$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft File: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft (raw, json) Hash identifier: sLdDYn7xemb083Qj4gH9sXxX3EpLKvBKFuvhAcd/9m8= Subject key identifier: FA:B6:2A:E3:28:6F:40:A3:49:A4:CC:0D:9C:EE:0B:03:28:B0:08:94 Authority key identifier: CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 Certificate issuer: /CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Certificate serial: 530751CB3AD33D2969FDFD3151DDB587F104A178 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 08:20:22 +0000 Manifest this update: Tue 02 Jun 2026 08:15:22 +0000 Manifest next update: Wed 03 Jun 2026 11:17:22 +0000 Files and hashes: 1: CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl (hash: HVEEunDjFhhtOhBRRUVxhtQJ334JhY2vwv+nMMmo3II=) 2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: Pb1HhX9vGzRzwD3eC7x1KFYFFDBS8WYJS934upf4BBQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:07:51:cb:3a:d3:3d:29:69:fd:fd:31:51:dd:b5:87:f1:04:a1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6 Validity Not Before: Jun 2 08:15:22 2026 GMT Not After : Jun 3 11:17:22 2026 GMT Subject: CN=FAB62AE3286F40A349A4CC0D9CEE0B0328B00894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:02:25:37:73:7f:2b:0e:7a:57:5b:4c:0e:57: 2f:d8:f5:5a:81:a9:fd:97:72:2f:7b:b9:12:b0:2a: 38:f8:88:1c:8c:cf:64:00:cd:95:21:05:6f:51:da: fa:16:21:dd:bf:b1:28:7d:45:98:f8:72:72:b5:e6: ce:0b:2a:b1:e2:ae:49:5a:19:b5:c3:6e:a1:1f:6b: 62:b3:61:e7:3a:a7:fe:22:8e:61:26:52:81:0b:ea: 73:10:d7:84:a4:fd:0a:96:3d:4c:d3:89:66:fa:62: 83:cd:6b:62:f2:1c:77:be:48:85:14:11:15:93:cc: 8a:d8:87:8a:ea:f4:3e:a6:30:4f:50:d1:0f:ff:bc: 99:11:5e:d5:da:15:32:dd:0b:c1:a4:98:9d:90:a2: 0e:03:61:58:8e:4a:af:40:90:5d:10:e0:d8:7c:76: 22:91:f4:f4:78:57:38:e4:d7:9c:68:ad:59:52:59: 4e:c9:f8:f5:4a:dd:87:8e:63:f2:5f:88:be:8b:d5: 0c:e1:a9:7a:87:dc:57:dc:1a:69:42:33:a8:6b:89: 72:b5:47:ad:02:81:a4:62:f3:c5:70:6c:ae:68:8e: 64:d9:36:43:e9:3a:8f:1d:e1:4e:4c:f5:db:82:1a: 8e:13:9c:86:93:5e:8d:bc:d0:2c:55:fe:c4:8a:c6: 3e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B6:2A:E3:28:6F:40:A3:49:A4:CC:0D:9C:EE:0B:03:28:B0:08:94 X509v3 Authority Key Identifier: keyid:CD:0A:24:B4:D5:08:D4:3D:8C:25:BB:8E:C5:D4:4F:77:E1:3A:51:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/CD0A24B4D508D43D8C25BB8EC5D44F77E13A51A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:61:7d:a2:8f:ff:e2:84:3e:e6:87:fe:ab:82:74:48:59:dc: 95:a1:af:48:79:10:e8:ee:b0:9a:bb:ea:fe:49:62:10:dd:d5: ff:0c:8f:22:d8:49:2b:f1:eb:63:3e:a4:57:d3:b2:16:7f:3a: 0d:2b:a2:75:13:aa:a7:7c:fe:b4:d1:81:3a:41:eb:3d:1f:29: 5c:c7:14:c6:10:7e:f9:13:25:8d:6a:63:81:29:68:cc:37:6b: 46:f1:50:a8:8a:65:33:18:91:09:ad:b7:77:ad:44:6e:fd:b8: b9:86:73:50:16:29:f5:46:3f:2b:2c:f4:1f:4b:df:99:6a:3c: 9f:85:de:15:73:7c:ab:5a:76:35:ad:db:24:b7:94:9c:55:a6: b6:38:70:da:75:b7:58:ce:6e:c5:a7:a2:82:56:73:98:5b:ca: 66:4d:7e:a2:2e:fb:ad:cb:28:b3:be:77:dc:9f:5e:5c:f9:3c: 14:dd:9c:54:71:c4:11:bd:e5:c0:27:d0:46:66:7f:77:ef:b3: 49:5c:5b:58:2d:2d:89:4b:8b:86:61:2f:d8:93:b6:53:8c:3c: 33:ed:aa:69:18:21:ba:86:56:b3:8e:af:c1:e0:44:f2:1f:44: 45:ae:4c:c0:0e:9b:c8:fa:85:82:5c:cb:46:5a:b7:1a:37:01: 3b:47:dc:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwdRyzrTPSlp/f0xUd21h/EEoXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRGNzdF MTNBNTFBNjAeFw0yNjA2MDIwODE1MjJaFw0yNjA2MDMxMTE3MjJaMDMxMTAvBgNV BAMTKEZBQjYyQUUzMjg2RjQwQTM0OUE0Q0MwRDlDRUUwQjAzMjhCMDA4OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhAiU3c38rDnpXW0wOVy/Y9VqB qf2Xci97uRKwKjj4iByMz2QAzZUhBW9R2voWId2/sSh9RZj4cnK15s4LKrHirkla GbXDbqEfa2KzYec6p/4ijmEmUoEL6nMQ14Sk/QqWPUzTiWb6YoPNa2LyHHe+SIUU ERWTzIrYh4rq9D6mME9Q0Q//vJkRXtXaFTLdC8GkmJ2Qog4DYViOSq9AkF0Q4Nh8 diKR9PR4Vzjk15xorVlSWU7J+PVK3YeOY/JfiL6L1QzhqXqH3FfcGmlCM6hriXK1 R60CgaRi88VwbK5ojmTZNkPpOo8d4U5M9duCGo4TnIaTXo280CxV/sSKxj5FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+rYq4yhvQKNJpMwNnO4LAyiwCJQwHwYDVR0j BBgwFoAUzQoktNUI1D2MJbuOxdRPd+E6UaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWUzMGFjNjQtMGYxMy00MTYyLTk2OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRE NTA4RDQzRDhDMjVCQjhFQzVENDRGNzdFMTNBNTFBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDBBMjRCNEQ1MDhENDNEOEMyNUJCOEVDNUQ0NEY3N0UxM0E1 MUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWUzMGFjNjQtMGYxMy00MTYyLTk2 OGYtYWZlNWNjNzE0Y2Y2LzAvQ0QwQTI0QjRENTA4RDQzRDhDMjVCQjhFQzVENDRG NzdFMTNBNTFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVhfaKP/+KEPuaH/quCdEhZ3JWhr0h5EOju sJq76v5JYhDd1f8MjyLYSSvx62M+pFfTshZ/Og0ronUTqqd8/rTRgTpB6z0fKVzH FMYQfvkTJY1qY4EpaMw3a0bxUKiKZTMYkQmtt3etRG79uLmGc1AWKfVGPyss9B9L 35lqPJ+F3hVzfKtadjWt2yS3lJxVprY4cNp1t1jObsWnooJWc5hbymZNfqIu+63L KLO+d9yfXlz5PBTdnFRxxBG95cAn0EZmf3fvs0lcW1gtLYlLi4ZhL9iTtlOMPDPt qmkYIbqGVrOOr8HgRPIfREWuTMAOm8j6hYJcy0Zatxo3ATtH3MU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:11:45 2026 by rpki-client