$ rpki-client -vvf rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft File: B806053521FE6FECB8809B52E561CCCA002004C5.mft (raw, json) Hash identifier: /hpxisFEKOn4CpBFLHGvaITIHClYm0fBfT0KYmok7SI= Subject key identifier: 27:97:41:E7:0D:D0:95:17:D7:87:71:11:8E:00:88:F7:97:A7:3D:60 Authority key identifier: B8:06:05:35:21:FE:6F:EC:B8:80:9B:52:E5:61:CC:CA:00:20:04:C5 Certificate issuer: /CN=B806053521FE6FECB8809B52E561CCCA002004C5 Certificate serial: 20345E8C3F345171C4B645052AC24A8EF5B60280 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 12:10:05 +0000 Manifest this update: Tue 02 Jun 2026 12:05:05 +0000 Manifest next update: Wed 03 Jun 2026 12:42:05 +0000 Files and hashes: 1: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: un5iMbvwLLHgZ/gVlHFbug00/xJXBrdaRm/T/UqWjVI=) 2: B806053521FE6FECB8809B52E561CCCA002004C5.crl (hash: 98T6EB7WV+6WlB5uBfGfcsYkS55TXE0Xzl8HBgv72vw=) 3: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: vm98v9W8rSeQ8Av1Tc7EkqP0Z8ZuAgCRGwku9YNKDo0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.crl rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:34:5e:8c:3f:34:51:71:c4:b6:45:05:2a:c2:4a:8e:f5:b6:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B806053521FE6FECB8809B52E561CCCA002004C5 Validity Not Before: Jun 2 12:05:05 2026 GMT Not After : Jun 3 12:42:05 2026 GMT Subject: CN=279741E70DD09517D78771118E0088F797A73D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:ae:2a:12:a1:89:d7:0f:8f:b9:84:6d:44: 6b:8f:1a:3e:18:e6:5c:c1:22:99:b8:65:c2:cd:85: 94:ec:45:eb:d5:66:c3:bd:df:e8:3e:79:7a:79:d4: 4a:65:77:95:ec:e9:e3:01:fa:13:84:cf:58:18:9a: 38:bb:3a:b6:fc:ef:4a:e1:cd:e4:b4:36:99:c1:11: f9:f7:3c:73:9f:30:d3:da:c6:e2:13:26:6d:18:14: 5a:39:bb:ec:84:f0:fb:51:70:89:42:fb:7e:23:c7: d1:51:42:d1:22:7b:26:0b:9e:a2:fd:63:6b:a1:23: 32:7e:c2:5d:cb:47:2b:e1:37:c9:6b:1e:da:50:36: 9c:0d:01:d5:40:72:f6:87:16:77:9a:78:2f:d3:07: fb:d1:3e:05:e5:e9:f1:88:c0:5e:ae:f4:2f:9d:07: 3a:ef:ce:23:5c:64:51:34:d9:ca:42:3e:b1:48:70: d9:44:68:65:72:ba:19:91:ef:83:16:08:24:6d:50: 19:97:5b:5b:cb:0a:d5:a6:b8:9a:c8:cf:14:7b:38: 46:b3:e3:48:d7:c8:2d:b2:2e:76:ec:ac:10:2a:72: 29:cd:f7:5e:b1:45:38:69:48:08:96:36:3e:0f:86: 39:eb:6b:88:b2:47:d2:e4:ca:c5:01:52:67:07:d3: 3c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:97:41:E7:0D:D0:95:17:D7:87:71:11:8E:00:88:F7:97:A7:3D:60 X509v3 Authority Key Identifier: keyid:B8:06:05:35:21:FE:6F:EC:B8:80:9B:52:E5:61:CC:CA:00:20:04:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f4:54:a9:0a:8e:bf:4e:a7:df:d6:aa:4a:8a:75:57:97:12: bb:16:f2:1d:02:0c:45:f3:57:2e:2e:54:b5:6d:e5:84:ab:a6: e6:f0:1e:b4:06:8a:4f:81:9d:0f:3a:b2:46:ad:5f:f2:07:cc: 25:b9:2f:43:27:8a:c8:e7:b6:16:47:0f:ef:6c:08:57:47:ec: 1a:b8:e0:a0:63:64:37:56:4a:bf:65:37:0c:5e:78:93:21:fe: 77:e2:b7:7a:06:51:34:da:c1:27:48:8e:4a:02:cf:c6:ea:2a: 03:eb:d9:7e:47:19:d4:86:3e:87:06:dc:17:c2:67:25:c3:8f: bd:5a:3f:a4:23:d8:b3:c8:20:e6:11:d2:f0:03:c5:bd:21:57: 86:e5:e6:12:3e:6d:a2:3e:c8:2a:43:2f:19:51:99:0e:b1:11: 44:3c:b4:3b:82:1b:51:14:cb:35:25:7f:3b:40:8f:6a:93:38: 3a:f5:9e:81:a5:f2:8b:1a:27:85:59:d2:54:84:d6:29:23:5d: 0b:c9:74:03:fa:f7:2d:32:a6:58:3d:9e:c4:bb:0d:bd:f6:31: 39:37:94:8f:be:0d:9b:3b:68:dc:10:f5:56:01:13:93:a9:f2: 07:db:3d:4e:06:ae:68:fa:64:45:86:30:51:e1:a2:c5:66:ed: 69:bd:03:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDRejD80UXHEtkUFKsJKjvW2AoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgwNjA1MzUyMUZFNkZFQ0I4ODA5QjUyRTU2MUNDQ0Ew MDIwMDRDNTAeFw0yNjA2MDIxMjA1MDVaFw0yNjA2MDMxMjQyMDVaMDMxMTAvBgNV BAMTKDI3OTc0MUU3MEREMDk1MTdENzg3NzExMThFMDA4OEY3OTdBNzNENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtbK4qEqGJ1w+PuYRtRGuPGj4Y 5lzBIpm4ZcLNhZTsRevVZsO93+g+eXp51Epld5Xs6eMB+hOEz1gYmji7Orb870rh zeS0NpnBEfn3PHOfMNPaxuITJm0YFFo5u+yE8PtRcIlC+34jx9FRQtEieyYLnqL9 Y2uhIzJ+wl3LRyvhN8lrHtpQNpwNAdVAcvaHFneaeC/TB/vRPgXl6fGIwF6u9C+d BzrvziNcZFE02cpCPrFIcNlEaGVyuhmR74MWCCRtUBmXW1vLCtWmuJrIzxR7OEaz 40jXyC2yLnbsrBAqcinN916xRThpSAiWNj4Phjnra4iyR9LkysUBUmcH0zw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ5dB5w3QlRfXh3ERjgCI95enPWAwHwYDVR0j BBgwFoAUuAYFNSH+b+y4gJtS5WHMygAgBMUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODEzNjQ1ZDQtNTQzYi00NDRiLWEzYTUtZmRjZDQxODExYzIxLzAvQjgwNjA1MzUy MUZFNkZFQ0I4ODA5QjUyRTU2MUNDQ0EwMDIwMDRDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODA2MDUzNTIxRkU2RkVDQjg4MDlCNTJFNTYxQ0NDQTAwMjAw NEM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvQjgwNjA1MzUyMUZFNkZFQ0I4ODA5QjUyRTU2MUND Q0EwMDIwMDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABD0VKkKjr9Op9/WqkqKdVeXErsW8h0CDEXz Vy4uVLVt5YSrpubwHrQGik+BnQ86skatX/IHzCW5L0MnisjnthZHD+9sCFdH7Bq4 4KBjZDdWSr9lNwxeeJMh/nfit3oGUTTawSdIjkoCz8bqKgPr2X5HGdSGPocG3BfC ZyXDj71aP6Qj2LPIIOYR0vADxb0hV4bl5hI+baI+yCpDLxlRmQ6xEUQ8tDuCG1EU yzUlfztAj2qTODr1noGl8osaJ4VZ0lSE1ikjXQvJdAP69y0yplg9nsS7Db32MTk3 lI++DZs7aNwQ9VYBE5Op8gfbPU4Grmj6ZEWGMFHhosVm7Wm9A58= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:50 2026 by rpki-client