$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft File: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft (raw, json) Hash identifier: Rv+q5YbJbws/nipM4S/4fZVkItNaQzx18buavRX7Q2s= Subject key identifier: 35:45:CB:3D:36:E1:40:17:34:D6:DC:AF:F3:0A:23:8B:CA:7A:55:21 Authority key identifier: 53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 Certificate issuer: /CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Certificate serial: 130B63457F3D14DEEC48CC9DD51630B749A03098 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:49:07 +0000 Manifest this update: Tue 02 Jun 2026 19:44:07 +0000 Manifest next update: Wed 03 Jun 2026 23:26:07 +0000 Files and hashes: 1: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: d/lQ7Oz9/jWtBq0Ck1NBYGMJFkT573cCc0+ynKJPdok=) 2: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: 1t9yzNFOj0CAbODcXUQcoM9eYOKr+Gim4y4R0hZm1ws=) 3: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl (hash: wRMu4ympDKqG8o/JKy1T1E/i400laJEfXPhOotbEffY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:0b:63:45:7f:3d:14:de:ec:48:cc:9d:d5:16:30:b7:49:a0:30:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Validity Not Before: Jun 2 19:44:07 2026 GMT Not After : Jun 3 23:26:07 2026 GMT Subject: CN=3545CB3D36E1401734D6DCAFF30A238BCA7A5521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:68:88:42:57:d4:35:81:7a:15:c9:47:9d: b2:0f:70:77:03:6c:45:9f:2d:9e:55:dd:6f:04:9b: 41:5c:64:43:c0:c3:d6:f1:5f:ca:b1:ca:6f:65:f1: df:49:1a:71:2a:6f:c5:75:95:a2:4b:98:0e:d2:25: 74:47:b1:22:df:c6:da:76:9f:ba:52:34:4c:40:32: 87:e2:d8:1d:8b:17:bc:50:50:cb:81:01:ee:1d:fa: 3d:5c:48:0a:85:11:1c:92:b8:b2:83:11:4c:d7:3c: c6:30:61:de:60:db:4b:6a:5b:a7:06:ea:98:99:71: 4b:a5:72:6f:b9:00:93:58:2e:24:47:be:11:f8:4f: 5a:71:79:44:83:50:5a:a6:b2:82:58:57:a4:64:07: d9:07:51:3c:2c:70:0d:a6:10:10:31:d2:4d:ef:0d: 34:3b:d6:cf:22:44:59:43:ff:fc:88:16:da:bb:17: 5f:5d:b5:65:b9:21:74:07:b0:55:71:91:38:08:2a: fc:cc:7c:76:ac:4c:be:b5:b3:a5:de:e5:36:50:22: 4c:42:a9:00:0d:6f:b0:61:33:a7:11:e8:8a:39:b2: f9:27:e0:35:e9:4c:44:fc:55:87:0e:1d:25:07:f1: 74:6c:b9:93:dc:fd:44:2f:e0:78:7b:0e:37:e7:85: a6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:45:CB:3D:36:E1:40:17:34:D6:DC:AF:F3:0A:23:8B:CA:7A:55:21 X509v3 Authority Key Identifier: keyid:53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:53:9a:e6:37:64:c4:65:c5:b7:e7:d9:55:11:7c:3c:6d:08: 45:2b:4a:df:27:46:49:de:9b:6b:91:01:11:0a:54:c1:56:3f: 6f:81:7c:90:48:b6:62:bb:1d:64:2f:53:54:db:1f:09:56:b3: ae:6a:3f:0d:a5:4b:a3:47:bb:02:f8:e6:ed:08:45:d9:0f:62: cc:20:a1:e7:c4:77:3b:85:aa:9b:a0:38:19:ba:57:2c:bf:b3: 97:b6:14:e1:a6:ba:cf:b8:33:a8:14:c1:fb:9f:bc:a2:bd:f9: d9:63:72:b2:d8:e3:84:13:40:c1:64:29:83:c1:f6:ac:dd:50: 68:d7:f2:0c:a0:ba:9b:ce:d9:11:b3:a8:c2:f6:a1:84:3d:e1: 63:f0:5b:dc:db:37:88:5d:b6:f1:ac:12:4d:da:96:ba:55:46: 1c:bb:2d:98:f2:76:9a:25:bf:f0:36:b1:6b:bc:00:94:af:94: 32:fc:0e:35:ab:46:ca:58:b6:cd:f2:81:dc:72:1e:5e:d5:ab: 7b:5d:8d:b4:0b:b9:ed:7e:22:34:be:9e:91:81:9b:0c:ed:3b: e3:6b:68:87:5d:08:46:14:1a:0e:90:2c:2a:d9:30:1d:a1:72: 7c:a2:9e:83:64:a8:81:07:47:e2:e7:1e:33:ba:7c:07:0a:69: d5:ee:fa:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwtjRX89FN7sSMyd1RYwt0mgMJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENCQkE3 QzAzQzg0OTAeFw0yNjA2MDIxOTQ0MDdaFw0yNjA2MDMyMzI2MDdaMDMxMTAvBgNV BAMTKDM1NDVDQjNEMzZFMTQwMTczNEQ2RENBRkYzMEEyMzhCQ0E3QTU1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdN2iIQlfUNYF6FclHnbIPcHcD bEWfLZ5V3W8Em0FcZEPAw9bxX8qxym9l8d9JGnEqb8V1laJLmA7SJXRHsSLfxtp2 n7pSNExAMofi2B2LF7xQUMuBAe4d+j1cSAqFERySuLKDEUzXPMYwYd5g20tqW6cG 6piZcUulcm+5AJNYLiRHvhH4T1pxeUSDUFqmsoJYV6RkB9kHUTwscA2mEBAx0k3v DTQ71s8iRFlD//yIFtq7F19dtWW5IXQHsFVxkTgIKvzMfHasTL61s6Xe5TZQIkxC qQANb7BhM6cR6Io5svkn4DXpTET8VYcOHSUH8XRsuZPc/UQv4Hh7Djfnhaa9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNUXLPTbhQBc01tyv8woji8p6VSEwHwYDVR0j BBgwFoAUUwDQ7seiGq+tYbbkCCjLunwDyEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFiM2MwM2QtMmUyZS00ODk3LTg2OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVD N0EyMUFBRkFENjFCNkU0MDgyOENCQkE3QzAzQzg0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzAwRDBFRUM3QTIxQUFGQUQ2MUI2RTQwODI4Q0JCQTdDMDND ODQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFiM2MwM2QtMmUyZS00ODk3LTg2 OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENC QkE3QzAzQzg0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZTmuY3ZMRlxbfn2VURfDxtCEUrSt8nRkne m2uRAREKVMFWP2+BfJBItmK7HWQvU1TbHwlWs65qPw2lS6NHuwL45u0IRdkPYswg oefEdzuFqpugOBm6Vyy/s5e2FOGmus+4M6gUwfufvKK9+dljcrLY44QTQMFkKYPB 9qzdUGjX8gygupvO2RGzqML2oYQ94WPwW9zbN4hdtvGsEk3alrpVRhy7LZjydpol v/A2sWu8AJSvlDL8DjWrRspYts3ygdxyHl7Vq3tdjbQLue1+IjS+npGBmwztO+Nr aIddCEYUGg6QLCrZMB2hcnyinoNkqIEHR+LnHjO6fAcKadXu+pQ= -----END CERTIFICATE-----Generated at Wed Jun 3 04:11:55 2026 by rpki-client