$ rpki-client -vvf rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft File: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft (raw, json) Hash identifier: 8YIcVyjVezrxlrhwxGL5ejyKv/Bxzarv0nueTLFkP9s= Subject key identifier: 4B:6E:11:94:C1:EA:70:35:99:5F:B4:DD:66:6D:69:06:8F:C6:34:A2 Authority key identifier: 03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 Certificate issuer: /CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Certificate serial: 4712B4B62F90DF7B312F8C582A88872E8F35A5F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:27:43 +0000 Manifest this update: Tue 02 Jun 2026 14:22:43 +0000 Manifest next update: Wed 03 Jun 2026 16:38:43 +0000 Files and hashes: 1: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: bAYJsjQtRu+aYVmaWgkshTJ01ed0qF6a1B1HjXmthuw=) 2: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: W701XnzRp68q2ju50V8LTfQrMyEFAxYNvXNJc+815TM=) 3: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl (hash: WE1RqBd0qeJaB6k1juid5OwAX5oF5lu0AUDBG4Pp3/U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:12:b4:b6:2f:90:df:7b:31:2f:8c:58:2a:88:87:2e:8f:35:a5:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Validity Not Before: Jun 2 14:22:43 2026 GMT Not After : Jun 3 16:38:43 2026 GMT Subject: CN=4B6E1194C1EA7035995FB4DD666D69068FC634A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5b:49:66:90:52:5f:51:0b:32:33:88:24:84: 12:7c:a6:dc:31:6d:1e:db:56:01:c9:c4:12:f0:f1: 39:5e:ed:2d:9b:5b:23:a3:46:74:b0:96:f3:77:00: 1e:62:0d:07:3c:96:aa:28:80:4c:fc:bd:1f:19:46: 49:28:6f:3a:06:20:af:c8:c5:f9:50:0e:64:92:e2: db:74:36:c1:bc:ea:c5:5c:73:e7:35:e1:1f:bd:a6: 66:2b:2a:68:41:d2:f9:12:11:9e:53:ce:3d:a2:52: c3:84:55:c0:72:c1:4c:f0:59:ec:49:56:19:42:b1: ff:84:25:4f:64:79:90:a9:5f:98:0b:95:c6:1f:a5: ed:5d:f9:ae:cc:16:64:da:84:45:2b:73:e0:ed:66: 25:00:87:6f:29:fa:63:2f:ab:49:b8:18:6e:92:6d: ca:60:26:0a:4d:50:83:b2:16:8e:63:b7:e3:01:0e: 8c:43:c3:4c:93:f1:1c:7f:17:c8:cd:01:8f:47:e3: 2f:99:1c:f5:bd:62:76:35:00:4f:21:bc:8e:bd:29: 63:42:8e:27:da:be:de:ef:41:d1:81:68:05:56:2b: de:02:da:94:1b:b1:f7:39:eb:e8:d0:bb:1e:66:fa: 58:e8:62:14:c3:d2:bb:d1:f9:18:08:fe:75:da:4f: 6e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6E:11:94:C1:EA:70:35:99:5F:B4:DD:66:6D:69:06:8F:C6:34:A2 X509v3 Authority Key Identifier: keyid:03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:43:1c:31:13:bf:c3:77:48:e1:00:b8:a6:01:00:e3:39:e4: 7a:4b:b2:d7:e4:3d:2a:11:c8:52:9d:9b:42:40:6f:4d:f7:23: e1:28:b3:d4:18:31:72:67:43:c5:9b:10:a5:60:23:05:b2:fe: 13:3d:40:56:b6:f5:20:57:73:ca:b2:02:d0:46:02:7e:87:13: 32:e1:10:32:ea:89:5a:72:6f:cb:42:f4:5f:53:f1:28:ab:d9: 00:4c:54:df:1d:36:8f:e4:2a:f2:e1:d9:1e:0d:83:44:dc:c7: a0:4f:4f:35:ca:5a:38:5b:e8:55:63:c2:21:ae:b2:70:ee:9e: 8a:88:5f:4f:be:88:d6:4f:0b:44:0a:f6:f8:d2:d4:5f:7c:26: db:e4:87:be:5d:32:1b:c1:82:eb:c5:f0:62:6f:6d:95:69:14: 33:e3:98:d6:a2:4a:aa:36:9b:f6:e6:84:ab:83:14:c2:9a:79: df:92:df:15:d6:ea:2d:e6:b6:cc:46:19:ee:ac:81:b9:9d:c0: aa:22:f4:46:34:b9:0d:e7:2b:a6:b3:52:87:4d:50:74:5c:3e: 07:8a:6f:7b:2c:f9:54:23:8e:44:d9:fa:5a:a9:50:4b:90:21: 8f:a8:bc:17:2d:63:37:4a:69:f6:e6:f1:4d:92:34:8a:9d:86: f3:cd:23:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURxK0ti+Q33sxL4xYKoiHLo81pfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVB MEE0RUM5MDAeFw0yNjA2MDIxNDIyNDNaFw0yNjA2MDMxNjM4NDNaMDMxMTAvBgNV BAMTKDRCNkUxMTk0QzFFQTcwMzU5OTVGQjRERDY2NkQ2OTA2OEZDNjM0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtW0lmkFJfUQsyM4gkhBJ8ptwx bR7bVgHJxBLw8Tle7S2bWyOjRnSwlvN3AB5iDQc8lqoogEz8vR8ZRkkobzoGIK/I xflQDmSS4tt0NsG86sVcc+c14R+9pmYrKmhB0vkSEZ5Tzj2iUsOEVcBywUzwWexJ VhlCsf+EJU9keZCpX5gLlcYfpe1d+a7MFmTahEUrc+DtZiUAh28p+mMvq0m4GG6S bcpgJgpNUIOyFo5jt+MBDoxDw0yT8Rx/F8jNAY9H4y+ZHPW9YnY1AE8hvI69KWNC jifavt7vQdGBaAVWK94C2pQbsfc56+jQux5m+ljoYhTD0rvR+RgI/nXaT27RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS24RlMHqcDWZX7TdZm1pBo/GNKIwHwYDVR0j BBgwFoAUA87l7PXYKsQ1u4JWlgpgZaCk7JAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRlMWYzNzAtZjMxZi00N2VkLThhNDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNG NUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVBMEE0RUM5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wM0NFRTVFQ0Y1RDgyQUM0MzVCQjgyNTY5NjBBNjA2NUEwQTRF QzkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYw NjVBMEE0RUM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJDHDETv8N3SOEAuKYBAOM55HpLstfkPSoR yFKdm0JAb033I+Eos9QYMXJnQ8WbEKVgIwWy/hM9QFa29SBXc8qyAtBGAn6HEzLh EDLqiVpyb8tC9F9T8Sir2QBMVN8dNo/kKvLh2R4Ng0Tcx6BPTzXKWjhb6FVjwiGu snDunoqIX0++iNZPC0QK9vjS1F98Jtvkh75dMhvBguvF8GJvbZVpFDPjmNaiSqo2 m/bmhKuDFMKaed+S3xXW6i3mtsxGGe6sgbmdwKoi9EY0uQ3nK6azUodNUHRcPgeK b3ss+VQjjkTZ+lqpUEuQIY+ovBctYzdKafbm8U2SNIqdhvPNIx0= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:10 2026 by rpki-client