$ rpki-client -vvf rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft File: 82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft (raw, json) Hash identifier: 0SiTI1DUsIzvJOvH/KDX61Artfd1sZTCHBWXfpZHxwQ= Subject key identifier: 5E:CF:5E:31:1B:BA:3A:A4:D6:88:56:46:02:AC:9B:C8:5B:91:98:A6 Authority key identifier: 82:FA:49:59:8B:B9:63:2C:D8:CF:41:FE:DD:F7:4B:BD:3D:33:D1:9C Certificate issuer: /CN=82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C Certificate serial: 015AE66B3C3C35F19865A72A0F3D01E2A8F4B808 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:41:49 +0000 Manifest this update: Wed 03 Jun 2026 01:36:49 +0000 Manifest next update: Thu 04 Jun 2026 03:49:49 +0000 Files and hashes: 1: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: Pw1FDuvNFB/fEPdpOIzgZ9rEMUiJuheIjiIKjMXwLBk=) 2: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: Pa7xSWWS5opiR5HJKTxnGB9FqTjFCEEh6zjt74RworE=) 3: 82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl (hash: bCdJUOkGTyQx+TmzQEz7EutS1uAgXoyWDUVH4dvkPuU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 03:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5a:e6:6b:3c:3c:35:f1:98:65:a7:2a:0f:3d:01:e2:a8:f4:b8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C Validity Not Before: Jun 3 01:36:49 2026 GMT Not After : Jun 4 03:49:49 2026 GMT Subject: CN=5ECF5E311BBA3AA4D688564602AC9BC85B9198A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2c:d1:83:1f:53:66:e2:1a:34:6b:42:f0:60: 6e:cb:05:01:bf:24:14:85:73:df:12:b5:51:47:a6: a6:55:b7:47:91:2b:59:39:54:84:ed:87:be:e7:07: d2:4b:5c:97:ae:4d:ae:b0:7e:e1:b6:8e:60:1e:48: 04:4c:b7:14:fe:67:11:b7:41:12:09:52:57:b5:46: 4b:07:f2:7b:22:73:eb:a1:7e:79:42:70:97:74:17: f8:33:b6:1f:39:d7:13:35:20:04:2d:10:a4:87:d0: f3:99:22:b5:7e:17:f0:95:8c:88:95:b9:3b:3e:11: a8:0e:fb:9f:d4:48:61:d5:b1:0e:c7:f3:57:88:a5: 77:a6:9b:93:62:6f:2d:37:61:73:f8:3a:7a:77:03: dd:14:79:bb:ff:28:1a:d7:15:15:fe:7f:2f:0e:bc: fb:b4:53:4d:55:5e:2a:98:e2:a4:5c:2f:23:79:6f: c3:27:42:4c:cc:b4:41:36:7a:ac:f0:7c:00:b4:73: 4e:86:06:4c:7b:47:ef:4c:57:43:8b:14:ce:6a:bd: ad:61:0e:b3:8c:04:83:14:7e:dc:a7:70:f9:59:a8: d1:d0:c0:b0:a0:2b:12:44:80:39:87:ac:89:ad:4a: a6:e7:3c:f0:e2:04:1c:b3:e1:93:9c:6b:09:7f:f0: 05:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CF:5E:31:1B:BA:3A:A4:D6:88:56:46:02:AC:9B:C8:5B:91:98:A6 X509v3 Authority Key Identifier: keyid:82:FA:49:59:8B:B9:63:2C:D8:CF:41:FE:DD:F7:4B:BD:3D:33:D1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:96:2a:ef:65:db:a5:75:5d:e4:33:f3:a9:77:9c:d2:37:d6: 09:fa:f8:2a:46:29:82:bd:83:71:df:eb:ee:88:61:da:82:05: 16:20:e4:35:c5:e7:34:40:ee:63:37:cc:88:d2:45:10:fd:35: 96:69:4d:9c:33:55:f4:b7:81:bf:02:c1:56:df:f1:6c:43:66: 90:52:c8:4b:20:b8:56:d4:57:c5:49:12:cd:0d:b2:05:f1:61: 44:cb:c6:ab:7f:7d:62:d7:49:b0:ec:cf:fe:0e:46:9b:c6:c6: 6a:3a:ec:0d:ce:c5:bb:60:2a:9a:bd:43:72:d2:66:45:00:e0: ec:c1:7d:c1:e2:d2:24:aa:38:97:fd:d2:74:18:99:dc:2d:fc: b0:33:04:55:03:d5:73:7b:17:55:fa:19:2f:c3:8f:f4:6b:12: de:63:c1:e5:e5:40:f8:64:61:53:ba:cc:75:75:29:55:e3:01: 1b:3c:4d:59:7e:b2:9f:40:fb:e4:05:55:1e:58:69:84:06:7f: b3:5f:7d:dc:92:10:40:47:71:6d:71:71:fd:cf:ed:a7:7b:e8: fa:08:ed:03:60:11:fa:f4:93:66:23:3d:ba:82:42:69:e9:07: 5a:36:c9:e5:79:7b:a1:86:b7:0c:75:c0:11:da:a5:f6:1d:8f: c7:94:02:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVrmazw8NfGYZacqDz0B4qj0uAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJGQTQ5NTk4QkI5NjMyQ0Q4Q0Y0MUZFRERGNzRCQkQz RDMzRDE5QzAeFw0yNjA2MDMwMTM2NDlaFw0yNjA2MDQwMzQ5NDlaMDMxMTAvBgNV BAMTKDVFQ0Y1RTMxMUJCQTNBQTRENjg4NTY0NjAyQUM5QkM4NUI5MTk4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRLNGDH1Nm4ho0a0LwYG7LBQG/ JBSFc98StVFHpqZVt0eRK1k5VITth77nB9JLXJeuTa6wfuG2jmAeSARMtxT+ZxG3 QRIJUle1RksH8nsic+uhfnlCcJd0F/gzth851xM1IAQtEKSH0POZIrV+F/CVjIiV uTs+EagO+5/USGHVsQ7H81eIpXemm5Niby03YXP4Onp3A90Uebv/KBrXFRX+fy8O vPu0U01VXiqY4qRcLyN5b8MnQkzMtEE2eqzwfAC0c06GBkx7R+9MV0OLFM5qva1h DrOMBIMUftyncPlZqNHQwLCgKxJEgDmHrImtSqbnPPDiBByz4ZOcawl/8AVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXs9eMRu6OqTWiFZGAqybyFuRmKYwHwYDVR0j BBgwFoAUgvpJWYu5YyzYz0H+3fdLvT0z0ZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZkNzAzNDYtNWJkZi00OTYxLWE3NGYtNTVhZTg1NTY3MmExLzAvODJGQTQ5NTk4 QkI5NjMyQ0Q4Q0Y0MUZFRERGNzRCQkQzRDMzRDE5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MkZBNDk1OThCQjk2MzJDRDhDRjQxRkVEREY3NEJCRDNEMzNE MTlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZkNzAzNDYtNWJkZi00OTYxLWE3 NGYtNTVhZTg1NTY3MmExLzAvODJGQTQ5NTk4QkI5NjMyQ0Q4Q0Y0MUZFRERGNzRC QkQzRDMzRDE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+WKu9l26V1XeQz86l3nNI31gn6+CpGKYK9 g3Hf6+6IYdqCBRYg5DXF5zRA7mM3zIjSRRD9NZZpTZwzVfS3gb8CwVbf8WxDZpBS yEsguFbUV8VJEs0NsgXxYUTLxqt/fWLXSbDsz/4ORpvGxmo67A3OxbtgKpq9Q3LS ZkUA4OzBfcHi0iSqOJf90nQYmdwt/LAzBFUD1XN7F1X6GS/Dj/RrEt5jweXlQPhk YVO6zHV1KVXjARs8TVl+sp9A++QFVR5YaYQGf7NffdySEEBHcW1xcf3P7ad76PoI 7QNgEfr0k2YjPbqCQmnpB1o2yeV5e6GGtwx1wBHapfYdj8eUAi8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:20:59 2026 by rpki-client