$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft File: D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft (raw, json) Hash identifier: ulAqy1niKwbwOO7N+W4s27WPmWBX3V+GPlnvmaCHa8A= Subject key identifier: 85:ED:41:66:6B:5B:D6:72:2D:9D:80:F0:BC:5D:B1:BD:D3:FD:3D:48 Authority key identifier: D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8 Certificate issuer: /CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8 Certificate serial: 3CAB886384408F6E4C2934D223B13A0E6471B900 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:26:29 +0000 Manifest this update: Tue 02 Jun 2026 13:21:29 +0000 Manifest next update: Wed 03 Jun 2026 15:56:29 +0000 Files and hashes: 1: D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl (hash: Kkk5Q4Y9658bPH5QRY26ZIiO8iNCOfrE6/tUNTUhebI=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: Tl47NYhV7p3ilyhNqNo+NuftHesBi3flI0jGsgT+BAM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ab:88:63:84:40:8f:6e:4c:29:34:d2:23:b1:3a:0e:64:71:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4B53A6A5BEF99B5CD68B146744A87E1632C24F8 Validity Not Before: Jun 2 13:21:29 2026 GMT Not After : Jun 3 15:56:29 2026 GMT Subject: CN=85ED41666B5BD6722D9D80F0BC5DB1BDD3FD3D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3b:08:24:87:4d:5e:ef:fe:2d:c4:1e:e9:d2: 7a:5d:ea:35:42:71:47:b5:9f:41:1a:32:10:be:78: 5a:5e:fd:82:78:0e:21:73:49:09:40:98:ac:e6:1a: cc:18:e4:e2:5f:97:45:95:2c:cf:b5:14:2c:fc:02: 3d:30:df:49:88:25:ec:70:59:c9:61:42:62:bd:79: 6a:0e:43:6e:9b:ad:2a:9a:5c:47:ad:12:42:65:06: 23:b8:93:d0:d0:20:67:2c:49:71:7b:76:48:2a:57: 79:2c:8d:2d:56:8a:50:32:65:ef:cc:ed:b4:f3:26: 32:89:d8:34:72:22:62:1b:b0:68:02:e4:24:a2:9d: 68:1e:41:c1:59:d2:bf:b2:1e:46:a6:52:c8:7d:d8: 5c:7a:18:eb:36:9c:0e:50:9c:60:82:63:88:73:2b: 7b:b6:80:44:5f:71:b9:8f:9c:6e:93:c5:e9:48:74: d7:fb:e7:09:4e:42:41:7e:d5:d3:c9:bb:66:c8:11: 8b:42:ea:fb:6a:1e:61:57:45:d3:f6:e5:87:a9:89: c7:50:21:1e:50:a8:e2:7f:fc:cf:21:58:ee:7b:15: dc:f6:eb:e7:0b:eb:4a:94:f6:e9:ad:a4:4c:b3:ef: 2c:6b:17:f9:e3:16:52:f5:43:31:ab:cf:c3:d4:af: 54:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:ED:41:66:6B:5B:D6:72:2D:9D:80:F0:BC:5D:B1:BD:D3:FD:3D:48 X509v3 Authority Key Identifier: keyid:D4:B5:3A:6A:5B:EF:99:B5:CD:68:B1:46:74:4A:87:E1:63:2C:24:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/D4B53A6A5BEF99B5CD68B146744A87E1632C24F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c8:54:b3:17:cd:0e:e5:56:89:2a:eb:e1:27:6b:7a:49:90: 3b:64:12:b2:18:45:a6:c4:a0:d8:01:7c:e4:ad:66:b7:d0:dc: 05:98:a2:51:ac:a5:64:a5:08:62:28:8d:78:bd:60:e3:1e:be: 21:46:fd:3a:eb:54:22:8e:5a:c0:c1:3c:07:f1:19:7d:76:02: d3:9c:fe:f0:ac:50:1b:50:9b:14:ae:05:c6:bb:b9:d1:85:0c: ae:54:0e:aa:9b:f9:4a:53:73:a1:4f:98:8e:5e:eb:41:c5:03: d7:5c:92:c6:0b:54:76:69:6d:7d:ee:7e:c1:b0:92:f0:b3:ee: b6:8b:05:b3:0f:44:a6:ac:83:1d:37:12:8c:91:64:79:ad:1e: 09:3b:32:a1:08:84:c1:9a:2f:a1:4b:60:d8:94:2d:14:21:50: f4:5d:bf:6b:7c:3c:21:17:82:6c:6d:47:15:f7:9f:ad:49:37: b2:2c:d1:db:9d:29:6c:9d:e4:92:6b:44:aa:00:d4:e9:f7:be: 4b:ed:7c:9a:49:ab:ff:68:e5:f4:8f:13:4c:5a:e9:f6:6d:9b: 64:33:62:dc:ae:24:eb:43:8a:eb:e8:10:0f:6e:de:77:f5:d3: 51:c3:07:2a:7f:7a:46:a2:c5:69:49:f3:d8:75:bb:7e:a5:5a: 8f:d4:90:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKuIY4RAj25MKTTSI7E6DmRxuQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCNTNBNkE1QkVGOTlCNUNENjhCMTQ2NzQ0QTg3RTE2 MzJDMjRGODAeFw0yNjA2MDIxMzIxMjlaFw0yNjA2MDMxNTU2MjlaMDMxMTAvBgNV BAMTKDg1RUQ0MTY2NkI1QkQ2NzIyRDlEODBGMEJDNURCMUJERDNGRDNENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcOwgkh01e7/4txB7p0npd6jVC cUe1n0EaMhC+eFpe/YJ4DiFzSQlAmKzmGswY5OJfl0WVLM+1FCz8Aj0w30mIJexw WclhQmK9eWoOQ26brSqaXEetEkJlBiO4k9DQIGcsSXF7dkgqV3ksjS1WilAyZe/M 7bTzJjKJ2DRyImIbsGgC5CSinWgeQcFZ0r+yHkamUsh92Fx6GOs2nA5QnGCCY4hz K3u2gERfcbmPnG6TxelIdNf75wlOQkF+1dPJu2bIEYtC6vtqHmFXRdP25YepicdQ IR5QqOJ//M8hWO57Fdz26+cL60qU9umtpEyz7yxrF/njFlL1QzGrz8PUr1RvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhe1BZmtb1nItnYDwvF2xvdP9PUgwHwYDVR0j BBgwFoAU1LU6alvvmbXNaLFGdEqH4WMsJPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTExYjktMWQyZi00YmI0LTlkNzUtOWFhM2MzNTEwMGU4LzAvRDRCNTNBNkE1 QkVGOTlCNUNENjhCMTQ2NzQ0QTg3RTE2MzJDMjRGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENEI1M0E2QTVCRUY5OUI1Q0Q2OEIxNDY3NDRBODdFMTYzMkMy NEY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvRDRCNTNBNkE1QkVGOTlCNUNENjhCMTQ2NzQ0QTg3 RTE2MzJDMjRGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/IVLMXzQ7lVokq6+Ena3pJkDtkErIYRabE oNgBfOStZrfQ3AWYolGspWSlCGIojXi9YOMeviFG/TrrVCKOWsDBPAfxGX12AtOc /vCsUBtQmxSuBca7udGFDK5UDqqb+UpTc6FPmI5e60HFA9dcksYLVHZpbX3ufsGw kvCz7raLBbMPRKasgx03EoyRZHmtHgk7MqEIhMGaL6FLYNiULRQhUPRdv2t8PCEX gmxtRxX3n61JN7Is0dudKWyd5JJrRKoA1On3vkvtfJpJq/9o5fSPE0xa6fZtm2Qz YtyuJOtDiuvoEA9u3nf101HDByp/ekaixWlJ89h1u36lWo/UkMg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:18 2026 by rpki-client