$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft File: 802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft (raw, json) Hash identifier: moLEt4DIlKqEh8r0B/VGYqw48nniw/FUxwZvVlHANps= Subject key identifier: CE:D8:E5:38:94:9A:2D:E0:92:C3:6A:DD:5D:9D:37:76:9B:F1:F2:03 Authority key identifier: 80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55 Certificate issuer: /CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55 Certificate serial: 0C92C5AC72CB36A024ED52EFC00B76515455DC20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 07:03:51 +0000 Manifest this update: Tue 02 Jun 2026 06:58:51 +0000 Manifest next update: Wed 03 Jun 2026 10:04:51 +0000 Files and hashes: 1: 802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl (hash: iKP2fXZrYJLBuOMTYMPPH8K3ss9wLgBtTRev9vifpJs=) 2: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: dfrPktjrSxat3OJSIEiclXrWQZl7b22xPg7tyk7/iXg=) 3: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: kPZOXT2GwEKlfeP/fQyv701xiJsSoJM2RbBmmUbPZZ8=) 4: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: qQsnDUNPeHXu+DNiw4SOcpK8StEWum36MYHLhy1M0Kc=) 5: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: gtZNev9cMMORIviikpj/urAy+yvYIWDnCmncjDmI/0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:92:c5:ac:72:cb:36:a0:24:ed:52:ef:c0:0b:76:51:54:55:dc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55 Validity Not Before: Jun 2 06:58:51 2026 GMT Not After : Jun 3 10:04:51 2026 GMT Subject: CN=CED8E538949A2DE092C36ADD5D9D37769BF1F203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:3c:c2:4d:97:08:68:cd:f2:a9:11:ec:95: 74:3b:9a:69:8b:52:61:d6:d3:d0:d0:cb:85:88:5c: ca:16:72:f0:79:b8:ee:56:cb:cb:6c:9c:6c:6f:cd: d3:3b:ff:f6:10:82:43:27:6d:13:56:89:ca:a0:5e: 3f:a9:7d:6d:f8:60:b3:6c:a0:ac:45:bd:4d:cf:a2: 9a:69:d5:52:04:d3:b3:e6:89:ac:42:c6:93:da:59: a9:82:af:10:c3:67:12:99:53:1c:b9:6a:f8:e4:21: 3b:09:e9:c1:2d:3b:23:df:bf:69:b7:d7:b4:9a:59: 4d:11:57:54:eb:de:ad:65:34:03:51:c5:c3:68:f3: d3:cc:48:45:6f:61:33:01:6e:9e:3b:49:d9:27:a2: 4c:a9:30:ca:71:4f:4f:01:01:be:ae:39:9f:c5:26: fc:9f:df:d0:22:ec:98:fa:29:52:a3:a5:2f:52:d8: ed:03:a9:f6:61:9b:30:84:bc:2d:f5:23:73:f6:8d: ae:61:6c:85:bc:6e:6a:bd:d5:ff:fc:04:76:d6:04: 3f:51:96:93:99:d5:f8:53:69:cb:87:7c:b7:5b:43: a5:c8:89:cf:9d:23:e6:b1:23:2d:5e:28:fb:0d:93: 9e:64:03:15:7b:dc:0f:e2:91:d4:c8:8a:78:5b:17: 74:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D8:E5:38:94:9A:2D:E0:92:C3:6A:DD:5D:9D:37:76:9B:F1:F2:03 X509v3 Authority Key Identifier: keyid:80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:db:ff:9c:6d:98:67:ed:99:36:0f:b2:64:f7:41:7b:47:ad: 47:b4:61:0b:89:66:a7:fe:85:ed:b3:40:93:31:e9:3a:cf:19: cc:ae:99:38:92:68:47:1f:48:3b:09:27:ee:b3:05:94:70:aa: c7:b0:88:f4:0f:72:7c:8a:e5:81:8b:a1:e6:84:94:95:3c:0b: e2:26:93:d5:57:9c:4a:7a:d8:2a:73:a3:34:a4:49:11:35:1b: d5:40:14:20:3b:ad:16:50:fd:a4:51:30:2f:fe:61:1b:6f:6d: d9:ec:da:58:29:05:9a:05:3d:d6:7e:31:95:24:01:4a:cf:3b: 1d:52:63:80:80:d8:3f:49:58:ee:63:ca:f2:c4:49:d5:e5:1e: bb:1a:dd:de:b3:24:63:f9:e6:b1:b4:25:ac:c8:8d:25:da:ab: 25:59:10:e0:2b:74:5c:bd:ee:fa:11:cc:d9:25:c8:7e:da:ec: 9d:49:ec:5c:1e:81:41:e5:4d:bc:34:d3:10:62:97:ab:d8:b7: 1b:5b:cc:71:50:5e:31:b0:ba:5e:2b:cd:a2:3d:0d:c7:a2:85: db:38:7b:2b:d3:bc:f4:f5:98:44:5b:77:ea:57:15:02:14:01: 42:59:78:ff:14:2b:ae:e8:75:1d:3e:51:db:b5:d7:bb:81:a1: 27:7f:da:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJLFrHLLNqAk7VLvwAt2UVRV3CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAyQzJDQjFBNTQ4NjY0NDM0MDlFM0ZERTEyRjc3RUM2 RkI4N0Y1NTAeFw0yNjA2MDIwNjU4NTFaFw0yNjA2MDMxMDA0NTFaMDMxMTAvBgNV BAMTKENFRDhFNTM4OTQ5QTJERTA5MkMzNkFERDVEOUQzNzc2OUJGMUYyMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92TzCTZcIaM3yqRHslXQ7mmmL UmHW09DQy4WIXMoWcvB5uO5Wy8tsnGxvzdM7//YQgkMnbRNWicqgXj+pfW34YLNs oKxFvU3Poppp1VIE07PmiaxCxpPaWamCrxDDZxKZUxy5avjkITsJ6cEtOyPfv2m3 17SaWU0RV1Tr3q1lNANRxcNo89PMSEVvYTMBbp47SdknokypMMpxT08BAb6uOZ/F Jvyf39Ai7Jj6KVKjpS9S2O0DqfZhmzCEvC31I3P2ja5hbIW8bmq91f/8BHbWBD9R lpOZ1fhTacuHfLdbQ6XIic+dI+axIy1eKPsNk55kAxV73A/ikdTIinhbF3QfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUztjlOJSaLeCSw2rdXZ03dpvx8gMwHwYDVR0j BBgwFoAUgCwssaVIZkQ0CeP94S937G+4f1UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZlM2RkOTUtMmE4NS00MzllLTg0ZjItOTcyYTIzZTMyNzFlLzAvODAyQzJDQjFB NTQ4NjY0NDM0MDlFM0ZERTEyRjc3RUM2RkI4N0Y1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDJDMkNCMUE1NDg2NjQ0MzQwOUUzRkRFMTJGNzdFQzZGQjg3 RjU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvODAyQzJDQjFBNTQ4NjY0NDM0MDlFM0ZERTEyRjc3 RUM2RkI4N0Y1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvb/5xtmGftmTYPsmT3QXtHrUe0YQuJZqf+ he2zQJMx6TrPGcyumTiSaEcfSDsJJ+6zBZRwqsewiPQPcnyK5YGLoeaElJU8C+Im k9VXnEp62CpzozSkSRE1G9VAFCA7rRZQ/aRRMC/+YRtvbdns2lgpBZoFPdZ+MZUk AUrPOx1SY4CA2D9JWO5jyvLESdXlHrsa3d6zJGP55rG0JazIjSXaqyVZEOArdFy9 7voRzNklyH7a7J1J7FwegUHlTbw00xBil6vYtxtbzHFQXjGwul4rzaI9Dceihds4 eyvTvPT1mERbd+pXFQIUAUJZeP8UK67odR0+Udu117uBoSd/2oM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:56 2026 by rpki-client