$ rpki-client -vvf rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft File: C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft (raw, json) Hash identifier: DaorbgrOb5Ph74Lzoub2hENITtMBmcnwayOXxrvR5No= Subject key identifier: 6F:B7:AA:B0:21:1C:E9:9E:CC:06:A0:DC:4D:53:21:BE:B1:F7:D5:3D Authority key identifier: C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 Certificate issuer: /CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Certificate serial: 052D119456C24F2BAD4556BBDFFD2157050B33CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:12:43 +0000 Manifest this update: Tue 02 Jun 2026 22:07:43 +0000 Manifest next update: Wed 03 Jun 2026 23:27:43 +0000 Files and hashes: 1: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: fRCVhusGzoRmw1xVyCKp1DarroNp+AXJavllcEzpEYc=) 2: C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl (hash: twGvSNJPPa9QL0iDRz5C0/Zy6RE63d5CUabKDjnCEns=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2d:11:94:56:c2:4f:2b:ad:45:56:bb:df:fd:21:57:05:0b:33:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C21649B0E928318C35618EE197DD5DCDB1FA7A31 Validity Not Before: Jun 2 22:07:43 2026 GMT Not After : Jun 3 23:27:43 2026 GMT Subject: CN=6FB7AAB0211CE99ECC06A0DC4D5321BEB1F7D53D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:d6:02:c5:66:1c:2b:8d:59:64:d3:c4:21: 0e:79:2f:4d:9b:c7:0c:33:9f:34:46:8a:2c:3e:4b: 43:8f:de:96:ab:8b:aa:72:78:3c:cc:92:bc:d3:61: d1:f7:b1:eb:9a:ce:95:ea:af:e5:6b:f3:1c:f5:01: ec:30:9f:e5:68:11:eb:18:79:cd:05:45:14:50:d2: a2:4d:ed:64:e4:86:c2:38:80:be:dc:35:1d:9a:e1: ca:42:7f:7a:bf:58:c4:ed:b6:48:67:da:18:fd:e7: 95:05:5b:29:92:8e:24:4b:8e:23:42:c3:bf:3e:fb: 9a:aa:92:a8:bf:9c:ab:95:8c:7e:df:69:27:59:6b: 4a:98:b7:98:03:40:2c:d6:b8:85:8a:d1:9a:f6:a6: cb:66:65:f9:ee:7f:1a:8a:3a:27:e9:08:f3:32:fa: e1:63:a0:e2:a7:3e:30:dc:18:05:15:1a:b4:e6:3d: 0c:a9:1f:13:0b:b9:8c:1f:0b:fa:a7:2d:11:3e:fb: 05:25:d2:9c:f3:27:fd:2e:fb:04:4b:96:46:25:3f: 7d:06:68:1a:be:17:ca:10:4f:d7:d3:92:05:67:31: 3a:66:df:ba:cd:0c:31:02:86:5d:06:0f:d9:0a:ce: 0e:40:7b:ff:78:b2:80:59:9e:04:2e:5c:fa:2f:78: 05:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B7:AA:B0:21:1C:E9:9E:CC:06:A0:DC:4D:53:21:BE:B1:F7:D5:3D X509v3 Authority Key Identifier: keyid:C2:16:49:B0:E9:28:31:8C:35:61:8E:E1:97:DD:5D:CD:B1:FA:7A:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21649B0E928318C35618EE197DD5DCDB1FA7A31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/C21649B0E928318C35618EE197DD5DCDB1FA7A31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:be:e7:b3:a4:68:4b:b1:23:ee:cb:d8:3b:32:30:3d:cc:8e: e1:1d:5d:c4:2f:1f:e1:db:b8:f8:02:cf:d5:23:50:25:1c:74: c8:bf:ec:e5:4b:fd:2c:b7:40:d2:1a:6e:c5:27:5e:39:b4:c1: cf:8c:08:c3:17:77:66:97:f2:38:de:8e:94:36:f0:61:76:44: a5:91:35:d7:e7:96:c9:5c:27:e6:9f:73:25:97:08:31:03:09: 0f:0a:31:0a:c0:dd:47:83:92:9a:16:e6:1a:aa:38:bd:83:96: ff:89:3d:73:1e:ac:87:27:ea:6a:de:c7:3f:89:6b:be:ea:e9: 78:04:5e:81:33:70:ec:53:52:cb:12:b4:4a:32:19:d0:74:e2: 44:58:24:0d:9c:62:de:c6:4e:6e:ef:35:7c:63:f9:63:8d:4a: 4c:81:18:e7:5c:34:a2:5c:ff:95:d2:41:81:ad:a2:77:61:13: 4a:e4:cf:76:58:34:b2:e1:d9:9c:7d:c9:8f:db:d4:b1:d5:27: 89:ac:fa:22:be:bc:18:49:6a:7b:de:95:ab:2e:14:7e:54:ff: 44:ad:ba:4d:66:e4:06:ea:ef:c7:3a:aa:d5:a5:90:93:1b:a1: cd:97:be:af:28:4e:0f:17:f7:38:90:1e:d5:11:43:4a:a4:7a: d9:dd:9d:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBS0RlFbCTyutRVa73/0hVwULM80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIxNjQ5QjBFOTI4MzE4QzM1NjE4RUUxOTdERDVEQ0RC MUZBN0EzMTAeFw0yNjA2MDIyMjA3NDNaFw0yNjA2MDMyMzI3NDNaMDMxMTAvBgNV BAMTKDZGQjdBQUIwMjExQ0U5OUVDQzA2QTBEQzRENTMyMUJFQjFGN0Q1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dtYCxWYcK41ZZNPEIQ55L02b xwwznzRGiiw+S0OP3pari6pyeDzMkrzTYdH3seuazpXqr+Vr8xz1Aewwn+VoEesY ec0FRRRQ0qJN7WTkhsI4gL7cNR2a4cpCf3q/WMTttkhn2hj955UFWymSjiRLjiNC w78++5qqkqi/nKuVjH7faSdZa0qYt5gDQCzWuIWK0Zr2pstmZfnufxqKOifpCPMy +uFjoOKnPjDcGAUVGrTmPQypHxMLuYwfC/qnLRE++wUl0pzzJ/0u+wRLlkYlP30G aBq+F8oQT9fTkgVnMTpm37rNDDEChl0GD9kKzg5Ae/94soBZngQuXPoveAXdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb7eqsCEc6Z7MBqDcTVMhvrH31T0wHwYDVR0j BBgwFoAUwhZJsOkoMYw1YY7hl91dzbH6ejEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4M2IyN2MtYTczMC00MDAyLTkxYjgtZDAzNjZkZmFjNzdlLzAvQzIxNjQ5QjBF OTI4MzE4QzM1NjE4RUUxOTdERDVEQ0RCMUZBN0EzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMjE2NDlCMEU5MjgzMThDMzU2MThFRTE5N0RENURDREIxRkE3 QTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvQzIxNjQ5QjBFOTI4MzE4QzM1NjE4RUUxOTdERDVE Q0RCMUZBN0EzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABK+57OkaEuxI+7L2DsyMD3MjuEdXcQvH+Hb uPgCz9UjUCUcdMi/7OVL/Sy3QNIabsUnXjm0wc+MCMMXd2aX8jjejpQ28GF2RKWR NdfnlslcJ+afcyWXCDEDCQ8KMQrA3UeDkpoW5hqqOL2Dlv+JPXMerIcn6mrexz+J a77q6XgEXoEzcOxTUssStEoyGdB04kRYJA2cYt7GTm7vNXxj+WONSkyBGOdcNKJc /5XSQYGtondhE0rkz3ZYNLLh2Zx9yY/b1LHVJ4ms+iK+vBhJanvelasuFH5U/0St uk1m5Abq78c6qtWlkJMboc2Xvq8oTg8X9ziQHtURQ0qketndnXU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:49 2026 by rpki-client