$ rpki-client -vvf rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft File: C687463B31D1E298020BCE05C39C8B4C428C4D37.mft (raw, json) Hash identifier: 5eMkH8pvuTtpI+8jpEUx60Ena5L5gl7aIfYYBzdVwF8= Subject key identifier: D7:96:8F:5D:1E:45:35:31:85:30:F1:5A:9A:40:18:5D:77:53:33:00 Authority key identifier: C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 Certificate issuer: /CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Certificate serial: 1C48B3368413E6FD8D1298711A97414A4B82F7FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:08:44 +0000 Manifest this update: Tue 02 Jun 2026 11:03:44 +0000 Manifest next update: Wed 03 Jun 2026 11:54:44 +0000 Files and hashes: 1: C687463B31D1E298020BCE05C39C8B4C428C4D37.crl (hash: eudgc8mF2oAkGsf72qwUtqxGMiVMHib0JFJ8z95gIO8=) 2: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: YAhRb5MLLPBq7GLmsdwukjSGrR09NAZjb7/Q0IbDPGs=) 3: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: FMD2KI8vXpC0oPiEKe8NJdG3T8DkuTzlFnyK8zKEONk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:48:b3:36:84:13:e6:fd:8d:12:98:71:1a:97:41:4a:4b:82:f7:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C687463B31D1E298020BCE05C39C8B4C428C4D37 Validity Not Before: Jun 2 11:03:44 2026 GMT Not After : Jun 3 11:54:44 2026 GMT Subject: CN=D7968F5D1E4535318530F15A9A40185D77533300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d0:ca:6a:6c:f4:56:7c:28:b0:1e:30:13:51: 82:0e:13:0c:d0:3a:bd:92:60:e3:f5:6e:f5:30:1c: 08:60:3c:c2:d1:7d:e0:60:16:fc:07:04:d1:16:fa: 08:0b:cb:99:0c:51:66:7d:79:f4:da:80:2c:87:52: a7:61:71:8f:a0:2e:8d:cd:53:40:f0:14:db:24:f1: 5d:3a:2f:c8:11:38:ba:5f:77:43:71:27:35:f1:2c: b5:eb:ba:3e:c8:bc:37:0e:5e:73:98:9e:39:d3:22: e7:3d:32:f3:44:64:b2:d4:22:fe:02:2f:ec:16:b8: 89:1b:2f:29:98:62:9b:2e:ba:52:74:9c:ea:16:0c: ea:8f:2d:b6:4a:de:20:81:42:00:69:ad:5c:70:ac: a0:a6:79:42:7f:dc:20:8e:04:a5:63:32:2a:28:50: 34:c0:fb:65:59:09:69:e7:e2:ce:fa:fb:51:6c:d7: 25:a2:c0:b8:06:07:bc:7a:92:51:7e:3c:4e:28:ad: 3a:1d:7d:d4:ca:f2:df:53:18:59:d5:93:3c:5d:01: fe:11:ca:30:7c:80:38:fd:c7:4c:54:cb:d4:15:0b: 2b:90:e1:2e:e3:e7:12:0a:7e:c9:0d:46:2c:c7:2e: 29:47:c2:c1:93:eb:6a:d7:36:c0:a3:02:ec:bb:8d: 61:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:96:8F:5D:1E:45:35:31:85:30:F1:5A:9A:40:18:5D:77:53:33:00 X509v3 Authority Key Identifier: keyid:C6:87:46:3B:31:D1:E2:98:02:0B:CE:05:C3:9C:8B:4C:42:8C:4D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C687463B31D1E298020BCE05C39C8B4C428C4D37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/C687463B31D1E298020BCE05C39C8B4C428C4D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f7:74:c9:2a:dd:34:e9:54:0f:9c:56:0f:f1:c7:5f:b2:22: 0b:91:44:02:32:e9:03:06:80:68:7d:bd:39:cf:db:52:fe:7a: f4:40:35:61:21:5c:60:6e:14:40:b4:5a:bb:60:38:ff:a2:69: c0:72:04:c5:eb:51:13:59:9b:8a:b4:c4:a8:93:0d:29:e5:ab: 34:41:df:c5:15:bf:a1:01:de:cd:4c:0d:46:c4:31:d4:ba:d7: 20:4f:f3:1d:d7:99:46:2e:cd:15:2b:18:cf:e1:84:57:02:91: 79:c3:7b:3e:40:43:93:8d:8d:0d:0a:aa:93:af:95:3a:df:f5: 5e:09:93:f3:bf:b1:1e:3e:38:7d:7b:44:cd:82:59:50:f0:9d: 4d:c6:2a:cf:e9:73:65:b4:83:b8:ac:a0:0f:bf:a2:6f:c9:43: c5:ad:5a:09:37:8d:e5:ee:79:cc:28:c8:c6:8d:d3:2e:25:29: 56:17:7b:2b:11:d2:9f:84:9c:7a:b7:42:08:0c:aa:68:c9:16: 22:b9:54:28:b1:c7:37:03:8f:41:1a:a7:04:78:b0:ba:de:bb: a8:98:80:79:33:21:4d:e6:81:21:38:31:09:f8:fd:47:c7:5e: 76:c1:73:d7:90:4c:ad:69:37:82:04:8d:0e:f8:6d:d3:1b:aa: 14:53:78:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHEizNoQT5v2NEphxGpdBSkuC9/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0 MjhDNEQzNzAeFw0yNjA2MDIxMTAzNDRaFw0yNjA2MDMxMTU0NDRaMDMxMTAvBgNV BAMTKEQ3OTY4RjVEMUU0NTM1MzE4NTMwRjE1QTlBNDAxODVENzc1MzMzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY0MpqbPRWfCiwHjATUYIOEwzQ Or2SYOP1bvUwHAhgPMLRfeBgFvwHBNEW+ggLy5kMUWZ9efTagCyHUqdhcY+gLo3N U0DwFNsk8V06L8gROLpfd0NxJzXxLLXruj7IvDcOXnOYnjnTIuc9MvNEZLLUIv4C L+wWuIkbLymYYpsuulJ0nOoWDOqPLbZK3iCBQgBprVxwrKCmeUJ/3CCOBKVjMioo UDTA+2VZCWnn4s76+1Fs1yWiwLgGB7x6klF+PE4orTodfdTK8t9TGFnVkzxdAf4R yjB8gDj9x0xUy9QVCyuQ4S7j5xIKfskNRizHLilHwsGT62rXNsCjAuy7jWF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU15aPXR5FNTGFMPFamkAYXXdTMwAwHwYDVR0j BBgwFoAUxodGOzHR4pgCC84Fw5yLTEKMTTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZjMDAzNzYtMzM1MS00ZmEzLTk3ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0Iz MUQxRTI5ODAyMEJDRTA1QzM5QzhCNEM0MjhDNEQzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNjg3NDYzQjMxRDFFMjk4MDIwQkNFMDVDMzlDOEI0QzQyOEM0 RDM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZjMDAzNzYtMzM1MS00ZmEzLTk3 ZWUtNTIzODViYTRkOTAzLzAvQzY4NzQ2M0IzMUQxRTI5ODAyMEJDRTA1QzM5QzhC NEM0MjhDNEQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACz3dMkq3TTpVA+cVg/xx1+yIguRRAIy6QMG gGh9vTnP21L+evRANWEhXGBuFEC0WrtgOP+iacByBMXrURNZm4q0xKiTDSnlqzRB 38UVv6EB3s1MDUbEMdS61yBP8x3XmUYuzRUrGM/hhFcCkXnDez5AQ5ONjQ0KqpOv lTrf9V4Jk/O/sR4+OH17RM2CWVDwnU3GKs/pc2W0g7isoA+/om/JQ8WtWgk3jeXu ecwoyMaN0y4lKVYXeysR0p+EnHq3QggMqmjJFiK5VCixxzcDj0EapwR4sLreu6iY gHkzIU3mgSE4MQn4/UfHXnbBc9eQTK1pN4IEjQ74bdMbqhRTeIM= -----END CERTIFICATE-----Generated at Wed Jun 3 03:47:18 2026 by rpki-client