$ rpki-client -vvf rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft File: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft (raw, json) Hash identifier: X+zAyNEPIT8d5E4CUa2IOMAV3GJkr8cG93TAVLUlnz8= Subject key identifier: A8:B2:49:22:3E:74:B8:82:FA:47:BC:39:C5:DB:92:96:9D:34:AD:D3 Authority key identifier: 04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E Certificate issuer: /CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Certificate serial: 3AC45F17B338A9341DB80834BDB4E2D918D75CD4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 03:03:33 +0000 Manifest this update: Wed 03 Jun 2026 02:58:33 +0000 Manifest next update: Thu 04 Jun 2026 03:34:33 +0000 Files and hashes: 1: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: JGTo44TwhcX4ivQ52rHxAzJZareWjfxAS0kPXAmQ5EE=) 2: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: 40yX7GBS0nX6cgx29ls12Yp5h3Ba+XKjPu45g8FVQzo=) 3: 04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl (hash: IPSeg1RCgt+V8rDenUKU6/FtEp/j29bKVYpCbE1gTaw=) 4: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: CZVghfd+RMSIYEhXYYQSwl8vEVYu7UKTsPMOPTno7kM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 03:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c4:5f:17:b3:38:a9:34:1d:b8:08:34:bd:b4:e2:d9:18:d7:5c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04522B783774E8969A253B79C9BD8B7AF11E0E6E Validity Not Before: Jun 3 02:58:33 2026 GMT Not After : Jun 4 03:34:33 2026 GMT Subject: CN=A8B249223E74B882FA47BC39C5DB92969D34ADD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c1:02:23:5d:10:cc:3a:51:e8:67:96:c6:35: c2:4a:a4:bf:29:b7:c5:f8:b4:e0:3c:10:14:2d:16: 31:dd:bb:f8:9d:0c:60:72:f7:bc:d8:75:43:13:d2: c6:ce:e9:d8:3a:a5:40:12:0a:36:e5:f2:5c:e9:3f: 53:03:2a:04:c2:f0:a3:95:5a:7a:1b:9f:ae:65:da: 4e:75:f8:79:10:de:db:c2:52:d1:23:34:f3:a5:74: 06:cf:74:47:a3:c9:c3:cc:15:0e:0c:e4:4d:45:4f: 39:cb:69:71:7f:e3:72:0e:09:55:e9:71:0b:7f:97: 18:d0:97:ed:3b:83:ba:cd:ba:ec:e9:e4:7b:57:36: 46:4b:81:b9:ba:0a:cf:1f:0b:0e:57:e8:86:28:5e: d8:f3:9a:33:07:38:50:f7:0e:af:bc:36:bc:44:aa: b5:64:35:cc:74:22:00:f4:e7:c5:1f:59:c3:58:78: 7f:ba:bb:2d:80:62:73:4d:a1:71:de:57:c8:74:ea: 86:1d:a0:97:79:08:0f:7b:5a:1a:99:48:ef:d3:c1: 78:6e:7a:f0:c7:89:e6:ef:53:39:77:7a:e9:79:b6: 76:d9:bb:fc:b1:e2:74:f3:4c:bc:10:d6:77:a4:79: 06:dc:a3:94:21:22:3e:17:12:78:b3:91:f9:9d:a3: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B2:49:22:3E:74:B8:82:FA:47:BC:39:C5:DB:92:96:9D:34:AD:D3 X509v3 Authority Key Identifier: keyid:04:52:2B:78:37:74:E8:96:9A:25:3B:79:C9:BD:8B:7A:F1:1E:0E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04522B783774E8969A253B79C9BD8B7AF11E0E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/04522B783774E8969A253B79C9BD8B7AF11E0E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c2:4f:bf:e9:5b:41:7c:4c:32:65:65:1c:ea:93:3e:1d:63: f6:55:21:86:37:ca:1a:24:07:fa:bb:bc:60:b8:33:70:19:e8: d7:24:ca:21:d5:c7:db:5b:b0:7e:d3:87:63:40:32:33:22:38: d4:ed:98:eb:18:c9:a0:35:a7:6a:09:07:4a:44:29:03:ee:44: 67:41:46:a3:bd:b9:d2:0f:bb:46:f1:22:88:08:c7:bf:b9:c4: 6f:02:5b:86:3a:44:22:dd:d8:63:f4:63:86:3c:7b:6f:28:1d: 6d:d9:bf:df:55:f2:94:87:f6:16:84:6e:16:c0:00:24:7f:76: 30:ea:e5:65:b3:1a:55:0e:61:6b:f6:a2:b9:b0:f3:c3:9e:61: 26:be:ba:4d:54:bc:87:02:d6:0c:db:2c:21:e0:ee:dd:23:3c: 76:d4:f4:9f:7d:11:17:17:45:ac:cf:65:e4:ab:25:fe:0b:06: af:d4:a1:fc:58:55:bc:2f:83:ff:07:21:92:77:d9:a0:c6:2e: bc:e8:b0:68:4b:2a:cb:c2:c3:8c:b7:a4:0e:e2:c2:81:14:ce: 01:de:8e:e0:a9:aa:96:bb:26:e6:4e:a9:6a:ad:90:5e:7c:1d: 15:41:2a:43:9e:0e:d8:a4:9e:02:78:89:7c:d1:c0:10:ca:df: 56:17:b2:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsRfF7M4qTQduAg0vbTi2RjXXNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FG MTFFMEU2RTAeFw0yNjA2MDMwMjU4MzNaFw0yNjA2MDQwMzM0MzNaMDMxMTAvBgNV BAMTKEE4QjI0OTIyM0U3NEI4ODJGQTQ3QkMzOUM1REI5Mjk2OUQzNEFERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wQIjXRDMOlHoZ5bGNcJKpL8p t8X4tOA8EBQtFjHdu/idDGBy97zYdUMT0sbO6dg6pUASCjbl8lzpP1MDKgTC8KOV Wnobn65l2k51+HkQ3tvCUtEjNPOldAbPdEejycPMFQ4M5E1FTznLaXF/43IOCVXp cQt/lxjQl+07g7rNuuzp5HtXNkZLgbm6Cs8fCw5X6IYoXtjzmjMHOFD3Dq+8NrxE qrVkNcx0IgD058UfWcNYeH+6uy2AYnNNoXHeV8h06oYdoJd5CA97WhqZSO/TwXhu evDHiebvUzl3eul5tnbZu/yx4nTzTLwQ1nekeQbco5QhIj4XEnizkfmdo/7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqLJJIj50uIL6R7w5xduSlp00rdMwHwYDVR0j BBgwFoAUBFIreDd06JaaJTt5yb2LevEeDm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODliODYwNGYtMzk1YS00MmJlLWI5OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgz Nzc0RTg5NjlBMjUzQjc5QzlCRDhCN0FGMTFFMEU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDUyMkI3ODM3NzRFODk2OUEyNTNCNzlDOUJEOEI3QUYxMUUw RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMDQ1MjJCNzgzNzc0RTg5NjlBMjUzQjc5QzlCRDhC N0FGMTFFMEU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfCT7/pW0F8TDJlZRzqkz4dY/ZVIYY3yhok B/q7vGC4M3AZ6NckyiHVx9tbsH7Th2NAMjMiONTtmOsYyaA1p2oJB0pEKQPuRGdB RqO9udIPu0bxIogIx7+5xG8CW4Y6RCLd2GP0Y4Y8e28oHW3Zv99V8pSH9haEbhbA ACR/djDq5WWzGlUOYWv2ormw88OeYSa+uk1UvIcC1gzbLCHg7t0jPHbU9J99ERcX RazPZeSrJf4LBq/UofxYVbwvg/8HIZJ32aDGLrzosGhLKsvCw4y3pA7iwoEUzgHe juCpqpa7JuZOqWqtkF58HRVBKkOeDtikngJ4iXzRwBDK31YXsto= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:08 2026 by rpki-client