$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft File: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft (raw, json) Hash identifier: 8wcEFemgEJp36S1UnM2dM32t2oJ1ubQKOiEZ44wBy48= Subject key identifier: CA:99:1D:40:6F:F9:04:CE:6B:54:33:73:73:34:84:E1:CC:FA:2C:DE Authority key identifier: 96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 Certificate issuer: /CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Certificate serial: 62611B9601B3956BCC1FF20BD382544E4542A1D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 15:33:56 +0000 Manifest this update: Tue 02 Jun 2026 15:28:56 +0000 Manifest next update: Wed 03 Jun 2026 18:18:56 +0000 Files and hashes: 1: 964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl (hash: VHpSC9axBLQ2n46muTi3hkAgkYWtBmteM8xOeAa7TQc=) 2: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: FykeN+ZnqOJgkPJefPV3nDEsoGKfA2/qLMJi68jlv2o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:61:1b:96:01:b3:95:6b:cc:1f:f2:0b:d3:82:54:4e:45:42:a1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964CECE4DB02A6D978CE7F22B0B336E78E7EFE21 Validity Not Before: Jun 2 15:28:56 2026 GMT Not After : Jun 3 18:18:56 2026 GMT Subject: CN=CA991D406FF904CE6B543373733484E1CCFA2CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f6:ea:60:97:69:1d:d2:6b:d6:47:49:91:13: db:2c:e1:ba:b0:81:07:af:24:a1:e7:03:82:90:33: bc:ca:34:07:81:79:7c:b7:1b:57:24:1c:93:c3:64: 81:1c:35:b3:fa:43:8d:84:c8:87:27:82:6d:06:d9: 6d:f0:04:6f:bf:62:d5:73:30:98:95:8d:12:c4:56: 88:c9:52:53:15:8c:66:68:d4:da:78:61:8c:39:09: ba:12:37:8f:59:be:b1:5e:00:ea:d2:e3:cc:29:24: 9e:dc:21:71:7b:db:39:83:c2:2b:48:23:fd:04:eb: 93:f5:36:dc:c0:5e:23:e7:d1:60:80:74:31:12:73: 1e:47:51:8d:50:38:e4:b8:64:ed:5c:d5:33:23:15: 68:cb:20:88:68:58:a7:04:7c:21:03:1e:c6:78:f9: 67:0e:d3:dd:54:f0:8b:4e:1e:b3:7c:f6:a8:49:d7: e8:5e:45:fd:f9:3f:de:9b:37:2d:7c:75:d5:06:37: f3:b1:39:6e:c2:1e:8e:92:83:0d:1e:cc:93:18:b8: 39:62:e6:3b:94:43:6f:ed:81:bf:33:8e:45:88:4a: cf:92:db:0a:f9:28:e3:c4:d8:c9:9c:cf:57:37:15: 76:4f:37:9a:ae:46:cf:16:5b:46:33:07:72:e8:ea: c6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:99:1D:40:6F:F9:04:CE:6B:54:33:73:73:34:84:E1:CC:FA:2C:DE X509v3 Authority Key Identifier: keyid:96:4C:EC:E4:DB:02:A6:D9:78:CE:7F:22:B0:B3:36:E7:8E:7E:FE:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/964CECE4DB02A6D978CE7F22B0B336E78E7EFE21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:61:49:83:8e:b2:15:a1:0e:52:ba:86:17:df:02:8c:8d:43: ed:3c:c1:84:8e:71:0f:26:bf:75:86:0c:dd:c3:3d:fa:17:90: ff:59:9e:a6:92:41:0c:5e:3c:ca:a1:98:9a:6e:15:85:e4:15: a9:d8:ce:7f:06:b2:a2:2d:88:4b:bc:fc:93:af:24:cf:86:de: 65:67:7b:0c:ab:75:93:30:f7:9a:bb:11:97:28:54:ff:24:3d: be:20:4d:82:6c:1c:18:3d:c2:00:4e:47:36:d3:fe:68:af:38: f7:45:3f:63:dc:4c:eb:bc:34:47:30:35:86:47:4c:37:5f:9b: c5:65:25:88:54:1d:7e:1a:6d:18:61:02:ae:22:64:33:33:66: 61:6d:0e:88:2f:f4:9e:17:78:c1:70:cd:13:6d:90:52:6b:b4: df:19:dd:69:7d:2e:fd:3a:d4:92:b6:f5:ee:c0:46:eb:33:3f: d7:9e:00:70:43:3c:7d:8d:70:b1:20:5c:9e:d7:ac:51:ff:60: 53:47:3e:35:02:a8:0b:0b:2c:ed:d7:e2:da:ef:cc:91:57:d6: a8:bb:06:28:07:40:35:93:f5:db:fa:f5:aa:66:79:ee:74:62: 2d:22:29:d3:e3:4a:47:d9:ba:1e:65:77:34:40:b4:0d:75:52: 77:eb:17:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmEblgGzlWvMH/IL04JUTkVCodYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4 RTdFRkUyMTAeFw0yNjA2MDIxNTI4NTZaFw0yNjA2MDMxODE4NTZaMDMxMTAvBgNV BAMTKENBOTkxRDQwNkZGOTA0Q0U2QjU0MzM3MzczMzQ4NEUxQ0NGQTJDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg9upgl2kd0mvWR0mRE9ss4bqw gQevJKHnA4KQM7zKNAeBeXy3G1ckHJPDZIEcNbP6Q42EyIcngm0G2W3wBG+/YtVz MJiVjRLEVojJUlMVjGZo1Np4YYw5CboSN49ZvrFeAOrS48wpJJ7cIXF72zmDwitI I/0E65P1NtzAXiPn0WCAdDEScx5HUY1QOOS4ZO1c1TMjFWjLIIhoWKcEfCEDHsZ4 +WcO091U8ItOHrN89qhJ1+heRf35P96bNy18ddUGN/OxOW7CHo6Sgw0ezJMYuDli 5juUQ2/tgb8zjkWISs+S2wr5KOPE2Mmcz1c3FXZPN5quRs8WW0YzB3Lo6sYxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUypkdQG/5BM5rVDNzczSE4cz6LN4wHwYDVR0j BBgwFoAUlkzs5NsCptl4zn8isLM2545+/iEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGYzMTUxZGItMTMzMC00ZTcwLTljYzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTRE QjAyQTZEOTc4Q0U3RjIyQjBCMzM2RTc4RTdFRkUyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjRDRUNFNERCMDJBNkQ5NzhDRTdGMjJCMEIzMzZFNzhFN0VG RTIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvOTY0Q0VDRTREQjAyQTZEOTc4Q0U3RjIyQjBCMzM2 RTc4RTdFRkUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRhSYOOshWhDlK6hhffAoyNQ+08wYSOcQ8m v3WGDN3DPfoXkP9ZnqaSQQxePMqhmJpuFYXkFanYzn8GsqItiEu8/JOvJM+G3mVn ewyrdZMw95q7EZcoVP8kPb4gTYJsHBg9wgBORzbT/mivOPdFP2PcTOu8NEcwNYZH TDdfm8VlJYhUHX4abRhhAq4iZDMzZmFtDogv9J4XeMFwzRNtkFJrtN8Z3Wl9Lv06 1JK29e7ARuszP9eeAHBDPH2NcLEgXJ7XrFH/YFNHPjUCqAsLLO3X4trvzJFX1qi7 BigHQDWT9dv69apmee50Yi0iKdPjSkfZuh5ldzRAtA11UnfrF+8= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:26 2026 by rpki-client