$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft File: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft (raw, json) Hash identifier: wfAvw0kwREfjoT0qCM9zYPZNW9SxAgI+6Gh22U30wwU= Subject key identifier: E5:33:DD:DE:0A:68:A1:98:99:28:30:37:BD:C7:94:7C:28:C8:34:63 Authority key identifier: 63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 Certificate issuer: /CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Certificate serial: 4EE611B5F262FB6CB47CF0B6BCFE8E9325E61DAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:38:52 +0000 Manifest this update: Tue 02 Jun 2026 19:33:52 +0000 Manifest next update: Wed 03 Jun 2026 20:47:52 +0000 Files and hashes: 1: 634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl (hash: zB6FMHUWSVLLQNYhG0dKc239ZTnEQJjYghKFQqhXm7E=) 2: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: K/r8+XOLbe3N3PaK9Jky/67CaUJEmno5lG+o29nHH2c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 20:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e6:11:b5:f2:62:fb:6c:b4:7c:f0:b6:bc:fe:8e:93:25:e6:1d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38 Validity Not Before: Jun 2 19:33:52 2026 GMT Not After : Jun 3 20:47:52 2026 GMT Subject: CN=E533DDDE0A68A19899283037BDC7947C28C83463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:33:a4:3b:86:7d:23:dd:83:35:15:a8:99:1e: 37:86:ad:80:ef:64:17:eb:9b:32:55:ee:18:e5:ac: ed:f1:a7:5b:16:c4:f5:e2:5c:5d:a4:59:62:49:cf: 9a:5b:ff:53:16:01:f9:5d:b7:d6:ec:fb:c6:58:b2: 76:7a:54:67:70:ce:0d:12:15:c7:3e:7d:7d:24:9d: 07:27:23:38:02:92:33:27:e6:6c:74:03:b3:29:49: 15:3a:69:1a:98:4c:7b:95:bf:ad:0d:d6:be:13:97: 4c:d9:08:aa:b5:12:8c:cf:37:9d:74:42:0b:90:63: 44:eb:1e:c8:e7:fe:35:68:c2:fb:d0:c3:50:b5:5c: 6a:68:68:a7:bf:a2:c9:a4:4b:48:7b:6d:4f:95:4c: 89:00:7c:30:84:32:b2:8d:c7:cd:f0:14:77:5d:82: 8a:2d:31:09:50:f8:61:67:ee:c2:6b:bc:a7:59:33: c3:ca:f0:52:8d:d6:43:7d:da:22:e8:cc:91:d6:fb: 9a:cd:71:f2:d8:f8:10:5b:cd:e0:68:1b:83:af:a2: 7b:8e:7a:b9:4d:a0:d5:56:e7:3c:f8:a0:51:3b:71: ec:82:21:c8:5f:5f:a2:27:a7:a4:23:57:b4:25:1a: 52:ea:51:96:8e:51:be:f5:e5:96:15:a1:48:0d:5f: 60:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:33:DD:DE:0A:68:A1:98:99:28:30:37:BD:C7:94:7C:28:C8:34:63 X509v3 Authority Key Identifier: keyid:63:4D:9D:7B:F8:EF:AA:5C:06:E1:B2:5D:1F:4A:73:93:EA:E2:9C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/634D9D7BF8EFAA5C06E1B25D1F4A7393EAE29C38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:51:42:4a:4e:0f:eb:cc:d3:06:6c:9c:5d:0d:6d:f8:ff:8e: 82:20:be:41:cb:65:56:f6:d8:c1:66:2f:0d:c4:73:84:66:20: 47:93:2d:2c:1f:29:11:93:be:cc:67:5f:2d:00:4c:9b:bb:89: 3d:16:68:e5:b8:b3:bd:ce:a8:a7:ce:db:3e:44:bb:ba:90:d0: a4:c8:05:d2:7c:3c:f2:0c:e0:22:bb:2b:95:b4:c4:c3:36:42: 7e:3e:e3:f9:53:0a:47:76:b1:21:a5:fc:f5:12:53:81:d6:f3: d0:e4:63:d9:72:ee:3c:88:e1:29:39:98:34:dc:97:63:8f:f1: b9:73:63:86:00:ce:ee:35:b3:da:21:c8:f8:c0:02:1f:9c:03: 9f:ee:78:4e:e5:90:91:3e:28:54:98:c5:cb:52:fa:d7:53:5f: 31:28:37:36:79:7b:78:57:d5:6f:da:46:d3:82:4b:07:2a:ca: b3:3a:a5:0c:1e:67:48:c0:6c:2b:eb:a0:ab:1b:66:7e:3e:1a: d6:1b:c9:81:e5:b4:0b:e8:f0:15:95:80:ed:79:ac:8b:bc:d1: d4:f9:3c:5f:8c:9c:22:67:c8:00:d7:45:9d:32:88:fd:c9:2e: c6:b7:9a:66:7e:ed:9e:39:ad:90:97:cb:2a:c0:18:3c:40:8c: 91:e2:56:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTuYRtfJi+2y0fPC2vP6OkyXmHaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTczOTNF QUUyOUMzODAeFw0yNjA2MDIxOTMzNTJaFw0yNjA2MDMyMDQ3NTJaMDMxMTAvBgNV BAMTKEU1MzNERERFMEE2OEExOTg5OTI4MzAzN0JEQzc5NDdDMjhDODM0NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbM6Q7hn0j3YM1FaiZHjeGrYDv ZBfrmzJV7hjlrO3xp1sWxPXiXF2kWWJJz5pb/1MWAfldt9bs+8ZYsnZ6VGdwzg0S Fcc+fX0knQcnIzgCkjMn5mx0A7MpSRU6aRqYTHuVv60N1r4Tl0zZCKq1EozPN510 QguQY0TrHsjn/jVowvvQw1C1XGpoaKe/osmkS0h7bU+VTIkAfDCEMrKNx83wFHdd gootMQlQ+GFn7sJrvKdZM8PK8FKN1kN92iLozJHW+5rNcfLY+BBbzeBoG4OvonuO erlNoNVW5zz4oFE7ceyCIchfX6Inp6QjV7QlGlLqUZaOUb715ZYVoUgNX2AJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5TPd3gpooZiZKDA3vceUfCjINGMwHwYDVR0j BBgwFoAUY02de/jvqlwG4bJdH0pzk+rinDgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY2YmYzN2MtZDhhZC00ZTAzLWEwNmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JG OEVGQUE1QzA2RTFCMjVEMUY0QTczOTNFQUUyOUMzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzREOUQ3QkY4RUZBQTVDMDZFMUIyNUQxRjRBNzM5M0VBRTI5 QzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvNjM0RDlEN0JGOEVGQUE1QzA2RTFCMjVEMUY0QTcz OTNFQUUyOUMzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNRQkpOD+vM0wZsnF0Nbfj/joIgvkHLZVb2 2MFmLw3Ec4RmIEeTLSwfKRGTvsxnXy0ATJu7iT0WaOW4s73OqKfO2z5Eu7qQ0KTI BdJ8PPIM4CK7K5W0xMM2Qn4+4/lTCkd2sSGl/PUSU4HW89DkY9ly7jyI4Sk5mDTc l2OP8blzY4YAzu41s9ohyPjAAh+cA5/ueE7lkJE+KFSYxctS+tdTXzEoNzZ5e3hX 1W/aRtOCSwcqyrM6pQweZ0jAbCvroKsbZn4+GtYbyYHltAvo8BWVgO15rIu80dT5 PF+MnCJnyADXRZ0yiP3JLsa3mmZ+7Z45rZCXyyrAGDxAjJHiVoI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:00 2026 by rpki-client