3RxBxAQbN7uGJd6JTq+vJ jopi5v3MOUV5Ba5zCimpLLWhK7UkVKoekMk+Muw4P+C1XIF59kwnHpWSpFW0dYF/ VIYzL3OBj6UThcNWAcjiFHYLXkEZmVMPd5QgS6lT1rnxLYFIpnUgr7oPQO1bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcaJLQKygLD2/Ubdpb4vfloRuNk4wHwYDVR0j BBgwFoAUA7BA7SAtJG5DinPeomQm++zrsQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ3ZjhmNDQtMjc3ZC00NWUxLWIyMTMtMDUxMTdmZGUzY2IwLzAvMDNCMDQwRUQy MDJEMjQ2RTQzOEE3M0RFQTI2NDI2RkJFQ0VCQjEwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wM0IwNDBFRDIwMkQyNDZFNDM4QTczREVBMjY0MjZGQkVDRUJC MTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMDNCMDQwRUQyMDJEMjQ2RTQzOEE3M0RFQTI2NDI2 RkJFQ0VCQjEwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8Nvk8IriGLhk+et9TiS4naW3cIoHGKmFu4 u9z2V6fat0sxPfGrPNzWzQ5ozsO70DAN+xyRbLjuXbgLz1x79+x5t6OdMqs4CXge Oo+kMfb01oZZezaqS+ZGgkuZPZ+rodMTYZFSqiEptZMTK6m+Jx/ETJRZGIuA0rSw bvY5Q4Gh+Uf/jjjOxWFVPrB6GkwKk6AH+ShYXJyMWC+xAC0fkS7An7W78fbueqZe BNxba8qNl52Qes2u5hUWIndpUuc10adQManoaguY6wdiSDiE70+j0h74Pv9n8qij qz/OUZ+6aW2L55DAxfkfMTyL5UWZFrqwHs9u4gGe3Iqxa//hjYo= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:49 2026 by rpki-client