$ rpki-client -vvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft File: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft (raw, json) Hash identifier: SYOUuASoW0aYbsvYQEDP3jMckhTxiMjOq3fsJ5Ni5OM= Subject key identifier: 2F:B2:30:B2:92:A4:5C:CB:E7:E5:44:D2:65:D9:47:CE:E6:5C:74:B9 Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 Certificate issuer: /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Certificate serial: 4D89FE67102374AAF65E45032DEADD018FB0A3B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:36:08 +0000 Manifest this update: Tue 02 Jun 2026 21:31:08 +0000 Manifest next update: Thu 04 Jun 2026 01:29:08 +0000 Files and hashes: 1: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: E7icouKmlM2nRKVKG7S5JwzSzIgKbeMao7gLF/MZ7HU=) 2: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: mnaX8OyQaRRI+TIyOqMa6qm7Y6uLOjvzrF8R5k5MsjU=) 3: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: U8aX+Se6czCWSw8AT++C8Q2LboeUeYibiDJAjvnWwyg=) 4: 323430313a316430303a3a2f33322d3438203d3e203338353035.roa (hash: 6BMdJfjQOk6ZMP+r3PWXA1452jn4jTz5h082fXgG9S4=) 5: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: D63R0HJY3dfFSWeAvX/hnIAUP8j3QRAbibvDX3rchmw=) 6: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: X3p+VR9fHu2hyTBK0FsVrH6VXDfYDH8j4Zpx8G4MzCs=) 7: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: oVIkdyLyFS+O6KZi8z7bLz7e36SBDG2DA+r6DHbMRLY=) 8: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: +N9+uIvrbV+jDpFQEoLWVMjE7Tiq4ZoJyUrk8aQRIxU=) 9: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl (hash: 4P9pau/nvibpF3XQVy5/g4kFuLU0EGa2SrvWVsfuM8Y=) 10: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: FB0gJNbI9gb2zm9vAMp0QwCkUB/Jt+h+ezAWp0ZQAY4=) 11: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: HsxEHeytaLeXbzMYkGNZ4CxQC7x6cG09R70sugNWXM0=) 12: 3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (hash: DkvTwpRqRkCZlooRpiKY2+Wy5hBTCQFkxeE1RiY6Adw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:89:fe:67:10:23:74:aa:f6:5e:45:03:2d:ea:dd:01:8f:b0:a3:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Validity Not Before: Jun 2 21:31:08 2026 GMT Not After : Jun 4 01:29:08 2026 GMT Subject: CN=2FB230B292A45CCBE7E544D265D947CEE65C74B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3b:df:5a:19:d9:65:76:a8:4b:fb:ee:42:32: f7:27:e3:40:a1:4f:fc:fc:1e:94:31:57:b2:58:8b: fd:15:2e:b0:5e:56:89:23:e7:86:90:ea:6a:47:09: 29:03:7c:bd:a9:2d:09:c2:83:0b:83:e5:27:8d:51: 76:20:0a:14:ce:2c:03:c2:32:d7:dc:12:01:c5:22: 3e:27:bb:4a:ac:b7:be:83:3c:88:7e:a3:03:ff:5c: a7:0d:30:2a:ac:87:34:b5:26:19:e1:42:11:12:9d: fa:a0:5e:85:7f:69:19:de:33:81:1f:1b:14:b1:5e: 24:e9:3b:7d:e7:91:d8:3e:89:23:9d:9b:96:10:c2: 78:ef:dc:16:23:fc:66:30:1a:fc:81:55:92:a1:6a: a1:96:88:2f:b3:9d:91:e2:b6:30:e9:19:52:9a:bc: 2f:ba:49:16:2f:3a:e5:30:d3:d2:19:ce:a4:8e:61: 1d:8e:8b:58:79:cc:25:54:78:2d:71:ed:3e:14:4f: e6:d1:a6:8c:a4:9e:32:e3:70:63:d1:a3:3c:90:be: 33:8c:37:12:b7:3b:da:06:9b:42:86:0e:d8:94:dd: 54:ee:b8:4d:75:a8:af:59:e0:22:66:ab:6f:b2:87: 7d:71:57:a8:4c:4d:7a:c9:98:01:06:7b:41:53:76: ae:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B2:30:B2:92:A4:5C:CB:E7:E5:44:D2:65:D9:47:CE:E6:5C:74:B9 X509v3 Authority Key Identifier: keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:32:6a:31:78:d2:fb:c0:bb:97:1c:b0:1f:b4:a2:e5:82:8e: e5:9e:ef:b5:a3:b1:33:08:be:bb:f4:42:c1:ab:bf:d2:2f:5f: 36:a5:e6:5a:28:51:26:6f:1d:da:78:12:1d:04:d3:f7:c4:da: f4:ab:e6:0c:12:fb:62:97:0c:82:35:e3:7d:57:ec:92:56:1a: af:e0:c7:5e:e9:8d:9f:e5:1c:d6:d9:0c:f3:6a:2f:96:98:e9: c2:21:08:e6:9b:9e:ac:1a:b4:84:53:72:db:02:c1:55:07:af: f9:86:e1:05:0a:46:6c:79:50:ff:d1:fe:e8:29:70:67:09:7e: e9:a7:82:24:e8:be:f8:f7:23:dc:e7:fb:2f:24:89:44:6a:a7: 07:7d:06:88:e0:f4:49:54:16:cf:6f:6e:86:f3:3b:a9:85:10: 50:b6:21:a9:32:fc:8a:fd:1a:88:d9:3f:9d:19:63:c4:d5:6c: 51:9e:3b:63:54:9b:28:15:ff:c0:42:77:9c:b8:fd:17:26:2b: 35:16:e9:09:f2:26:85:c5:f9:36:6a:69:bf:4e:f5:9e:2c:43: 23:78:cb:f4:77:cd:c4:75:1d:fd:5a:0e:b3:a0:22:99:bd:cd: 2f:91:20:d9:5d:67:52:ea:84:3e:da:76:cb:b9:aa:48:c8:3f: 3a:75:cd:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTYn+ZxAjdKr2XkUDLerdAY+wo7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4 RTdDNDk5MzAeFw0yNjA2MDIyMTMxMDhaFw0yNjA2MDQwMTI5MDhaMDMxMTAvBgNV BAMTKDJGQjIzMEIyOTJBNDVDQ0JFN0U1NDREMjY1RDk0N0NFRTY1Qzc0QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeO99aGdlldqhL++5CMvcn40Ch T/z8HpQxV7JYi/0VLrBeVokj54aQ6mpHCSkDfL2pLQnCgwuD5SeNUXYgChTOLAPC MtfcEgHFIj4nu0qst76DPIh+owP/XKcNMCqshzS1JhnhQhESnfqgXoV/aRneM4Ef GxSxXiTpO33nkdg+iSOdm5YQwnjv3BYj/GYwGvyBVZKhaqGWiC+znZHitjDpGVKa vC+6SRYvOuUw09IZzqSOYR2Oi1h5zCVUeC1x7T4UT+bRpoyknjLjcGPRozyQvjOM NxK3O9oGm0KGDtiU3VTuuE11qK9Z4CJmq2+yh31xV6hMTXrJmAEGe0FTdq41AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL7IwspKkXMvn5UTSZdlHzuZcdLkwHwYDVR0j BBgwFoAUBMjvb1Jg/aBmYdnpUwRXK458SZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNkMDc4NmQtM2QzZS00NWI3LTk2NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1 MjYwRkRBMDY2NjFEOUU5NTMwNDU3MkI4RTdDNDk5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNEM4RUY2RjUyNjBGREEwNjY2MUQ5RTk1MzA0NTcyQjhFN0M0 OTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNkMDc4NmQtM2QzZS00NWI3LTk2 NjUtOGQ0NzRmZDE0YWVhLzAvMDRDOEVGNkY1MjYwRkRBMDY2NjFEOUU5NTMwNDU3 MkI4RTdDNDk5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUyajF40vvAu5ccsB+0ouWCjuWe77WjsTMI vrv0QsGrv9IvXzal5looUSZvHdp4Eh0E0/fE2vSr5gwS+2KXDII1431X7JJWGq/g x17pjZ/lHNbZDPNqL5aY6cIhCOabnqwatIRTctsCwVUHr/mG4QUKRmx5UP/R/ugp cGcJfumngiTovvj3I9zn+y8kiURqpwd9Bojg9ElUFs9vbobzO6mFEFC2Iaky/Ir9 GojZP50ZY8TVbFGeO2NUmygV/8BCd5y4/RcmKzUW6QnyJoXF+TZqab9O9Z4sQyN4 y/R3zcR1Hf1aDrOgIpm9zS+RINldZ1LqhD7adsu5qkjIPzp1zQo= -----END CERTIFICATE-----Generated at Wed Jun 3 03:28:21 2026 by rpki-client