$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft File: 1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft (raw, json) Hash identifier: sJwyaGVw3cRybiqYJhoPlBocFH4Wf2RIWa5+HVMgAwM= Subject key identifier: C0:7E:3B:7E:2C:DE:87:61:B5:DB:F6:32:0F:0D:9E:C9:B0:02:4D:5F Authority key identifier: 12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46 Certificate issuer: /CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346 Certificate serial: 6F6116429586FDA9C3816CE81CEA84B60633C813 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:29:17 +0000 Manifest this update: Tue 02 Jun 2026 23:24:17 +0000 Manifest next update: Wed 03 Jun 2026 23:31:17 +0000 Files and hashes: 1: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: V6cyc1CcqyB7Bwt4/zuikRuoVLZO2D20sD1iOp+dhmw=) 2: 1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl (hash: sN6luQNrOSRZSHNXiTy7sPwFnBFXGFGKrTMfqPhw2Sk=) 3: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: XIXVE3WxFWnkjGptM8+qV7znYXNR6ug7ahxtLFcMw2U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:61:16:42:95:86:fd:a9:c3:81:6c:e8:1c:ea:84:b6:06:33:c8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346 Validity Not Before: Jun 2 23:24:17 2026 GMT Not After : Jun 3 23:31:17 2026 GMT Subject: CN=C07E3B7E2CDE8761B5DBF6320F0D9EC9B0024D5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b9:d5:81:be:62:28:26:c6:3b:3e:13:6f:05: cc:10:f1:c4:73:6f:7a:59:87:39:68:ac:cf:a6:44: da:c3:a5:f0:e7:6f:63:5b:80:bb:d6:2d:ca:24:d2: e4:31:cb:34:0f:20:e6:64:c2:44:4c:f1:21:54:85: a6:bd:5a:a5:96:78:1a:45:27:1c:ac:b4:b3:b8:4f: 77:9a:40:c2:b0:4d:bd:a2:be:cc:ba:f9:c7:38:db: c0:08:35:fd:ef:13:ac:0f:78:82:52:4e:94:4b:60: 9f:bc:6d:69:99:83:de:56:51:b3:f9:77:14:70:3f: ac:7c:16:f4:27:1e:fd:cc:39:a4:99:47:93:c6:e2: e2:cb:e2:2e:bc:83:41:45:29:64:ae:5d:11:0c:34: c7:84:02:6b:0c:94:21:41:c6:a4:11:32:ef:03:bd: 49:53:5f:89:1c:b8:71:3f:eb:9b:00:b9:cd:56:a8: c4:52:a7:c9:63:aa:47:2c:2f:64:f1:1c:e4:32:73: 24:e0:f6:c9:b0:4c:a0:9e:59:a3:23:6e:3a:85:e3: 1c:67:6b:ca:48:7c:5e:50:ed:a5:0a:7f:fe:52:c4: 0f:57:00:84:9f:0c:6a:88:b6:24:37:e2:6b:b0:cd: 1e:95:43:a6:cb:6f:2b:54:73:f4:a1:62:ca:85:89: f8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7E:3B:7E:2C:DE:87:61:B5:DB:F6:32:0F:0D:9E:C9:B0:02:4D:5F X509v3 Authority Key Identifier: keyid:12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:36:46:c6:b6:9c:ba:34:59:70:1b:02:e4:a0:d6:9b:51:73: dc:ca:70:12:29:ea:38:4b:74:f9:0e:7b:e8:c2:9c:31:46:e1: d7:23:e9:c6:c5:a2:d0:fa:63:cb:43:bb:f1:ce:b4:bd:88:1a: 77:c8:b1:d3:bb:e3:ab:b2:18:44:db:87:aa:d4:e0:e9:e2:a4: 1c:c2:84:d8:e1:7d:21:d8:d4:6b:17:06:92:c5:d5:35:4f:41: 72:bc:32:d4:d5:b8:9f:32:85:2c:c2:66:42:0f:a9:6f:f5:b2: a0:38:04:7f:f7:04:29:a4:eb:69:8b:85:a9:7a:7b:db:46:32: 13:d3:96:ec:d4:ca:dc:42:06:42:35:0e:e6:8e:b4:74:33:42: 98:26:d3:dc:b5:82:29:4a:8f:f2:d6:e4:ab:1d:b0:68:fe:4e: 8e:29:d0:33:38:13:22:3a:fd:9c:c9:74:0d:cd:31:71:b0:b6: d4:26:f8:a8:0f:4e:66:46:49:ae:92:ce:04:79:95:8c:3d:6b: d3:76:1d:45:a7:b9:a7:e0:4e:6d:06:70:af:a7:6e:ef:e8:01: af:e8:fb:d2:7f:93:62:fc:55:85:7e:f9:b4:7c:55:d4:46:6b: c6:ad:88:f4:05:e8:15:50:5d:a7:b5:0d:5a:64:ee:51:05:36: 20:24:1d:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb2EWQpWG/anDgWzoHOqEtgYzyBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyNEY2N0ZGRTM4QkNFQTM4N0UyREYzRTY2MkQ2RjY4 NzdGNjM0NjAeFw0yNjA2MDIyMzI0MTdaFw0yNjA2MDMyMzMxMTdaMDMxMTAvBgNV BAMTKEMwN0UzQjdFMkNERTg3NjFCNURCRjYzMjBGMEQ5RUM5QjAwMjRENUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTudWBvmIoJsY7PhNvBcwQ8cRz b3pZhzlorM+mRNrDpfDnb2NbgLvWLcok0uQxyzQPIOZkwkRM8SFUhaa9WqWWeBpF JxystLO4T3eaQMKwTb2ivsy6+cc428AINf3vE6wPeIJSTpRLYJ+8bWmZg95WUbP5 dxRwP6x8FvQnHv3MOaSZR5PG4uLL4i68g0FFKWSuXREMNMeEAmsMlCFBxqQRMu8D vUlTX4kcuHE/65sAuc1WqMRSp8ljqkcsL2TxHOQycyTg9smwTKCeWaMjbjqF4xxn a8pIfF5Q7aUKf/5SxA9XAISfDGqItiQ34muwzR6VQ6bLbytUc/ShYsqFifhNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwH47fizeh2G12/YyDw2eybACTV8wHwYDVR0j BBgwFoAUEiT2f/44vOo4fi3z5mLW9od/Y0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWQxNjE5Y2ItYzAxYy00NjE0LTg2M2UtY2UyODhkN2JhNzY1LzAvMTIyNEY2N0ZG RTM4QkNFQTM4N0UyREYzRTY2MkQ2RjY4NzdGNjM0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjI0RjY3RkZFMzhCQ0VBMzg3RTJERjNFNjYyRDZGNjg3N0Y2 MzQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvMTIyNEY2N0ZGRTM4QkNFQTM4N0UyREYzRTY2MkQ2 RjY4NzdGNjM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKo2Rsa2nLo0WXAbAuSg1ptRc9zKcBIp6jhL dPkOe+jCnDFG4dcj6cbFotD6Y8tDu/HOtL2IGnfIsdO746uyGETbh6rU4OnipBzC hNjhfSHY1GsXBpLF1TVPQXK8MtTVuJ8yhSzCZkIPqW/1sqA4BH/3BCmk62mLhal6 e9tGMhPTluzUytxCBkI1DuaOtHQzQpgm09y1gilKj/LW5KsdsGj+To4p0DM4EyI6 /ZzJdA3NMXGwttQm+KgPTmZGSa6SzgR5lYw9a9N2HUWnuafgTm0GcK+nbu/oAa/o +9J/k2L8VYV++bR8VdRGa8atiPQF6BVQXae1DVpk7lEFNiAkHSw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:40 2026 by rpki-client