$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft File: A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft (raw, json) Hash identifier: vK002ED7kN7CfVqrW/gh8BKLXo5rev4YXW8pdO7Rj/w= Subject key identifier: AF:AC:65:DA:10:71:C4:B9:39:D7:1C:1A:15:CC:C1:DC:00:C6:84:D4 Authority key identifier: A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81 Certificate issuer: /CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81 Certificate serial: 13C02727E27BE5E25F19D09FCC8C96CBADC45055 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:01:01 +0000 Manifest this update: Wed 03 Jun 2026 00:56:01 +0000 Manifest next update: Thu 04 Jun 2026 03:08:01 +0000 Files and hashes: 1: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: 3KrJ0+AfMCOxSs3J3yun9Ot0fuEZmxiN3y8DZjfYS7Q=) 2: A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl (hash: YypTRZrhYbe/R8DbNaFFQ9Y98vkUZC0FaB1s41+h0nU=) 3: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: gM1AjlPJEA8ARwiEjxXZ/XYQjY805lBo3kfjSVH4yf0=) 4: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: VuUTV6DF0NO0ScLbFc6eylw+nle2kUmBZXnxVkFv7U0=) 5: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: WV8Z97xrGgFHwypp6SwSp1IloS8eHHkMOVgWyPQX300=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c0:27:27:e2:7b:e5:e2:5f:19:d0:9f:cc:8c:96:cb:ad:c4:50:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81 Validity Not Before: Jun 3 00:56:01 2026 GMT Not After : Jun 4 03:08:01 2026 GMT Subject: CN=AFAC65DA1071C4B939D71C1A15CCC1DC00C684D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:b4:e6:79:5d:18:4c:7b:a7:e6:e0:b9:88: 0b:cb:3e:8e:04:a3:b2:86:d9:95:0d:6d:2a:46:14: a8:9f:50:d8:68:ea:3b:d9:b4:57:f5:93:bb:a4:36: 7e:e7:e3:a8:d5:5d:11:11:5d:6e:19:b2:39:5a:60: 58:dd:db:ec:ed:22:5a:22:f9:24:11:07:fd:6d:88: 67:af:e4:eb:43:e9:dc:91:73:b1:6a:49:62:81:6d: 9c:16:16:d8:00:10:d7:3e:c4:b5:95:ad:70:98:9e: 5d:cf:60:43:34:1a:d5:67:8b:72:8d:27:29:96:a5: 46:0c:6c:73:2f:b0:43:01:ff:46:f9:ab:05:dd:d0: 49:f4:9f:27:d4:3f:28:f2:13:2c:b5:ef:f7:1e:eb: 10:2e:78:99:b5:7b:4e:b6:e8:e2:29:61:65:3d:dc: 46:28:28:b8:34:35:e2:d0:1d:69:bb:de:20:05:4b: 55:82:c2:bc:a3:a8:c2:4a:a2:bb:8b:cf:b5:34:94: 63:fa:b3:0b:c0:27:7f:cb:35:2c:e9:52:83:81:4f: f5:52:8f:0b:62:71:62:68:32:73:bc:8f:c4:d9:af: 1f:d1:38:b9:f8:81:f0:c7:e2:bb:89:fb:00:e0:39: ee:d6:d6:52:84:0b:61:5e:88:13:cb:b8:6f:05:15: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AC:65:DA:10:71:C4:B9:39:D7:1C:1A:15:CC:C1:DC:00:C6:84:D4 X509v3 Authority Key Identifier: keyid:A9:2D:7A:2C:E9:CB:AA:FD:76:3A:38:0C:28:FA:DD:D1:A3:C7:EA:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/A92D7A2CE9CBAAFD763A380C28FADDD1A3C7EA81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b2:82:19:27:d8:3b:38:ac:b0:b5:34:48:2b:b3:5e:7e:2a: 37:d3:42:a7:72:15:3b:f2:73:10:f7:72:ec:3e:6e:fb:06:33: b8:eb:1c:e0:a4:1a:24:2f:c1:ec:cd:1a:f9:18:4a:d0:08:a1: 89:01:31:60:92:2e:3c:b3:bc:cf:18:58:bf:66:3a:ff:ef:5f: ae:3c:85:49:9e:4f:f0:0b:77:9e:ea:74:b2:ee:c3:4d:d5:46: 0a:db:ca:8d:22:7f:9a:09:1d:7b:54:6a:9f:d8:ef:2e:54:ec: be:2b:1c:33:0d:76:09:94:c1:5e:9c:e7:a4:8c:70:61:30:f0: f2:8e:a5:0c:ba:0d:ba:91:39:d9:b9:07:ed:74:9b:02:cc:1d: 05:88:e5:a0:7e:21:37:d2:79:51:63:23:cb:35:d5:98:f9:cc: ce:ef:47:f2:e1:78:79:b8:14:ed:df:40:d6:2a:36:9c:f8:d3: 0a:ba:09:f5:7a:12:be:f5:89:54:14:61:a3:db:a8:e2:51:5a: 0f:80:b6:bb:b9:10:5d:19:1d:fa:19:1e:e8:7e:9c:04:e3:d9: 75:f5:04:7b:0d:f2:89:0e:d4:a4:2f:78:21:a1:3e:54:91:59: 5f:27:d5:b6:8d:8f:a8:3a:6e:56:21:48:3b:7d:ca:d6:53:56: 18:02:52:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE8AnJ+J75eJfGdCfzIyWy63EUFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyRDdBMkNFOUNCQUFGRDc2M0EzODBDMjhGQURERDFB M0M3RUE4MTAeFw0yNjA2MDMwMDU2MDFaFw0yNjA2MDQwMzA4MDFaMDMxMTAvBgNV BAMTKEFGQUM2NURBMTA3MUM0QjkzOUQ3MUMxQTE1Q0NDMURDMDBDNjg0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrj7TmeV0YTHun5uC5iAvLPo4E o7KG2ZUNbSpGFKifUNho6jvZtFf1k7ukNn7n46jVXRERXW4ZsjlaYFjd2+ztIloi +SQRB/1tiGev5OtD6dyRc7FqSWKBbZwWFtgAENc+xLWVrXCYnl3PYEM0GtVni3KN JymWpUYMbHMvsEMB/0b5qwXd0En0nyfUPyjyEyy17/ce6xAueJm1e0626OIpYWU9 3EYoKLg0NeLQHWm73iAFS1WCwryjqMJKoruLz7U0lGP6swvAJ3/LNSzpUoOBT/VS jwticWJoMnO8j8TZrx/ROLn4gfDH4ruJ+wDgOe7W1lKEC2FeiBPLuG8FFcM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr6xl2hBxxLk51xwaFczB3ADGhNQwHwYDVR0j BBgwFoAUqS16LOnLqv12OjgMKPrd0aPH6oEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE5MTRhZGEtYTlhYS00ZDdmLTllNDctNTk0YmNiN2E3MGFiLzAvQTkyRDdBMkNF OUNCQUFGRDc2M0EzODBDMjhGQURERDFBM0M3RUE4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTJEN0EyQ0U5Q0JBQUZENzYzQTM4MEMyOEZBREREMUEzQzdF QTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvQTkyRDdBMkNFOUNCQUFGRDc2M0EzODBDMjhGQURE RDFBM0M3RUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6yghkn2Ds4rLC1NEgrs15+KjfTQqdyFTvy cxD3cuw+bvsGM7jrHOCkGiQvwezNGvkYStAIoYkBMWCSLjyzvM8YWL9mOv/vX648 hUmeT/ALd57qdLLuw03VRgrbyo0if5oJHXtUap/Y7y5U7L4rHDMNdgmUwV6c56SM cGEw8PKOpQy6DbqROdm5B+10mwLMHQWI5aB+ITfSeVFjI8s11Zj5zM7vR/LheHm4 FO3fQNYqNpz40wq6CfV6Er71iVQUYaPbqOJRWg+Atru5EF0ZHfoZHuh+nATj2XX1 BHsN8okO1KQveCGhPlSRWV8n1baNj6g6blYhSDt9ytZTVhgCUgI= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:50 2026 by rpki-client