$ rpki-client -vvf rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft File: C0DF2950676479309D2FBC873ADFE7F5B6058640.mft (raw, json) Hash identifier: U55XZLyscGUT5GkIEjxIN4GJsZGWYa+9fIpUt1qL16Q= Subject key identifier: 05:61:BC:80:E4:0F:0E:7B:2B:B0:8B:25:94:AF:29:D7:37:E9:CF:DC Authority key identifier: C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 Certificate issuer: /CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Certificate serial: 41C042516A774AB89BE0A9EAEE17A3B076F4F02D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:36:41 +0000 Manifest this update: Tue 02 Jun 2026 13:31:41 +0000 Manifest next update: Wed 03 Jun 2026 15:16:41 +0000 Files and hashes: 1: C0DF2950676479309D2FBC873ADFE7F5B6058640.crl (hash: CtSVrYMCXzBPfnMWyqqEKHC2vpduU7zECwhSLDynhEU=) 2: 3130332e3135322e35322e302f32342d3234203d3e20313431303532.roa (hash: ajRVgGN4gMUd4j39yvek6vpf46EiM5S4d3QDYc3oIa4=) 3: 323030313a6466333a663738303a3a2f34382d3438203d3e20313431303532.roa (hash: W26Vx4nLZMqxpvpr3m/RYSVAUYlrlFX1e6tV2N6J5ys=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 15:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c0:42:51:6a:77:4a:b8:9b:e0:a9:ea:ee:17:a3:b0:76:f4:f0:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Validity Not Before: Jun 2 13:31:41 2026 GMT Not After : Jun 3 15:16:41 2026 GMT Subject: CN=0561BC80E40F0E7B2BB08B2594AF29D737E9CFDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:53:0d:0e:57:87:4f:b3:36:bb:d5:cf:8f: d4:02:24:9d:1a:ec:16:90:4b:6d:e3:ed:30:3d:28: 38:ec:d5:0e:59:d4:c0:ab:44:41:70:c1:95:60:5f: f0:08:92:6a:73:1a:7e:ad:12:55:8c:27:c8:e9:5a: fc:db:1e:37:91:12:84:f1:3d:6e:de:6b:67:e2:64: db:f7:8b:0f:39:11:6d:8c:d2:ae:70:8b:8a:bc:d5: 7f:3b:01:d8:91:e5:2a:2b:86:6a:73:81:1c:8d:49: 4d:44:d1:47:10:07:9a:4f:eb:06:c0:01:64:68:56: f0:2c:21:c1:f3:fb:b3:b5:80:b1:05:3b:74:d5:33: b0:a4:ba:4f:ac:84:47:60:4e:75:65:20:fd:bf:da: 0d:94:0d:9f:c9:f2:35:00:93:6d:7d:9b:49:66:5a: 62:02:a9:a2:3b:c5:22:18:85:f1:d8:f2:6d:a1:f2: 5c:ff:99:31:e1:f1:01:aa:e1:9c:57:d0:76:bf:c8: 9e:bf:f4:47:89:74:65:0b:4e:d3:cb:26:1a:43:10: 4c:7f:58:a9:bf:02:70:77:55:6d:67:26:2f:5e:29: e8:3e:e1:66:9a:af:ea:4b:5c:7c:b2:a1:d5:f0:bd: 7f:8d:b8:c2:8e:93:4a:c8:ac:4b:4d:29:fc:13:fd: af:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:61:BC:80:E4:0F:0E:7B:2B:B0:8B:25:94:AF:29:D7:37:E9:CF:DC X509v3 Authority Key Identifier: keyid:C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0c:2f:af:a5:85:9e:b2:5b:6e:ea:a6:98:c1:e9:a1:cd:5a: 2a:91:6b:ac:5b:d8:90:63:55:7a:5f:99:be:d5:24:c6:d9:fe: 2b:62:73:f3:34:74:a2:a9:dd:69:b6:b7:b0:4e:f5:f8:69:12: ae:40:5e:3f:2b:1b:81:68:96:34:b0:b7:a0:54:17:50:68:d9: 35:53:7a:7c:85:7d:19:60:06:2e:1c:1a:13:68:dc:cd:59:f1: 3b:72:95:24:58:6e:d0:e4:23:5e:6e:e1:33:5e:66:2c:17:ee: 92:56:d8:15:58:d7:19:fa:e6:13:52:07:d6:03:51:e2:b0:76: 05:b6:3b:67:93:56:b3:5d:27:64:6f:02:21:cc:e3:d5:63:e9: bc:2d:e5:a2:c8:31:a0:f7:dd:29:9e:a4:ad:a8:38:96:4e:0f: 76:ca:f3:9f:47:aa:7e:10:96:7a:ce:f7:3c:c4:1a:5f:f6:6e: b1:33:a5:2f:ab:72:79:cc:ac:bd:bf:c2:9d:d7:0a:71:a8:81: c3:be:43:d5:85:73:1c:64:f2:ce:e2:bc:82:fd:44:a9:dd:c5: 44:b3:a1:df:84:fb:60:91:73:5e:a7:4d:00:17:ad:dd:36:01: c5:51:6c:6b:ea:c5:f1:0d:9d:4a:50:0f:f6:f3:fb:4a:74:3c: 06:0e:44:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQcBCUWp3Srib4Knq7hejsHb08C0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBERjI5NTA2NzY0NzkzMDlEMkZCQzg3M0FERkU3RjVC NjA1ODY0MDAeFw0yNjA2MDIxMzMxNDFaFw0yNjA2MDMxNTE2NDFaMDMxMTAvBgNV BAMTKDA1NjFCQzgwRTQwRjBFN0IyQkIwOEIyNTk0QUYyOUQ3MzdFOUNGREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlVMNDleHT7M2u9XPj9QCJJ0a 7BaQS23j7TA9KDjs1Q5Z1MCrREFwwZVgX/AIkmpzGn6tElWMJ8jpWvzbHjeREoTx PW7ea2fiZNv3iw85EW2M0q5wi4q81X87AdiR5SorhmpzgRyNSU1E0UcQB5pP6wbA AWRoVvAsIcHz+7O1gLEFO3TVM7Ckuk+shEdgTnVlIP2/2g2UDZ/J8jUAk219m0lm WmICqaI7xSIYhfHY8m2h8lz/mTHh8QGq4ZxX0Ha/yJ6/9EeJdGULTtPLJhpDEEx/ WKm/AnB3VW1nJi9eKeg+4Waar+pLXHyyodXwvX+NuMKOk0rIrEtNKfwT/a9vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBWG8gOQPDnsrsIsllK8p1zfpz9wwHwYDVR0j BBgwFoAUwN8pUGdkeTCdL7yHOt/n9bYFhkAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg0NGUxYjItOTNjNi00OGFlLTk2Y2MtZWQ4MzgyOWY1YTIwLzAvQzBERjI5NTA2 NzY0NzkzMDlEMkZCQzg3M0FERkU3RjVCNjA1ODY0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMERGMjk1MDY3NjQ3OTMwOUQyRkJDODczQURGRTdGNUI2MDU4 NjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg0NGUxYjItOTNjNi00OGFlLTk2 Y2MtZWQ4MzgyOWY1YTIwLzAvQzBERjI5NTA2NzY0NzkzMDlEMkZCQzg3M0FERkU3 RjVCNjA1ODY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoML6+lhZ6yW27qppjB6aHNWiqRa6xb2JBj VXpfmb7VJMbZ/itic/M0dKKp3Wm2t7BO9fhpEq5AXj8rG4FoljSwt6BUF1Bo2TVT enyFfRlgBi4cGhNo3M1Z8TtylSRYbtDkI15u4TNeZiwX7pJW2BVY1xn65hNSB9YD UeKwdgW2O2eTVrNdJ2RvAiHM49Vj6bwt5aLIMaD33SmepK2oOJZOD3bK859Hqn4Q lnrO9zzEGl/2brEzpS+rcnnMrL2/wp3XCnGogcO+Q9WFcxxk8s7ivIL9RKndxUSz od+E+2CRc16nTQAXrd02AcVRbGvqxfENnUpQD/bz+0p0PAYORC4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:12 2026 by rpki-client