$ rpki-client -vvf rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft File: 309D66BED7C5AAB839669782F24FE6D817B8209A.mft (raw, json) Hash identifier: +pU58eNjAo/UBoBpFAUNkdpBjsja516PkggDxR9ATXg= Subject key identifier: FB:82:2D:DB:CB:59:1A:04:3E:CB:08:B1:FB:8B:AB:1B:83:42:E0:1E Authority key identifier: 30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A Certificate issuer: /CN=309D66BED7C5AAB839669782F24FE6D817B8209A Certificate serial: 480D30BC20D4E5E8E69D60A830FB0B51E71DEF70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:56:37 +0000 Manifest this update: Tue 02 Jun 2026 17:51:37 +0000 Manifest next update: Wed 03 Jun 2026 21:02:37 +0000 Files and hashes: 1: 3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa (hash: +xmmKCCGNPjDepHqzXzJnlfxWWK0PUzYuwz3sX367Vg=) 2: 309D66BED7C5AAB839669782F24FE6D817B8209A.crl (hash: hCVLCQwkXscCNNF4qnS5ht+1SBkL3UH8RNWqS8TdEbg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 21:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0d:30:bc:20:d4:e5:e8:e6:9d:60:a8:30:fb:0b:51:e7:1d:ef:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309D66BED7C5AAB839669782F24FE6D817B8209A Validity Not Before: Jun 2 17:51:37 2026 GMT Not After : Jun 3 21:02:37 2026 GMT Subject: CN=FB822DDBCB591A043ECB08B1FB8BAB1B8342E01E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:a1:98:a2:ba:9e:83:52:aa:2b:52:b3:07: 66:86:44:ee:48:4e:ba:c6:b5:52:65:52:4e:b9:9f: c3:17:c4:6e:b6:fd:75:51:e2:e7:a0:fb:f8:a2:0e: b6:e0:ac:46:c1:5e:20:ea:8a:2f:2f:65:12:03:f0: b4:1d:62:e3:59:6a:c7:14:56:87:23:cf:93:ef:4f: b7:18:cf:6d:9f:8a:e7:26:e9:9d:49:f1:9a:74:4b: a3:47:05:d7:7a:28:20:83:a3:d2:87:55:c6:fc:dd: aa:ad:cb:4a:b1:3d:20:fc:75:89:ec:ae:76:b1:74: e0:12:c1:ea:70:e4:76:77:52:f6:17:d2:3f:13:d7: b0:37:ba:3a:47:71:45:b9:a9:f8:ca:af:e6:f0:f7: 6d:30:38:ad:a7:9c:a1:48:3b:bc:21:0b:f2:7a:06: 5d:70:84:e0:a5:47:72:7c:f7:83:2e:b9:d3:77:d4: 69:fc:8d:50:3c:4f:46:21:a5:ee:9e:0b:64:3b:4b: cd:5e:5a:9c:4c:35:10:39:f4:65:0e:85:d0:ee:10: 05:c7:d1:b3:e8:cb:05:ea:27:3e:e9:be:fe:23:83: 27:d4:58:4b:ba:24:f6:20:97:db:8f:55:e4:56:7b: 5b:9c:f7:22:35:73:79:78:96:d9:92:69:bb:00:d7: bc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:82:2D:DB:CB:59:1A:04:3E:CB:08:B1:FB:8B:AB:1B:83:42:E0:1E X509v3 Authority Key Identifier: keyid:30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a7:a3:d8:fc:da:2a:da:b3:cb:76:12:36:0a:90:57:79:37: 0d:2f:5f:1e:78:ac:7e:6b:36:0b:05:52:57:18:ec:3c:b1:4f: f1:18:da:58:e0:df:82:16:a8:27:20:eb:81:a1:87:00:9b:0b: 79:86:b7:1b:4f:50:20:58:2f:c1:1e:10:fe:5c:9f:a1:83:f1: ed:d5:5f:ea:f4:8c:44:6a:b3:f4:9c:6a:7e:3a:5b:a8:ee:4f: d9:be:89:73:40:06:a1:37:cb:b4:f4:3a:31:0c:77:12:a5:57: cb:56:00:71:04:92:3a:83:49:bb:b9:b2:74:b1:d9:ec:0e:94: 42:ea:51:a4:c2:2d:77:69:c2:0c:1f:e9:a1:01:2e:13:f4:0d: c7:61:5b:29:0a:65:14:0a:89:9e:98:01:cc:15:0f:24:4c:5f: 55:1e:4f:58:86:f6:b9:a4:15:52:68:00:20:f2:c3:d3:72:89: 9a:88:c0:47:52:89:64:e0:40:25:48:c3:03:fb:67:ab:b0:2a: 60:bc:d9:d4:ab:f0:bb:88:54:38:7e:7e:87:91:5c:86:3b:e0: 1a:14:6f:ee:eb:ec:60:06:6e:be:03:87:ec:21:2c:2e:21:43: 1b:a1:07:c4:1c:b0:40:b3:d7:0e:aa:67:b3:2f:5f:2c:2b:06: 29:c1:58:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSA0wvCDU5ejmnWCoMPsLUecd73AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RDY2QkVEN0M1QUFCODM5NjY5NzgyRjI0RkU2RDgx N0I4MjA5QTAeFw0yNjA2MDIxNzUxMzdaFw0yNjA2MDMyMTAyMzdaMDMxMTAvBgNV BAMTKEZCODIyRERCQ0I1OTFBMDQzRUNCMDhCMUZCOEJBQjFCODM0MkUwMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1pqGYorqeg1KqK1KzB2aGRO5I TrrGtVJlUk65n8MXxG62/XVR4ueg+/iiDrbgrEbBXiDqii8vZRID8LQdYuNZascU Vocjz5PvT7cYz22fiucm6Z1J8Zp0S6NHBdd6KCCDo9KHVcb83aqty0qxPSD8dYns rnaxdOASwepw5HZ3UvYX0j8T17A3ujpHcUW5qfjKr+bw920wOK2nnKFIO7whC/J6 Bl1whOClR3J894MuudN31Gn8jVA8T0Yhpe6eC2Q7S81eWpxMNRA59GUOhdDuEAXH 0bPoywXqJz7pvv4jgyfUWEu6JPYgl9uPVeRWe1uc9yI1c3l4ltmSabsA17xFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+4It28tZGgQ+ywix+4urG4NC4B4wHwYDVR0j BBgwFoAUMJ1mvtfFqrg5ZpeC8k/m2Be4IJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwZmNjYjItY2UxYy00ODYyLThlZGYtOGMzNTI3MzAxMWMyLzAvMzA5RDY2QkVE N0M1QUFCODM5NjY5NzgyRjI0RkU2RDgxN0I4MjA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMDlENjZCRUQ3QzVBQUI4Mzk2Njk3ODJGMjRGRTZEODE3Qjgy MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwZmNjYjItY2UxYy00ODYyLThl ZGYtOGMzNTI3MzAxMWMyLzAvMzA5RDY2QkVEN0M1QUFCODM5NjY5NzgyRjI0RkU2 RDgxN0I4MjA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWno9j82iras8t2EjYKkFd5Nw0vXx54rH5r NgsFUlcY7DyxT/EY2ljg34IWqCcg64GhhwCbC3mGtxtPUCBYL8EeEP5cn6GD8e3V X+r0jERqs/Scan46W6juT9m+iXNABqE3y7T0OjEMdxKlV8tWAHEEkjqDSbu5snSx 2ewOlELqUaTCLXdpwgwf6aEBLhP0DcdhWykKZRQKiZ6YAcwVDyRMX1UeT1iG9rmk FVJoACDyw9NyiZqIwEdSiWTgQCVIwwP7Z6uwKmC82dSr8LuIVDh+foeRXIY74BoU b+7r7GAGbr4Dh+whLC4hQxuhB8QcsECz1w6qZ7MvXywrBinBWHU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:43 2026 by rpki-client