$ rpki-client -vvf rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft File: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft (raw, json) Hash identifier: QMlN0qIW3la5HX4xPkvbvO3RA7kPgDtFZpyx/qr/yg8= Subject key identifier: 71:27:92:77:02:E3:F9:55:5C:21:A9:64:F0:54:85:18:DC:AF:3C:E5 Authority key identifier: 7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 Certificate issuer: /CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Certificate serial: 2C4809C5899F0ED4B4FE5F7FE1873E8C237319B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 09:11:26 +0000 Manifest this update: Tue 02 Jun 2026 09:06:26 +0000 Manifest next update: Wed 03 Jun 2026 11:48:26 +0000 Files and hashes: 1: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: Hn5EuMtGipfFtFBXzkyifRq2Ky/xfbDimmF9AiNLLbY=) 2: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl (hash: Z2ELvdKYHe8L4r+VuzWWYSLsVO+9k8gC/aKQt2FArjU=) 3: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: X2e4T35qCspph/xtXp3KyS/o17wZ6E0HRD0EGkuu3j4=) 4: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: 5sujLlpuj+APYEuCGGPMp2IaRJT57klQE6sCBEbziO0=) 5: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: e18vtFsO2rq7V5cmuPD5QY+txt6xvfQ7TNg+W5usCFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:48:09:c5:89:9f:0e:d4:b4:fe:5f:7f:e1:87:3e:8c:23:73:19:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Validity Not Before: Jun 2 09:06:26 2026 GMT Not After : Jun 3 11:48:26 2026 GMT Subject: CN=7127927702E3F9555C21A964F0548518DCAF3CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:e8:07:5a:b6:66:56:4c:ca:0c:dc:83:72: 0f:8f:9b:81:55:cf:df:9e:9b:41:54:1e:0f:9d:d7: f3:b5:a2:aa:27:90:2f:e7:ab:85:7f:06:5d:8f:4d: d9:7f:a3:f2:ff:cc:a3:1b:4a:60:97:28:7c:5f:f4: ee:c6:84:9d:bb:21:d7:45:54:ee:10:62:0c:99:62: 02:ad:f2:ec:84:5c:1a:bc:3f:9b:22:b9:7c:21:13: a4:22:9c:37:80:7e:e6:a1:6b:1b:03:da:67:dd:87: d0:8e:04:99:b4:78:55:c6:de:f5:0c:5f:88:99:7c: d0:8a:ca:48:89:c7:18:68:ee:90:34:1f:48:ad:92: b5:b9:76:78:f5:86:b5:8b:3f:51:6f:6d:92:1c:16: 27:5c:10:85:92:21:16:d3:e7:91:0a:45:1f:54:37: fa:33:ab:c0:5e:f3:62:38:89:9c:34:d2:99:32:74: 30:aa:03:c9:f4:9a:9e:07:f9:55:fe:ce:56:63:2f: b8:eb:fc:a3:94:cf:c0:09:45:a2:d9:10:e6:3b:40: a2:01:19:ca:e3:ef:9a:15:20:a6:53:5f:89:a1:de: ef:a7:05:3f:44:a3:63:b5:9f:45:91:cd:81:82:7e: 1c:00:bc:8a:30:e8:2d:3e:45:82:ef:78:fc:32:04: a5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:27:92:77:02:E3:F9:55:5C:21:A9:64:F0:54:85:18:DC:AF:3C:E5 X509v3 Authority Key Identifier: keyid:7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:6e:0d:ee:f1:dd:46:8f:f9:de:53:b4:12:28:7d:7b:69:65: 14:83:ca:85:e5:32:e1:20:2b:22:db:e4:65:f8:6b:ca:86:e5: b1:67:15:e1:ce:d6:49:d4:8d:4d:33:9c:ef:e8:4d:1d:b8:1f: 93:46:2a:13:45:28:7e:9f:4e:e4:85:ff:cb:eb:1e:13:c1:aa: 6b:ea:0e:c2:47:86:60:cf:65:07:34:6b:fb:00:f0:df:5a:8b: 7f:73:ed:5e:c3:93:2d:5b:a3:a5:e4:23:59:d6:52:0c:c9:05: 7e:57:67:da:e3:49:39:af:02:ff:80:c9:29:53:86:f8:65:ae: ef:57:30:09:2f:05:84:8b:8d:5b:a6:1f:22:9e:3e:6c:1e:46: 56:b6:18:d3:ba:f0:79:cf:ed:b5:a3:c9:cd:41:b1:e4:f6:cd: a3:72:2c:c1:7c:a4:ee:39:d4:16:88:e7:d3:b8:84:30:7c:68: c1:63:a1:da:70:fd:69:7d:c2:ea:bb:8d:69:22:0c:3c:27:c9: 4c:ac:1a:b5:53:e7:d9:cb:10:1c:f6:51:76:82:f1:f5:e0:2d: f4:ee:2b:03:32:50:c9:27:77:61:cb:5a:53:4e:f5:24:27:18: 38:4a:7d:3c:af:bb:80:b6:cb:2c:c9:29:e6:3d:07:55:d3:ad: d9:24:32:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULEgJxYmfDtS0/l9/4Yc+jCNzGbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBENzdE MTMwMzUwNjAeFw0yNjA2MDIwOTA2MjZaFw0yNjA2MDMxMTQ4MjZaMDMxMTAvBgNV BAMTKDcxMjc5Mjc3MDJFM0Y5NTU1QzIxQTk2NEYwNTQ4NTE4RENBRjNDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8q+gHWrZmVkzKDNyDcg+Pm4FV z9+em0FUHg+d1/O1oqonkC/nq4V/Bl2PTdl/o/L/zKMbSmCXKHxf9O7GhJ27IddF VO4QYgyZYgKt8uyEXBq8P5siuXwhE6QinDeAfuahaxsD2mfdh9COBJm0eFXG3vUM X4iZfNCKykiJxxho7pA0H0itkrW5dnj1hrWLP1FvbZIcFidcEIWSIRbT55EKRR9U N/ozq8Be82I4iZw00pkydDCqA8n0mp4H+VX+zlZjL7jr/KOUz8AJRaLZEOY7QKIB Gcrj75oVIKZTX4mh3u+nBT9Eo2O1n0WRzYGCfhwAvIow6C0+RYLvePwyBKWLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSeSdwLj+VVcIalk8FSFGNyvPOUwHwYDVR0j BBgwFoAUfda1Ci1B6uuEjnxC10wNd9EwNQYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVlNTE4NzUtNTA4Ny00MjY0LWE4YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEy RDQxRUFFQjg0OEU3QzQyRDc0QzBENzdEMTMwMzUwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83REQ2QjUwQTJENDFFQUVCODQ4RTdDNDJENzRDMEQ3N0QxMzAz NTA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvN0RENkI1MEEyRDQxRUFFQjg0OEU3QzQyRDc0QzBE NzdEMTMwMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhuDe7x3UaP+d5TtBIofXtpZRSDyoXlMuEg KyLb5GX4a8qG5bFnFeHO1knUjU0znO/oTR24H5NGKhNFKH6fTuSF/8vrHhPBqmvq DsJHhmDPZQc0a/sA8N9ai39z7V7Dky1bo6XkI1nWUgzJBX5XZ9rjSTmvAv+AySlT hvhlru9XMAkvBYSLjVumHyKePmweRla2GNO68HnP7bWjyc1BseT2zaNyLMF8pO45 1BaI59O4hDB8aMFjodpw/Wl9wuq7jWkiDDwnyUysGrVT59nLEBz2UXaC8fXgLfTu KwMyUMknd2HLWlNO9SQnGDhKfTyvu4C2yyzJKeY9B1XTrdkkMpg= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:59 2026 by rpki-client