$ rpki-client -vvf rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft File: A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft (raw, json) Hash identifier: u5pYF6/J3J/sXbnhL2yXs7vhQWJnEUesvvgroGOcu00= Subject key identifier: DA:7C:5A:5A:1B:7A:0F:71:B5:93:B9:5B:F3:59:ED:CD:6A:A9:FA:F2 Authority key identifier: A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D Certificate issuer: /CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D Certificate serial: 3FDD329CFD88379F989FE46E6A8038B3F84A7319 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 14:58:12 +0000 Manifest this update: Tue 02 Jun 2026 14:53:12 +0000 Manifest next update: Wed 03 Jun 2026 15:34:12 +0000 Files and hashes: 1: A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl (hash: zXWmRQzgZrjXzo5h38QMc8ED3uGO1QgDQ4nxlic6xMc=) 2: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (hash: njKsV+Ks6jWYRD/Bk8dM3j39b6JxY/7zJuEqTLSaQJo=) 3: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (hash: lhhFXTGZiU1QkHFYBJ4wWU0h/3XC744iXGiTVreBn18=) 4: 3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (hash: W7doPEAlt7atW3PujV3jj4JUbhiVhrrULJlIpRgUn64=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 15:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:dd:32:9c:fd:88:37:9f:98:9f:e4:6e:6a:80:38:b3:f8:4a:73:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D Validity Not Before: Jun 2 14:53:12 2026 GMT Not After : Jun 3 15:34:12 2026 GMT Subject: CN=DA7C5A5A1B7A0F71B593B95BF359EDCD6AA9FAF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:82:c3:9c:35:fe:fb:7d:de:a7:36:b3:8e:ad: a3:c3:6a:37:5a:36:e4:ee:2a:e2:02:9b:da:a7:7c: 85:ff:3b:e5:04:58:0d:00:7c:b2:b1:8b:12:bc:4f: ad:17:14:ee:03:19:27:78:b9:f1:b2:00:9b:3a:c2: a4:3e:7a:c8:d0:27:e3:61:b4:f1:cd:2a:d5:97:fa: 5c:fa:34:2b:5a:af:b5:f3:93:53:6e:6a:e3:07:45: 5e:fa:75:44:b3:3b:82:5a:9d:1c:a4:a0:cb:7d:88: 3b:33:f2:07:55:57:00:52:55:e4:b6:3d:99:aa:63: 74:f1:ee:6c:3f:25:a8:79:f6:72:ed:1b:cd:e2:87: 87:8d:8c:e3:91:59:39:c2:4f:71:cc:ed:b4:3d:a2: 9d:06:26:d4:7c:0b:74:68:b9:ba:76:49:3d:33:b6: 82:bd:2b:a2:53:f6:4f:a9:31:a4:7d:00:91:66:5f: f0:c6:6c:ec:7c:28:89:c0:89:c4:a7:6b:46:83:d7: b1:69:0e:5d:62:0f:f9:c5:d8:72:de:9f:d8:1b:d4: f9:09:6b:34:03:3f:9e:a7:42:98:6f:15:c0:4b:9e: 57:f6:d3:f6:7f:dd:32:a1:05:2a:c4:e7:cc:f3:5b: 6d:27:25:cb:20:36:9d:d8:98:8e:39:18:be:ac:7a: 34:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7C:5A:5A:1B:7A:0F:71:B5:93:B9:5B:F3:59:ED:CD:6A:A9:FA:F2 X509v3 Authority Key Identifier: keyid:A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6f:fc:00:d4:6a:b1:05:94:bb:a5:62:82:de:d4:9e:21:f0: 6b:a8:ab:d4:78:54:23:b5:f4:fb:52:cb:1a:56:69:73:0e:8a: b0:ac:4c:29:44:56:58:4f:2a:ab:42:04:c6:91:ec:35:4c:da: b1:a0:bb:1e:69:bd:a8:ff:58:4d:c2:c7:78:61:8c:99:0f:c5: 2a:73:dd:aa:8d:24:d9:73:19:8a:a1:9b:ce:13:b9:59:ed:2f: 7d:29:ad:ed:2e:84:d0:39:f7:1c:49:29:c3:b3:c6:3b:4c:1c: 7e:85:99:df:13:05:68:04:c6:5c:78:f2:e6:4e:2b:e7:a9:81: b9:e3:6d:31:82:27:b2:17:3c:d8:ca:11:da:ca:8a:17:0f:39: 3f:89:4e:8e:98:f2:d4:e7:a7:e6:e9:4c:a2:c5:8e:6a:2f:35: be:36:34:df:97:2f:a8:fb:85:d8:50:2e:59:31:d3:cd:d3:e8: 18:d2:68:44:6c:c9:7b:52:f4:fd:1f:c4:ac:7f:d3:ca:73:8c: d6:cb:ac:e0:de:37:08:90:2a:5d:56:b1:0a:3a:76:3f:78:a8: cd:f4:15:58:41:fb:7f:17:c2:17:04:2a:3a:4b:2c:67:35:25: 0a:16:91:9d:92:65:1e:bc:c2:1c:1e:5e:d4:86:17:e7:68:b1: a8:c5:a4:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP90ynP2IN5+Yn+RuaoA4s/hKcxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTExRTBBNjIzODI2RTI3Q0YyRkMyOUNCOUIwMTA4RkMy RDFBRDAwRDAeFw0yNjA2MDIxNDUzMTJaFw0yNjA2MDMxNTM0MTJaMDMxMTAvBgNV BAMTKERBN0M1QTVBMUI3QTBGNzFCNTkzQjk1QkYzNTlFRENENkFBOUZBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQgsOcNf77fd6nNrOOraPDajda NuTuKuICm9qnfIX/O+UEWA0AfLKxixK8T60XFO4DGSd4ufGyAJs6wqQ+esjQJ+Nh tPHNKtWX+lz6NCtar7Xzk1NuauMHRV76dUSzO4JanRykoMt9iDsz8gdVVwBSVeS2 PZmqY3Tx7mw/Jah59nLtG83ih4eNjOORWTnCT3HM7bQ9op0GJtR8C3Roubp2ST0z toK9K6JT9k+pMaR9AJFmX/DGbOx8KInAicSna0aD17FpDl1iD/nF2HLen9gb1PkJ azQDP56nQphvFcBLnlf20/Z/3TKhBSrE58zzW20nJcsgNp3YmI45GL6sejRRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2nxaWht6D3G1k7lb81ntzWqp+vIwHwYDVR0j BBgwFoAUoR4KYjgm4nzy/CnLmwEI/C0a0A0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU5ZTU2NTgtYWIxMC00Mjk3LTkyZjQtZjZhMjY2M2U1NGMwLzAvQTExRTBBNjIz ODI2RTI3Q0YyRkMyOUNCOUIwMTA4RkMyRDFBRDAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTFFMEE2MjM4MjZFMjdDRjJGQzI5Q0I5QjAxMDhGQzJEMUFE MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU5ZTU2NTgtYWIxMC00Mjk3LTky ZjQtZjZhMjY2M2U1NGMwLzAvQTExRTBBNjIzODI2RTI3Q0YyRkMyOUNCOUIwMTA4 RkMyRDFBRDAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpv/ADUarEFlLulYoLe1J4h8Guoq9R4VCO1 9PtSyxpWaXMOirCsTClEVlhPKqtCBMaR7DVM2rGgux5pvaj/WE3Cx3hhjJkPxSpz 3aqNJNlzGYqhm84TuVntL30pre0uhNA59xxJKcOzxjtMHH6Fmd8TBWgExlx48uZO K+epgbnjbTGCJ7IXPNjKEdrKihcPOT+JTo6Y8tTnp+bpTKLFjmovNb42NN+XL6j7 hdhQLlkx083T6BjSaERsyXtS9P0fxKx/08pzjNbLrODeNwiQKl1WsQo6dj94qM30 FVhB+38XwhcEKjpLLGc1JQoWkZ2SZR68whweXtSGF+dosajFpK4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:12:13 2026 by rpki-client