$ rpki-client -vvf rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft File: 1345157B61F361F583DCB52DB3ECBCA10862599B.mft (raw, json) Hash identifier: sP6z6TRLu8SaDDyN9sjbgh8DVvZwzVTRsCiojfQDx+E= Subject key identifier: 28:D8:2A:9E:86:BC:BD:A6:63:4A:17:B6:82:9F:33:08:7F:60:77:41 Authority key identifier: 13:45:15:7B:61:F3:61:F5:83:DC:B5:2D:B3:EC:BC:A1:08:62:59:9B Certificate issuer: /CN=1345157B61F361F583DCB52DB3ECBCA10862599B Certificate serial: 2AB13B59AAB06A194B9E37B33E6B27D1022365C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:59:56 +0000 Manifest this update: Tue 02 Jun 2026 11:54:56 +0000 Manifest next update: Wed 03 Jun 2026 14:27:56 +0000 Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: jNEFs2GtzFKSgVBlfyDoiMOmxKN4+FK/qSYbZvqpibs=) 2: 1345157B61F361F583DCB52DB3ECBCA10862599B.crl (hash: cL7wul40v2SnEDErUhGCd0rTbsa1pzs99h1+q/lWXsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.crl rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b1:3b:59:aa:b0:6a:19:4b:9e:37:b3:3e:6b:27:d1:02:23:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1345157B61F361F583DCB52DB3ECBCA10862599B Validity Not Before: Jun 2 11:54:56 2026 GMT Not After : Jun 3 14:27:56 2026 GMT Subject: CN=28D82A9E86BCBDA6634A17B6829F33087F607741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:ec:f3:10:a6:80:18:2c:92:23:3c:c0:d3: 0b:a4:48:5c:32:3f:61:a3:a3:45:53:dc:b1:80:f7: cb:7c:9e:8e:2a:8a:54:32:6f:a7:7e:8a:f6:d9:ce: 2e:76:3e:29:39:29:83:da:d4:d6:35:71:05:fe:1f: 6f:d1:8f:11:6c:ba:34:4b:2f:6e:cc:bf:5e:fe:ea: 2a:dc:dc:b6:4c:8b:86:96:ad:9a:e7:b5:35:e0:e2: 0e:21:b1:a4:05:bd:9a:14:10:5b:59:28:54:20:d9: 1b:b0:53:fb:50:bf:bb:97:15:7b:ad:4b:6e:ee:b6: 4a:03:cf:cd:14:aa:48:8f:b7:ab:dc:11:0c:90:41: 10:4e:95:bf:d8:fd:ab:9f:1c:59:11:3a:97:6e:25: 25:39:4c:ec:cc:aa:0e:d7:f3:09:96:57:b8:5e:92: 62:45:97:1f:f4:58:9b:a4:ec:46:fe:fa:3b:ee:04: 94:22:0b:ab:f0:b3:c0:a8:93:26:2d:b9:9f:85:08: 4d:2a:3b:15:9e:22:13:24:f2:36:1f:74:f4:47:9c: c5:95:45:05:84:bd:a7:5d:9b:10:b1:4f:c7:98:d8: e5:2a:01:b2:b0:4f:46:55:10:c1:68:24:9f:26:bb: 64:84:c3:af:8f:ab:d5:b1:ee:5a:b0:97:40:6a:67: a3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D8:2A:9E:86:BC:BD:A6:63:4A:17:B6:82:9F:33:08:7F:60:77:41 X509v3 Authority Key Identifier: keyid:13:45:15:7B:61:F3:61:F5:83:DC:B5:2D:B3:EC:BC:A1:08:62:59:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1345157B61F361F583DCB52DB3ECBCA10862599B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/1345157B61F361F583DCB52DB3ECBCA10862599B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c6:91:2e:4c:b8:e5:52:79:95:c3:51:a3:33:8c:3d:2f:e8: 8c:f9:82:71:f9:76:d1:a9:8e:e7:00:05:9e:74:0e:79:71:07: 9d:f8:35:8d:e2:19:38:27:df:62:6c:e6:11:58:26:c8:3b:b5: 5a:01:c1:8c:7c:d7:ad:33:be:11:35:30:7b:06:62:00:bf:25: 3f:f5:a4:82:87:2c:f3:21:e3:ec:ff:55:7e:7c:32:40:5e:92: 06:49:a7:e9:c4:a1:71:eb:e1:b4:0d:07:13:c5:8b:a3:b1:9a: e1:9d:88:61:15:bc:16:39:20:4a:45:1b:fd:da:8a:2c:ee:5e: 5a:b0:c9:2a:a0:56:f0:ff:78:b1:62:31:e2:16:0d:4f:ff:18: 2d:a8:d9:36:75:03:02:df:98:93:b6:72:9f:7e:5c:4b:2c:a2: e5:3a:71:ce:00:3d:4a:80:1a:a1:61:cd:a8:78:ff:d9:04:c3: 44:f4:e1:41:41:77:11:1e:c3:82:66:cb:d7:da:d3:8a:f8:30: d5:08:27:0c:3a:9f:d2:03:b2:f0:e6:a8:ee:92:80:1a:24:08: cf:4e:7a:af:ed:6e:8c:78:08:32:ec:51:a4:98:09:c3:20:81: ff:26:40:67:74:d5:8a:71:ef:7f:72:e3:d5:c7:2e:16:68:38: e7:01:46:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrE7WaqwahlLnjezPmsn0QIjZcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0NTE1N0I2MUYzNjFGNTgzRENCNTJEQjNFQ0JDQTEw ODYyNTk5QjAeFw0yNjA2MDIxMTU0NTZaFw0yNjA2MDMxNDI3NTZaMDMxMTAvBgNV BAMTKDI4RDgyQTlFODZCQ0JEQTY2MzRBMTdCNjgyOUYzMzA4N0Y2MDc3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3iuzzEKaAGCySIzzA0wukSFwy P2Gjo0VT3LGA98t8no4qilQyb6d+ivbZzi52Pik5KYPa1NY1cQX+H2/RjxFsujRL L27Mv17+6irc3LZMi4aWrZrntTXg4g4hsaQFvZoUEFtZKFQg2RuwU/tQv7uXFXut S27utkoDz80UqkiPt6vcEQyQQRBOlb/Y/aufHFkROpduJSU5TOzMqg7X8wmWV7he kmJFlx/0WJuk7Eb++jvuBJQiC6vws8CokyYtuZ+FCE0qOxWeIhMk8jYfdPRHnMWV RQWEvaddmxCxT8eY2OUqAbKwT0ZVEMFoJJ8mu2SEw6+Pq9Wx7lqwl0BqZ6ORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKNgqnoa8vaZjShe2gp8zCH9gd0EwHwYDVR0j BBgwFoAUE0UVe2HzYfWD3LUts+y8oQhiWZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVlZTQwZGMtNTFiYS00NzY5LTg2MTktMjI4OWNjZTk2MjllLzAvMTM0NTE1N0I2 MUYzNjFGNTgzRENCNTJEQjNFQ0JDQTEwODYyNTk5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzQ1MTU3QjYxRjM2MUY1ODNEQ0I1MkRCM0VDQkNBMTA4NjI1 OTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvMTM0NTE1N0I2MUYzNjFGNTgzRENCNTJEQjNFQ0JD QTEwODYyNTk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjGkS5MuOVSeZXDUaMzjD0v6Iz5gnH5dtGp jucABZ50DnlxB534NY3iGTgn32Js5hFYJsg7tVoBwYx8160zvhE1MHsGYgC/JT/1 pIKHLPMh4+z/VX58MkBekgZJp+nEoXHr4bQNBxPFi6OxmuGdiGEVvBY5IEpFG/3a iizuXlqwySqgVvD/eLFiMeIWDU//GC2o2TZ1AwLfmJO2cp9+XEssouU6cc4APUqA GqFhzah4/9kEw0T04UFBdxEew4Jmy9fa04r4MNUIJww6n9IDsvDmqO6SgBokCM9O eq/tbox4CDLsUaSYCcMggf8mQGd01Ypx739y49XHLhZoOOcBRmg= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:29 2026 by rpki-client