$ rpki-client -vvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft File: D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft (raw, json) Hash identifier: prUhN3/h7urUANoGR3fnijdXZ0lu1ZXaHWd1sohlq4A= Subject key identifier: 5D:6E:F3:2C:B6:B1:85:2A:60:9A:2D:36:72:88:BC:E6:4B:DD:5A:89 Authority key identifier: D4:FA:ED:0A:B5:E9:0A:36:B5:DB:DC:BC:E8:6B:88:EA:D2:66:A9:15 Certificate issuer: /CN=D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915 Certificate serial: 27160FD13A9AD86C0228168C5BCE815C6D604C51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:22:58 +0000 Manifest this update: Tue 02 Jun 2026 10:17:58 +0000 Manifest next update: Wed 03 Jun 2026 10:48:58 +0000 Files and hashes: 1: D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl (hash: Ai2xUcPgmT2SnMUgRwqZURAo/ST7ItFHCB4tElizAwU=) 2: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: 9hurPke9TvFgQ13BY5gZD2uH3uoeH6rZWMcJHoLiSRc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:16:0f:d1:3a:9a:d8:6c:02:28:16:8c:5b:ce:81:5c:6d:60:4c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915 Validity Not Before: Jun 2 10:17:58 2026 GMT Not After : Jun 3 10:48:58 2026 GMT Subject: CN=5D6EF32CB6B1852A609A2D367288BCE64BDD5A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:e9:71:52:99:b7:50:80:8e:29:22:86:14: 83:99:ff:f8:10:1c:ae:6e:a2:d1:de:a1:85:ce:2f: 59:08:21:55:97:50:63:8e:e8:c1:84:59:2b:e9:6b: b0:37:28:84:6d:1c:29:29:f9:fe:5e:73:d2:f4:a5: ba:3e:64:3d:e9:01:52:38:6c:33:32:49:bf:b7:e7: 5d:7b:e3:3d:a1:f7:88:82:b5:b0:a2:7f:7d:30:48: 41:0f:74:73:be:88:94:4c:83:04:07:ad:6f:7c:23: 1b:7a:35:63:63:bf:f8:cc:72:75:61:27:97:79:87: b9:79:21:59:12:c1:56:8b:34:4c:59:f6:16:15:f0: 1f:4d:da:94:d2:1c:0b:56:ba:33:bb:90:ab:a2:9d: 8d:23:7b:4c:8a:31:e8:e5:69:2d:cb:93:e1:4e:8e: 06:61:f3:30:7b:ef:db:0e:6a:d6:93:6b:f5:2a:39: b9:73:7d:f9:d0:56:f4:07:a1:ee:30:b4:51:7e:c8: 65:78:e8:72:b6:ec:84:64:6b:f2:a2:d1:cb:d1:bb: 6a:e4:26:78:14:39:a7:8c:22:96:1b:dd:00:75:65: ce:21:d7:a4:91:49:74:70:a6:ba:83:64:e8:51:d4: 43:c8:cf:24:c4:34:bb:49:c6:7e:be:92:02:fa:c8: f3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6E:F3:2C:B6:B1:85:2A:60:9A:2D:36:72:88:BC:E6:4B:DD:5A:89 X509v3 Authority Key Identifier: keyid:D4:FA:ED:0A:B5:E9:0A:36:B5:DB:DC:BC:E8:6B:88:EA:D2:66:A9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:01:81:74:d8:43:8a:8e:2f:75:82:42:52:b9:1c:fc:53:40: 16:f8:52:65:48:15:eb:02:70:4c:4b:93:31:9c:0e:20:da:c9: 45:2d:06:53:49:bf:19:41:be:0c:31:39:b6:d2:84:df:af:1e: c6:b6:b7:35:35:22:e9:93:81:05:8b:48:2c:3d:d5:65:48:17: 26:b0:74:78:cb:20:34:1b:53:ff:c1:9d:d7:f2:98:80:d0:4c: 77:e0:1c:24:31:ba:5d:88:eb:92:0f:50:3a:69:04:55:b9:e9: 55:45:e1:c5:04:cb:77:f2:f3:6f:10:a5:15:2f:18:10:5f:e5: 72:b7:1a:06:4c:3d:47:0c:4a:bd:ed:1b:cc:57:4b:50:96:cc: da:ce:92:a6:0b:d5:16:4f:09:52:29:f5:59:81:2a:5e:1e:ff: 64:91:c4:cf:26:cb:98:4c:92:e1:d9:85:c6:72:70:53:40:36: 15:c1:98:7d:9f:d0:b4:e4:7a:58:2e:5c:eb:a9:27:42:8f:db: 33:4d:86:00:ae:03:19:9c:e5:3c:a9:00:04:0d:5a:77:54:45: 8a:51:b5:31:7d:8a:de:6b:4e:ab:21:59:a1:8f:0c:ba:fc:df: d8:8d:c5:10:04:fc:51:91:ac:20:de:b6:ea:6e:b9:48:b7:7d: 7f:e2:12:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJxYP0Tqa2GwCKBaMW86BXG1gTFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGQUVEMEFCNUU5MEEzNkI1REJEQ0JDRTg2Qjg4RUFE MjY2QTkxNTAeFw0yNjA2MDIxMDE3NThaFw0yNjA2MDMxMDQ4NThaMDMxMTAvBgNV BAMTKDVENkVGMzJDQjZCMTg1MkE2MDlBMkQzNjcyODhCQ0U2NEJERDVBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZulxUpm3UICOKSKGFIOZ//gQ HK5uotHeoYXOL1kIIVWXUGOO6MGEWSvpa7A3KIRtHCkp+f5ec9L0pbo+ZD3pAVI4 bDMySb+351174z2h94iCtbCif30wSEEPdHO+iJRMgwQHrW98Ixt6NWNjv/jMcnVh J5d5h7l5IVkSwVaLNExZ9hYV8B9N2pTSHAtWujO7kKuinY0je0yKMejlaS3Lk+FO jgZh8zB779sOataTa/UqOblzffnQVvQHoe4wtFF+yGV46HK27IRka/Ki0cvRu2rk JngUOaeMIpYb3QB1Zc4h16SRSXRwprqDZOhR1EPIzyTENLtJxn6+kgL6yPMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXW7zLLaxhSpgmi02coi85kvdWokwHwYDVR0j BBgwFoAU1PrtCrXpCja129y86GuI6tJmqRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTU5NjEyYTItNDQzMy00MmI5LThmNGYtYjg0Nzc3NmFjYWZkLzEvRDRGQUVEMEFC NUU5MEEzNkI1REJEQ0JDRTg2Qjg4RUFEMjY2QTkxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEZBRUQwQUI1RTkwQTM2QjVEQkRDQkNFODZCODhFQUQyNjZB OTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzEvRDRGQUVEMEFCNUU5MEEzNkI1REJEQ0JDRTg2Qjg4 RUFEMjY2QTkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIABgXTYQ4qOL3WCQlK5HPxTQBb4UmVIFesC cExLkzGcDiDayUUtBlNJvxlBvgwxObbShN+vHsa2tzU1IumTgQWLSCw91WVIFyaw dHjLIDQbU//BndfymIDQTHfgHCQxul2I65IPUDppBFW56VVF4cUEy3fy828QpRUv GBBf5XK3GgZMPUcMSr3tG8xXS1CWzNrOkqYL1RZPCVIp9VmBKl4e/2SRxM8my5hM kuHZhcZycFNANhXBmH2f0LTkelguXOupJ0KP2zNNhgCuAxmc5TypAAQNWndURYpR tTF9it5rTqshWaGPDLr839iNxRAE/FGRrCDetupuuUi3fX/iEgA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:28 2026 by rpki-client