$ rpki-client -vvf rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft File: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft (raw, json) Hash identifier: Ts4dujM7ZO39Hi+sipkVQsr+wozvrmGNhP5t21UcsD4= Subject key identifier: B3:DA:59:60:A6:89:53:56:E4:9C:A8:91:BD:EC:90:EE:3E:EF:8B:4E Authority key identifier: D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E Certificate issuer: /CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Certificate serial: 0481AD2FC80FE29F40D94DD0B4F867B078D326C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:39:30 +0000 Manifest this update: Tue 02 Jun 2026 11:34:30 +0000 Manifest next update: Wed 03 Jun 2026 13:43:30 +0000 Files and hashes: 1: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: yr/oT9BlQ/M4JMNvCd0w0W7t+J3wxH6iIKEMfOlwP+M=) 2: D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl (hash: Jtp/lRzp45Cx1Oeh4f7sO86bO5+9grQK+r/FTq0ucmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 13:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:81:ad:2f:c8:0f:e2:9f:40:d9:4d:d0:b4:f8:67:b0:78:d3:26:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C8B43AE85F0F09D4987329232BECE8BCC74B8E Validity Not Before: Jun 2 11:34:30 2026 GMT Not After : Jun 3 13:43:30 2026 GMT Subject: CN=B3DA5960A6895356E49CA891BDEC90EE3EEF8B4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:c5:bb:b9:a3:b3:80:c4:14:3f:dc:e5:12: 95:ea:9f:ed:d6:5a:3a:8e:74:5a:55:b8:b2:29:de: 0b:d4:d0:b5:ad:6c:4a:ab:9b:13:21:7f:b2:63:55: 05:8a:5b:3e:7a:12:99:5e:e6:02:d1:6f:3d:53:db: b4:fd:31:37:de:61:20:26:87:98:51:1c:76:b7:ae: 4e:f1:3b:14:8d:72:df:a7:ed:a2:68:d8:68:60:ba: 30:61:ea:11:b7:03:29:fb:27:4b:17:91:75:5b:e4: dc:91:d3:92:60:16:1e:ca:cc:a2:0c:22:7e:a5:aa: db:72:2a:e2:61:f9:18:c6:44:d1:8e:b9:16:a6:0c: 36:d9:ac:8c:29:da:c6:be:f6:a9:ec:95:21:34:85: c6:f9:a5:d0:68:22:df:6b:3d:eb:13:c3:37:01:b5: 09:99:06:07:b9:e1:b7:bb:47:3c:c9:44:f7:2d:87: f2:6f:98:77:0d:f1:36:66:ea:87:4c:66:83:79:eb: e5:c3:32:6a:ad:8c:6c:e0:5e:d2:82:88:21:b2:55: 34:56:dd:15:fb:b3:d6:ea:4e:f1:83:c0:0c:c4:43: 5e:a8:c7:45:a2:b5:4a:84:2c:b2:b1:90:e2:98:92: 20:78:ef:20:84:1b:d3:09:ba:c1:d5:e0:11:32:87: 6a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DA:59:60:A6:89:53:56:E4:9C:A8:91:BD:EC:90:EE:3E:EF:8B:4E X509v3 Authority Key Identifier: keyid:D0:C8:B4:3A:E8:5F:0F:09:D4:98:73:29:23:2B:EC:E8:BC:C7:4B:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/D0C8B43AE85F0F09D4987329232BECE8BCC74B8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:84:16:2c:0a:89:5b:a3:5a:55:a8:92:74:62:e2:18:2c:f3: 58:4c:21:a4:8d:e3:9a:7b:35:c7:4f:51:59:3e:94:f9:de:59: f4:e3:f3:66:d1:7f:ed:48:f9:e0:05:a0:9b:0c:09:22:bd:a4: 4e:c4:56:4f:a5:c5:cb:75:5c:9e:3c:7f:0f:6b:37:55:f1:9c: b1:d0:8a:10:8e:b8:7f:ab:d0:ed:80:fc:82:ca:68:c5:f0:af: 17:cf:a5:9f:6e:c3:ea:7f:46:89:d6:88:b6:e1:ae:d9:91:6b: a2:9a:bf:75:19:a4:00:28:9a:0b:cd:78:9b:0f:20:e2:fb:96: 42:4f:24:03:4b:46:89:34:04:78:48:d3:3b:c4:c3:59:9a:32: 53:bb:43:e3:e1:71:0e:98:4e:c6:6c:7c:32:a9:23:3a:d8:8a: ea:76:d8:ba:dc:5c:f1:24:16:bf:1b:54:de:0b:30:dc:a1:ed: f6:c6:f6:0a:7b:85:b7:b9:59:6e:e1:10:8a:c2:66:75:f6:0d: bd:95:c6:5d:f0:11:34:25:56:48:53:34:ba:e7:c4:27:f3:45: 7e:83:d6:2b:43:ba:84:27:f9:37:bf:ec:bb:1f:83:01:53:0b: 84:15:61:36:29:97:77:d2:6b:06:b9:33:59:35:7b:bc:72:99: 4a:52:3e:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBIGtL8gP4p9A2U3QtPhnsHjTJsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThC Q0M3NEI4RTAeFw0yNjA2MDIxMTM0MzBaFw0yNjA2MDMxMzQzMzBaMDMxMTAvBgNV BAMTKEIzREE1OTYwQTY4OTUzNTZFNDlDQTg5MUJERUM5MEVFM0VFRjhCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+cW7uaOzgMQUP9zlEpXqn+3W WjqOdFpVuLIp3gvU0LWtbEqrmxMhf7JjVQWKWz56Eple5gLRbz1T27T9MTfeYSAm h5hRHHa3rk7xOxSNct+n7aJo2GhgujBh6hG3Ayn7J0sXkXVb5NyR05JgFh7KzKIM In6lqttyKuJh+RjGRNGOuRamDDbZrIwp2sa+9qnslSE0hcb5pdBoIt9rPesTwzcB tQmZBge54be7RzzJRPcth/JvmHcN8TZm6odMZoN56+XDMmqtjGzgXtKCiCGyVTRW 3RX7s9bqTvGDwAzEQ16ox0WitUqELLKxkOKYkiB47yCEG9MJusHV4BEyh2oHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs9pZYKaJU1bknKiRveyQ7j7vi04wHwYDVR0j BBgwFoAU0Mi0OuhfDwnUmHMpIyvs6LzHS44wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkZDRmMTYtNTcwZS00YzhjLWE5OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FF ODVGMEYwOUQ0OTg3MzI5MjMyQkVDRThCQ0M3NEI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMEM4QjQzQUU4NUYwRjA5RDQ5ODczMjkyMzJCRUNFOEJDQzc0 QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvRDBDOEI0M0FFODVGMEYwOUQ0OTg3MzI5MjMyQkVD RThCQ0M3NEI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGEFiwKiVujWlWoknRi4hgs81hMIaSN45p7 NcdPUVk+lPneWfTj82bRf+1I+eAFoJsMCSK9pE7EVk+lxct1XJ48fw9rN1XxnLHQ ihCOuH+r0O2A/ILKaMXwrxfPpZ9uw+p/RonWiLbhrtmRa6Kav3UZpAAomgvNeJsP IOL7lkJPJANLRok0BHhI0zvEw1maMlO7Q+PhcQ6YTsZsfDKpIzrYiup22LrcXPEk Fr8bVN4LMNyh7fbG9gp7hbe5WW7hEIrCZnX2Db2Vxl3wETQlVkhTNLrnxCfzRX6D 1itDuoQn+Te/7LsfgwFTC4QVYTYpl3fSawa5M1k1e7xymUpSPgM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:22 2026 by rpki-client