$ rpki-client -vvf rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft File: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft (raw, json) Hash identifier: 2XhdfFaMNERP5wPXgYdcsLN1+9YMBOGIRladgijqYzE= Subject key identifier: B9:88:E9:47:A2:D6:03:CB:BF:22:02:97:8C:0B:47:AA:7C:7E:0E:CB Authority key identifier: 1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 Certificate issuer: /CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Certificate serial: 04BBA4DBA700E5DEF448F0877DD99B20B1DD1942 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 12:35:34 +0000 Manifest this update: Tue 02 Jun 2026 12:30:34 +0000 Manifest next update: Wed 03 Jun 2026 13:52:34 +0000 Files and hashes: 1: 3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa (hash: 8ZC6zz9Re3rZ3m+opQHEHUjBM1e+RO/tPdv5dWkLhp4=) 2: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl (hash: TTDdTfZv7r26HDoa/dHB3VYsHVIFFSgx8Y160YPWUvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 13:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:bb:a4:db:a7:00:e5:de:f4:48:f0:87:7d:d9:9b:20:b1:dd:19:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Validity Not Before: Jun 2 12:30:34 2026 GMT Not After : Jun 3 13:52:34 2026 GMT Subject: CN=B988E947A2D603CBBF2202978C0B47AA7C7E0ECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3c:94:f9:ea:ee:f5:e5:84:3f:bf:0f:5b:ab: ce:54:8c:66:82:1c:dc:68:09:6f:91:6a:d1:73:44: e7:68:e2:aa:61:0e:86:4f:8e:ed:82:8b:f7:59:09: c4:d8:1f:e7:2c:f2:33:11:94:95:f5:d9:32:c5:9b: 51:74:fe:30:a5:ff:40:dd:89:14:9a:f7:07:45:51: 37:c5:94:bf:af:e4:a6:b7:2f:67:a0:04:c8:99:54: 31:a0:1a:ce:10:b5:54:9b:db:44:84:dd:99:b7:d5: 34:57:b7:00:6e:80:13:8f:90:e1:6f:36:52:0c:72: f9:06:8e:b6:08:af:6b:aa:8b:66:5d:e8:d6:75:02: b6:29:10:9b:e3:f7:dd:2c:73:a9:9c:1c:ce:a2:60: cc:72:09:fd:64:19:5d:ae:5a:cf:f8:32:76:9e:42: 29:32:59:c3:e8:75:29:3f:02:19:18:d7:e9:f4:df: d7:21:e5:7d:63:f4:43:5f:b5:f4:65:02:bd:2f:03: 17:1c:61:5d:b4:3a:3d:40:2a:35:4c:5a:06:9b:73: 9e:25:c9:ee:62:a5:64:0a:2c:4a:eb:28:dd:6e:ac: f8:91:53:c9:e0:35:c2:bf:c5:73:da:37:5e:04:ec: da:e3:41:cb:5c:f5:ca:ae:56:f9:e7:73:05:9f:f2: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:88:E9:47:A2:D6:03:CB:BF:22:02:97:8C:0B:47:AA:7C:7E:0E:CB X509v3 Authority Key Identifier: keyid:1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:71:c9:19:bf:51:1a:fb:5b:c2:bf:7c:fa:c0:27:49:6f:de: 26:4f:7e:d6:c8:74:6c:0f:a5:7f:ed:f0:ce:b3:c4:04:86:7d: 76:5b:fd:fc:c6:76:cf:6b:e4:2e:cd:b0:41:12:9b:96:4b:d8: 59:d3:f6:f4:33:ad:25:8a:01:c0:0e:27:28:32:bd:0a:3d:0d: 52:8e:a5:ab:e3:95:0e:e1:c7:9b:24:53:d1:bf:3f:02:b3:61: 75:ef:48:8e:a8:f1:e4:7a:4f:e7:81:60:98:a6:b9:75:63:cf: 1e:ae:42:7a:a6:29:e4:61:02:b9:5b:2e:e8:77:d5:ab:c5:89: 69:62:22:d7:09:08:6e:17:92:1f:5b:dc:fa:15:ef:5c:df:6d: dd:5c:98:ca:03:80:6a:e1:5c:93:da:62:de:87:23:11:47:fe: 7f:33:37:8a:85:a0:61:60:6b:8e:89:a8:54:1f:ca:b2:f8:54: f5:9b:e7:01:0c:b7:7c:a1:83:33:99:04:e5:cf:5b:cf:7c:9e: 4a:51:2a:80:89:00:8e:76:8a:6a:b9:53:5b:68:6a:1e:9d:84: a9:59:05:f6:ca:d8:0c:85:94:d5:7b:43:b9:89:05:2a:66:e0: 38:fd:4f:ab:a7:46:42:f5:12:cc:57:6a:8b:78:3d:a9:d8:e1: 50:79:a6:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLuk26cA5d70SPCHfdmbILHdGUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRF OUY0QkI4OTAeFw0yNjA2MDIxMjMwMzRaFw0yNjA2MDMxMzUyMzRaMDMxMTAvBgNV BAMTKEI5ODhFOTQ3QTJENjAzQ0JCRjIyMDI5NzhDMEI0N0FBN0M3RTBFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLPJT56u715YQ/vw9bq85UjGaC HNxoCW+RatFzROdo4qphDoZPju2Ci/dZCcTYH+cs8jMRlJX12TLFm1F0/jCl/0Dd iRSa9wdFUTfFlL+v5Ka3L2egBMiZVDGgGs4QtVSb20SE3Zm31TRXtwBugBOPkOFv NlIMcvkGjrYIr2uqi2Zd6NZ1ArYpEJvj990sc6mcHM6iYMxyCf1kGV2uWs/4Mnae QikyWcPodSk/AhkY1+n039ch5X1j9ENftfRlAr0vAxccYV20Oj1AKjVMWgabc54l ye5ipWQKLErrKN1urPiRU8ngNcK/xXPaN14E7NrjQctc9cquVvnncwWf8kdbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuYjpR6LWA8u/IgKXjAtHqnx+DsswHwYDVR0j BBgwFoAUGg2tJFdmrrGbsE9ojwACVOn0u4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4NDMyY2QtYTA0Ny00ODViLTgxNDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1 NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRFOUY0QkI4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTBEQUQyNDU3NjZBRUIxOUJCMDRGNjg4RjAwMDI1NEU5RjRC Qjg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4NDMyY2QtYTA0Ny00ODViLTgx NDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAy NTRFOUY0QkI4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxxyRm/URr7W8K/fPrAJ0lv3iZPftbIdGwP pX/t8M6zxASGfXZb/fzGds9r5C7NsEESm5ZL2FnT9vQzrSWKAcAOJygyvQo9DVKO pavjlQ7hx5skU9G/PwKzYXXvSI6o8eR6T+eBYJimuXVjzx6uQnqmKeRhArlbLuh3 1avFiWliItcJCG4Xkh9b3PoV71zfbd1cmMoDgGrhXJPaYt6HIxFH/n8zN4qFoGFg a46JqFQfyrL4VPWb5wEMt3yhgzOZBOXPW898nkpRKoCJAI52imq5U1toah6dhKlZ BfbK2AyFlNV7Q7mJBSpm4Dj9T6unRkL1EsxXaot4PanY4VB5pjU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:45:34 2026 by rpki-client