$ rpki-client -vvf rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft File: 4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft (raw, json) Hash identifier: C6RPlRfhuLy3Dbpf7DwU5ExW8IMBDcu/gJ1K6ZGMr/4= Subject key identifier: 1B:9F:72:77:53:E7:0E:F7:49:CE:2A:AF:2F:04:C7:47:CD:53:2D:A1 Authority key identifier: 42:72:D3:49:E0:4B:3A:5D:02:56:1E:E1:92:95:E0:FD:26:B3:7C:BE Certificate issuer: /CN=4272D349E04B3A5D02561EE19295E0FD26B37CBE Certificate serial: 319665949B993157570CAB600FE73CF2240C5338 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 18:06:49 +0000 Manifest this update: Tue 02 Jun 2026 18:01:49 +0000 Manifest next update: Wed 03 Jun 2026 19:31:49 +0000 Files and hashes: 1: 4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl (hash: lv0ulYDhndJVPCXfZ4o/biuL8XIg1FJt0KhG3WHiJTg=) 2: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: psydRP9iI2xqdgTYldVyaNuPRMq6F5KFPK4XNBT7jw0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:96:65:94:9b:99:31:57:57:0c:ab:60:0f:e7:3c:f2:24:0c:53:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4272D349E04B3A5D02561EE19295E0FD26B37CBE Validity Not Before: Jun 2 18:01:49 2026 GMT Not After : Jun 3 19:31:49 2026 GMT Subject: CN=1B9F727753E70EF749CE2AAF2F04C747CD532DA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:96:ce:48:02:10:29:f0:b5:ec:79:34:89: c3:ac:76:2d:e2:24:60:5d:93:d9:05:c9:fb:c6:73: 6a:ae:9f:75:38:d3:2c:46:9e:04:33:6e:e8:a3:30: 52:f9:53:7e:34:8e:14:25:07:f4:61:94:36:11:df: 02:93:3c:a8:d0:71:df:12:35:05:28:6c:56:3e:54: 7c:1d:fd:6b:7e:23:21:1d:1b:06:17:0a:f5:8d:cd: 2e:f6:96:75:2e:b5:06:12:83:82:9b:f1:b5:2b:c7: d0:ae:de:f5:ef:ff:05:8a:95:a4:46:a1:9c:bb:94: bb:2f:be:b1:02:0d:4f:b3:92:47:13:9e:b2:40:af: 46:6a:9b:7d:04:37:22:8a:db:41:b4:19:5e:7d:d6: 6d:63:a3:3a:f1:bc:9e:02:3d:8a:24:7a:da:55:c6: b6:b4:d2:76:a3:48:cb:25:e5:7c:7e:79:6e:7b:2a: d9:12:a0:72:12:92:35:73:3c:b0:57:1d:77:65:d6: 3b:00:70:2f:3a:cc:c6:79:b3:38:ce:15:d8:fc:b1: 78:11:ab:e4:f1:1e:58:7c:fd:c5:57:f8:79:b7:a4: 84:74:18:71:68:d3:ed:1a:4f:61:dc:52:dc:3c:0a: 7d:09:0c:be:a1:52:79:f7:d9:32:8d:9e:27:e2:69: 3c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9F:72:77:53:E7:0E:F7:49:CE:2A:AF:2F:04:C7:47:CD:53:2D:A1 X509v3 Authority Key Identifier: keyid:42:72:D3:49:E0:4B:3A:5D:02:56:1E:E1:92:95:E0:FD:26:B3:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b1:ba:5b:4f:a1:51:e6:ca:1e:36:af:70:9f:8c:1b:c3:54: 8a:a3:84:ff:8b:71:f7:26:17:de:22:7a:93:2b:5a:e7:63:a7: 3d:84:91:1b:bb:03:b7:c7:94:c8:0b:5f:39:f8:31:27:60:f3: ae:61:79:14:c8:9e:a6:34:ac:c9:b4:08:5f:3a:7e:57:8d:bc: 93:aa:44:30:3d:a8:d0:10:2f:95:d8:a2:cc:65:ea:21:69:95: 9f:43:03:10:45:b6:19:7c:f9:88:32:4e:f0:d5:52:46:b8:0e: a6:c0:5b:df:c9:55:17:21:c2:7b:dd:1f:e5:58:cb:cf:ce:2a: 5b:bf:33:94:ab:b7:6f:c7:4c:bc:29:1e:6c:1d:17:a1:80:a3: 5e:a7:15:f9:2a:dd:ae:30:ce:fb:16:cb:a4:57:c7:eb:8e:8a: 83:2d:63:ec:92:07:4e:91:2f:49:5c:fa:74:0c:97:bf:63:e8: 39:2d:ad:36:3f:4b:14:a2:ac:62:32:8b:87:8b:87:db:81:0a: 52:9a:52:bc:36:89:21:90:b1:f9:7f:a1:47:0d:e2:50:8b:c9: 33:8a:5b:dd:32:6c:49:ee:45:99:d4:e9:f9:39:90:44:50:ec: 74:4a:68:06:99:fa:08:2f:c4:f7:15:eb:a6:c3:1c:f2:4a:da: 80:de:50:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZZllJuZMVdXDKtgD+c88iQMUzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI3MkQzNDlFMDRCM0E1RDAyNTYxRUUxOTI5NUUwRkQy NkIzN0NCRTAeFw0yNjA2MDIxODAxNDlaFw0yNjA2MDMxOTMxNDlaMDMxMTAvBgNV BAMTKDFCOUY3Mjc3NTNFNzBFRjc0OUNFMkFBRjJGMDRDNzQ3Q0Q1MzJEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOuZbOSAIQKfC17Hk0icOsdi3i JGBdk9kFyfvGc2qun3U40yxGngQzbuijMFL5U340jhQlB/RhlDYR3wKTPKjQcd8S NQUobFY+VHwd/Wt+IyEdGwYXCvWNzS72lnUutQYSg4Kb8bUrx9Cu3vXv/wWKlaRG oZy7lLsvvrECDU+zkkcTnrJAr0Zqm30ENyKK20G0GV591m1jozrxvJ4CPYoketpV xra00najSMsl5Xx+eW57KtkSoHISkjVzPLBXHXdl1jsAcC86zMZ5szjOFdj8sXgR q+TxHlh8/cVX+Hm3pIR0GHFo0+0aT2HcUtw8Cn0JDL6hUnn32TKNnifiaTzTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG59yd1PnDvdJziqvLwTHR81TLaEwHwYDVR0j BBgwFoAUQnLTSeBLOl0CVh7hkpXg/SazfL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTY3NTBiZjktOWY1OC00MjhhLTg5NTItOGI1NTU1ZWY3Y2E3LzAvNDI3MkQzNDlF MDRCM0E1RDAyNTYxRUUxOTI5NUUwRkQyNkIzN0NCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjcyRDM0OUUwNEIzQTVEMDI1NjFFRTE5Mjk1RTBGRDI2QjM3 Q0JFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTY3NTBiZjktOWY1OC00MjhhLTg5 NTItOGI1NTU1ZWY3Y2E3LzAvNDI3MkQzNDlFMDRCM0E1RDAyNTYxRUUxOTI5NUUw RkQyNkIzN0NCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaxultPoVHmyh42r3CfjBvDVIqjhP+Lcfcm F94iepMrWudjpz2EkRu7A7fHlMgLXzn4MSdg865heRTInqY0rMm0CF86fleNvJOq RDA9qNAQL5XYosxl6iFplZ9DAxBFthl8+YgyTvDVUka4DqbAW9/JVRchwnvdH+VY y8/OKlu/M5Srt2/HTLwpHmwdF6GAo16nFfkq3a4wzvsWy6RXx+uOioMtY+ySB06R L0lc+nQMl79j6DktrTY/SxSirGIyi4eLh9uBClKaUrw2iSGQsfl/oUcN4lCLyTOK W90ybEnuRZnU6fk5kERQ7HRKaAaZ+ggvxPcV66bDHPJK2oDeUDk= -----END CERTIFICATE-----Generated at Wed Jun 3 04:16:32 2026 by rpki-client