$ rpki-client -vvf rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft File: 96348B9579D234769BDF15F375368D3C0BDE1860.mft (raw, json) Hash identifier: ztq6ft25qCh/ShWiBpSf8mf8bGuUYEMcvDdAts13VDk= Subject key identifier: 21:D2:16:55:1D:5F:D6:8D:56:C0:B6:1C:83:FE:DC:79:9B:33:69:86 Authority key identifier: 96:34:8B:95:79:D2:34:76:9B:DF:15:F3:75:36:8D:3C:0B:DE:18:60 Certificate issuer: /CN=96348B9579D234769BDF15F375368D3C0BDE1860 Certificate serial: 1268D9D78A40C838E476CF8FCB7EBF92DCF50026 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:19:01 +0000 Manifest this update: Tue 02 Jun 2026 23:14:01 +0000 Manifest next update: Thu 04 Jun 2026 01:30:01 +0000 Files and hashes: 1: 96348B9579D234769BDF15F375368D3C0BDE1860.crl (hash: sQ3JNRQL/QLcfMNcZUXQ2pfbCX1hEciY4bF5ZUQjwgU=) 2: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: NRcKgzAD1aXFV9xSYN/NAX4+lhq8SGmZ0ijJnrN5qYY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.crl rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 01:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:68:d9:d7:8a:40:c8:38:e4:76:cf:8f:cb:7e:bf:92:dc:f5:00:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96348B9579D234769BDF15F375368D3C0BDE1860 Validity Not Before: Jun 2 23:14:01 2026 GMT Not After : Jun 4 01:30:01 2026 GMT Subject: CN=21D216551D5FD68D56C0B61C83FEDC799B336986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:91:69:82:97:fe:72:53:cc:63:8d:bd:31: f0:54:35:ec:dc:8c:bd:3f:71:af:3d:4c:04:74:7f: 75:eb:46:ff:81:0f:b0:ec:9c:2e:9a:f0:a9:92:64: d2:2a:8d:a5:99:91:13:cd:4e:60:c0:fc:e7:39:53: 19:0a:8f:43:49:6d:2f:e3:86:ad:2a:47:db:97:5e: a0:5e:55:df:35:82:11:94:1a:40:43:11:87:24:46: a6:73:f9:b8:1a:21:64:54:4e:1f:c5:ba:77:fc:fb: 4b:02:eb:53:0c:f4:b2:bc:ab:63:6f:0a:3d:4b:89: ec:83:d7:d0:c8:86:d6:16:f9:d2:c3:66:75:67:0d: 93:d1:4a:74:05:6e:61:22:3c:bb:a0:eb:92:ef:67: 53:d1:7a:7e:97:64:51:a4:e5:df:6a:b7:7d:4d:06: 59:47:cf:90:35:c0:88:81:f4:83:0a:79:03:24:b7: e4:9e:0e:34:37:b0:0e:b3:f3:6f:1c:91:73:5c:24: 7c:fd:87:28:92:da:ac:a2:c0:92:ef:7b:3d:67:50: 0b:7b:98:fa:4b:48:ce:bb:87:5b:33:62:20:d4:ff: 6a:d4:65:a0:0a:98:70:5e:a7:99:84:bb:a4:fa:48: 09:77:99:c3:a3:54:41:b9:59:a2:cb:54:f1:0a:fe: ef:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D2:16:55:1D:5F:D6:8D:56:C0:B6:1C:83:FE:DC:79:9B:33:69:86 X509v3 Authority Key Identifier: keyid:96:34:8B:95:79:D2:34:76:9B:DF:15:F3:75:36:8D:3C:0B:DE:18:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/96348B9579D234769BDF15F375368D3C0BDE1860.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/96348B9579D234769BDF15F375368D3C0BDE1860.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:13:15:5c:57:a0:3d:38:8d:ae:4a:e0:2b:ed:de:f5:47:a7: 22:b9:91:ce:a7:f4:a2:a6:ac:70:39:f1:86:ae:67:44:2e:e6: d2:1e:a2:af:55:22:bb:d1:72:f2:40:14:d2:fe:30:e3:6e:99: ab:9c:e5:b5:fa:b9:a5:cf:a0:d7:7b:c3:31:4d:33:10:37:07: 2d:56:b3:cd:98:6b:16:e7:e8:1d:ed:d9:69:8e:3d:5e:3f:5e: de:52:40:39:43:02:e6:6e:40:26:c7:67:6e:5e:87:a4:33:54: 8b:c8:aa:29:47:62:46:79:bd:77:93:e8:1f:bd:b0:6b:f0:84: 41:a4:0e:1c:41:0e:0f:13:66:24:d0:26:7b:c4:38:e2:3e:41: 21:96:dc:4f:8b:52:99:62:6d:4f:19:27:d1:a8:37:cf:98:35: 76:2b:9b:ca:b6:65:ce:e2:44:77:ca:85:63:e4:7a:df:8d:b7: 39:ff:57:24:c1:39:34:88:5a:11:37:f7:47:77:bc:8b:10:5f: 6f:0c:76:1d:49:33:ea:f0:7a:7f:fc:00:e4:f2:c0:a8:18:5a: 90:f2:05:3d:35:f3:8c:c8:b9:97:42:ea:cc:6c:46:b7:58:92: dc:04:28:48:51:d5:66:e9:c5:66:ef:95:f6:5f:e9:df:74:c9: f9:8f:33:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEmjZ14pAyDjkds+Py36/ktz1ACYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYzNDhCOTU3OUQyMzQ3NjlCREYxNUYzNzUzNjhEM0Mw QkRFMTg2MDAeFw0yNjA2MDIyMzE0MDFaFw0yNjA2MDQwMTMwMDFaMDMxMTAvBgNV BAMTKDIxRDIxNjU1MUQ1RkQ2OEQ1NkMwQjYxQzgzRkVEQzc5OUIzMzY5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNbJFpgpf+clPMY429MfBUNezc jL0/ca89TAR0f3XrRv+BD7DsnC6a8KmSZNIqjaWZkRPNTmDA/Oc5UxkKj0NJbS/j hq0qR9uXXqBeVd81ghGUGkBDEYckRqZz+bgaIWRUTh/Funf8+0sC61MM9LK8q2Nv Cj1LieyD19DIhtYW+dLDZnVnDZPRSnQFbmEiPLug65LvZ1PRen6XZFGk5d9qt31N BllHz5A1wIiB9IMKeQMkt+SeDjQ3sA6z828ckXNcJHz9hyiS2qyiwJLvez1nUAt7 mPpLSM67h1szYiDU/2rUZaAKmHBep5mEu6T6SAl3mcOjVEG5WaLLVPEK/u8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIdIWVR1f1o1WwLYcg/7ceZszaYYwHwYDVR0j BBgwFoAUljSLlXnSNHab3xXzdTaNPAveGGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRlZTJiZDMtMGY2Ni00ZDQzLWE5ZTctOTY1ZDMzZjEyODUyLzAvOTYzNDhCOTU3 OUQyMzQ3NjlCREYxNUYzNzUzNjhEM0MwQkRFMTg2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjM0OEI5NTc5RDIzNDc2OUJERjE1RjM3NTM2OEQzQzBCREUx ODYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRlZTJiZDMtMGY2Ni00ZDQzLWE5 ZTctOTY1ZDMzZjEyODUyLzAvOTYzNDhCOTU3OUQyMzQ3NjlCREYxNUYzNzUzNjhE M0MwQkRFMTg2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQTFVxXoD04ja5K4Cvt3vVHpyK5kc6n9KKm rHA58YauZ0Qu5tIeoq9VIrvRcvJAFNL+MONumauc5bX6uaXPoNd7wzFNMxA3By1W s82Yaxbn6B3t2WmOPV4/Xt5SQDlDAuZuQCbHZ25eh6QzVIvIqilHYkZ5vXeT6B+9 sGvwhEGkDhxBDg8TZiTQJnvEOOI+QSGW3E+LUplibU8ZJ9GoN8+YNXYrm8q2Zc7i RHfKhWPket+Ntzn/VyTBOTSIWhE390d3vIsQX28Mdh1JM+rwen/8AOTywKgYWpDy BT0184zIuZdC6sxsRrdYktwEKEhR1WbpxWbvlfZf6d90yfmPM0g= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:07 2026 by rpki-client