$ rpki-client -vvf rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft File: D51AA8B3D72CDB71C90345B767919665E60A217F.mft (raw, json) Hash identifier: oc4IEhfpaA9cWk1ZSIB8h2FFV9qeA6Vy1t1MH2RHgAk= Subject key identifier: 3D:3A:5E:F3:1E:6E:2F:E1:A4:F6:D4:1D:BF:5A:BE:EA:AC:6A:EA:15 Authority key identifier: D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F Certificate issuer: /CN=D51AA8B3D72CDB71C90345B767919665E60A217F Certificate serial: 556732FD246AB6DB2AD9DF669C481E5850880341 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 10:28:01 +0000 Manifest this update: Tue 02 Jun 2026 10:23:01 +0000 Manifest next update: Wed 03 Jun 2026 14:04:01 +0000 Files and hashes: 1: D51AA8B3D72CDB71C90345B767919665E60A217F.crl (hash: JHXgTYjb5XfKv1Csx6VS/vNMlRRvwUUFoLXp88BM7x8=) 2: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: qWXJBwwFjRlNPlzGu34yKlzyWtSJkvJR6tTW+DXklsI=) 3: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: rfjdhFUeqRzlpu/a6IIMJJdIbxMUcj3gavb0NZINzaQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 14:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:67:32:fd:24:6a:b6:db:2a:d9:df:66:9c:48:1e:58:50:88:03:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51AA8B3D72CDB71C90345B767919665E60A217F Validity Not Before: Jun 2 10:23:01 2026 GMT Not After : Jun 3 14:04:01 2026 GMT Subject: CN=3D3A5EF31E6E2FE1A4F6D41DBF5ABEEAAC6AEA15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:5d:c9:ef:de:96:b6:1a:6f:b1:d5:13:39: d5:66:4a:94:69:90:cb:f3:53:13:42:33:57:b7:9b: e0:c4:47:1e:1a:d1:a9:7d:b7:77:6a:37:cc:39:7f: b5:da:df:9c:99:8d:79:66:d4:22:99:45:7f:4d:ab: e2:df:df:0e:a8:b8:8c:20:01:c6:bb:c5:68:19:df: b9:12:25:d4:ec:da:e6:8f:e0:9a:ef:f3:15:5c:d9: e5:64:27:3b:7e:39:d6:90:e7:f2:f9:53:92:41:89: da:cc:04:f4:f9:63:f1:3f:d1:91:31:c4:59:bc:64: b5:b7:79:53:f7:a2:ba:1e:c8:aa:03:8b:ec:67:a7: 98:dc:6c:f8:fd:34:10:4b:98:4d:eb:e6:89:89:a1: 4e:6f:58:3a:15:8f:4b:55:a4:e0:9c:51:0a:91:96: 63:da:5d:1e:1a:37:4e:2b:be:5a:e0:99:e5:a2:c2: 07:d8:00:02:ec:9f:39:e4:a9:39:13:e9:11:72:fc: e9:96:43:0d:4b:2d:a3:08:4b:32:a2:e9:ae:e3:46: 07:d7:45:35:89:18:07:a7:b8:07:9d:e2:ed:b3:19: 3e:f2:eb:f4:ca:19:22:92:fc:08:40:e6:3a:5d:cd: ac:87:39:db:83:a1:4d:b9:4f:fa:d0:f2:23:c1:76: f6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3A:5E:F3:1E:6E:2F:E1:A4:F6:D4:1D:BF:5A:BE:EA:AC:6A:EA:15 X509v3 Authority Key Identifier: keyid:D5:1A:A8:B3:D7:2C:DB:71:C9:03:45:B7:67:91:96:65:E6:0A:21:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D51AA8B3D72CDB71C90345B767919665E60A217F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/D51AA8B3D72CDB71C90345B767919665E60A217F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9e:dd:d4:79:44:13:ae:50:38:4c:ef:f2:48:b8:c8:77:90: e8:ea:ab:e8:f7:69:a1:c4:e6:03:e6:b7:08:e7:21:e4:0b:ee: 95:ad:be:01:fb:0b:60:41:2f:42:93:9a:3a:49:a4:e2:8f:a8: 67:fd:a7:f9:f1:7f:22:b0:69:25:6d:b6:8c:c6:5b:82:bd:6c: d6:46:e4:a6:9e:7f:b8:6b:25:d7:0f:0e:4c:71:e0:21:be:14: 86:03:94:57:1c:3e:68:b0:3e:48:4d:e0:91:a6:08:e8:83:ae: f8:26:6e:44:c8:69:35:d9:23:21:e3:fa:93:db:19:3a:bb:cc: 47:d5:81:78:1c:fa:ac:e4:eb:b6:56:e6:56:dd:7e:df:b5:67: ab:24:ae:e7:11:14:cd:bf:12:16:07:fa:43:ea:11:dd:62:62: 16:24:5d:5c:56:33:d2:44:a0:71:d0:5b:0e:47:05:4b:06:f6: d9:ed:6b:cd:af:30:3f:e4:1d:7b:89:b3:9e:21:b9:22:23:51: ac:18:1d:17:9c:7b:e8:77:8b:cd:44:2e:ff:ee:ad:56:99:ab: af:27:16:2b:fc:dc:37:2d:3c:e0:57:2e:b7:8b:81:30:00:15: 83:30:e3:9a:98:fa:a3:9e:8c:6c:57:0a:23:8b:ce:74:6b:e9: d1:d4:b8:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWcy/SRqttsq2d9mnEgeWFCIA0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQUE4QjNENzJDREI3MUM5MDM0NUI3Njc5MTk2NjVF NjBBMjE3RjAeFw0yNjA2MDIxMDIzMDFaFw0yNjA2MDMxNDA0MDFaMDMxMTAvBgNV BAMTKDNEM0E1RUYzMUU2RTJGRTFBNEY2RDQxREJGNUFCRUVBQUM2QUVBMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5513J796WthpvsdUTOdVmSpRp kMvzUxNCM1e3m+DERx4a0al9t3dqN8w5f7Xa35yZjXlm1CKZRX9Nq+Lf3w6ouIwg Aca7xWgZ37kSJdTs2uaP4Jrv8xVc2eVkJzt+OdaQ5/L5U5JBidrMBPT5Y/E/0ZEx xFm8ZLW3eVP3oroeyKoDi+xnp5jcbPj9NBBLmE3r5omJoU5vWDoVj0tVpOCcUQqR lmPaXR4aN04rvlrgmeWiwgfYAALsnznkqTkT6RFy/OmWQw1LLaMISzKi6a7jRgfX RTWJGAenuAed4u2zGT7y6/TKGSKS/AhA5jpdzayHOduDoU25T/rQ8iPBdvbbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPTpe8x5uL+Gk9tQdv1q+6qxq6hUwHwYDVR0j BBgwFoAU1Rqos9cs23HJA0W3Z5GWZeYKIX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NTJiYzYtOGJiNi00ZjI2LTg4YjEtMzgwZGFjMThlMjY4LzAvRDUxQUE4QjNE NzJDREI3MUM5MDM0NUI3Njc5MTk2NjVFNjBBMjE3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTFBQThCM0Q3MkNEQjcxQzkwMzQ1Qjc2NzkxOTY2NUU2MEEy MTdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvRDUxQUE4QjNENzJDREI3MUM5MDM0NUI3Njc5MTk2 NjVFNjBBMjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2e3dR5RBOuUDhM7/JIuMh3kOjqq+j3aaHE 5gPmtwjnIeQL7pWtvgH7C2BBL0KTmjpJpOKPqGf9p/nxfyKwaSVttozGW4K9bNZG 5Kaef7hrJdcPDkxx4CG+FIYDlFccPmiwPkhN4JGmCOiDrvgmbkTIaTXZIyHj+pPb GTq7zEfVgXgc+qzk67ZW5lbdft+1Z6skrucRFM2/EhYH+kPqEd1iYhYkXVxWM9JE oHHQWw5HBUsG9tnta82vMD/kHXuJs54huSIjUawYHRece+h3i81ELv/urVaZq68n Fiv83DctPOBXLreLgTAAFYMw45qY+qOejGxXCiOLznRr6dHUuNE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:16:55 2026 by rpki-client