$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft File: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft (raw, json) Hash identifier: SlV9dEqNRpoWzbDl8PyiMYAFPN7aQpnJ6mcvvMKLJHQ= Subject key identifier: F9:7B:C5:3E:6C:0C:A3:59:C9:A3:74:10:54:FB:C2:75:1D:2B:70:19 Authority key identifier: B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5 Certificate issuer: /CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5 Certificate serial: 27A76E8E1A16A3F0CE359CC23A081E7C593AC50E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:06:16 +0000 Manifest this update: Tue 02 Jun 2026 09:01:16 +0000 Manifest next update: Wed 03 Jun 2026 12:37:16 +0000 Files and hashes: 1: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl (hash: sTjywrPqL6wJVLJSKYpJOivRq2DpJXNbpvbHW9QyMZg=) 2: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: G626nf3IkAH7IIThn3UlVRBOX9wH92EFofVHExk6vxQ=) 3: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: 0KpGk+Me0s5mBlSvDHCHu9w7qKthN0KZwNcXUygtBFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a7:6e:8e:1a:16:a3:f0:ce:35:9c:c2:3a:08:1e:7c:59:3a:c5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5 Validity Not Before: Jun 2 09:01:16 2026 GMT Not After : Jun 3 12:37:16 2026 GMT Subject: CN=F97BC53E6C0CA359C9A3741054FBC2751D2B7019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:31:47:44:7e:27:7f:32:cc:46:4b:b7:c7:cb: c4:73:fa:3e:67:c7:57:20:00:14:fb:72:34:c4:54: d9:f9:cd:9c:02:0c:ed:8a:40:62:cc:b6:eb:5c:62: 7a:28:39:91:d5:91:97:fb:36:d4:f8:50:d1:9f:ad: 3d:3a:2d:61:ed:46:91:ac:e3:6e:67:70:cd:84:e7: 46:b6:44:3b:d9:6e:6f:a6:a4:98:1b:cd:13:8c:fe: 54:a1:29:7d:c3:64:2d:3e:67:6a:78:ed:75:57:d3: 18:42:45:8b:d9:e0:bf:90:80:48:83:3b:f8:06:2f: b2:8b:ef:f0:26:21:9d:aa:3c:cc:93:3a:e9:e4:9f: 72:65:0e:d4:18:d8:ac:e7:d1:ee:37:86:40:1c:f3: 3d:7c:0a:fb:c1:61:36:2f:22:5f:16:0f:cb:23:2c: 68:7e:a9:8c:ad:f6:23:6d:ee:d1:32:ee:85:49:aa: bf:b5:1d:bd:0a:49:9f:fe:ca:3a:52:80:ed:5e:6f: 5f:23:68:23:3e:36:e1:f9:ed:c7:43:02:c2:7b:60: 0a:86:80:c9:56:83:d5:2e:26:af:a7:bc:b3:4e:52: df:e2:50:19:27:59:fb:29:82:55:6a:7e:9b:8a:ba: 21:06:96:93:98:2c:ab:31:72:b0:a9:a6:5d:ae:76: 5a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7B:C5:3E:6C:0C:A3:59:C9:A3:74:10:54:FB:C2:75:1D:2B:70:19 X509v3 Authority Key Identifier: keyid:B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:76:99:8e:10:54:1a:d2:15:2f:b0:d3:af:25:d2:e1:ef:da: 29:96:b9:4c:17:7a:6b:49:16:0e:87:2e:c3:da:26:39:20:78: 3d:0c:77:35:7a:41:0c:4b:54:1a:28:f8:71:c4:57:38:b9:5a: 42:91:7c:78:5f:25:d3:ea:7f:da:2b:3b:f2:75:3d:95:9a:bd: b1:46:c5:e3:cf:83:85:ef:13:ba:80:c8:bc:65:1c:0d:e2:b7: d0:f5:88:78:c4:6f:02:44:2b:5d:e2:82:c3:c5:59:92:a8:ff: 25:e9:3d:61:ae:9b:32:01:4a:34:e8:3c:5c:13:00:0c:60:d6: a8:38:12:48:34:b4:a3:25:24:bb:4f:7c:bc:e6:25:1d:6b:e4: 94:09:4d:4f:a4:08:96:62:c3:4b:b9:a7:94:5c:94:79:94:4e: bc:b0:51:eb:92:8a:25:af:33:1b:2a:17:cc:f3:fe:a1:8d:40: 5e:fa:c2:29:20:64:e9:c9:8a:d0:a9:aa:59:b0:7c:5d:78:f6: d9:e3:54:0e:ab:72:7c:02:61:ef:e6:55:37:42:76:3c:b0:38: 87:d9:e9:1a:df:34:80:51:79:01:f1:ab:64:0d:be:18:ef:44: ea:a4:b6:fc:62:2c:48:63:2d:30:c6:93:6e:73:6c:78:f2:e9: bc:e2:23:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6dujhoWo/DONZzCOggefFk6xQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDQjJFOUY2NTEzQjBBQkQ2OUNEMkEyQ0M2MDRENjFD MTVEQUNBNTAeFw0yNjA2MDIwOTAxMTZaFw0yNjA2MDMxMjM3MTZaMDMxMTAvBgNV BAMTKEY5N0JDNTNFNkMwQ0EzNTlDOUEzNzQxMDU0RkJDMjc1MUQyQjcwMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFMUdEfid/MsxGS7fHy8Rz+j5n x1cgABT7cjTEVNn5zZwCDO2KQGLMtutcYnooOZHVkZf7NtT4UNGfrT06LWHtRpGs 425ncM2E50a2RDvZbm+mpJgbzROM/lShKX3DZC0+Z2p47XVX0xhCRYvZ4L+QgEiD O/gGL7KL7/AmIZ2qPMyTOunkn3JlDtQY2Kzn0e43hkAc8z18CvvBYTYvIl8WD8sj LGh+qYyt9iNt7tEy7oVJqr+1Hb0KSZ/+yjpSgO1eb18jaCM+NuH57cdDAsJ7YAqG gMlWg9UuJq+nvLNOUt/iUBknWfspglVqfpuKuiEGlpOYLKsxcrCppl2udloBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+XvFPmwMo1nJo3QQVPvCdR0rcBkwHwYDVR0j BBgwFoAUt8sun2UTsKvWnNKizGBNYcFdrKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMzNzBlNmYtZjBjNy00ZjQwLThiYTQtYTAxZTVkMGM3NGU0LzAvQjdDQjJFOUY2 NTEzQjBBQkQ2OUNEMkEyQ0M2MDRENjFDMTVEQUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0NCMkU5RjY1MTNCMEFCRDY5Q0QyQTJDQzYwNEQ2MUMxNURB Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvQjdDQjJFOUY2NTEzQjBBQkQ2OUNEMkEyQ0M2MDRE NjFDMTVEQUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALp2mY4QVBrSFS+w068l0uHv2imWuUwXemtJ Fg6HLsPaJjkgeD0MdzV6QQxLVBoo+HHEVzi5WkKRfHhfJdPqf9orO/J1PZWavbFG xePPg4XvE7qAyLxlHA3it9D1iHjEbwJEK13igsPFWZKo/yXpPWGumzIBSjToPFwT AAxg1qg4Ekg0tKMlJLtPfLzmJR1r5JQJTU+kCJZiw0u5p5RclHmUTrywUeuSiiWv MxsqF8zz/qGNQF76wikgZOnJitCpqlmwfF149tnjVA6rcnwCYe/mVTdCdjywOIfZ 6RrfNIBReQHxq2QNvhjvROqktvxiLEhjLTDGk25zbHjy6bziI68= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:52 2026 by rpki-client